last executing test programs: 5m12.805025619s ago: executing program 1 (id=5403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) (async) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'b', ' *:* ', 'r\x00'}, 0x8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0x829, 0x70bd30, 0x25dfdbfe, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40240c4) (async) r4 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x11d, 0x20, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4fff}) (rerun: 64) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000100)="e6", 0x1}], 0x10000000000000d4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="0bc3a3", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f00000000c0)='\x00'/10, 0xa}], 0x3) 5m12.693871577s ago: executing program 1 (id=5406): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x40880) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)="d306b8587bb21bd06cb1e6091987052441a3f486d60a193fa5b39fdf34597502c0dcdf860e62764d205497b019022d8b1aa090d7b84201398f1f1e00a03e563a406bee62ca41196532eae7de11a0931d8a2d7e1a40e6c213ecafe550fc90199d2aedac87ac0e8f7438fe478ce49312c4959ac1007644475c16d54af08c7e2499a32b6c0f167f03119bcff864c347fbaeddd14bfc8b25f8640eaa9fbb179d0140f49528", 0xa3}, {&(0x7f0000001780)="6dcd2220", 0x4}, {&(0x7f00000015c0)="718a5064ebbbea1d6b7bf3110e49aebbe21d4d4e214d2a22672f8ad6968d5dff934da2a31c4c686f820922737b2344f447a708b64c7dfcff2733e074b24416037b0b3e6f0d702ea1a675e52c67deb46abf095ba25f9c5fe3", 0x58}, {&(0x7f0000001640)="33f260f288e35ad32cf8ce14658e1e155176cba5e09080c256205d8134d94e070a79baf0ba572e08246338fadd28e8dd47bac3b2469ef06e8da048cc2a1a6133427ee46a029fe106b2939f7a0b07e654f94b93b78102be1bd740e1c72609b4b0d025e58d786076dae9e6011707b3f63bf5ab9bac4e91fd3c4192741202faa1565a51754aa3b6705833b2d10424b280810c7c0cadb242547244e38f539360dca096ff98bd5eb7234c23a8f4851222082f320ae783c391037f9e5ea8584f53b7bd1c127c7eca73132c079f185fb0fcf55a9b648f4bd7838c", 0xd7}], 0x4}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) (async) r4 = socket(0x22, 0x2, 0x1) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0000d20b5c99bbeb2cb3f4a093c9354b156c5cbeafa2d784df8bca31719095a67845a0494e5b5e5f4635936f6424"], 0x1c}}, 0x0) accept4$inet(r4, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) (async) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000000)={'caif0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x1, 0x0, 0x0, 0x20, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0x38, 0x0, 0x80000048, [0xfffffffd, 0x89ff]}}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000017c0)=ANY=[@ANYBLOB="580000000206050000000000000000000500000005000100070000000900020073797a30000000000500050002000000140007800500150000000000080012400000000005000400000000000c000300686173683a6970", @ANYRESHEX=r9, @ANYRESDEC=r10], 0x58}, 0x1, 0x0, 0x0, 0xc845}, 0x4800) 5m12.422742925s ago: executing program 1 (id=5410): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x4c084}, 0x4000) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000800)=""/194, 0xc2}], 0x3}, 0xc}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000100)}, 0x9}], 0x4, 0x20, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000a00)="689b73beb67434abff64470081d18c12221401d208d76c2eaac7053aa8a7b3b2d4cea99b9a76eb547d1b8bf37f71a92dfb51818bf56e3b9182233d0c0dd835e0a863a6f733e3875979eea9c8030e4aeaaf1e7b6c94d3274bd6b316b96ac4692b7dfbf6ed2b3e0cfc9af4726b3c370d8d990c55629994214c845381bccbd170810e266a84436123e5e4ea982a0e74d59e3966f4bd282f7fc64a226662bb1e8b974089ec8e76ea3c2db7e621dd16bf8c455e6535664939441ab12435f49a360c6f048d09b7ed78a982322b374542657301cdff6b9b39c586d2", 0xd8}, {&(0x7f0000000240)="269b35d436589aa4716b4b910a549cf0339f575e1ba5d99a960d740d0b5eee10a5b8d6579f58f6986204e3acb2cc5142b59d56208b03a41a935d90b2753aa7826c0c009564f4e4896b9bd67ed820", 0x4e}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x150}}], 0x3, 0x8000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'team_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRESDEC=r4], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0xc0) (async) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 5m12.273824644s ago: executing program 1 (id=5412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_cmd={0x2d, 0x45, 0xfff, 0x5, 0x1, 0x7, 0x4, 0xd, 0x1, 0xff, 0xf, 0x4c4ca8e3, 0x3, 0x0, 0x6, 0x1, [0x7, 0x80]}}) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x437, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4004804) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x7, 0x4, 0x0, 0x0, 0x3, 0x10010}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x4850) 5m11.546498s ago: executing program 1 (id=5419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x178, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x88, 0x1, {{'rmd160\x00'}, 0x200, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc312b5aeab8894c493c358ef76ec179b21865e1b6f29b2da7d564f2bcd96ec67f"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x180) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) 5m10.394981019s ago: executing program 1 (id=5426): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x4, 0x0, 0xc}, 0x10) sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40044}}], 0x1, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4m55.391126453s ago: executing program 32 (id=5426): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x4, 0x0, 0xc}, 0x10) sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40044}}], 0x1, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m47.704282958s ago: executing program 4 (id=6399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@local, 0x0, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800000000}, {0x0, 0x2, 0x0, 0x2000000002}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0x0, 0xfffffc01}}, 0xe4) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4040000) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) readv(r9, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/58, 0x3a}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)}], 0x9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='mm_page_pcpu_drain\x00', r10, 0x0, 0x4005}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 2m46.711630219s ago: executing program 4 (id=6414): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095a474036b898b698cc8f550f1b7f34121e999df2135080d0eace1db92554bfeecf8442047dbb79d873cb25320641d8a799e451f1b7df10bc81f05d16bf13e", @ANYBLOB="299b1bb9a1754ee7a150f25f620dacab23ae47e5996748b31e29c28aed01601cd5e266a566861467508135c2ad192ffae1dbc1b7f3c6f867428f001d6a891c255aa55a2400e0c373d70c56155120362f5ef3a61f451870", @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="a07d236bd7ea0af05f5ef464ba4cf5f8c2fa8c1186fbd5d5620d05710b3c83b0614038ef40da9950c999d6d3cad72649001a5c82cb5da6dc3da44aab644a828cd86e0a040f8145dae7e54a2a3f5d5ab3b6b65eac1ff035c8c14beb5601f9772726f7ab65478b9330ea9b93"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @private=0xa010100, 0x1, 0x4, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @private=0xa010100, @empty]}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x90, &(0x7f0000000300)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x82, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x19, 0x4, 0x2, 0x0, 0x7, 0x64, 0xfffd, 0x5, 0x89, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0xd2, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x4}, {@broadcast, 0x800}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xae4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x5}]}, @noop]}}, "fe26"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x58) listen(0xffffffffffffffff, 0x6d5) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 2m46.426553836s ago: executing program 4 (id=6418): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x618e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) (async) unshare(0x20000400) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket(0x28, 0x3, 0x0) (async) ioctl$IMGETCOUNT(r1, 0x618e, 0x0) (async) 2m43.386776439s ago: executing program 4 (id=6443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000f4d4df25020000000800090002"], 0x1c}}, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)="428280f46aa1d3f08a90b1e2e0dc", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r14, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) setsockopt$inet6_tcp_int(r12, 0x6, 0x9, &(0x7f0000000500)=0x81, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 2m42.986311631s ago: executing program 4 (id=6448): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$kcm(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x1, 0xfff1}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r10, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r1, r11, 0x7, 0x2c, 0x0, @void, @void, @void, @value=r13}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x11, @val=@netkit={@void, @value=r2, @void, @void, r12}}, 0x1c) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x0) unshare(0x2c060000) unshare(0x22020600) r14 = socket$unix(0x1, 0x1, 0x0) bind$unix(r14, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r15 = socket$unix(0x1, 0x1, 0x0) shutdown(r14, 0x0) connect$unix(r15, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 2m42.584518383s ago: executing program 4 (id=6451): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b75c7eb7d7bd593313c4146fa66b6d1ece0bc1b63cd762bbc71cfff6780be16", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) writev(r3, &(0x7f0000000900)=[{0x0, 0xff80}, {&(0x7f0000000680)="49a9a2", 0x91}], 0x2) (async) writev(r3, &(0x7f0000000900)=[{0x0, 0xff80}, {&(0x7f0000000680)="49a9a2", 0x91}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @netrom}, &(0x7f0000000040)=0x1c, 0x80000) (async) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @netrom}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1, 0x4) 2m38.94416896s ago: executing program 2 (id=6482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0x5, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x64, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x40080}, 0x4011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r1}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 2m38.825272179s ago: executing program 2 (id=6484): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x2, 0x3, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xa, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}}, 0x240440c8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000b21618110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x1e, 0x0, &(0x7f0000000680)="630b008646dc3f0adf7e4e3db9862f3df1c1a18778cdaee17b173d4dfc19", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51}, 0x50) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0xc040480) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001f00000000000000000000a48cb72fa431e78be16a5b79dc100a9e8e29ffe87b0917d324002e3800563e288869f46cc5f04db47a8960652a7bfcf4296bc793526f0a9a8f846901d39ee0060b0241268e275207f7a6e1f223e2ab31634fe7b18344d6b9fe05689001a6d6920ab1cd4e4d31"], 0x48) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11}, &(0x7f0000000000), &(0x7f0000000500)=r11}, 0x20) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x50, r7, 0x0) 2m38.165618426s ago: executing program 2 (id=6486): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYRES32=r1], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c801) socket$inet_tcp(0x2, 0x1, 0x0) 2m38.140395875s ago: executing program 2 (id=6487): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004500)={0x34, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x5, 0x19, 0x0, 0x1, [@generic="95"]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c0001000300000000000000140003"], 0x114}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4930a00e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008004) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r6, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}]}, 0x2c}}, 0x80) 2m37.887111904s ago: executing program 2 (id=6490): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000080000090059", @ANYBLOB="5903b622cae41283a4e52552a09437084673563571e96cad0cd37eb7be", @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 2m37.873849898s ago: executing program 2 (id=6492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) write(r8, 0x0, 0x0) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/17], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r12, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m27.479541571s ago: executing program 33 (id=6451): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b75c7eb7d7bd593313c4146fa66b6d1ece0bc1b63cd762bbc71cfff6780be16", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) writev(r3, &(0x7f0000000900)=[{0x0, 0xff80}, {&(0x7f0000000680)="49a9a2", 0x91}], 0x2) (async) writev(r3, &(0x7f0000000900)=[{0x0, 0xff80}, {&(0x7f0000000680)="49a9a2", 0x91}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @netrom}, &(0x7f0000000040)=0x1c, 0x80000) (async) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @netrom}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1, 0x4) 2m22.714895663s ago: executing program 34 (id=6492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) write(r8, 0x0, 0x0) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/17], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r12, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m46.88257431s ago: executing program 7 (id=6942): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) unshare(0x6a040000) unshare(0x44000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002100)={'wpan0\x00'}) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) close(r1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1m26.080788964s ago: executing program 7 (id=6961): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x2a8, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @private1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10000, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x281}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0xffffacf9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private0, 0x4}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb828}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) 1m25.982426454s ago: executing program 7 (id=6964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {0x0, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0x11, 0x30000080}]}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0x11, 0x30000080}]}}) writev(r1, &(0x7f0000000980)=[{&(0x7f00000002c0)="ad24ff822adf2083bc46b6f1116ac5ab4a0e39d81c5674c7549e494f8ca888b39b42e7a76aa9fd863edc0761be12773b7d1ce9d5489358921192ac4319066f7d7945377ab768b2a97090d53b3dbff088240879c6601cbe33422a2df0d80d55fffc94dca2ad6a69b9020605cc2b71e82bee7c30cf3d345b55abb1c540606738f987d250dc708d54b22394417427c54ae6ae44f0b43612d040e9a13ae541566b6c112f87d4139971762df59188c9", 0xad}, {&(0x7f0000000380)="122e3b691ae35c2ef1341ef4bb6dd900cca26032a60a6abbdacb61dadcabe8c48372dd29dfe56fa9d42f157af7a1400d1ba8a93ceb2d79a1b832b9242333f8b2bec9256ebf49bf2c045dc13662012aa8f74d83a3f9242b88044b963da627ab7beeffd34eaddf22fe7e6726fdaedd56bf84691bcbd45b2e3d2d54570320fee10994d87482c60c03b181808cc3ab331322e3b6c3cd5e005398f9482aa6c5b0c3f1e46212cd02d3c7d7903209405cd9f8978a199c96c2d237e6331e09e9ad1a6a5cea9b788ca46bb6a04358149c", 0xcc}, {&(0x7f0000000480)="feeb2c1e81c8c392eed1de4a8e4e0b33e5cea2005715d71b80e3b2943ee8910fd95352c0b500c1e77ad00aebaff03630ba922da3063564a3ae40fb4e676d5821a139c152d10fae9a666c228067f100a8e687fff0115d07662d1ad47c5cabc327061b049b8d51fc07c50f317a36c943b7b1d89080bb938862083973cfefeecb841956d0d06f7a5dc3e06b7e9576235d9cb9a76836e1b3b9dc29ddffc00b81", 0x9e}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000600)="747f14973ef8b24c17c4cd6decfe45ac198959d447aed073e8ecb56389ae9a0243d5ae626e5e0dee89ca4858e8bfd21edad64d7fb42c88fc43af0c1a8d9114728353eab0620674ce0fa0c8b53b11b369a121bec86424a0f48e7f368bafcec3151c57bebe5021e83c1a36ff2372a2d608f094e70c14d386ac6125e92c80b896dfc02ab4b09ced370cb6ebcfc766e6f1583e0f7f133a4b2099669f42aead80dbdf853d7dc3b2e8ad459fd5d6b68565a0fb34a6fd4f1cc0cc37c9825727b599d20b4ffef6971d78d801300e4466cdb3939f0da2e3f09ff46ff118b1516a804077e0adbfc1b0b3de", 0xe6}, {&(0x7f0000000700)="6108d10b67bdd1ce135d445afac26f2a450135b3a68e8aa7a421a4812600a7f595a267c9fbcf4f76687afab234713576dc4c0b7468a26aabf6a73f96d203534c19ead832f5ba1abada807ac81c6fa51c3b67ef0bac3a422e1e99e839f2b1b4669fffe5c8d714cc5a426b1b945dd3628e8dd4d758d5069a3d248f09a669760f58a508fdad5206e85ffbea3ea5e4fc027ceda3320c8d8b95a2d3bf1aab8b408a58508a1290762387480258959bbd516b3d58374e5deb453503235ee20224921be7467fd39fef54d18bb92ca1baf678d6ce8b040e72d23c06463f4b0826de5f", 0xde}, {&(0x7f0000000800)="1905759a38db040a8ddbc69036a42e5ce90ce45de28a91d5d13d6725946c34ac6e3910a016a2a9dd7fb2bedf68c857dc8968d73341d8b4ca3f508450e1f9de5e4b1eac8de0e5ed5eb87346e42c08b28158d6b89a3340b045e61043ab77a771b899b7a5579ff4ddc7c7fe1d4624e18739c2e0de8533ba4d16889028f5", 0x7c}, {&(0x7f00000000c0)="3ee8ca972dc63590b2c3caee7d5c1ddd1411e98de8bd884c6edaaa1446a9eb26", 0x20}, {&(0x7f0000000880)="d59e81202396f9d7b877dc5efc0d0992ab485449be0e5e599db2d285cdc4468bf1deab656cf05274473488843a646b18a4a5e8a7da32b2bb9b0f8c610c050d735f1155e656c2ecc207a319219b1dd22fa26205712849777cc2a333930dcdae77b148da2d9a2d4b60dcad8ac1c6e1a99abe0b79f906b8bb2ac8fe9ded90fd234ff3d5b5219910e90b8988bffa0c775a1bbaeb809bdf26a0319a6c25079d2e930ecd772e767eb1195b105088ab7c368600b77f992fe4e4f5d5ec1ee65c16f7e8268a", 0xc1}], 0x9) 1m25.532209803s ago: executing program 7 (id=6970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000401cb1507002000128008000100736974001400028008000300ac1414100d00090000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r2 = epoll_create(0x2) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4c000) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x8, 0x0, 0xfffff00c}, {0xb1, 0x0, 0x0, 0x6ec1}, {0x6, 0x0, 0x7, 0x9}]}, 0x10) (async) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 1m25.277963969s ago: executing program 7 (id=6972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x5, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x5}}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x9, 0x1, 0x800}, {0x0, 0x4, 0xff4b}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x70, 0x4}, @float={0xb, 0x0, 0x0, 0x10, 0xc}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x63, 0x2}, {0xf, 0x0, 0x9}, {0x4, 0x7, 0x9}]}]}, {0x0, [0x61, 0x30, 0x2e]}}, &(0x7f0000000980)=""/160, 0xbd, 0xa0, 0x1, 0x8000, 0x10000, @value=r2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000740)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], &(0x7f0000000800)='syzkaller\x00', 0x97, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0x3, 0x3ff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000ac0)=[{0x3, 0x5, 0x0, 0x4}, {0x3, 0x1, 0x3, 0x4}, {0x4, 0x3, 0x7, 0x7}, {0x0, 0x1, 0x10, 0x1}, {0x3, 0x2, 0x1, 0x8}, {0x2, 0x5, 0x0, 0x6}], 0x10, 0xd6f}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) r11 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r11, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e2}, {&(0x7f00000005c0)="05e2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db7687ba52ef2013317eb7fcc5677e9d263db84603ad6e0b5c95c157538b1030d82b9dea62f83e9350cdfeca784a34541b175b78a6ea1896789fc45f7a018e06e80c15b4563c", 0xc5}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd, 0x2}, {0xe, 0x21}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xb}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) 1m24.991322498s ago: executing program 7 (id=6975): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) poll(&(0x7f0000000000)=[{r1, 0x9081}], 0x1, 0x2) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x2000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtaction={0x5c, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x48, 0x1, [@m_sample={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "fc51c6dddb3669f174c19dd93c9df2e162"}, {0xc}, {0xc, 0x4, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) unshare(0x2c060000) unshare(0x24020400) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) unshare(0x20000000) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x60) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m9.930082311s ago: executing program 35 (id=6975): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) poll(&(0x7f0000000000)=[{r1, 0x9081}], 0x1, 0x2) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x2000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtaction={0x5c, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x48, 0x1, [@m_sample={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "fc51c6dddb3669f174c19dd93c9df2e162"}, {0xc}, {0xc, 0x4, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) unshare(0x2c060000) unshare(0x24020400) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) unshare(0x20000000) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x60) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.259005219s ago: executing program 3 (id=7513): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4.390854364s ago: executing program 3 (id=7520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f642cbd70010080000034000000080073000000000008000300fdffffff0e00020000000000000002696d0011000f0002006e657464657673696d3000000016b28ff8d7ca76c6f0018bcac7f5cdcf2685ee2b7de79102147b5dcc4410041e0e51179043aac75d352a402a603743ba61a5043770bc1f599d9a767fa03e"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x3) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000180)=""/211, 0x8000000000000000}) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r7, 0x0, 0x0) 3.699808407s ago: executing program 6 (id=7528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8040) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee2c78dad9bfb473fec96558", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea96558", 0xe}], 0x2) 3.230938084s ago: executing program 6 (id=7530): socket(0x22, 0x2, 0x0) (async) r0 = socket(0x22, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x3, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x6, 0x8008, 0xab, 0x3, 0x5, 0x0, 0x5db8, r4}, &(0x7f0000000140)=0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68020000060a0b040000000000000000020000003c020480380201800a0001006d617463680000002802028008000240000000011402030000000027f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8ab11abc465b891aab80dcbb971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcff831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a32"], 0x290}}, 0x4048010) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) sendto$phonet(r0, &(0x7f00000003c0)="2335c1dd7614090f8658c661132d5a21bb9fd5fdfc3027c28b446f554228ac70c3085b37141333ec0edab8aece6a73a3207e6501a081449b90c98dee71f3b124281c39eed1b6ee636b9b3cc6711c93621f3cf763ba6a5a45cbdb1a8ad549bc67357d4ee30a146fbe740bb3054c20c85d1477cda4cb30f4e629311c92d3073fa4380709fb2394a483cc8d9781ec92603972ebc6103b87ddafa699115e7e7bc22b0f54303ac75068af91be6cbc", 0xac, 0x4000, &(0x7f0000000180)={0x23, 0x3, 0x9, 0x8}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000300)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008d2}, 0x2200c004) 2.790888836s ago: executing program 6 (id=7533): unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000100000000000000100000018110000f1de8e0c763f8e7e65ef6f05fd17726c060305bcc128a2368de708cd409c34de", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000020000000000000000000000061c0002feffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000480000000000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$netlink(0x10, 0x3, 0xf) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r2, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000500)="4ffdcda405a53f2461e66445fd76c37e06b9edc5e1fb34e1f047e6dfde379f73c5c08f77f1f1437ef130a8f49d9f73c80ebe0e1a98b4c728703981094d2fa166d3f2a4cc95ccbcfd7d1ef9a69b7028e31b506c3da71f8bf7db542214088ad2909c221e0b16daf7084c84f8da176433af2b43f1a9bb9cbd1bbc34b54f97a0", 0x7e) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, [0x9]}}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) write(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080028cecf5a00004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.708444171s ago: executing program 0 (id=7534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff}, {0x0, 0x1, 0x5}, 0x0, 0xfe}, {0x2, 0x0, {0x1, 0x0, 0x4}, {0x0, 0xff, 0x3}}], 0x40) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110040000000000630afcff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24000095}, 0x20000050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x9}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000380)=""/81, 0x48, 0x51, 0x1, 0x7}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 2.393851004s ago: executing program 0 (id=7538): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x3, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r0, &(0x7f0000000000)="dffa0bce0d", 0x5, 0x0, &(0x7f0000001100)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x80000000) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$ppp(r5, &(0x7f0000003480)="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", 0x1000) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000140)=0x3, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x2) recvmmsg(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/253, 0xfd}, {&(0x7f0000000340)=""/220, 0xdc}], 0x2}, 0x1}, {{&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000640)=""/190, 0xbe}, {&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x5}, 0xa}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000980)=""/251, 0xfb}], 0x1, 0xfffffffffffffffd}, 0x8}, {{&(0x7f0000000a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/30, 0x1e}, {&(0x7f0000000b40)=""/249, 0xf9}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/16, 0x10}], 0x5, &(0x7f0000000d40)=""/119, 0x77}, 0x5}], 0x4, 0x100, &(0x7f0000000ec0)) 2.083905192s ago: executing program 8 (id=7540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x9}, 0x40050) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000000040)=0xfffffffffffffffe, r4, 0x0, 0xb, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000300)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 2.055375811s ago: executing program 5 (id=7541): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x1, 0xfff1}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r9, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r4, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r1, r10, 0x7, 0x2c, 0x0, @void, @void, @void, @value=r12}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r3, 0x25, 0x11, @val=@netkit={@void, @value=r2, @void, @void, r11}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x0) unshare(0x2c060000) unshare(0x22020600) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r13, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) shutdown(r13, 0x0) connect$unix(r14, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 1.89884036s ago: executing program 5 (id=7542): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d40800"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000340)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.898062116s ago: executing program 8 (id=7543): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000140)="8cd4f992", 0x4) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f00000000c0)=0x11) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$tun(r10, &(0x7f0000000480)={@void, @val={0x2, 0x5, 0x100, 0x4, 0x2, 0xfc}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "82", "f8216f", 0x88fb, "ec9911fc6f7cb37ea841c20e9c0d90e5fda8599ef07afbcd2833ff8680af3f279d6403aa03025143a35bdb2fc4e4229732a979a487bf8f77c84339d073978f2b55ef789ad11651d6bd44c2e101bd876bc6f1b14104cc00a773f4afaa06e584ce2613cc0422c241decb71901716aeadd11d136b48c19c9ef0c77e4a639c6dc4795d435cdc51319e076910512a52f5a22da474101912d4f879c96d8dfd7f9f119f124a8e1da05bd57ed3a4f31d97c925fbdfde2c3cc96abc46d85418293e599a"}}}}}}, 0xdf) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 1.497384201s ago: executing program 5 (id=7544): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x5}, 0xed) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 1.414475061s ago: executing program 0 (id=7545): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x1e, "43720705000000004786b89e6fb2940acfbe5c3f9725f0f2bf8dbac78c28"}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000300)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@can={0xc, {{}, 0x6, 0x3, 0x0, 0x0, "d26c7d113137bd51"}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="280000002b000b000000000000000000090000000c000180060000008848000008000200", @ANYRES32=r2], 0x28}}, 0x0) 1.298313223s ago: executing program 5 (id=7546): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x8f, 0x4, 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x170bd27, 0x0, {0x20}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000300)="8ce562324657d9ac286738d0fe1ca9d64470319ba81d94c22886639be51873504ceda7094328fa3c7811a05fafbc49f84e87f1b04d8d6f71ed14c03fb27d63c6d349b7169630981674d341b80648dfa6141367e3384fdb4c82e93d337878add02db9670892b25afd0c06c8379e59d1c02dd76888eff3431e66bdb336bf8fa256cdbf4bad5de6af4d468f86e033ef4de09baeed1a007a4fd446dfaf47e52b72d19fc909134d5165867802e9029b0be033cc461b67160fcb3648eefd8b6721260816d7e52fd655a1df90", &(0x7f0000000080)=@udp}, 0x20) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'pim6reg\x00', {0x2, 0x4e21, @local}}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1414aae00000020000000007000000acdebe0ae0000001e00000020a010102ac1414aaac141419ac1414aa"], 0x2c) 1.187124351s ago: executing program 0 (id=7547): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x807, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x81) 1.16734848s ago: executing program 8 (id=7548): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f00004a1000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r0, 0x631ea000) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x7, 0x81, 0x4e43}) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0xb4807000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 1.077030261s ago: executing program 0 (id=7549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x20, @private=0xa010100}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x173042, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x80000, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x82}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000044}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000000000000010000009500e80000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0xb}}}, 0x24}}, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_tracing={0x1a, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)='syzkaller\x00', 0x421f, 0xa4, &(0x7f00000005c0)=""/164, 0x41000, 0x6e, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0xc, 0xe, 0x3}, 0x10, 0x52e2, r8, 0x9, &(0x7f0000001980)=[r5, r5, 0xffffffffffffffff, r5], &(0x7f00000019c0)=[{0x0, 0x1, 0xc}, {0x0, 0x2, 0xe, 0xc}, {0x4, 0x5, 0xd, 0x8}, {0x4, 0x3, 0x2, 0x4}, {0x0, 0x3, 0x6, 0x8}, {0x0, 0x1, 0x4}, {0x4, 0x1, 0x5, 0xc}, {0x1, 0x4, 0x5, 0x2}, {0x0, 0x2, 0x2, 0xa}], 0x10, 0x1}, 0x94) 1.066058461s ago: executing program 3 (id=7550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xe0, 0x0, 0x200, 0xfffffffc, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c050) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xe0, 0x0, 0x200, 0xfffffffc, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c050) (async) 939.12305ms ago: executing program 8 (id=7551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 936.400361ms ago: executing program 3 (id=7552): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100005ff00000008000000000000004a72572ae6a7dc44df99bedb66c59548e7ceeaea073400bbdb17f090413b1872468d0a72a0deef8e9562d8820681c98100d6dd374f94741213ae00"/90, @ANYRES32=0x0, @ANYBLOB="6f77000000000000140012800b000100626174616476000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) socketpair(0x1d, 0x802, 0x7, &(0x7f0000004740)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r0, 0x0, 0x0, 0x20000100, 0x0, 0x0) recvfrom(r4, &(0x7f0000000240)=""/131, 0x83, 0x2001, 0xfffffffffffffffe, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect$nfc_llcp(r7, &(0x7f0000000580)={0x27, r8, 0x0, 0x2, 0x8, 0xe, "3f0c75ef189260c9197bbd68fb3c918c6261931636646b3fc3e53e5e85e75da0a352ca502fd02dae907d1d12ea6cb5d9ac78a8ceba44b51adf05013ae405fc", 0x3c}, 0x60) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 862.731989ms ago: executing program 5 (id=7553): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x1, 0xfff1}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r9, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r4, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r1, r10, 0x7, 0x2c, 0x0, @void, @void, @void, @value=r12}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r3, 0x25, 0x11, @val=@netkit={@void, @value=r2, @void, @void, r11}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x0) unshare(0x2c060000) unshare(0x22020600) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r13, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) shutdown(r13, 0x0) connect$unix(r14, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 782.576379ms ago: executing program 8 (id=7554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000480)={&(0x7f0000000180)=@in={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x400c090}, 0x4) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) (async) close(r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x50, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000040)) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xce202, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x33}, 0xe327da050daf7a02, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xfe}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100"/18, @ANYRES32=r12, @ANYBLOB="0800a000b209000008009f00050000000800260080090000"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 642.562612ms ago: executing program 6 (id=7555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @multicast2}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x2, 0x68, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 625.515876ms ago: executing program 5 (id=7556): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52", 0xa}], 0x1}], 0x1, 0x40800) splice(r2, 0x0, r0, 0x0, 0x9, 0x1200000000000000) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000b0000000200010000010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00000000009e9f6400"/28], 0x50) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000fc150dfb8a7791ba7515a52646f9f8b421ee79759453ad1056f4aee06dff8a0a8720f2a75ec67ce5c04d5899d805056e129846bf44d39ab494f431464941298753c8716840b9522e77a56b07a87fb9680900000000", @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 592.979161ms ago: executing program 3 (id=7557): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000400)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7f, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001240)={0x8, 0xa, 0x1, 0xffff}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000001a40)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001580)='9', 0x1}], 0x1, 0x0, 0x0, 0x440c0}, 0x20000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) socketpair(0x3b, 0x2, 0x9, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb08004500003c0000000000299078ac1e0001e000000103000000002890780200000000000000ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bb81786fdf5816efc33cefa30acb4bdcd38982ccfe5d3221640ecdf11bf2b16f616b561f2c15f54"], 0x4e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40441c1) sendmmsg(0xffffffffffffffff, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}], 0x1, 0x8810) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r9, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) writev(r8, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f0000000140)="b7000000cc631b24389154c6d047550180", 0x11}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150da0d1787cc10d211447da94cb715e462e27318612235a604082c420feb31d4", 0x3a}], 0x3) sendmmsg$sock(r3, &(0x7f0000000280), 0x0, 0x20040010) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000003100000000000000c90000029500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 235.022541ms ago: executing program 8 (id=7558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x23, 0x0, [{0x7, 0x6, "954d2dd4"}, {0x2, 0x11, "ad4cfc6d0c114a69c613f8d51edcd6"}, {0x2, 0x6, "ba2a891b"}]}]}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0, r3}) 184.535753ms ago: executing program 0 (id=7559): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x7fe, @empty}, 0x1c, 0x0}}], 0x1, 0x60040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001980), 0x0, 0x40002042, 0x0) 143.729096ms ago: executing program 6 (id=7560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getroute={0x14, 0x1a, 0x400, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) 34.956518ms ago: executing program 3 (id=7561): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00\x00_'], 0x50) socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 0s ago: executing program 6 (id=7562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0xfffffffffffffdf9}, @WGDEVICE_A_PEERS={0x0, 0x8, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x0, 0x2, "2f909a7f73beb7da9fb7fba0517bcc0a693b3a8a5af7fc9acc7a8ece3b74d4f7"}]}, {0x0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @private=0xa010102}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @remote}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @private=0xa010101}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @rand_addr=0x64010101}}, @ipv4={{}, {0x0, 0x2, @empty}}, @ipv6={{}, {0x0, 0x2, @loopback}}, @ipv6={{}, {0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @private=0xa010102}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @remote}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @private1}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @local}}, @ipv6={{}, {0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @private=0xa010102}, {0x0, 0x3, 0x2}}, @ipv4={{}, {0x0, 0x2, @empty}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @remote}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x1}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @remote}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @empty}}, @ipv4={{}, {0x0, 0x2, @multicast1}, {0x0, 0x3, 0x2}}, @ipv4={{}, {0x0, 0x2, @multicast2}, {0x0, 0x3, 0x3}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @broadcast}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}}, @ipv4={{}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @remote}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @mcast1}}, @ipv6={{}, {0x0, 0x2, @local}}, @ipv6={{}, {0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @private=0xa010102}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}, @ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @ipv6={{}, {0x0, 0x2, @rand_addr=' \x01\x00'}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x0, 0x3, 0x2}}, @ipv4={{}, {0x0, 0x2, @rand_addr=0x64010100}, {0x0, 0x3, 0x1}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @multicast1}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @ipv6={{}, {0x0, 0x2, @empty}}, @ipv6={{}, {0x0, 0x2, @mcast1}}, @ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x0, 0x3, 0x3}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @multicast2}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @ipv4={{}, {0x0, 0x2, @multicast1}, {0x0, 0x3, 0x1}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @broadcast}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @multicast2}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @private1}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @private=0xa010100}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv6={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @local}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @private=0xa010102}, {0x0, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @empty}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @local}}, @ipv6={{}, {0x0, 0x2, @mcast2}, {0x0, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x0, 0x2, "21262cd2f4e351878d1f265ff3dc21fc1e8b25dfadf6cb18a226532f75539b4d"}, @WGPEER_A_PRESHARED_KEY={0x0, 0x2, "dfb304458513f31b95fc9bec2c13aebcd3ac0837338de907a48605bc5fefb1e4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x0, 0x5, 0x369}, @WGPEER_A_ALLOWEDIPS={0x0, 0x9, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @multicast2}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @private=0xa010100}, {0x0, 0x3, 0x3}}, @ipv6={{}, {0x0, 0x2, @remote}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x3, 0x2}}, @ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x1}}, @ipv6={{}, {0x0, 0x2, @mcast1}, {0x0, 0x3, 0x3}}, @ipv4={{}, {0x0, 0x2, @loopback}, {0x0, 0x3, 0x2}}]}, {0x0, 0x0, 0x0, 0x1, [@ipv4={{}, {0x0, 0x2, @loopback}}, @ipv4={{}, {0x0, 0x2, @multicast2}, {0x0, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x0, 0x5, 0x100}, @WGPEER_A_ENDPOINT6={0x0, 0x4, {0xa, 0x4e20, 0x4de1, @rand_addr=' \x01\x00', 0x5}}, @WGPEER_A_PROTOCOL_VERSION]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000001c0)=""/220, 0xdc, 0x0, &(0x7f0000000440)=""/161, 0xa1}}, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff", 0x4e) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x40, 0x40, 0x8000, 0xffff45e0, {{0x26, 0x4, 0x3, 0x9, 0x98, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0xce, 0x0, 0x3, [0xf]}, @timestamp_addr={0x44, 0x34, 0x46, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@remote, 0x3fd}, {@rand_addr=0x64010101}, {@multicast2, 0x7f}, {@loopback, 0x8001}, {@multicast2, 0x1}]}, @end, @timestamp={0x44, 0x10, 0xa9, 0x0, 0x4, [0x73a6, 0x7, 0x10]}, @timestamp={0x44, 0xc, 0x53, 0x0, 0x3, [0x5, 0x8]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x26, 0x1, 0x6, [{@private=0xa010100, 0xc2bb}, {@loopback, 0x10}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x7, 0x84, [@broadcast]}, @generic={0x7, 0x3, "bb"}]}}}}}) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) (async) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1000, 0x2, 0xa, 0x52406, r4, 0x5, '\x00', r6, r7, 0x2, 0x2, 0x3, 0x0, @void, @value, @value=r8}, 0x50) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r9, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async, rerun: 32) r12 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmmsg(r12, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x680c}], 0x1d, 0x40000110, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): te ecb(arc4) skcipher [ 777.744177][T30696] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 777.776747][T30696] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.6277'. [ 777.959392][T30704] wg1 speed is unknown, defaulting to 1000 [ 777.997010][T30704] vxcan1 speed is unknown, defaulting to 1000 [ 778.076150][T30715] netlink: 'syz.3.6282': attribute type 2 has an invalid length. [ 778.098201][T30715] netlink: 'syz.3.6282': attribute type 1 has an invalid length. [ 778.514862][T30704] lo speed is unknown, defaulting to 1000 [ 779.504352][T30748] wg1 speed is unknown, defaulting to 1000 [ 779.548211][T30748] vxcan1 speed is unknown, defaulting to 1000 [ 779.645183][T30757] wg1 speed is unknown, defaulting to 1000 [ 779.805147][T18188] syz_tun (unregistering): left allmulticast mode [ 779.814469][T22076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.833283][T22076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.843021][T22076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.852570][T22076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.864866][T22076] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.967809][T30759] wg1 speed is unknown, defaulting to 1000 [ 780.031665][T30762] tipc: Enabled bearer , priority 0 [ 780.061270][T30762] syzkaller0: entered promiscuous mode [ 780.086268][T30762] syzkaller0: entered allmulticast mode [ 780.102886][T30748] lo speed is unknown, defaulting to 1000 [ 780.128071][T30757] vxcan1 speed is unknown, defaulting to 1000 [ 780.173907][T30763] tipc: Resetting bearer [ 780.205623][T30761] tipc: Resetting bearer [ 780.262205][T30761] tipc: Disabling bearer [ 780.990646][T30759] vxcan1 speed is unknown, defaulting to 1000 [ 781.217211][T30759] lo speed is unknown, defaulting to 1000 [ 781.230179][T30757] lo speed is unknown, defaulting to 1000 [ 781.236197][T30779] wg1 speed is unknown, defaulting to 1000 [ 781.262166][T30779] vxcan1 speed is unknown, defaulting to 1000 [ 781.273200][T30801] wg1 speed is unknown, defaulting to 1000 [ 781.530316][T30801] vxcan1 speed is unknown, defaulting to 1000 [ 781.530683][T30759] chnl_net:caif_netlink_parms(): no params data found [ 781.811047][T30759] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.819537][T30759] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.826963][T30759] bridge_slave_0: entered allmulticast mode [ 781.836278][T30759] bridge_slave_0: entered promiscuous mode [ 781.845477][T30759] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.853395][T30759] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.860950][T30759] bridge_slave_1: entered allmulticast mode [ 781.869306][T30759] bridge_slave_1: entered promiscuous mode [ 781.900616][T30801] lo speed is unknown, defaulting to 1000 [ 781.907318][T22076] Bluetooth: hci1: command tx timeout [ 781.987564][T30779] lo speed is unknown, defaulting to 1000 [ 782.004250][T30759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.059213][T30759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.258897][T30759] team0: Port device team_slave_0 added [ 782.283254][T30759] team0: Port device team_slave_1 added [ 782.443602][T30759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.455999][T30759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.536392][T30759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.574451][T30759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.604010][T30759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.636224][T30759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.977710][T22076] Bluetooth: hci1: command tx timeout [ 784.633064][ T1322] vlan4: left promiscuous mode [ 784.638190][ T1322] veth1: left promiscuous mode [ 784.643353][ T1322] bridge4: port 3(vlan4) entered disabled state [ 784.652588][ T1322] veth0_to_bond: left allmulticast mode [ 784.661596][ T1322] veth0_to_bond: left promiscuous mode [ 784.667582][ T1322] bridge4: port 2(veth0_to_bond) entered disabled state [ 784.679291][ T1322] veth5: left allmulticast mode [ 784.684219][ T1322] veth5: left promiscuous mode [ 784.693915][T30825] __nla_validate_parse: 4 callbacks suppressed [ 784.693933][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6303'. [ 784.709575][ T1322] bridge4: port 1(veth5) entered disabled state [ 785.064283][ T1322] bond9 (unregistering): (slave gretap1): Releasing active interface [ 785.606740][ T1322] bond0 (unregistering): Released all slaves [ 785.619557][ T1322] bond1 (unregistering): Released all slaves [ 785.631908][ T1322] bond2 (unregistering): Released all slaves [ 785.645316][ T1322] bond3 (unregistering): Released all slaves [ 785.774869][ T1322] bond4 (unregistering): Released all slaves [ 785.787435][ T1322] bond5 (unregistering): Released all slaves [ 785.909134][ T1322] bond6 (unregistering): Released all slaves [ 786.028245][ T1322] bond7 (unregistering): Released all slaves [ 786.042787][ T1322] bond8 (unregistering): Released all slaves [ 786.055101][ T1322] bond9 (unregistering): Released all slaves [ 786.061415][T22076] Bluetooth: hci1: command tx timeout [ 786.073129][ T1322] bond10 (unregistering): Released all slaves [ 786.087331][ T1322] bond11 (unregistering): Released all slaves [ 786.214474][ T1322] bond12 (unregistering): Released all slaves [ 786.339103][ T1322] bond13 (unregistering): (slave wlan0): Releasing active interface [ 786.349094][ T1322] bond13 (unregistering): Released all slaves [ 786.371296][T30825] vlan2: entered allmulticast mode [ 786.376741][T30825] hsr0: entered allmulticast mode [ 786.381807][T30825] hsr_slave_0: entered allmulticast mode [ 786.387936][T30825] hsr_slave_1: entered allmulticast mode [ 786.396123][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6303'. [ 786.467040][T30835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6305'. [ 786.587638][T30759] hsr_slave_0: entered promiscuous mode [ 786.598764][T30759] hsr_slave_1: entered promiscuous mode [ 786.605302][T30759] debugfs: 'hsr0' already exists in 'hsr' [ 786.636120][T30759] Cannot create hsr debugfs directory [ 786.645206][ T1322] tipc: Left network mode [ 786.980934][T30852] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 787.084720][T30846] syzkaller1: entered promiscuous mode [ 787.095368][T30846] syzkaller1: entered allmulticast mode [ 787.314875][T30869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6312'. [ 787.330721][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6313'. [ 787.380200][T30858] wg1 speed is unknown, defaulting to 1000 [ 787.401244][T30861] wg1 speed is unknown, defaulting to 1000 [ 787.444711][T30858] vxcan1 speed is unknown, defaulting to 1000 [ 787.592462][T30873] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 787.789834][T30881] netlink: 'syz.3.6317': attribute type 1 has an invalid length. [ 787.797092][T30879] netlink: zone id is out of range [ 787.798178][T30881] netlink: 'syz.3.6317': attribute type 1 has an invalid length. [ 787.810912][T30881] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6317'. [ 787.811566][T30879] netlink: zone id is out of range [ 787.836214][T30879] netlink: zone id is out of range [ 787.841382][T30879] netlink: zone id is out of range [ 787.859008][T30759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.866031][T30879] netlink: zone id is out of range [ 787.878548][T30881] netlink: 'syz.3.6317': attribute type 21 has an invalid length. [ 787.888191][T30879] netlink: zone id is out of range [ 787.893380][T30879] netlink: zone id is out of range [ 787.903207][T30759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.910884][T30881] IPv6: NLM_F_CREATE should be specified when creating new route [ 787.923101][T30861] vxcan1 speed is unknown, defaulting to 1000 [ 787.930005][T30759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.946579][T30881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 787.949904][T30882] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6317'. [ 787.953815][T30881] IPv6: NLM_F_CREATE should be set when creating new route [ 787.953884][T30881] IPv6: NLM_F_CREATE should be set when creating new route [ 787.963522][T30879] netlink: zone id is out of range [ 787.970154][T30881] IPv6: NLM_F_CREATE should be set when creating new route [ 787.974933][T30759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.001171][T30879] netlink: zone id is out of range [ 788.006689][T30879] netlink: zone id is out of range [ 788.137470][T22076] Bluetooth: hci1: command tx timeout [ 788.255325][T30894] tipc: Enabled bearer , priority 0 [ 788.262639][T30893] tipc: Enabling of bearer rejected, already enabled [ 788.272647][T30894] syzkaller0: entered promiscuous mode [ 788.279234][T30894] syzkaller0: entered allmulticast mode [ 788.386215][T30894] tipc: Resetting bearer [ 788.440742][T30759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.525662][T30759] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.569845][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.577141][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.602251][T30903] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6321'. [ 788.617403][T30861] lo speed is unknown, defaulting to 1000 [ 788.638993][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.646222][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.692102][T30759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 788.705612][T30759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 788.812635][T30858] lo speed is unknown, defaulting to 1000 [ 789.003430][T30910] netlink: 'syz.3.6322': attribute type 1 has an invalid length. [ 789.034165][T30910] netlink: 'syz.3.6322': attribute type 1 has an invalid length. [ 789.094502][T30892] tipc: Resetting bearer [ 789.117556][T30892] tipc: Disabling bearer [ 789.168958][ T1322] hsr_slave_0: left promiscuous mode [ 789.192329][ T1322] hsr_slave_1: left promiscuous mode [ 789.246688][T30914] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 789.332881][T30917] Bluetooth: MGMT ver 1.23 [ 789.402030][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6326'. [ 790.333201][T30919] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 790.364837][T30919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 790.396889][T30919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 790.513328][T30938] netlink: 'syz.3.6330': attribute type 13 has an invalid length. [ 790.521737][T30938] netlink: 'syz.3.6330': attribute type 17 has an invalid length. [ 790.863647][T30759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.127851][T30957] vlan2: entered promiscuous mode [ 791.392085][T30759] veth0_vlan: entered promiscuous mode [ 791.427036][T30759] veth1_vlan: entered promiscuous mode [ 791.481684][T30759] veth0_macvtap: entered promiscuous mode [ 791.493008][T30759] veth1_macvtap: entered promiscuous mode [ 791.572807][T30759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.605745][T30759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.641901][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.654685][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.677941][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.703279][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.932024][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.977936][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.001133][T30979] Cannot find add_set index 0 as target [ 792.054944][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.068096][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.417946][T30993] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 792.430131][T30993] CPU: 1 UID: 0 PID: 30993 Comm: syz.4.6344 Not tainted syzkaller #0 PREEMPT(full) [ 792.430170][T30993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 792.430183][T30993] Call Trace: [ 792.430192][T30993] [ 792.430202][T30993] dump_stack_lvl+0x189/0x250 [ 792.430234][T30993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.430256][T30993] ? __pfx__printk+0x10/0x10 [ 792.430283][T30993] ? kernfs_path_from_node+0x2f/0x290 [ 792.430308][T30993] ? kernfs_path_from_node+0x250/0x290 [ 792.430331][T30993] ? kernfs_path_from_node+0x2f/0x290 [ 792.430361][T30993] sysfs_warn_dup+0x8e/0xa0 [ 792.430388][T30993] sysfs_do_create_link_sd+0xc0/0x110 [ 792.430414][T30993] device_add_class_symlinks+0x1cf/0x240 [ 792.430451][T30993] device_add+0x475/0xb50 [ 792.430488][T30993] wiphy_register+0x1c81/0x2aa0 [ 792.430535][T30993] ? __pfx_wiphy_register+0x10/0x10 [ 792.430561][T30993] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 792.430592][T30993] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 792.430630][T30993] ieee80211_register_hw+0x3473/0x40d0 [ 792.430666][T30993] ? ieee80211_register_hw+0x14a1/0x40d0 [ 792.430698][T30993] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 792.430717][T30993] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 792.430746][T30993] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 792.430769][T30993] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 792.430802][T30993] ? __hrtimer_setup+0x187/0x210 [ 792.430824][T30993] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 792.430856][T30993] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 792.430918][T30993] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 792.430940][T30993] ? trace_kmalloc+0x1f/0xd0 [ 792.430966][T30993] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 792.430997][T30993] ? kstrndup+0xbf/0x160 [ 792.431031][T30993] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 792.431064][T30993] ? __pfx___nla_validate_parse+0x10/0x10 [ 792.431110][T30993] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 792.431143][T30993] ? rcu_is_watching+0x15/0xb0 [ 792.431178][T30993] ? __nla_parse+0x40/0x60 [ 792.431210][T30993] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 792.431251][T30993] genl_family_rcv_msg_doit+0x212/0x300 [ 792.431288][T30993] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 792.431333][T30993] ? bpf_lsm_capable+0x9/0x20 [ 792.431356][T30993] ? security_capable+0x7e/0x2e0 [ 792.431389][T30993] genl_rcv_msg+0x60e/0x790 [ 792.431424][T30993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.431450][T30993] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 792.431497][T30993] netlink_rcv_skb+0x205/0x470 [ 792.431516][T30993] ? __lock_acquire+0xab9/0xd20 [ 792.431537][T30993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.431566][T30993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.431612][T30993] ? down_read+0x1ad/0x2e0 [ 792.431644][T30993] genl_rcv+0x28/0x40 [ 792.431669][T30993] netlink_unicast+0x82f/0x9e0 [ 792.431712][T30993] ? __pfx_netlink_unicast+0x10/0x10 [ 792.431746][T30993] ? netlink_sendmsg+0x642/0xb30 [ 792.431766][T30993] ? skb_put+0x11b/0x210 [ 792.431793][T30993] netlink_sendmsg+0x805/0xb30 [ 792.431828][T30993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.431855][T30993] ? aa_sock_msg_perm+0xf1/0x1d0 [ 792.431885][T30993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 792.431905][T30993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.431928][T30993] __sock_sendmsg+0x21c/0x270 [ 792.431963][T30993] ____sys_sendmsg+0x505/0x830 [ 792.431995][T30993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.432032][T30993] ? import_iovec+0x74/0xa0 [ 792.432057][T30993] ___sys_sendmsg+0x21f/0x2a0 [ 792.432085][T30993] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.432160][T30993] ? __fget_files+0x2a/0x420 [ 792.432178][T30993] ? __fget_files+0x3a0/0x420 [ 792.432210][T30993] __x64_sys_sendmsg+0x19b/0x260 [ 792.432239][T30993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.432285][T30993] ? do_syscall_64+0xbe/0xfa0 [ 792.432315][T30993] do_syscall_64+0xfa/0xfa0 [ 792.432340][T30993] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.432365][T30993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.432386][T30993] ? clear_bhb_loop+0x60/0xb0 [ 792.432412][T30993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.432432][T30993] RIP: 0033:0x7fb33798eec9 [ 792.432452][T30993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.432471][T30993] RSP: 002b:00007fb338878038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.432493][T30993] RAX: ffffffffffffffda RBX: 00007fb337be6090 RCX: 00007fb33798eec9 [ 792.432509][T30993] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 792.432523][T30993] RBP: 00007fb337a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 792.432536][T30993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.432549][T30993] R13: 00007fb337be6128 R14: 00007fb337be6090 R15: 00007ffd72bb5798 [ 792.432586][T30993] [ 792.477397][T30995] syzkaller0: entered promiscuous mode [ 792.671244][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6345'. [ 792.680603][T30995] syzkaller0: entered allmulticast mode [ 792.759248][T31006] netlink: 'syz.5.6349': attribute type 1 has an invalid length. [ 792.812621][T30999] tipc: Enabled bearer , priority 0 [ 793.003923][T30991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6345'. [ 793.043216][T31006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 793.064021][T31011] veth5: entered promiscuous mode [ 793.181083][T30989] tipc: Disabling bearer [ 793.289220][T31026] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6353'. [ 793.308859][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6354'. [ 793.318352][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6354'. [ 793.416420][T31026] nbd5: detected capacity change from 0 to 63 [ 793.422908][T31032] block nbd5: NBD_DISCONNECT [ 793.429597][T31034] netlink: 'syz.3.6355': attribute type 10 has an invalid length. [ 793.440998][T31032] block nbd5: Disconnected due to user request. [ 793.456068][T31032] block nbd5: shutting down sockets [ 795.342007][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 795.528774][T31028] syz_tun: entered promiscuous mode [ 795.535030][T31028] gretap0: entered promiscuous mode [ 795.541457][T31028] debugfs: 'hsr1' already exists in 'hsr' [ 795.547611][T31028] Cannot create hsr debugfs directory [ 795.588951][T31034] bridge0: port 3(syz_tun) entered disabled state [ 795.603844][T31034] syz_tun: left allmulticast mode [ 795.609478][T31034] syz_tun: left promiscuous mode [ 795.614675][T31034] bridge0: port 3(syz_tun) entered disabled state [ 795.630283][T31034] syz_tun: entered promiscuous mode [ 795.637339][T31034] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 795.662612][T31036] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 795.673877][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 795.680399][T31038] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 795.830398][T31062] syzkaller1: entered promiscuous mode [ 795.836418][T31062] syzkaller1: entered allmulticast mode [ 796.193923][T31078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6364'. [ 796.415446][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6370'. [ 796.556643][T31099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 796.593029][T31098] dvmrp0: entered allmulticast mode [ 796.643494][T31105] syzkaller0: entered promiscuous mode [ 796.651815][T31105] syzkaller0: entered allmulticast mode [ 796.750187][T31113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6376'. [ 796.772250][T31111] syzkaller1: entered promiscuous mode [ 796.781170][T31111] syzkaller1: entered allmulticast mode [ 796.796951][T31113] nbd: socks must be embedded in a SOCK_ITEM attr [ 796.804754][T31113] block nbd4: shutting down sockets [ 796.999450][T31124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6378'. [ 797.142625][T31124] wg1 speed is unknown, defaulting to 1000 [ 797.176626][T31124] vxcan1 speed is unknown, defaulting to 1000 [ 797.328093][T31138] pim6reg: entered allmulticast mode [ 797.367722][T31138] pim6reg: left allmulticast mode [ 797.529835][T31144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.689724][T31146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 797.717660][T31152] __nla_validate_parse: 1 callbacks suppressed [ 797.717682][T31152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6388'. [ 797.732323][T31145] wg1 speed is unknown, defaulting to 1000 [ 797.734871][T31152] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6388'. [ 797.743376][T31145] vxcan1 speed is unknown, defaulting to 1000 [ 797.750486][T31124] lo speed is unknown, defaulting to 1000 [ 797.756486][T31152] netlink: 'syz.2.6388': attribute type 5 has an invalid length. [ 797.773460][T31152] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6388'. [ 798.072334][T31157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6390'. [ 798.173712][T31145] lo speed is unknown, defaulting to 1000 [ 798.175047][T31163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6390'. [ 798.462096][T31172] lo: entered allmulticast mode [ 798.470445][T31172] lo: left allmulticast mode [ 799.217272][T31212] 8021q: VLANs not supported on nlmon0 [ 799.233267][T31212] siw: device registration error -23 [ 799.399669][T31222] IPVS: length: 223 != 8 [ 799.747506][T31233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6411'. [ 799.817868][T31233] netlink: 'syz.2.6411': attribute type 10 has an invalid length. [ 800.067349][T31248] wg1 speed is unknown, defaulting to 1000 [ 800.091778][T31248] vxcan1 speed is unknown, defaulting to 1000 [ 800.262863][T31255] wg1 speed is unknown, defaulting to 1000 [ 800.277368][T28094] IPVS: starting estimator thread 0... [ 800.289461][T31258] wg1 speed is unknown, defaulting to 1000 [ 800.414217][T31262] IPVS: using max 38 ests per chain, 91200 per kthread [ 800.489378][T31264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6421'. [ 800.529475][T31264] bridge_slave_1: left allmulticast mode [ 800.541951][T31264] bridge_slave_1: left promiscuous mode [ 800.559931][T31264] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.609019][T31264] bridge_slave_0: left allmulticast mode [ 800.615004][T31264] bridge_slave_0: left promiscuous mode [ 800.639476][T31264] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.763187][T31255] vxcan1 speed is unknown, defaulting to 1000 [ 800.769467][T31248] lo speed is unknown, defaulting to 1000 [ 801.353601][T31258] vxcan1 speed is unknown, defaulting to 1000 [ 801.804201][T31255] lo speed is unknown, defaulting to 1000 [ 801.846714][T31258] lo speed is unknown, defaulting to 1000 [ 801.948564][T31294] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6429'. [ 802.383681][T31310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6432'. [ 802.405200][T31309] vcan0: renamed from batadv_slave_0 (while UP) [ 802.417371][T31309] vcan0: entered promiscuous mode [ 802.499396][T31307] macsec1: entered promiscuous mode [ 802.504658][T31307] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 802.532447][T31307] macsec1: entered allmulticast mode [ 802.543529][T31307] mac80211_hwsim hwsim74 wlan0: entered allmulticast mode [ 802.759832][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6438'. [ 803.147478][T31331] veth0: entered promiscuous mode [ 803.153026][T31331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6440'. [ 803.360186][T31345] netlink: 'syz.3.6444': attribute type 16 has an invalid length. [ 803.387749][T31345] netlink: 36630 bytes leftover after parsing attributes in process `syz.3.6444'. [ 803.535436][T31351] tipc: Enabling of bearer rejected, failed to enable media [ 803.547840][T31352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6447'. [ 803.779199][T31349] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 804.015640][T31366] bond1: option packets_per_slave: invalid value (1802723700) [ 804.023587][T31366] bond1: option packets_per_slave: allowed values 0 - 65535 [ 804.044588][T31366] bond1 (unregistering): Released all slaves [ 804.433729][T31375] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 804.485460][T31375] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 804.541826][T31376] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6452'. [ 804.553390][T31376] rdma_rxe: rxe_newlink: failed to add syz_tun [ 804.673867][T31378] netlink: 'syz.3.6453': attribute type 3 has an invalid length. [ 804.826186][T31380] syzkaller0: entered promiscuous mode [ 804.831791][T31380] syzkaller0: entered allmulticast mode [ 805.034924][T31382] bond3 (unregistering): Released all slaves [ 805.246193][T31389] : renamed from bond_slave_0 (while UP) [ 805.536221][T31400] Cannot find del_set index 16384 as target [ 805.683934][T31407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6463'. [ 805.800088][T31412] netlink: 'syz.2.6464': attribute type 1 has an invalid length. [ 805.808514][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6464'. [ 805.822883][T31412] netlink: 'syz.2.6464': attribute type 1 has an invalid length. [ 805.857356][T31412] bond1: entered promiscuous mode [ 805.863165][T31412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.892921][T31412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6464'. [ 805.915526][T31412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6464'. [ 805.987542][T31419] wg1 speed is unknown, defaulting to 1000 [ 806.014909][T31419] vxcan1 speed is unknown, defaulting to 1000 [ 806.506707][T31419] lo speed is unknown, defaulting to 1000 [ 806.821933][T31442] netlink: 'syz.5.6472': attribute type 10 has an invalid length. [ 806.846390][T31442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6472'. [ 806.924655][T31442] team0: Port device dummy0 removed [ 806.940004][T31442] bridge0: port 3(dummy0) entered blocking state [ 806.961878][T31442] bridge0: port 3(dummy0) entered disabled state [ 806.986157][T31442] dummy0: entered allmulticast mode [ 807.411467][T31462] netlink: 'syz.0.6479': attribute type 1 has an invalid length. [ 807.435693][T31462] netlink: 'syz.0.6479': attribute type 2 has an invalid length. [ 807.442715][T31466] xt_ecn: cannot match TCP bits for non-tcp packets [ 807.742635][T31477] netlink: 'syz.3.6480': attribute type 10 has an invalid length. [ 807.795886][T31477] __nla_validate_parse: 6 callbacks suppressed [ 807.795905][T31477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6480'. [ 807.847968][T31477] veth0_vlan: entered allmulticast mode [ 807.867733][T31477] net_ratelimit: 6 callbacks suppressed [ 807.867752][T31477] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 807.975886][T31479] bridge0: port 3(dummy0) entered disabled state [ 807.982495][T31479] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.990274][T31479] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.091982][T31479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.107129][T31479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.115176][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6485'. [ 808.176314][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6485'. [ 808.290818][T31484] syzkaller1: entered promiscuous mode [ 808.306302][T31484] syzkaller1: entered allmulticast mode [ 808.325559][ T5988] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.347556][ T5988] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.400141][T31496] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6487'. [ 808.410140][T31496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.410179][ T5988] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.430013][T31496] netlink: 'syz.2.6487': attribute type 1 has an invalid length. [ 808.438581][T31496] netlink: 'syz.2.6487': attribute type 3 has an invalid length. [ 808.443075][ T5988] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.455651][T31496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6487'. [ 808.474699][T31498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6488'. [ 808.580354][T31501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6489'. [ 808.669521][T31501] netlink: 'syz.3.6489': attribute type 2 has an invalid length. [ 808.954003][T31523] wg1 speed is unknown, defaulting to 1000 [ 808.962148][T31523] vxcan1 speed is unknown, defaulting to 1000 [ 809.069228][T31527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6497'. [ 809.233098][T31530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6497'. [ 809.422459][T31523] lo speed is unknown, defaulting to 1000 [ 809.606354][T31549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6502'. [ 809.729872][T31557] netlink: 'syz.0.6505': attribute type 10 has an invalid length. [ 809.752875][T31557] team0: Port device dummy0 added [ 810.246709][T31573] pim6reg1: entered allmulticast mode [ 810.687881][T31593] tipc: Started in network mode [ 810.692794][T31593] tipc: Node identity 8296265b1b08, cluster identity 4711 [ 810.701756][T31593] tipc: Enabled bearer , priority 0 [ 810.709957][T31593] syzkaller0: entered promiscuous mode [ 810.716227][T31593] syzkaller0: entered allmulticast mode [ 811.445449][T31589] tipc: Resetting bearer [ 811.464356][T31589] tipc: Disabling bearer [ 811.586718][T31624] veth0_to_bond: entered allmulticast mode [ 812.463521][T31662] wg1 speed is unknown, defaulting to 1000 [ 812.470442][T31662] vxcan1 speed is unknown, defaulting to 1000 [ 812.656020][T31662] lo speed is unknown, defaulting to 1000 [ 812.706240][T31665] netlink: 'syz.3.6539': attribute type 1 has an invalid length. [ 812.739731][T31665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 812.779331][T31665] bond2: (slave ip6gretap1): making interface the new active one [ 812.789839][T31665] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 812.818771][T31665] veth5: entered promiscuous mode [ 812.826934][T31665] bond2: (slave veth5): Enslaving as an active interface with a down link [ 812.840670][T31665] erspan0: entered allmulticast mode [ 812.853641][T31665] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 812.914185][T31669] __nla_validate_parse: 37 callbacks suppressed [ 812.914198][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6540'. [ 812.932789][T31669] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 812.989904][T31671] syzkaller0: entered promiscuous mode [ 812.995483][T31671] syzkaller0: entered allmulticast mode [ 813.081644][T31673] netlink: 'syz.5.6542': attribute type 1 has an invalid length. [ 813.207267][T31681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6545'. [ 813.332620][T31685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6546'. [ 813.356464][T31685] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6546'. [ 813.388953][T31689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6548'. [ 813.406029][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6548'. [ 813.420549][T31689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6548'. [ 813.452595][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6548'. [ 813.561062][T31689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6548'. [ 813.693896][T31704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6551'. [ 813.736894][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 813.832623][T31714] wg1 speed is unknown, defaulting to 1000 [ 813.849941][T31714] vxcan1 speed is unknown, defaulting to 1000 [ 813.866411][T31716] tipc: Enabled bearer , priority 0 [ 813.874053][T31716] syzkaller0: entered promiscuous mode [ 813.879910][T31716] syzkaller0: entered allmulticast mode [ 813.927657][T31716] tipc: Resetting bearer [ 813.970473][T31715] tipc: Resetting bearer [ 813.999410][T31715] tipc: Disabling bearer [ 814.093081][T31714] lo speed is unknown, defaulting to 1000 [ 814.099910][T31722] rdma_rxe: rxe_newlink: failed to add netdevsim0 [ 814.323781][T31734] netlink: 'syz.5.6562': attribute type 2 has an invalid length. [ 814.802820][T31764] syzkaller0: entered promiscuous mode [ 814.810489][T31764] syzkaller0: entered allmulticast mode [ 814.821751][T31763] tipc: Enabled bearer , priority 0 [ 814.881361][T31763] tipc: Resetting bearer [ 814.922096][T31763] tipc: Disabling bearer [ 815.049242][T31774] wg1 speed is unknown, defaulting to 1000 [ 815.057924][T31774] vxcan1 speed is unknown, defaulting to 1000 [ 815.118688][T31779] wg1 speed is unknown, defaulting to 1000 [ 815.480696][T31774] lo speed is unknown, defaulting to 1000 [ 815.481120][T31779] vxcan1 speed is unknown, defaulting to 1000 [ 815.773326][T31779] lo speed is unknown, defaulting to 1000 [ 815.816980][ T52] Bluetooth: hci5: command 0x0419 tx timeout [ 816.650493][T31822] wg1 speed is unknown, defaulting to 1000 [ 816.664661][T31822] vxcan1 speed is unknown, defaulting to 1000 [ 816.714145][T31826] netlink: 'syz.5.6583': attribute type 10 has an invalid length. [ 816.771194][T31826] geneve0: entered promiscuous mode [ 816.802546][T31826] team0: Failed to send options change via netlink (err -105) [ 816.814255][T31826] team0: Port device geneve0 added [ 817.042645][T31822] lo speed is unknown, defaulting to 1000 [ 817.328071][T31835] wg1 speed is unknown, defaulting to 1000 [ 817.335690][T31835] vxcan1 speed is unknown, defaulting to 1000 [ 817.525358][T31835] lo speed is unknown, defaulting to 1000 [ 818.238721][T31855] __nla_validate_parse: 10 callbacks suppressed [ 818.238742][T31855] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6590'. [ 818.384468][T31859] tipc: Enabling of bearer rejected, media not registered [ 818.453440][T31863] netlink: 'syz.5.6593': attribute type 1 has an invalid length. [ 818.482146][T31866] netlink: 'syz.0.6594': attribute type 1 has an invalid length. [ 818.493803][T31866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6594'. [ 818.503665][T31866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6594'. [ 818.872268][T31890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6601'. [ 819.085359][T31902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6603'. [ 819.252741][T31906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6605'. [ 819.292609][T31906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6605'. [ 819.452706][T22076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 819.464300][T22076] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 819.473371][T22076] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 819.481730][T22076] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 819.493101][T22076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 819.514054][T31913] wg1 speed is unknown, defaulting to 1000 [ 819.524050][T31913] vxcan1 speed is unknown, defaulting to 1000 [ 819.575248][T31910] wg1 speed is unknown, defaulting to 1000 [ 819.588025][T31918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6609'. [ 819.749858][T31922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6610'. [ 819.785255][T31913] lo speed is unknown, defaulting to 1000 [ 819.785278][T31910] vxcan1 speed is unknown, defaulting to 1000 [ 820.043638][T31910] lo speed is unknown, defaulting to 1000 [ 820.311814][T31910] chnl_net:caif_netlink_parms(): no params data found [ 820.721882][T31910] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.739514][T31910] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.756742][T31910] bridge_slave_0: entered allmulticast mode [ 820.769801][T31910] bridge_slave_0: entered promiscuous mode [ 820.800012][T31910] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.830552][T31910] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.850928][T31910] bridge_slave_1: entered allmulticast mode [ 820.909012][T31910] bridge_slave_1: entered promiscuous mode [ 821.024780][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 821.075935][T31939] netlink: 'syz.5.6612': attribute type 1 has an invalid length. [ 821.576019][T31914] Bluetooth: hci2: command tx timeout [ 821.854023][T31910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.902478][T31910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.029434][T31910] team0: Port device team_slave_0 added [ 822.055584][T31910] team0: Port device team_slave_1 added [ 822.077283][T31963] nbd: must specify a size in bytes for the device [ 822.152441][T31910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.191776][T31910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.219500][T31910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.294914][T31910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.302163][T31910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.332166][T31910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.431883][T31910] hsr_slave_0: entered promiscuous mode [ 822.440320][T31910] hsr_slave_1: entered promiscuous mode [ 822.448058][T31910] debugfs: 'hsr0' already exists in 'hsr' [ 822.454260][T31910] Cannot create hsr debugfs directory [ 822.673779][T31910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 822.685099][T31910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 822.698788][T31910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 822.709130][T31910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 822.792043][T31910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.818296][T31910] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.837427][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.844630][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.860796][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.868015][T10968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.042448][T31910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.234270][T31910] veth0_vlan: entered promiscuous mode [ 823.246042][T31910] veth1_vlan: entered promiscuous mode [ 823.276690][T31910] veth0_macvtap: entered promiscuous mode [ 823.286978][T31910] veth1_macvtap: entered promiscuous mode [ 823.305447][T31910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.322782][T31910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.338915][ T1322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.373728][ T1322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.399465][ T1322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.420460][ T1322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.505743][T32003] wg1 speed is unknown, defaulting to 1000 [ 823.570006][T32001] wg1 speed is unknown, defaulting to 1000 [ 823.578604][T32003] vxcan1 speed is unknown, defaulting to 1000 [ 823.666675][T31914] Bluetooth: hci2: command tx timeout [ 823.794896][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.828095][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.929942][T32001] vxcan1 speed is unknown, defaulting to 1000 [ 823.937858][T32003] lo speed is unknown, defaulting to 1000 [ 823.997189][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.005048][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.230696][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 824.242811][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 824.256707][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 824.304693][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 824.320402][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 824.504452][T32020] wg1 speed is unknown, defaulting to 1000 [ 824.517367][T32001] lo speed is unknown, defaulting to 1000 [ 824.605993][T32020] vxcan1 speed is unknown, defaulting to 1000 [ 824.723736][T32037] __nla_validate_parse: 3 callbacks suppressed [ 824.723757][T32037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6637'. [ 824.988587][T32020] lo speed is unknown, defaulting to 1000 [ 825.206204][T32045] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 825.259829][T32043] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.6640'. [ 825.473356][T32059] netlink: 'syz.0.6642': attribute type 1 has an invalid length. [ 825.617084][T32059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 825.724163][T32062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 825.732209][T32062] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 825.746425][ T52] Bluetooth: hci2: command tx timeout [ 825.748663][T32062] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 825.859075][T32063] veth3: entered promiscuous mode [ 825.870749][T32063] bond3: (slave veth3): Enslaving as an active interface with a down link [ 825.881088][T32020] chnl_net:caif_netlink_parms(): no params data found [ 826.178740][T32093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 826.186053][T32093] IPv6: NLM_F_CREATE should be set when creating new route [ 826.250613][T32020] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.256142][T32106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6652'. [ 826.267046][T32020] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.274478][T32020] bridge_slave_0: entered allmulticast mode [ 826.282789][T32020] bridge_slave_0: entered promiscuous mode [ 826.300485][T32020] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.319382][T32020] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.336472][T32020] bridge_slave_1: entered allmulticast mode [ 826.355363][T32020] bridge_slave_1: entered promiscuous mode [ 826.376456][ T52] Bluetooth: hci7: command tx timeout [ 826.398113][T32108] ip6gretap0: entered promiscuous mode [ 826.410538][T32108] macsec1: entered promiscuous mode [ 826.411422][T32106] netlink: 'syz.0.6652': attribute type 1 has an invalid length. [ 826.427163][T32108] ip6gretap0: left promiscuous mode [ 826.521131][T32020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.590435][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6654'. [ 826.616628][T32020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.633025][T32108] macvlan0: entered promiscuous mode [ 826.645699][T32108] batadv0: entered promiscuous mode [ 826.652034][T32108] debugfs: 'hsr1' already exists in 'hsr' [ 826.657957][T32108] Cannot create hsr debugfs directory [ 826.663807][T32108] hsr1: entered allmulticast mode [ 826.669132][T32108] macvlan0: entered allmulticast mode [ 826.674535][T32108] veth1_vlan: entered allmulticast mode [ 826.680228][T32108] batadv0: entered allmulticast mode [ 826.687555][T32108] macvlan0: left promiscuous mode [ 826.693665][T32108] batadv0: left promiscuous mode [ 826.763570][T32020] team0: Port device team_slave_0 added [ 826.773542][T32020] team0: Port device team_slave_1 added [ 826.859197][T32020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.866547][T32020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.893215][T32020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.921526][T32121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6655'. [ 826.935444][T32020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.956176][T32020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.992783][T32020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.104022][T32128] netlink: 'syz.6.6658': attribute type 276 has an invalid length. [ 827.122809][T32020] hsr_slave_0: entered promiscuous mode [ 827.131827][T32128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6658'. [ 827.141795][T32020] hsr_slave_1: entered promiscuous mode [ 827.148330][T32020] debugfs: 'hsr0' already exists in 'hsr' [ 827.154072][T32020] Cannot create hsr debugfs directory [ 827.221570][T32126] wg1 speed is unknown, defaulting to 1000 [ 827.273627][T32126] vxcan1 speed is unknown, defaulting to 1000 [ 827.428181][T32133] wg1 speed is unknown, defaulting to 1000 [ 827.628944][T32133] vxcan1 speed is unknown, defaulting to 1000 [ 827.647958][T32126] lo speed is unknown, defaulting to 1000 [ 827.819367][ T52] Bluetooth: hci2: command tx timeout [ 827.864268][T32133] lo speed is unknown, defaulting to 1000 [ 828.050823][T32020] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 828.170826][T32020] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 828.171232][T32151] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 828.194767][T32020] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 828.376865][T32151] bond4: ARP target 9.0.0.0 is already present [ 828.383213][T32151] bond4: option arp_ip_target: invalid value (9) [ 828.393403][T32151] bond4 (unregistering): Released all slaves [ 828.463768][ T52] Bluetooth: hci7: command tx timeout [ 828.500238][T32020] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 828.778873][T32020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.888301][T32173] Bluetooth: MGMT ver 1.23 [ 828.893083][T32020] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.915164][T32177] netlink: 'syz.5.6671': attribute type 1 has an invalid length. [ 828.953214][T32173] geneve2: entered promiscuous mode [ 828.970868][T32173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6669'. [ 829.019535][T32179] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 829.084123][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.091381][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.118978][ T5982] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 829.119773][T32177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 829.191149][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.198365][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.210632][T32183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6673'. [ 829.236065][ T36] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 829.274818][T32183] bond4: entered promiscuous mode [ 829.282297][T32183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 829.313135][T32177] veth11: entered promiscuous mode [ 829.324840][T32177] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 829.334110][T32190] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 829.401544][T32186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 829.412507][T32186] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 829.425316][T32186] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 829.609578][T32199] netlink: 'syz.5.6675': attribute type 13 has an invalid length. [ 829.636963][T32199] netlink: 'syz.5.6675': attribute type 17 has an invalid length. [ 829.789589][T32199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.819270][T32209] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6678'. [ 829.834404][T32209] 0ªX¹¦À: renamed from caif0 [ 829.841543][T32204] netlink: 'syz.0.6677': attribute type 1 has an invalid length. [ 829.859479][T32209] 0ªX¹¦À: entered allmulticast mode [ 829.873090][T32209] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 829.963202][T32208] bond5: (slave geneve2): making interface the new active one [ 829.972875][T32208] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 829.985570][T32216] veth0_to_bridge: entered promiscuous mode [ 830.020217][T32020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.086013][T32215] veth0_to_bridge: left promiscuous mode [ 830.185411][T32226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6680'. [ 830.307626][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6682'. [ 830.325960][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6682'. [ 830.468806][T32235] wg1 speed is unknown, defaulting to 1000 [ 830.480053][T32242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6686'. [ 830.501948][T32235] vxcan1 speed is unknown, defaulting to 1000 [ 830.536230][ T52] Bluetooth: hci7: command tx timeout [ 830.544424][T32020] veth0_vlan: entered promiscuous mode [ 830.568596][T32020] veth1_vlan: entered promiscuous mode [ 830.670721][T32020] veth0_macvtap: entered promiscuous mode [ 830.713209][T32020] veth1_macvtap: entered promiscuous mode [ 830.772866][T32249] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 830.780481][T32251] netlink: 'syz.6.6689': attribute type 1 has an invalid length. [ 830.799604][T32020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.839574][T32020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.858435][T32251] netlink: 'syz.6.6689': attribute type 7 has an invalid length. [ 830.877516][T32251] netlink: 'syz.6.6689': attribute type 8 has an invalid length. [ 830.885282][T32251] netlink: 'syz.6.6689': attribute type 13 has an invalid length. [ 830.979453][ T5982] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.996502][ T5982] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.021292][ T5982] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.065468][ T5982] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.077435][T32261] netlink: 'syz.6.6692': attribute type 2 has an invalid length. [ 831.085280][T32261] netlink: 51 bytes leftover after parsing attributes in process `syz.6.6692'. [ 831.200543][T32262] wg1 speed is unknown, defaulting to 1000 [ 831.284851][T32262] vxcan1 speed is unknown, defaulting to 1000 [ 831.293096][T32235] lo speed is unknown, defaulting to 1000 [ 831.309197][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.320814][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.443136][T10968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.451669][T10968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.652399][T32267] netlink: 'syz.5.6693': attribute type 6 has an invalid length. [ 831.726190][T32262] lo speed is unknown, defaulting to 1000 [ 832.626520][ T52] Bluetooth: hci7: command tx timeout [ 832.738089][T32290] wg1 speed is unknown, defaulting to 1000 [ 832.752262][T32290] vxcan1 speed is unknown, defaulting to 1000 [ 832.776637][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 832.837265][T32302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 832.846742][T32299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6702'. [ 832.857945][T32299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6702'. [ 832.869197][T32299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6702'. [ 833.230915][T32319] netlink: 'syz.3.6707': attribute type 1 has an invalid length. [ 833.239469][T32319] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6707'. [ 833.458043][T32316] team0 (unregistering): Port device team_slave_0 removed [ 833.472286][T32316] team0 (unregistering): Port device team_slave_1 removed [ 833.493154][T32316] team0 (unregistering): Port device dummy0 removed [ 833.530321][T32290] lo speed is unknown, defaulting to 1000 [ 834.366122][T32340] wg1 speed is unknown, defaulting to 1000 [ 834.451080][T32340] vxcan1 speed is unknown, defaulting to 1000 [ 834.510342][T32352] wg1 speed is unknown, defaulting to 1000 [ 834.920684][T32352] vxcan1 speed is unknown, defaulting to 1000 [ 834.939417][T32340] lo speed is unknown, defaulting to 1000 [ 835.108780][T32382] __nla_validate_parse: 1 callbacks suppressed [ 835.108799][T32382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6722'. [ 835.129411][T32381] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6724'. [ 835.156287][T32381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6724'. [ 835.165462][T32377] wg1 speed is unknown, defaulting to 1000 [ 835.516196][T32352] lo speed is unknown, defaulting to 1000 [ 835.516582][T32377] vxcan1 speed is unknown, defaulting to 1000 [ 835.723538][T32397] tipc: Enabling of bearer rejected, already enabled [ 835.754948][T32397] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6729'. [ 835.845450][T32403] vlan3: entered promiscuous mode [ 835.851306][T32403] hsr_slave_1: entered promiscuous mode [ 835.866530][T32403] vlan3: entered allmulticast mode [ 835.875907][T32403] hsr_slave_1: entered allmulticast mode [ 835.902735][T32403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6731'. [ 835.934757][T32405] netlink: 'syz.5.6732': attribute type 10 has an invalid length. [ 835.974074][T32405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6732'. [ 836.387496][T32377] lo speed is unknown, defaulting to 1000 [ 836.403189][T32405] veth0_vlan: entered allmulticast mode [ 836.437185][T32405] bridge0: port 4(veth0_vlan) entered blocking state [ 836.444407][T32405] bridge0: port 4(veth0_vlan) entered disabled state [ 836.481692][T32405] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 836.680324][T32416] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6734'. [ 836.703045][T32416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6734'. [ 836.811154][T32421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6735'. [ 836.829213][T32421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6735'. [ 837.296412][T32441] nbd5: detected capacity change from 0 to 127 [ 837.317006][ T52] block nbd5: Receive control failed (result -32) [ 837.364236][T32447] syz_tun: refused to change device tx_queue_len [ 837.390758][T32445] tipc: Enabled bearer , priority 0 [ 837.418565][T32445] syzkaller0: entered promiscuous mode [ 837.441311][T32445] syzkaller0: entered allmulticast mode [ 837.512201][T32445] tipc: Resetting bearer [ 837.540671][T32443] tipc: Resetting bearer [ 837.591090][T32443] tipc: Disabling bearer [ 837.890650][T32479] tipc: Enabled bearer , priority 0 [ 837.979821][T32479] tipc: Disabling bearer [ 838.110050][T32502] bridge2: entered allmulticast mode [ 838.167891][T32505] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 838.243518][T32507] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 838.435712][T32520] netlink: 'syz.0.6764': attribute type 1 has an invalid length. [ 838.473891][T32518] bond1: entered promiscuous mode [ 838.479503][T32518] bond1: entered allmulticast mode [ 838.485918][T32518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.498951][T32519] tipc: Enabling of bearer rejected, already enabled [ 838.669405][T32518] wg1 speed is unknown, defaulting to 1000 [ 838.677946][T32518] vxcan1 speed is unknown, defaulting to 1000 [ 839.030338][T32549] nbd: must specify a size in bytes for the device [ 839.204342][T32518] lo speed is unknown, defaulting to 1000 [ 839.303379][ T5948] IPVS: starting estimator thread 0... [ 839.419297][T32567] netlink: 'syz.0.6777': attribute type 1 has an invalid length. [ 839.436147][T32562] IPVS: using max 31 ests per chain, 74400 per kthread [ 839.511200][T32574] netlink: 'syz.6.6779': attribute type 1 has an invalid length. [ 839.575224][T32567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 839.618377][T32571] veth5: entered promiscuous mode [ 839.630040][T32571] bond6: (slave veth5): Enslaving as an active interface with a down link [ 839.665600][T32574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.712377][T32567] tipc: Enabled bearer , priority 0 [ 839.721058][T32567] syzkaller0: entered promiscuous mode [ 839.731672][T32567] syzkaller0: entered allmulticast mode [ 839.914069][T32589] netlink: 'syz.6.6782': attribute type 1 has an invalid length. [ 839.944248][T32589] netlink: 'syz.6.6782': attribute type 1 has an invalid length. [ 839.944413][T32565] tipc: Resetting bearer [ 840.030068][T32565] tipc: Disabling bearer [ 840.374360][T32612] Cannot find del_set index 4 as target [ 840.507349][T32622] netlink: 'syz.5.6792': attribute type 1 has an invalid length. [ 840.543590][T32622] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 840.612281][T32624] wg1 speed is unknown, defaulting to 1000 [ 840.707663][T32633] __nla_validate_parse: 22 callbacks suppressed [ 840.707687][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6795'. [ 840.733297][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6795'. [ 840.743654][T32633] netlink: 58 bytes leftover after parsing attributes in process `syz.6.6795'. [ 840.753261][T32624] vxcan1 speed is unknown, defaulting to 1000 [ 841.428878][T31914] Bluetooth: hci4: command 0x0405 tx timeout [ 843.314325][T32624] lo speed is unknown, defaulting to 1000 [ 843.593675][T32676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6808'. [ 843.622426][T32676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6808'. [ 843.632115][T32676] netlink: 58 bytes leftover after parsing attributes in process `syz.5.6808'. [ 843.778629][T32684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6807'. [ 844.591035][T32700] geneve3: entered promiscuous mode [ 844.614193][T32700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6813'. [ 844.855169][T32710] netlink: 'syz.5.6817': attribute type 1 has an invalid length. [ 844.872294][T32710] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6817'. [ 844.874786][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6815'. [ 844.994350][T32713] syz_tun: refused to change device tx_queue_len [ 845.044371][T32713] TCP: TCP_TX_DELAY enabled [ 845.541137][T32732] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.801007][T32732] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.916611][T32746] __nla_validate_parse: 6 callbacks suppressed [ 845.916630][T32746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6826'. [ 846.056420][T32732] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.204606][T32732] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.367239][T32759] wg1 speed is unknown, defaulting to 1000 [ 846.429002][ T30] audit: type=1800 audit(1760405935.748:16): pid=32760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6829" name="memory.events" dev="tmpfs" ino=1311 res=0 errno=0 [ 846.441143][T32759] vxcan1 speed is unknown, defaulting to 1000 [ 846.453279][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.473301][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.539343][ T5982] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.590454][ T5982] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.660112][ T307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 846.669644][ T307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 846.709915][ T307] netlink: 58 bytes leftover after parsing attributes in process `syz.0.6832'. [ 846.885625][ T302] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.066519][ T302] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.193461][ T309] wg1 speed is unknown, defaulting to 1000 [ 847.292682][ T302] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.345701][ T316] wg1 speed is unknown, defaulting to 1000 [ 847.352803][T32759] lo speed is unknown, defaulting to 1000 [ 847.374324][ T309] vxcan1 speed is unknown, defaulting to 1000 [ 847.429525][ T302] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.503331][ T327] tipc: Enabling of bearer rejected, failed to enable media [ 847.688425][ T310] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6833'. [ 847.702190][T10963] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.747238][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.840109][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.859100][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.880261][ T316] vxcan1 speed is unknown, defaulting to 1000 [ 848.181610][ T309] lo speed is unknown, defaulting to 1000 [ 848.213659][ T316] lo speed is unknown, defaulting to 1000 [ 848.693986][ T359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6844'. [ 849.143654][ T370] netlink: 'syz.3.6847': attribute type 3 has an invalid length. [ 849.203849][ T371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6848'. [ 849.218191][ T30] audit: type=1800 audit(1760405938.528:17): pid=363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6846" name="memory.events" dev="tmpfs" ino=137 res=0 errno=0 [ 849.635448][ T386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6853'. [ 849.686160][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.693908][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.828993][ T371] 0ªX¹¦À: left allmulticast mode [ 850.436574][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.493065][ T371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.936852][ T416] sctp: [Deprecated]: syz.5.6856 (pid 416) Use of int in maxseg socket option. [ 850.936852][ T416] Use struct sctp_assoc_value instead [ 851.119500][ T371] geneve2: left promiscuous mode [ 851.166474][ T50] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.206070][ T50] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.214487][ T50] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.243387][ T50] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.363040][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6859'. [ 851.372792][ T428] tipc: Started in network mode [ 851.379157][ T428] tipc: Node identity f6137902f66e, cluster identity 4711 [ 851.389452][ T428] tipc: Enabled bearer , priority 0 [ 851.397147][ T429] netlink: 'syz.7.6860': attribute type 15 has an invalid length. [ 851.426347][ T428] syzkaller0: entered promiscuous mode [ 851.431867][ T428] syzkaller0: entered allmulticast mode [ 851.644301][ T446] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6866'. [ 851.656278][ T428] tipc: Resetting bearer [ 851.715081][ T428] tipc: Disabling bearer [ 851.792651][ T452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6868'. [ 851.792761][ T453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6868'. [ 852.104936][ T467] netlink: 4252 bytes leftover after parsing attributes in process `syz.3.6870'. [ 852.260167][ T400] IPVS: starting estimator thread 0... [ 852.268207][ T473] macvlan1: entered promiscuous mode [ 852.274053][ T473] macvlan1: entered allmulticast mode [ 852.353153][ T476] gretap1: entered promiscuous mode [ 852.356038][ T475] IPVS: using max 29 ests per chain, 69600 per kthread [ 852.361514][ T476] gretap1: entered allmulticast mode [ 852.374536][ T478] veth1_vlan: entered allmulticast mode [ 852.387052][ T480] netlink: 'syz.5.6872': attribute type 23 has an invalid length. [ 852.394470][ T476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6874'. [ 852.433518][ T476] bridge3: entered promiscuous mode [ 852.439570][ T476] bridge3: entered allmulticast mode [ 852.506546][ T486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6877'. [ 852.507515][ T480] openvswitch: netlink: Missing key (keys=40, expected=100) [ 852.597100][ T488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6877'. [ 852.746765][ T499] netlink: 'syz.3.6880': attribute type 1 has an invalid length. [ 852.761036][ T499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.892100][ T507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6883'. [ 852.893335][ T503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6882'. [ 855.096945][ T529] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 855.209154][ T534] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.293809][ T537] wg1 speed is unknown, defaulting to 1000 [ 855.305727][ T534] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.321360][ T537] vxcan1 speed is unknown, defaulting to 1000 [ 855.370350][ T534] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.465478][ T534] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.620011][ T5982] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.651952][ T5982] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.684403][ T5982] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.721479][T10963] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.730547][ T537] lo speed is unknown, defaulting to 1000 [ 856.170219][ T565] syzkaller1: entered promiscuous mode [ 856.198841][ T565] syzkaller1: entered allmulticast mode [ 856.505297][ T589] __nla_validate_parse: 4 callbacks suppressed [ 856.505319][ T589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6906'. [ 856.540432][ T589] vlan2: entered promiscuous mode [ 856.545677][ T589] bond0: entered promiscuous mode [ 856.551211][ T589] bond_slave_0: entered promiscuous mode [ 856.569050][ T593] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6907'. [ 856.576426][ T589] bond_slave_1: entered promiscuous mode [ 856.681128][ T598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6908'. [ 856.699733][ T599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6908'. [ 856.774010][ T598] geneve2: entered promiscuous mode [ 856.779792][T31914] Bluetooth: hci6: command 0x0406 tx timeout [ 856.950933][ T617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6913'. [ 857.052560][ T619] x_tables: duplicate underflow at hook 1 [ 857.113352][ T619] x_tables: duplicate underflow at hook 1 [ 857.152420][ T626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6916'. [ 857.180283][ T622] wg1 speed is unknown, defaulting to 1000 [ 857.188869][ T622] vxcan1 speed is unknown, defaulting to 1000 [ 857.229181][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6917'. [ 857.266376][ T631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6917'. [ 857.276081][ T632] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6916'. [ 857.402214][ T636] x_tables: duplicate underflow at hook 2 [ 857.473970][ T638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6920'. [ 857.560708][ T642] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 857.586817][ T642] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 857.595437][ T642] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 857.681434][ T622] lo speed is unknown, defaulting to 1000 [ 858.339801][ T666] wg1 speed is unknown, defaulting to 1000 [ 858.347738][ T666] vxcan1 speed is unknown, defaulting to 1000 [ 858.423177][ T663] netlink: 'syz.7.6929': attribute type 12 has an invalid length. [ 858.604981][ T668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.636782][ T666] lo speed is unknown, defaulting to 1000 [ 858.747133][ T668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.832539][ T668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.991282][ T668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.040125][ T688] netlink: 'syz.7.6934': attribute type 25 has an invalid length. [ 859.098605][ T691] team0: Device vlan2 is already an upper device of the team interface [ 859.413703][ T5982] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.454532][T10963] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.481896][T10963] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.501390][T10963] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.616265][ T708] openvswitch: netlink: Message has 4352 unknown bytes. [ 859.730531][ T712] wg1 speed is unknown, defaulting to 1000 [ 859.763110][ T712] vxcan1 speed is unknown, defaulting to 1000 [ 859.827244][ T721] wg1 speed is unknown, defaulting to 1000 [ 859.869267][ T726] netlink: 'syz.7.6942': attribute type 12 has an invalid length. [ 860.060931][ T732] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.168769][ T732] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.324088][ T736] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.405478][ T732] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.489604][ T736] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.581528][ T732] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.628348][ T736] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.662404][ T739] bond2: (slave erspan0): Releasing active interface [ 860.669665][ T739] ip6gretap1: entered promiscuous mode [ 860.699768][ T739] bond0: (slave syz_tun): Releasing backup interface [ 860.707353][ T739] syz_tun: left promiscuous mode [ 860.723827][ T739] bond0: (slave 30): Releasing backup interface [ 860.731631][ T739] : left promiscuous mode [ 860.741850][ T739] bond0: (slave bond_slave_1): Releasing backup interface [ 860.758346][ T739] bond_slave_1: left promiscuous mode [ 860.784582][ T739] team0: Port device team_slave_1 removed [ 860.792305][ T739] batman_adv: batadv0: Interface deactivated: vcan0 [ 860.799822][ T739] batman_adv: batadv0: Removing interface: vcan0 [ 860.809109][ T739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.816674][ T739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.830423][ T739] bond1: (slave macvlan2): Releasing active interface [ 860.845320][ T739] bond2: (slave ip6gretap1): Releasing active interface [ 860.853492][ T739] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 42:d3:95:78:0b:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 860.873878][ T739] ip6gretap1: left promiscuous mode [ 860.884728][ T739] bond2: (slave veth5): Releasing active interface [ 860.896920][ T712] lo speed is unknown, defaulting to 1000 [ 860.896952][ T721] vxcan1 speed is unknown, defaulting to 1000 [ 860.923778][ T736] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.139171][T10963] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.163375][T10963] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.237963][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.261513][ T5988] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.271199][ T721] lo speed is unknown, defaulting to 1000 [ 863.075208][T10963] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.090747][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.105597][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.120623][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.496351][ T783] netlink: 'syz.5.6960': attribute type 1 has an invalid length. [ 880.588761][ T787] wg1 speed is unknown, defaulting to 1000 [ 880.592058][ T783] __nla_validate_parse: 11 callbacks suppressed [ 880.592079][ T783] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.6960'. [ 880.621971][ T787] vxcan1 speed is unknown, defaulting to 1000 [ 880.990898][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6970'. [ 881.036425][ T818] netlink: 'syz.5.6968': attribute type 13 has an invalid length. [ 881.054798][ T818] netlink: 'syz.5.6968': attribute type 17 has an invalid length. [ 881.146692][ T818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.236764][ T787] lo speed is unknown, defaulting to 1000 [ 881.262334][ T811] wg1 speed is unknown, defaulting to 1000 [ 881.289568][ T811] vxcan1 speed is unknown, defaulting to 1000 [ 881.312183][ T828] netlink: 'syz.7.6972': attribute type 1 has an invalid length. [ 881.320287][ T828] netlink: 'syz.7.6972': attribute type 2 has an invalid length. [ 881.362323][ T828] netlink: 'syz.7.6972': attribute type 33 has an invalid length. [ 881.367100][ T830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6973'. [ 881.386584][ T828] netlink: 'syz.7.6972': attribute type 17 has an invalid length. [ 881.413286][ T828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 881.691966][ T811] lo speed is unknown, defaulting to 1000 [ 881.698014][ T835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6975'. [ 881.754941][ T835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.910498][ T835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.265353][ T846] xt_hashlimit: invalid interval [ 882.439355][ T850] netlink: 'syz.3.6980': attribute type 21 has an invalid length. [ 882.629014][ T860] IPVS: Unknown mcast interface: briêŸØ‚V‰+že_0 [ 882.646619][ T860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6984'. [ 882.658874][ T863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6982'. [ 883.360330][ T881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6985'. [ 883.483427][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6989'. [ 883.496520][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6989'. [ 883.505618][ T883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6989'. [ 883.914220][ T898] netlink: 'syz.3.6992': attribute type 10 has an invalid length. [ 883.927109][ T898] bond0: (slave wlan1): refused to change device type [ 883.937028][ T896] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 883.948294][ T896] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 883.963957][ T896] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 884.289132][ T923] batman_adv: batadv0: Adding interface: macvtap1 [ 884.302860][ T923] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.331045][ T923] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 884.695312][ T943] wg1 speed is unknown, defaulting to 1000 [ 884.705277][ T943] vxcan1 speed is unknown, defaulting to 1000 [ 884.840496][ T943] lo speed is unknown, defaulting to 1000 [ 885.137092][ T968] wg1 speed is unknown, defaulting to 1000 [ 885.196563][ T972] tipc: Resetting bearer [ 885.204042][ T972] syzkaller0: left promiscuous mode [ 885.226591][ T968] vxcan1 speed is unknown, defaulting to 1000 [ 885.261698][ T969] wg1 speed is unknown, defaulting to 1000 [ 885.468526][ T969] vxcan1 speed is unknown, defaulting to 1000 [ 885.476943][ T968] lo speed is unknown, defaulting to 1000 [ 885.604916][ T974] __nla_validate_parse: 4 callbacks suppressed [ 885.604930][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7011'. [ 885.604936][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7010'. [ 885.631733][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7010'. [ 885.682953][ T974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7010'. [ 885.805432][ T969] lo speed is unknown, defaulting to 1000 [ 886.114665][ T1001] tipc: Enabled bearer , priority 0 [ 886.147079][ T1001] syzkaller0: entered promiscuous mode [ 886.159420][ T1001] syzkaller0: entered allmulticast mode [ 886.273029][ T1001] tipc: Resetting bearer [ 886.312204][ T5982] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 886.326242][ T1003] wg1 speed is unknown, defaulting to 1000 [ 886.340044][ T1000] tipc: Resetting bearer [ 886.399590][ T1000] tipc: Disabling bearer [ 886.421815][ T1007] wg1 speed is unknown, defaulting to 1000 [ 886.427972][ T1003] vxcan1 speed is unknown, defaulting to 1000 [ 886.685320][ T1022] syzkaller0: entered promiscuous mode [ 886.701015][ T1022] syzkaller0: entered allmulticast mode [ 886.805725][ T1007] vxcan1 speed is unknown, defaulting to 1000 [ 887.036492][ T1003] lo speed is unknown, defaulting to 1000 [ 887.322475][ T1007] lo speed is unknown, defaulting to 1000 [ 887.410706][ T1037] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 888.035882][ T1053] netlink: 'syz.0.7027': attribute type 16 has an invalid length. [ 888.043740][ T1053] netlink: 'syz.0.7027': attribute type 17 has an invalid length. [ 888.098054][ T1053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.146783][ T1059] netlink: 'syz.5.7029': attribute type 9 has an invalid length. [ 889.718175][ T1117] gtp0: entered promiscuous mode [ 889.718705][ T1114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7045'. [ 889.734355][ T1114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7045'. [ 889.902779][ T1124] netlink: 'syz.6.7049': attribute type 1 has an invalid length. [ 889.913442][ T1124] netlink: 600 bytes leftover after parsing attributes in process `syz.6.7049'. [ 889.927198][ T1124] netlink: 'syz.6.7049': attribute type 1 has an invalid length. [ 889.935242][ T1124] netlink: 600 bytes leftover after parsing attributes in process `syz.6.7049'. [ 890.490650][ T1153] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.7056'. [ 890.544087][ T1153] netlink: 'syz.3.7056': attribute type 10 has an invalid length. [ 890.601221][ T1153] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 890.671818][ T1160] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7058'. [ 890.681123][ T1160] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7058'. [ 890.765249][ T1166] netlink: 700 bytes leftover after parsing attributes in process `syz.0.7060'. [ 890.775256][ T1166] netlink: 700 bytes leftover after parsing attributes in process `syz.0.7060'. [ 890.787369][ T1166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7060'. [ 891.138460][ T1178] wg1 speed is unknown, defaulting to 1000 [ 891.142023][ T1175] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7061'. [ 891.154376][ T1178] vxcan1 speed is unknown, defaulting to 1000 [ 891.169148][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7061'. [ 891.348100][ T1178] lo speed is unknown, defaulting to 1000 [ 891.592216][ T1194] sctp: [Deprecated]: syz.5.7065 (pid 1194) Use of int in maxseg socket option. [ 891.592216][ T1194] Use struct sctp_assoc_value instead [ 891.678842][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7065'. [ 891.762522][ T1200] batman_adv: batadv0: Adding interface: macvtap0 [ 891.769537][ T1200] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.796407][ T1200] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 891.810564][ T1191] wg1 speed is unknown, defaulting to 1000 [ 891.819877][ T1191] vxcan1 speed is unknown, defaulting to 1000 [ 891.895752][ T1207] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7070'. [ 891.908030][ T1207] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7070'. [ 892.108132][ T1191] lo speed is unknown, defaulting to 1000 [ 892.590772][ T1226] netlink: 'syz.0.7076': attribute type 13 has an invalid length. [ 892.611750][ T1226] netlink: 'syz.0.7076': attribute type 17 has an invalid length. [ 892.767855][ T1230] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 892.775642][ T1230] netlink: 'syz.5.7077': attribute type 5 has an invalid length. [ 892.824607][ T1226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 892.865280][ T1230] ip6erspan0: entered promiscuous mode [ 892.885350][ T1227] wg1 speed is unknown, defaulting to 1000 [ 892.893940][ T1227] vxcan1 speed is unknown, defaulting to 1000 [ 893.172792][ T1227] lo speed is unknown, defaulting to 1000 [ 893.181815][ T1244] netlink: 'syz.6.7081': attribute type 1 has an invalid length. [ 893.198166][ T1244] netlink: 'syz.6.7081': attribute type 4 has an invalid length. [ 893.229190][ T1244] NCSI netlink: No device for ifindex 3321692160 [ 893.863572][ T1267] netlink: 'syz.3.7084': attribute type 1 has an invalid length. [ 894.172551][ T1281] netlink: 'syz.0.7095': attribute type 1 has an invalid length. [ 894.226700][ T1283] netlink: 'syz.5.7096': attribute type 1 has an invalid length. [ 894.260010][ T1280] openvswitch: netlink: Message has 512 unknown bytes. [ 894.371725][ T1290] netlink: 'syz.0.7098': attribute type 25 has an invalid length. [ 894.406474][ T1290] netlink: 'syz.0.7098': attribute type 1 has an invalid length. [ 894.414433][ T1290] bridge0: port 1(bridge_slave_0) entered learning state [ 894.754338][ T1308] wg1 speed is unknown, defaulting to 1000 [ 894.789819][ T1308] vxcan1 speed is unknown, defaulting to 1000 [ 895.150266][ T1339] IPv6: Can't replace route, no match found [ 895.184104][ T1308] lo speed is unknown, defaulting to 1000 [ 895.753788][ T1365] __nla_validate_parse: 52 callbacks suppressed [ 895.753810][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7119'. [ 895.770894][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7119'. [ 896.110604][ T1389] wg1 speed is unknown, defaulting to 1000 [ 896.141869][ T1395] : renamed from bond_slave_0 (while UP) [ 896.161292][ T1389] vxcan1 speed is unknown, defaulting to 1000 [ 896.181157][ T1395] wg1 speed is unknown, defaulting to 1000 [ 896.320355][ T1403] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7128'. [ 896.381995][ T1403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7128'. [ 896.428919][ T1395] vxcan1 speed is unknown, defaulting to 1000 [ 896.436100][ T1389] lo speed is unknown, defaulting to 1000 [ 896.680620][ T1413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7131'. [ 896.703971][ T1413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7131'. [ 896.904995][T31914] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 896.916697][T31914] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 896.920878][ T1395] lo speed is unknown, defaulting to 1000 [ 896.936777][T31914] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 896.949476][T31914] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 896.962357][T31914] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 897.094238][ T1422] wg1 speed is unknown, defaulting to 1000 [ 897.116593][ T1422] vxcan1 speed is unknown, defaulting to 1000 [ 897.269511][T13242] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 897.287836][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7139'. [ 897.297141][T13242] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 897.418014][T13242] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 897.438971][ T1437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7139'. [ 897.555719][ T1422] lo speed is unknown, defaulting to 1000 [ 898.029651][ T1449] syzkaller0: entered promiscuous mode [ 898.035284][ T1449] syzkaller0: entered allmulticast mode [ 898.403504][ T1422] chnl_net:caif_netlink_parms(): no params data found [ 898.499554][ T1471] wg1 speed is unknown, defaulting to 1000 [ 898.507980][ T1471] vxcan1 speed is unknown, defaulting to 1000 [ 898.797475][ T1486] syzkaller0: entered promiscuous mode [ 898.802932][ T1491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7152'. [ 898.804561][ T1486] syzkaller0: entered allmulticast mode [ 898.833469][ T1471] lo speed is unknown, defaulting to 1000 [ 898.838599][ T1491] netlink: 10084 bytes leftover after parsing attributes in process `syz.6.7152'. [ 898.848720][ T1491] openvswitch: netlink: Message has 4352 unknown bytes. [ 898.968660][ T1422] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.976510][ T1422] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.996470][ T1422] bridge_slave_0: entered allmulticast mode [ 899.008513][ T1422] bridge_slave_0: entered promiscuous mode [ 899.019060][ T52] Bluetooth: hci8: command tx timeout [ 899.079106][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.091238][ T1422] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.103722][ T1422] bridge_slave_1: entered allmulticast mode [ 899.139696][ T1422] bridge_slave_1: entered promiscuous mode [ 899.300981][ T1422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.319622][ T1422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.708767][ T1422] team0: Port device team_slave_0 added [ 899.756135][ T1422] team0: Port device team_slave_1 added [ 899.786279][ T1519] wg1 speed is unknown, defaulting to 1000 [ 899.793965][ T1519] vxcan1 speed is unknown, defaulting to 1000 [ 899.968747][ T1422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.036753][ T1422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.105956][ T1422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.224358][ T1519] lo speed is unknown, defaulting to 1000 [ 900.225262][ T1422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.251077][ T1422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.278628][ T1422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.607945][ T1422] hsr_slave_0: entered promiscuous mode [ 900.626589][ T1422] hsr_slave_1: entered promiscuous mode [ 900.644279][ T1422] debugfs: 'hsr0' already exists in 'hsr' [ 900.650466][ T1422] Cannot create hsr debugfs directory [ 901.096013][ T52] Bluetooth: hci8: command tx timeout [ 901.177955][ T1422] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 901.202788][ T1422] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 901.231964][ T1422] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 901.289961][ T1422] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 901.371760][ T1546] __nla_validate_parse: 6 callbacks suppressed [ 901.371780][ T1546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7170'. [ 901.406029][ T1546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7170'. [ 901.441191][ T1546] netlink: 58 bytes leftover after parsing attributes in process `syz.0.7170'. [ 901.441275][ T1548] IPVS: Scheduler module ip_vs_ not found [ 901.479533][ T1563] bond0: (slave gretap0): Error: Device type is different from other slaves [ 901.717213][ T1422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.783027][ T1422] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.804250][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.811537][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.849956][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.857181][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.992703][ T1582] bond3: entered promiscuous mode [ 901.999118][ T1582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.000514][ T1584] netlink: 'syz.3.7175': attribute type 7 has an invalid length. [ 902.061845][ T1586] netlink: 'syz.0.7176': attribute type 4 has an invalid length. [ 902.123830][ T1590] tipc: Enabling of bearer rejected, already enabled [ 902.133906][ T1590] syzkaller0: entered promiscuous mode [ 902.141103][ T1590] tipc: Resetting bearer [ 902.157414][ T1590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 902.271483][ T1597] wg1 speed is unknown, defaulting to 1000 [ 902.290484][ T1597] vxcan1 speed is unknown, defaulting to 1000 [ 902.314030][ T1603] netlink: 'syz.3.7175': attribute type 10 has an invalid length. [ 902.341535][ T1603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7175'. [ 902.362013][ T1603] dummy0: entered promiscuous mode [ 902.387092][ T1603] bond0: (slave dummy0): Releasing backup interface [ 902.460126][ T1603] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 902.528987][ T1422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.734573][ T1597] lo speed is unknown, defaulting to 1000 [ 903.019134][ T1422] veth0_vlan: entered promiscuous mode [ 903.059520][ T1422] veth1_vlan: entered promiscuous mode [ 903.176019][ T52] Bluetooth: hci8: command tx timeout [ 903.213124][ T1422] veth0_macvtap: entered promiscuous mode [ 903.263157][ T1422] veth1_macvtap: entered promiscuous mode [ 903.366757][ T1422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.402549][ T1422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.460707][ T5982] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.498576][ T5988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.515311][ T5988] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.528762][ T5988] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.686802][ T1643] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7189'. [ 903.800766][T10963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.850931][T10963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.891145][T10963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.917792][T10963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.949393][ T1658] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7193'. [ 903.995168][ T1658] netlink: 'syz.3.7193': attribute type 3 has an invalid length. [ 904.010706][ T1658] dvmrp0: left allmulticast mode [ 904.067963][ T1663] erspan0: left allmulticast mode [ 904.081269][ T1663] dummy0: left promiscuous mode [ 904.093023][ T1663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 904.113993][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7194'. [ 904.142437][ T1661] netlink: 'syz.6.7194': attribute type 5 has an invalid length. [ 904.147109][ T1664] batman_adv: batadv0: Adding interface: macvtap1 [ 904.150841][ T1661] netlink: 'syz.6.7194': attribute type 8 has an invalid length. [ 904.157028][ T1664] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.166798][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7194'. [ 904.191351][ T1664] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 904.218657][ T1661] geneve4: entered promiscuous mode [ 904.223888][ T1661] geneve4: entered allmulticast mode [ 904.246553][ T50] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 904.254854][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 904.277733][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 904.293860][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 904.356889][ T1668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7195'. [ 904.411650][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7195'. [ 904.518262][ T1668] wg1 speed is unknown, defaulting to 1000 [ 904.536362][ T1675] syzkaller1: entered promiscuous mode [ 904.546059][ T1675] syzkaller1: entered allmulticast mode [ 904.564306][ T1668] vxcan1 speed is unknown, defaulting to 1000 [ 904.840123][ T1668] lo speed is unknown, defaulting to 1000 [ 904.908755][ T1682] wg1 speed is unknown, defaulting to 1000 [ 904.967372][ T1684] wg1 speed is unknown, defaulting to 1000 [ 905.004362][ T1687] bridge0: entered promiscuous mode [ 905.014177][ T1687] macsec2: entered promiscuous mode [ 905.037783][ T1687] bridge0: left promiscuous mode [ 905.074859][ T1682] vxcan1 speed is unknown, defaulting to 1000 [ 905.266929][ T52] Bluetooth: hci8: command tx timeout [ 905.406018][ T1682] lo speed is unknown, defaulting to 1000 [ 905.407524][ T1684] vxcan1 speed is unknown, defaulting to 1000 [ 905.493381][ T1698] wg1 speed is unknown, defaulting to 1000 [ 905.532581][ T1701] wg1 speed is unknown, defaulting to 1000 [ 905.822583][ T1698] vxcan1 speed is unknown, defaulting to 1000 [ 905.918259][ T1725] ip6gre1: entered promiscuous mode [ 906.062241][ T1684] lo speed is unknown, defaulting to 1000 [ 906.069175][ T1701] vxcan1 speed is unknown, defaulting to 1000 [ 906.159997][ T1698] lo speed is unknown, defaulting to 1000 [ 906.484697][ T1744] __nla_validate_parse: 3 callbacks suppressed [ 906.484715][ T1744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7216'. [ 906.538002][ T1742] syzkaller0: entered promiscuous mode [ 906.548078][ T1742] syzkaller0: entered allmulticast mode [ 906.617748][ T1747] netlink: 'syz.6.7218': attribute type 1 has an invalid length. [ 906.624887][ T1742] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7217'. [ 906.634899][ T1747] netlink: 172 bytes leftover after parsing attributes in process `syz.6.7218'. [ 906.652349][ T1747] netlink: 'syz.6.7218': attribute type 1 has an invalid length. [ 906.894148][ T1701] lo speed is unknown, defaulting to 1000 [ 907.173101][ T1765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7223'. [ 907.186079][ T1765] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 907.445311][ T1778] netlink: 'syz.0.7226': attribute type 1 has an invalid length. [ 907.470941][ T1779] netlink: 'syz.5.7228': attribute type 4 has an invalid length. [ 907.485001][ T1778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7226'. [ 907.517414][ T1773] netlink: 'syz.0.7226': attribute type 1 has an invalid length. [ 907.567998][ T1776] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7226'. [ 907.596238][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7226'. [ 907.613335][ T1773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7226'. [ 907.868757][ T1782] wg1 speed is unknown, defaulting to 1000 [ 907.902266][ T1782] vxcan1 speed is unknown, defaulting to 1000 [ 907.957413][ T1783] wg1 speed is unknown, defaulting to 1000 [ 908.052339][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7231'. [ 908.200645][ T1793] bond1: option downdelay: invalid value (18446744073709551615) [ 908.237934][ T1800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.243873][ T1793] bond1: option downdelay: allowed values 0 - 2147483647 [ 908.258108][ T1793] bond1 (unregistering): Released all slaves [ 908.300278][ T1782] lo speed is unknown, defaulting to 1000 [ 908.328789][ T1783] vxcan1 speed is unknown, defaulting to 1000 [ 908.522689][ T1808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7236'. [ 908.539475][ T1802] syz_tun: entered allmulticast mode [ 908.561929][ T1802] netlink: 'syz.6.7234': attribute type 9 has an invalid length. [ 908.817248][ T1801] syz_tun: left allmulticast mode [ 908.878626][ T1783] lo speed is unknown, defaulting to 1000 [ 909.563863][ T1834] wg1 speed is unknown, defaulting to 1000 [ 909.621871][ T1846] tc_dump_action: action bad kind [ 909.651894][ T1834] vxcan1 speed is unknown, defaulting to 1000 [ 909.825327][ T1853] vxcan0: entered allmulticast mode [ 910.159464][ T1841] wg1 speed is unknown, defaulting to 1000 [ 910.182581][ T1834] lo speed is unknown, defaulting to 1000 [ 910.195690][ T1841] vxcan1 speed is unknown, defaulting to 1000 [ 910.195956][ T1838] wg1 speed is unknown, defaulting to 1000 [ 910.603557][ T1860] x_tables: ip_tables: osf match: only valid for protocol 6 [ 910.809116][ T1864] netlink: 'syz.5.7252': attribute type 13 has an invalid length. [ 910.832444][ T1863] netlink: 'syz.5.7252': attribute type 13 has an invalid length. [ 911.028404][ T1864] tipc: Resetting bearer [ 911.046244][ T1322] bond5: (slave ip6gretap1): link status up again after 0 ms [ 911.066756][ T1322] bond5: (slave ip6gretap1): link status up again after 0 ms [ 911.080527][ T1863] tipc: Resetting bearer [ 911.086627][ T1322] bond5: (slave ip6gretap1): link status up again after 0 ms [ 911.103406][ T1838] vxcan1 speed is unknown, defaulting to 1000 [ 911.109759][ T1841] lo speed is unknown, defaulting to 1000 [ 911.120187][T10963] bond5: (slave ip6gretap1): link status up again after 0 ms [ 911.146235][T10963] bond5: (slave ip6gretap1): link status up again after 0 ms [ 911.153675][T10963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.267607][ T1322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.406575][ T1322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.516021][ T5988] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.523625][ T1838] lo speed is unknown, defaulting to 1000 [ 912.011383][ T1322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 912.642735][ T1914] dummy0: Caught tx_queue_len zero misconfig [ 912.727655][ T1916] batman_adv: batadv0: Adding interface: macvtap1 [ 912.746133][ T1916] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.781225][ T1916] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 912.992136][ T1921] wg1 speed is unknown, defaulting to 1000 [ 913.049555][ T1921] vxcan1 speed is unknown, defaulting to 1000 [ 913.057401][ T1930] netlink: 'syz.5.7268': attribute type 13 has an invalid length. [ 913.076572][ T1930] netlink: 'syz.5.7268': attribute type 17 has an invalid length. [ 913.098257][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 913.288616][ T1929] netlink: 'syz.0.7266': attribute type 1 has an invalid length. [ 913.311951][ T1929] __nla_validate_parse: 3 callbacks suppressed [ 913.311971][ T1929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7266'. [ 913.348823][ T1911] wg1 speed is unknown, defaulting to 1000 [ 913.511956][ T1911] vxcan1 speed is unknown, defaulting to 1000 [ 913.512016][ T1921] lo speed is unknown, defaulting to 1000 [ 913.783227][ T1949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7272'. [ 913.793390][ T1949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7272'. [ 913.802542][ T1949] netlink: 58 bytes leftover after parsing attributes in process `syz.0.7272'. [ 913.965629][ T1911] lo speed is unknown, defaulting to 1000 [ 913.988130][ T1953] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7274'. [ 914.143518][ T1955] wg1 speed is unknown, defaulting to 1000 [ 914.277090][ T1955] vxcan1 speed is unknown, defaulting to 1000 [ 914.290839][ T1958] wg1 speed is unknown, defaulting to 1000 [ 914.897510][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7277'. [ 914.911159][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7277'. [ 914.940865][ T1968] netlink: 58 bytes leftover after parsing attributes in process `syz.8.7277'. [ 915.009939][ T1974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7278'. [ 915.028892][ T1974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7278'. [ 915.162287][ T1976] Unsupported ieee802154 address type: 0 [ 915.232403][ T1958] vxcan1 speed is unknown, defaulting to 1000 [ 915.600928][ T1958] lo speed is unknown, defaulting to 1000 [ 915.625307][ T1955] lo speed is unknown, defaulting to 1000 [ 915.975321][ T2005] wg1 speed is unknown, defaulting to 1000 [ 916.033690][ T2005] vxcan1 speed is unknown, defaulting to 1000 [ 916.105979][T10961] net_ratelimit: 24 callbacks suppressed [ 916.106001][T10961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.259457][T10961] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.392017][ T2010] batman_adv: batadv0: Adding interface: macvtap1 [ 916.401008][ T2010] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.428587][ T2010] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 916.445969][T10963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.555992][T10963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.641273][ T2005] lo speed is unknown, defaulting to 1000 [ 916.726161][T10963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.866692][T10963] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 916.978407][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 917.161387][ T2039] netlink: 'syz.5.7294': attribute type 4 has an invalid length. [ 917.474591][ T2035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.491751][ T2035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.504595][ T2043] IPVS: ip_vs_add_dest(): server weight less than zero [ 917.560829][ T2035] veth1_vlan: left allmulticast mode [ 917.606954][ T2035] tipc: Resetting bearer [ 917.635232][ T2035] mac80211_hwsim hwsim74 wlan0: left allmulticast mode [ 917.646289][ T2035] mac80211_hwsim hwsim74 wlan0: left promiscuous mode [ 917.719387][ T2039] .`: renamed from bond0 [ 917.775178][T10961] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.812105][T10961] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.847618][T10961] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.856311][T10961] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.868168][ T2045] wg1 speed is unknown, defaulting to 1000 [ 917.876724][ T2045] vxcan1 speed is unknown, defaulting to 1000 [ 918.319085][ T2045] lo speed is unknown, defaulting to 1000 [ 918.415666][ T2070] nbd: must specify at least one socket [ 918.456898][ T2073] siw: device registration error -23 [ 918.492490][ T2065] __nla_validate_parse: 5 callbacks suppressed [ 918.492513][ T2065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7302'. [ 918.940029][ T2085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7307'. [ 919.052682][ T2092] netlink: 'syz.6.7309': attribute type 1 has an invalid length. [ 919.062506][ T2092] netlink: 'syz.6.7309': attribute type 1 has an invalid length. [ 919.183557][ T2095] wg1 speed is unknown, defaulting to 1000 [ 919.199300][ T2095] vxcan1 speed is unknown, defaulting to 1000 [ 919.318381][ T2100] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 919.372822][ T2109] batman_adv: batadv0: Adding interface: macvtap1 [ 919.379533][ T2109] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.407259][ T2109] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 919.469988][ T2111] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7314'. [ 919.539621][ T2113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7315'. [ 919.595186][ T2095] lo speed is unknown, defaulting to 1000 [ 919.822297][ T2126] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7320'. [ 920.079435][ T2135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7322'. [ 920.094697][ T2135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7322'. [ 920.134376][ T2138] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003 [ 920.282176][ T2142] wg1 speed is unknown, defaulting to 1000 [ 920.291860][ T2142] vxcan1 speed is unknown, defaulting to 1000 [ 920.356707][ T2143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7325'. [ 920.399530][ T2149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7325'. [ 920.741330][ T2175] netlink: 'syz.8.7334': attribute type 1 has an invalid length. [ 920.813306][ T2181] netlink: 'syz.5.7336': attribute type 1 has an invalid length. [ 920.875458][ T2142] lo speed is unknown, defaulting to 1000 [ 920.949976][ T2188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7337'. [ 921.021773][ T2190] netlink: 'syz.5.7339': attribute type 13 has an invalid length. [ 921.031105][ T2190] netlink: 'syz.5.7339': attribute type 17 has an invalid length. [ 921.072813][ T2190] 8021q: adding VLAN 0 to HW filter on device .` [ 921.084114][ T2190] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.102869][ T2190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.282249][ T30] audit: type=1107 audit(1760406010.608:18): pid=2198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 921.380919][ T2204] veth1_macvtap: left promiscuous mode [ 921.578137][ T2204] macsec0: entered allmulticast mode [ 921.808569][ T2204] veth1_macvtap: entered promiscuous mode [ 921.814609][ T2204] veth1_macvtap: entered allmulticast mode [ 921.848227][ T2204] macsec0: left allmulticast mode [ 921.861201][ T2204] veth1_macvtap: left allmulticast mode [ 922.199349][ T2226] wg1 speed is unknown, defaulting to 1000 [ 922.244402][ T2226] vxcan1 speed is unknown, defaulting to 1000 [ 922.420770][ T2245] batman_adv: batadv0: Adding interface: macvtap2 [ 922.442729][ T2245] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.486341][ T2245] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 922.548158][ T2249] bridge4: entered allmulticast mode [ 922.594830][ T2251] gretap0: entered promiscuous mode [ 922.808617][ T2226] lo speed is unknown, defaulting to 1000 [ 922.830093][ T2259] syzkaller0: Caught tx_queue_len zero misconfig [ 922.862417][ T2259] tipc: Enabling of bearer rejected, already enabled [ 922.877586][ T2259] netem: change failed [ 923.034416][ T2271] batadv1: entered promiscuous mode [ 923.040709][ T2271] batadv1: entered allmulticast mode [ 924.012872][ T2298] __nla_validate_parse: 6 callbacks suppressed [ 924.012892][ T2298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7367'. [ 924.018590][ T2296] netlink: 248 bytes leftover after parsing attributes in process `syz.6.7366'. [ 924.092003][ T2300] syz_tun: entered allmulticast mode [ 924.170167][ T2300] syz_tun: left allmulticast mode [ 924.253043][ T2304] Unsupported ieee802154 address type: 0 [ 924.358087][ T2304] wg1 speed is unknown, defaulting to 1000 [ 924.370186][ T2304] vxcan1 speed is unknown, defaulting to 1000 [ 924.677238][ T2333] netlink: 'syz.0.7375': attribute type 1 has an invalid length. [ 924.695207][ T2333] netlink: 'syz.0.7375': attribute type 4 has an invalid length. [ 924.714118][ T2333] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7375'. [ 924.736685][ T2333] netlink: 'syz.0.7375': attribute type 1 has an invalid length. [ 924.754742][ T2333] netlink: 'syz.0.7375': attribute type 4 has an invalid length. [ 924.770231][ T2333] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7375'. [ 924.808557][ T2304] lo speed is unknown, defaulting to 1000 [ 941.736821][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 943.816643][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 944.714730][ T2344] dummy0: entered promiscuous mode [ 944.720811][ T2344] macvtap2: entered allmulticast mode [ 944.728623][ T2344] dummy0: entered allmulticast mode [ 944.747194][ T2344] dummy0: left allmulticast mode [ 944.758896][ T2344] dummy0: left promiscuous mode [ 944.984598][ T2367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7384'. [ 945.022469][ T2370] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7385'. [ 945.193905][ T2371] veth3: entered promiscuous mode [ 945.281160][ T2390] veth3: entered promiscuous mode [ 945.451258][ T2418] netlink: 700 bytes leftover after parsing attributes in process `syz.6.7395'. [ 945.464779][ T2421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7393'. [ 945.480793][ T2423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7394'. [ 945.519880][ T2421] netlink: 'syz.5.7393': attribute type 1 has an invalid length. [ 945.532937][ T2418] netlink: 700 bytes leftover after parsing attributes in process `syz.6.7395'. [ 945.592553][ T2434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7393'. [ 945.593793][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.609772][ T2434] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 945.644644][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.659439][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.674791][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.694859][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.709759][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.723991][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.785643][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.819829][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 945.844408][ T2420] xt_TCPMSS: Only works on TCP SYN packets [ 946.049049][ T2456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7403'. [ 946.318929][ T2470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7405'. [ 946.682751][ T2498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7414'. [ 946.954094][ T2512] Unsupported ieee802154 address type: 0 [ 947.396995][ T2527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.857483][ T2558] netlink: 'syz.3.7427': attribute type 2 has an invalid length. [ 947.884543][ T2558] netlink: 'syz.3.7427': attribute type 1 has an invalid length. [ 948.813867][ T2628] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 948.849150][ T2628] bond1: (slave macvlan5): Enslaving as an active interface with a down link [ 948.901018][ T2633] tipc: Started in network mode [ 948.910494][ T2633] tipc: Node identity fa56ba64096c, cluster identity 4711 [ 948.918297][ T2633] tipc: Enabled bearer , priority 0 [ 948.936260][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 949.041013][ T2633] syzkaller0: entered promiscuous mode [ 949.048196][ T2633] syzkaller0: entered allmulticast mode [ 949.062576][ T2633] tipc: Resetting bearer [ 949.131699][ T2632] tipc: Resetting bearer [ 949.467583][ T2663] netlink: 'syz.3.7457': attribute type 1 has an invalid length. [ 950.017672][ T396] tipc: Node number set to 4080712292 [ 951.812213][ T2632] tipc: Disabling bearer [ 951.846335][ T2671] veth15: entered promiscuous mode [ 951.909218][ T2687] wg1 speed is unknown, defaulting to 1000 [ 951.936066][ T2687] vxcan1 speed is unknown, defaulting to 1000 [ 952.042143][ T2694] wg1 speed is unknown, defaulting to 1000 [ 952.105042][ T2705] bpq0: entered promiscuous mode [ 952.122203][ T2705] __nla_validate_parse: 5 callbacks suppressed [ 952.122222][ T2705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7465'. [ 952.140674][ T2705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7465'. [ 952.230051][ T2708] netlink: 'syz.6.7466': attribute type 2 has an invalid length. [ 952.266171][ T2708] netlink: 'syz.6.7466': attribute type 9 has an invalid length. [ 952.273950][ T2708] netlink: 184 bytes leftover after parsing attributes in process `syz.6.7466'. [ 952.399488][ T2687] lo speed is unknown, defaulting to 1000 [ 952.406958][ T2694] vxcan1 speed is unknown, defaulting to 1000 [ 952.558800][ T2708] wg1 speed is unknown, defaulting to 1000 [ 952.642464][ T2721] wg1 speed is unknown, defaulting to 1000 [ 952.663653][ T2724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7470'. [ 952.782380][ T2725] wg1 speed is unknown, defaulting to 1000 [ 952.962019][ T2694] lo speed is unknown, defaulting to 1000 [ 952.969088][ T2708] vxcan1 speed is unknown, defaulting to 1000 [ 953.100189][ T2736] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 953.489725][ T2721] vxcan1 speed is unknown, defaulting to 1000 [ 953.650347][ T2756] syzkaller0: entered promiscuous mode [ 953.656419][ T2756] syzkaller0: entered allmulticast mode [ 953.933070][ T2767] netlink: 'syz.8.7478': attribute type 83 has an invalid length. [ 953.969135][ T2725] vxcan1 speed is unknown, defaulting to 1000 [ 954.143298][ T2772] nbd: must specify at least one socket [ 954.152349][ T2767] wg1 speed is unknown, defaulting to 1000 [ 954.159365][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7480'. [ 954.176821][ T2721] lo speed is unknown, defaulting to 1000 [ 954.188694][ T2708] lo speed is unknown, defaulting to 1000 [ 954.242149][ T2767] vxcan1 speed is unknown, defaulting to 1000 [ 954.291507][ T2725] lo speed is unknown, defaulting to 1000 [ 954.546909][ T2775] syzkaller0: entered promiscuous mode [ 954.552458][ T2775] syzkaller0: entered allmulticast mode [ 954.730948][ T2767] lo speed is unknown, defaulting to 1000 [ 956.931624][ T2778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.938958][ T2778] IPv6: NLM_F_CREATE should be set when creating new route [ 956.946249][ T2778] IPv6: NLM_F_CREATE should be set when creating new route [ 957.079028][ T2781] sctp: [Deprecated]: syz.5.7483 (pid 2781) Use of int in max_burst socket option deprecated. [ 957.079028][ T2781] Use struct sctp_assoc_value instead [ 957.561718][ T2805] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 958.013883][ T2825] wg1 speed is unknown, defaulting to 1000 [ 958.033488][ T2825] vxcan1 speed is unknown, defaulting to 1000 [ 958.105132][ T2830] netlink: 'syz.8.7494': attribute type 5 has an invalid length. [ 958.144956][ T2830] ip6erspan0: entered promiscuous mode [ 958.672041][ T2833] wg1 speed is unknown, defaulting to 1000 [ 958.744364][ T2854] syz.6.7497 (2854) used obsolete PPPIOCDETACH ioctl [ 958.796894][ T2833] vxcan1 speed is unknown, defaulting to 1000 [ 958.807569][ T2825] lo speed is unknown, defaulting to 1000 [ 959.220667][ T2863] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7498'. [ 959.569723][ T2833] lo speed is unknown, defaulting to 1000 [ 959.639375][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7502'. [ 959.995951][ T2833] tipc: can't start tipc send workqueue [ 960.171273][ T2897] tipc: Enabling of bearer rejected, already enabled [ 960.282011][ T2897] wg1 speed is unknown, defaulting to 1000 [ 960.311803][ T2897] vxcan1 speed is unknown, defaulting to 1000 [ 960.443417][ T2902] netlink: 'syz.8.7508': attribute type 1 has an invalid length. [ 960.472658][ T2902] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7508'. [ 961.032923][ T2897] lo speed is unknown, defaulting to 1000 [ 961.039244][ T2911] vcan0: left promiscuous mode [ 961.047314][ T2911] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 961.441828][ T2932] wg1 speed is unknown, defaulting to 1000 [ 961.479020][ T2932] vxcan1 speed is unknown, defaulting to 1000 [ 961.614043][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7517'. [ 961.757241][ T2932] lo speed is unknown, defaulting to 1000 [ 961.764131][ T2940] wg1 speed is unknown, defaulting to 1000 [ 961.851099][ T2940] vxcan1 speed is unknown, defaulting to 1000 [ 962.264075][ T2947] wg1 speed is unknown, defaulting to 1000 [ 962.298421][ T2940] lo speed is unknown, defaulting to 1000 [ 962.476222][ T2947] vxcan1 speed is unknown, defaulting to 1000 [ 963.488252][ T2996] tipc: Enabling of bearer rejected, already enabled [ 963.718304][ T2947] lo speed is unknown, defaulting to 1000 [ 963.735421][ T3000] wg1 speed is unknown, defaulting to 1000 [ 963.826077][ T3000] vxcan1 speed is unknown, defaulting to 1000 [ 963.863189][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7535'. [ 963.889107][ T3009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7534'. [ 964.119192][ T3015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7537'. [ 964.369145][ T3023] netlink: 25 bytes leftover after parsing attributes in process `syz.5.7539'. [ 964.516260][ T3000] lo speed is unknown, defaulting to 1000 [ 964.623354][ T3034] netlink: 'syz.8.7543': attribute type 1 has an invalid length. [ 964.955236][ T3035] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 965.024095][ T3035] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 965.115553][ T3043] netlink: 'syz.0.7545': attribute type 1 has an invalid length. [ 965.140806][ T3043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7545'. [ 965.699259][ T3067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7552'. [ 965.712501][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7549'. [ 965.720849][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7552'. [ 965.736669][ T3061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.752641][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7552'. [ 965.929080][ T3061] batman_adv: batadv0: Removing interface: macvtap1 [ 965.944728][ T3061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.060205][ T3081] syzkaller1: entered allmulticast mode [ 966.126464][ T3084] wg1 speed is unknown, defaulting to 1000 [ 966.135094][ T3084] vxcan1 speed is unknown, defaulting to 1000 [ 966.204792][ T3086] syzkaller1: left allmulticast mode [ 966.522207][ T3103] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7562'. [ 966.625274][ T3104] wg1 speed is unknown, defaulting to 1000 [ 966.658042][ T3084] lo speed is unknown, defaulting to 1000 [ 966.690380][ T3104] vxcan1 speed is unknown, defaulting to 1000 [ 966.707837][ T31] INFO: task syz.4.6451:31370 blocked for more than 143 seconds. [ 966.722026][ T31] Not tainted syzkaller #0 [ 966.758372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 966.776391][ T31] task:syz.4.6451 state:D stack:26088 pid:31370 tgid:31369 ppid:29457 task_flags:0x400140 flags:0x00080002 [ 966.801833][ T31] Call Trace: [ 966.808500][ T31] [ 966.814905][ T31] __schedule+0x1798/0x4cc0 [ 966.825345][ T31] ? __lock_acquire+0xab9/0xd20 [ 966.835832][ T31] ? __pfx___schedule+0x10/0x10 [ 966.846067][ T31] ? schedule+0x91/0x360 [ 966.854809][ T31] schedule+0x165/0x360 [ 966.865531][ T31] schedule_preempt_disabled+0x13/0x30 [ 966.874963][ T31] __mutex_lock+0x7e6/0x1350 [ 966.886249][ T31] ? __mutex_lock+0x5bb/0x1350 [ 966.895541][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 966.906860][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 966.918490][ T31] ? __nlmsg_put+0xef/0x1b0 [ 966.927536][ T31] ? genlmsg_put+0x137/0x2e0 [ 966.940090][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 966.952413][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 966.965257][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 966.975849][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 966.986080][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 966.993465][ T31] ? stack_trace_save+0x9c/0xe0 [ 967.002944][ T31] genl_rcv_msg+0x60e/0x790 [ 967.012612][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 967.023737][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 967.033072][ T3104] lo speed is unknown, defaulting to 1000 [ 967.039331][ T31] netlink_rcv_skb+0x205/0x470 [ 967.044277][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.053845][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 967.064646][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 967.070956][ T31] ? down_read+0x1ad/0x2e0 [ 967.075505][ T31] genl_rcv+0x28/0x40 [ 967.079718][ T31] netlink_unicast+0x82f/0x9e0 [ 967.084688][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 967.090220][ T31] ? netlink_sendmsg+0x642/0xb30 [ 967.095540][ T31] ? skb_put+0x11b/0x210 [ 967.105612][ T31] netlink_sendmsg+0x805/0xb30 [ 967.111734][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.117385][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 967.122441][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.128374][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.133790][ T31] __sock_sendmsg+0x21c/0x270 [ 967.139428][ T31] ____sys_sendmsg+0x505/0x830 [ 967.144257][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.149648][ T31] ? import_iovec+0x74/0xa0 [ 967.154161][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 967.158993][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.164220][ T31] ? __fget_files+0x2a/0x420 [ 967.169053][ T31] ? __fget_files+0x3a0/0x420 [ 967.173735][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 967.178818][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.184289][ T31] ? do_syscall_64+0xbe/0xfa0 [ 967.188991][ T31] do_syscall_64+0xfa/0xfa0 [ 967.193504][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.198944][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.205021][ T31] ? clear_bhb_loop+0x60/0xb0 [ 967.209865][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.215775][ T31] RIP: 0033:0x7fb33798eec9 [ 967.220420][ T31] RSP: 002b:00007fb338899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.229262][ T31] RAX: ffffffffffffffda RBX: 00007fb337be5fa0 RCX: 00007fb33798eec9 [ 967.237307][ T31] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 000000000000000a [ 967.245292][ T31] RBP: 00007fb337a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.253308][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.261941][ T31] R13: 00007fb337be6038 R14: 00007fb337be5fa0 R15: 00007ffd72bb5798 [ 967.270062][ T31] [ 967.273150][ T31] INFO: task syz.2.6492:31526 blocked for more than 143 seconds. [ 967.281220][ T31] Not tainted syzkaller #0 [ 967.286406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 967.295071][ T31] task:syz.2.6492 state:D stack:26088 pid:31526 tgid:31506 ppid:30029 task_flags:0x400140 flags:0x00080002 [ 967.307090][ T31] Call Trace: [ 967.310514][ T31] [ 967.313450][ T31] __schedule+0x1798/0x4cc0 [ 967.318143][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.322991][ T31] ? __pfx___schedule+0x10/0x10 [ 967.327920][ T31] ? schedule+0x91/0x360 [ 967.332170][ T31] schedule+0x165/0x360 [ 967.339757][ T31] schedule_preempt_disabled+0x13/0x30 [ 967.345245][ T31] __mutex_lock+0x7e6/0x1350 [ 967.350115][ T31] ? __mutex_lock+0x5bb/0x1350 [ 967.354880][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 967.360808][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 967.365885][ T31] ? __asan_memset+0x22/0x50 [ 967.370489][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 967.375590][ T31] ? do_syscall_64+0xfa/0xfa0 [ 967.380513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.386635][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 967.392349][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 967.398096][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 967.404240][ T31] ? rcu_is_watching+0x15/0xb0 [ 967.409180][ T31] ? __nla_parse+0x40/0x60 [ 967.413597][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 967.420361][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 967.425995][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 967.432091][ T31] ? bpf_lsm_capable+0x9/0x20 [ 967.437089][ T31] ? security_capable+0x7e/0x2e0 [ 967.442046][ T31] genl_rcv_msg+0x60e/0x790 [ 967.446639][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 967.451678][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 967.457903][ T31] netlink_rcv_skb+0x205/0x470 [ 967.462674][ T31] ? __lock_acquire+0xab9/0xd20 [ 967.467709][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 967.472738][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 967.478058][ T31] ? down_read+0x1ad/0x2e0 [ 967.482480][ T31] genl_rcv+0x28/0x40 [ 967.486557][ T31] netlink_unicast+0x82f/0x9e0 [ 967.491417][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 967.497911][ T31] ? netlink_sendmsg+0x642/0xb30 [ 967.502880][ T31] ? skb_put+0x11b/0x210 [ 967.507181][ T31] netlink_sendmsg+0x805/0xb30 [ 967.511948][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.517261][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 967.522199][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.527957][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.533260][ T31] __sock_sendmsg+0x21c/0x270 [ 967.537962][ T31] ____sys_sendmsg+0x505/0x830 [ 967.542725][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.548058][ T31] ? import_iovec+0x74/0xa0 [ 967.552569][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 967.557412][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.562644][ T31] ? __fget_files+0x2a/0x420 [ 967.567297][ T31] ? __fget_files+0x3a0/0x420 [ 967.571992][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 967.577082][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.582577][ T31] ? do_syscall_64+0xbe/0xfa0 [ 967.587425][ T31] do_syscall_64+0xfa/0xfa0 [ 967.591939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.597230][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.603300][ T31] ? clear_bhb_loop+0x60/0xb0 [ 967.608040][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.614464][ T31] RIP: 0033:0x7f9f5758eec9 [ 967.619029][ T31] RSP: 002b:00007f9f583f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.627485][ T31] RAX: ffffffffffffffda RBX: 00007f9f577e6270 RCX: 00007f9f5758eec9 [ 967.635452][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000012 [ 967.643477][ T31] RBP: 00007f9f57611f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.651619][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.660320][ T31] R13: 00007f9f577e6308 R14: 00007f9f577e6270 R15: 00007fff5632cff8 [ 967.668384][ T31] [ 967.671841][ T31] [ 967.671841][ T31] Showing all locks held in the system: [ 967.680230][ T31] 2 locks held by ksoftirqd/1/23: [ 967.685271][ T31] #0: ffff8880b873a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 967.695339][ T31] #1: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 967.709948][ T31] 1 lock held by khungtaskd/31: [ 967.714841][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 967.725195][ T31] 2 locks held by getty/5585: [ 967.729924][ T31] #0: ffff8880336fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 967.740000][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 967.750417][ T31] 2 locks held by syz.1.5426/27386: [ 967.755606][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 967.763863][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 967.774179][ T31] 2 locks held by syz.4.6451/31370: [ 967.779648][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 967.788415][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 967.798623][ T31] 2 locks held by syz.2.6492/31526: [ 967.803838][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 967.812228][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 967.822647][ T31] 2 locks held by syz.7.6975/837: [ 967.827780][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 967.836295][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 967.846553][ T31] 3 locks held by syz.5.7556/3084: [ 967.851743][ T31] #0: ffffffff8f4d2a70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 967.861179][ T31] #1: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 967.870513][ T31] #2: ffffffff8e142db8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 967.881424][ T31] 1 lock held by syz.8.7558/3092: [ 967.886475][ T31] #0: ffff888043eef508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 967.896986][ T31] 1 lock held by syz.3.7561/3100: [ 967.902106][ T31] #0: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 967.911259][ T31] [ 967.913655][ T31] ============================================= [ 967.913655][ T31] [ 967.923534][ T31] NMI backtrace for cpu 0 [ 967.923552][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 967.923575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 967.923587][ T31] Call Trace: [ 967.923596][ T31] [ 967.923605][ T31] dump_stack_lvl+0x189/0x250 [ 967.923632][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.923654][ T31] ? __pfx__printk+0x10/0x10 [ 967.923688][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 967.923721][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 967.923754][ T31] ? __pfx__printk+0x10/0x10 [ 967.923779][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 967.923811][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 967.923844][ T31] watchdog+0xf60/0xfa0 [ 967.923870][ T31] ? watchdog+0x1e2/0xfa0 [ 967.923896][ T31] kthread+0x711/0x8a0 [ 967.923926][ T31] ? __pfx_watchdog+0x10/0x10 [ 967.923945][ T31] ? __pfx_kthread+0x10/0x10 [ 967.923978][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.923999][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.924018][ T31] ? __pfx_kthread+0x10/0x10 [ 967.924043][ T31] ret_from_fork+0x4bc/0x870 [ 967.924067][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 967.924095][ T31] ? __switch_to_asm+0x39/0x70 [ 967.924116][ T31] ? __switch_to_asm+0x33/0x70 [ 967.924137][ T31] ? __pfx_kthread+0x10/0x10 [ 967.924164][ T31] ret_from_fork_asm+0x1a/0x30 [ 967.924205][ T31] [ 967.924215][ T31] Sending NMI from CPU 0 to CPUs 1: [ 968.071200][ C1] NMI backtrace for cpu 1 [ 968.071219][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 968.071238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 968.071250][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 968.071277][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 968.071292][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 968.071309][ C1] RAX: 4a9d5d0829e6ed00 RBX: ffffffff81960c17 RCX: 4a9d5d0829e6ed00 [ 968.071322][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 968.071335][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 968.071348][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 968.071361][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003859b58 [ 968.071373][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 968.071388][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.071400][ C1] CR2: 00007f507adb12f8 CR3: 00000000798fa000 CR4: 00000000003526f0 [ 968.071416][ C1] Call Trace: [ 968.071425][ C1] [ 968.071432][ C1] default_idle+0x13/0x20 [ 968.071455][ C1] default_idle_call+0x73/0xb0 [ 968.071480][ C1] do_idle+0x1e7/0x510 [ 968.071501][ C1] ? __pfx_do_idle+0x10/0x10 [ 968.071528][ C1] cpu_startup_entry+0x44/0x60 [ 968.071546][ C1] start_secondary+0x101/0x110 [ 968.071571][ C1] common_startup_64+0x13e/0x147 [ 968.071602][ C1] [ 968.072797][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 968.239329][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 968.248431][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 968.258477][ T31] Call Trace: [ 968.261746][ T31] [ 968.264669][ T31] dump_stack_lvl+0x99/0x250 [ 968.269263][ T31] ? __asan_memcpy+0x40/0x70 [ 968.273882][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 968.279099][ T31] ? __pfx__printk+0x10/0x10 [ 968.283714][ T31] vpanic+0x237/0x6d0 [ 968.287702][ T31] ? __pfx_vpanic+0x10/0x10 [ 968.292220][ T31] ? preempt_schedule_common+0x83/0xd0 [ 968.297698][ T31] panic+0xb9/0xc0 [ 968.301427][ T31] ? __pfx_panic+0x10/0x10 [ 968.305853][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 968.311229][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 968.317389][ T31] watchdog+0xf9f/0xfa0 [ 968.321544][ T31] ? watchdog+0x1e2/0xfa0 [ 968.325884][ T31] kthread+0x711/0x8a0 [ 968.329975][ T31] ? __pfx_watchdog+0x10/0x10 [ 968.334732][ T31] ? __pfx_kthread+0x10/0x10 [ 968.339321][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.344511][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.349963][ T31] ? __pfx_kthread+0x10/0x10 [ 968.354549][ T31] ret_from_fork+0x4bc/0x870 [ 968.359151][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 968.364286][ T31] ? __switch_to_asm+0x39/0x70 [ 968.369063][ T31] ? __switch_to_asm+0x33/0x70 [ 968.373829][ T31] ? __pfx_kthread+0x10/0x10 [ 968.378426][ T31] ret_from_fork_asm+0x1a/0x30 [ 968.383743][ T31] [ 968.387030][ T31] Kernel Offset: disabled [ 968.391342][ T31] Rebooting in 86400 seconds..