last executing test programs: 9m7.767735276s ago: executing program 2 (id=1589): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x81, 0x4) (async) socketpair(0x26, 0x4, 0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x5}, 0x8}) (async) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000100)={0x8, 'wg0\x00', {'nr0\x00'}, 0xfff8}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x40a, 0x4) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000200)=0x4) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000002c0)=0x9, 0x4) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000300)=@llc={0x1a, 0x2, 0x6, 0x3, 0x0, 0xc, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="67927b7595bc972ab701dcfe305a48e94b2b902b76865c5192080f780824508b1400ac2cfad5dad69487d79a2e28a766f60a4723c7e67aa8ac1a0c0416c7af821681d6c9b05fb3f0292f61cce5ba8e0589246da41f66ff44aa01cffdbdfa92849b6d171ae7d4d816", 0x68}, {&(0x7f0000000400)="5f49c6fa17829cffcdef3ae29ecbc6a71d972b06d6bd959aed0f88a4a77fa4b9b860122c28cf82882dfbe588daf8522d796d0c5bf1957153188d748c9d9b5289ba91839ca444d288d006cccd152dff881463bd524179bb8a175e51e86796acb934a76b50dda19dba76346ca301", 0x6d}, {&(0x7f0000000480)="169eb0126b980207cdf24b4a448fc6d51f1255c44c83c6b631b440dffcaf4b957f47bb7b84f6aeb011a6f0ba416d038df1dc3e3dbf03a9511c981d4a3a77aeab25e32afeb1ed44722723bcd2bea4f51d2b5501066d2f14613fe39ce94a2a5fd6", 0x60}, {&(0x7f0000000500)="9b18acd99ab8f8597975a4358028f008c23d3377d82969d38e142964b908b1a8bb11142cbf53cd141147ae463a04dcaa08b62c0871c3af6653bf30b142edf7672053d988f73651aa5490b2df90ab2796da823fe261af69d362bc3335dbb1cc2ca93ed7c2981c0e4839e829febb00435b60550ea9b35a96f5699fccb76b6fc5c7f630fad1a05577ad34dcddedd849bf89a62ca114816987dffbb4a76223087bfbe4a6f316bbdce253727f398f957dbcaef80d21cbac66c4246e6cd954476356", 0xbf}, {&(0x7f00000005c0)="92be9b794cb29dcdfdbc4f0db17a5717ec9c0ddb5f0b79c191329d4c85748924c8c6e38a146d92e1327004218d1438bdee000120c0ad65e8084ca5884a0234f46f899f9abed01657f62bc941459333d8cf28b5bbd1798e7e61fa4a354ba7712acfafed6de601fe45150563ea62f991063ca45736d92965a44fbdbe4329", 0x7d}], 0x5, &(0x7f00000006c0)=[{0x28, 0x118, 0x0, "9fce175d21acbf1dcb5200aabee3a672d618f00415"}, {0x70, 0x104, 0x74, "3232634466b8830e8ce4e9f9fc78fbd5dffbc225c49b2e6f0b6d1a3916b536c0de79cdf99f908f5a4c00a3850a6f75c56063c23b0290f22b867a59611b831aa823b3297b44b7c16b2d6ad26609028a179f8e7f75e339da50c109"}], 0x98}, 0x5) (async) r4 = accept$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendto$packet(r4, &(0x7f0000000840), 0x0, 0x4840, &(0x7f0000000900)={0x11, 0x18, r5, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) epoll_create(0x2) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x1d, &(0x7f0000000b40)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x88}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf, @generic={0x3, 0xd, 0xb, 0x5, 0x4}], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0xcf, &(0x7f0000000c80)=""/207, 0x40f00, 0x2, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x0, 0xb, 0xcb7c, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000b00)='rpcgss_svc_accept_upcall\x00', r6, 0x0, 0x2}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000f00)={'nicvf0\x00', 0x1}) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r7, &(0x7f0000000f80)={@val={0x0, 0x8906}, @val={0x0, 0x4, 0xbc, 0xfffc, 0x4, 0x800}, @ipv4=@icmp={{0x13, 0x4, 0x2, 0x38, 0xac, 0x64, 0x0, 0x80, 0x1, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0xf, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @generic={0x82, 0x6, "1544569d"}, @lsrr={0x83, 0x23, 0x28, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x140, "ce27b42bfedcfd07f7e421ce41385054a563604725ab7c790087e1da34ba979565f547ed2870b077cfa29862de4e016d9bb458db1edf8f4e3e3c961b4d43cec2f6d2426532de30ab258c75b5e57c553e215c8cd78f1007dd"}}}, 0xba) r8 = accept4$tipc(r7, &(0x7f0000001040)=@name, &(0x7f0000001080)=0x10, 0x0) close(r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x75ae69fda0100f9c}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x12, 0x20}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) connect$qrtr(r7, &(0x7f0000001240)={0x2a, 0x0, 0x7ffe}, 0xc) 9m7.640414618s ago: executing program 2 (id=1592): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r3) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltfilter={0x4c, 0x2d, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xa, 0x4}, {0xfff3}}, [@f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010100}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010101}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000010) (async) r5 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 9m7.235717982s ago: executing program 2 (id=1598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a000000040000000800000001000000800000007dcebe2d08be2ed374b73fe1ee018d098de16fe7def736410a55b123c2547c84e4e829e5adc4a5f6ba8a374cb718f9f621a4457c14548176b57d26165dfd4114a68670578f5e2d193e79800849292df3e62bd34ca54a243fc56320415d3701f60991ab2c453ce00a692578fcfdda0ac4bb94aa668b05cf2e33c8e0053a635324e3221aae9a25", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x158, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x4, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17cc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x13}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4593}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x158}}, 0x3c084) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9m7.054074394s ago: executing program 2 (id=1601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x20040005) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000003f0007010300000000000000027c0000100003800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 9m6.998701243s ago: executing program 2 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="0ed1626fdb8c4c4a15c9aef9e96e92b5bbf223dbdf672021c9534dfe7c3e9853452c513ed7", @ANYRESOCT=r0, @ANYRES16=r0], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/204, 0xcc, 0x0, &(0x7f0000000240)=""/255, 0xff}, &(0x7f0000000340)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 9m6.469485339s ago: executing program 2 (id=1617): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2604348) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2604348) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) close(r0) (async) close(r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'batadv0\x00'}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0)="9ee8e20b7037e5ef8c061e3049cde7a86e30e9a22dcc1b5697b9a748d39e2413a9285b79f1bcde984fba9c968d33993b3612374ad522588aa7", &(0x7f0000000300)=""/141, &(0x7f00000003c0)="e6acc1f0d5cc2a38fa79bf5d740b47e5d6547a12b9fc838544a72856f4c15a15883bcab89d9b2ad76e66f361df868a5c293a7a3cec926f8cc419419067", &(0x7f0000000400)="2a4ab4e09bdd769eeab45d2c4541367785fbc013825172eb27998b3e40b5ecac87a7a97c0792c486101172391ad7f67d78752ed48c3875a4ad180fbf1ad9916caf8a5ccc063a8d78986ac39151e13459e705a9f9b1c65710e2e4989916bbb4eb756a7caad81cdafc21d65fecb863cff5bef3751d572d77300dec89e670d08c5b7cd61b846dd7ebcf0d81a9b5ebb9c82e0fbeaeca353e41444a30c4a8385360", 0x1ff, r4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newaddrlabel={0x2c, 0x48, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x8, 0x0, r6, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newaddrlabel={0x2c, 0x48, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x8, 0x0, r6, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000006c0)={0x4, 0x1, 0x1, 0x6, 0x9, 0x0, [{0xa4, 0x7, 0xe1, '\x00', 0x204}, {0x2, 0x8, 0x9, '\x00', 0xa05}, {0x4, 0x7fff, 0x2, '\x00', 0x2667306821bace1b}, {0x0, 0x3, 0x1ff, '\x00', 0x408}, {0x36, 0x1000, 0x3ff}, {0x0, 0x40, 0x8001}, {0x4, 0x200, 0x2f01, '\x00', 0x8}, {0xb996, 0x4, 0x6, '\x00', 0x420a6cf2e796f72d}, {0x99, 0x3, 0x0, '\x00', 0x1}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000940)={'netpci0\x00', 0x800}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xfff, 0x14}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xee}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x1000}, {0x10, 0x80}, {0x7, 0xff}, {0x3, 0xf}]}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000c80)=""/78, 0x99, 0x4e, 0x0, 0x8}, 0x28) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xee}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x1000}, {0x10, 0x80}, {0x7, 0xff}, {0x3, 0xf}]}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000c80)=""/78, 0x99, 0x4e, 0x0, 0x8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x26, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x93}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x80, 0x31, &(0x7f0000000b80)=""/49, 0x40f00, 0x45, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000d40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x6, 0x7ff, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000dc0)=[{0x1, 0x3, 0xb, 0xa}, {0x2, 0x3, 0x3, 0x8}, {0x3, 0x2, 0x2, 0x4}, {0x2, 0x2, 0x1}, {0x5, 0x2, 0xd, 0x9}], 0x10, 0x8}, 0x94) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000000f00), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x402, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x402, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0xb, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x200}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @alu={0x7, 0x0, 0xb, 0x0, 0x6, 0x1, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000001040)='syzkaller\x00', 0x50a4, 0xf2, &(0x7f0000001080)=""/242, 0x40f00, 0x50, '\x00', r6, @fallback=0x2, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0x10, 0x200, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000011c0)=[{0x3, 0x3, 0x8, 0x7}, {0x5, 0x2, 0xf, 0xa}, {0x3, 0x1, 0x7, 0xa}], 0x10, 0x7}, 0x94) r12 = socket(0xa, 0x1, 0x35a1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000012c0)={0x0, 0x40}, &(0x7f0000001300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000001340)=@assoc_id=r13, 0x4) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f0000001380)={{r9}, {@void, @max}}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 9m6.054203671s ago: executing program 32 (id=1617): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2604348) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2604348) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) close(r0) (async) close(r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'batadv0\x00'}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0)="9ee8e20b7037e5ef8c061e3049cde7a86e30e9a22dcc1b5697b9a748d39e2413a9285b79f1bcde984fba9c968d33993b3612374ad522588aa7", &(0x7f0000000300)=""/141, &(0x7f00000003c0)="e6acc1f0d5cc2a38fa79bf5d740b47e5d6547a12b9fc838544a72856f4c15a15883bcab89d9b2ad76e66f361df868a5c293a7a3cec926f8cc419419067", &(0x7f0000000400)="2a4ab4e09bdd769eeab45d2c4541367785fbc013825172eb27998b3e40b5ecac87a7a97c0792c486101172391ad7f67d78752ed48c3875a4ad180fbf1ad9916caf8a5ccc063a8d78986ac39151e13459e705a9f9b1c65710e2e4989916bbb4eb756a7caad81cdafc21d65fecb863cff5bef3751d572d77300dec89e670d08c5b7cd61b846dd7ebcf0d81a9b5ebb9c82e0fbeaeca353e41444a30c4a8385360", 0x1ff, r4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newaddrlabel={0x2c, 0x48, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x8, 0x0, r6, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newaddrlabel={0x2c, 0x48, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x8, 0x0, r6, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000006c0)={0x4, 0x1, 0x1, 0x6, 0x9, 0x0, [{0xa4, 0x7, 0xe1, '\x00', 0x204}, {0x2, 0x8, 0x9, '\x00', 0xa05}, {0x4, 0x7fff, 0x2, '\x00', 0x2667306821bace1b}, {0x0, 0x3, 0x1ff, '\x00', 0x408}, {0x36, 0x1000, 0x3ff}, {0x0, 0x40, 0x8001}, {0x4, 0x200, 0x2f01, '\x00', 0x8}, {0xb996, 0x4, 0x6, '\x00', 0x420a6cf2e796f72d}, {0x99, 0x3, 0x0, '\x00', 0x1}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000940)={'netpci0\x00', 0x800}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xfff, 0x14}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xee}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x1000}, {0x10, 0x80}, {0x7, 0xff}, {0x3, 0xf}]}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000c80)=""/78, 0x99, 0x4e, 0x0, 0x8}, 0x28) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xee}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x1000}, {0x10, 0x80}, {0x7, 0xff}, {0x3, 0xf}]}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000c80)=""/78, 0x99, 0x4e, 0x0, 0x8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x26, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x93}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x80, 0x31, &(0x7f0000000b80)=""/49, 0x40f00, 0x45, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000d40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x6, 0x7ff, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000dc0)=[{0x1, 0x3, 0xb, 0xa}, {0x2, 0x3, 0x3, 0x8}, {0x3, 0x2, 0x2, 0x4}, {0x2, 0x2, 0x1}, {0x5, 0x2, 0xd, 0x9}], 0x10, 0x8}, 0x94) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000000f00), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x402, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x402, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0xb, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x200}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @alu={0x7, 0x0, 0xb, 0x0, 0x6, 0x1, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000001040)='syzkaller\x00', 0x50a4, 0xf2, &(0x7f0000001080)=""/242, 0x40f00, 0x50, '\x00', r6, @fallback=0x2, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0x10, 0x200, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000011c0)=[{0x3, 0x3, 0x8, 0x7}, {0x5, 0x2, 0xf, 0xa}, {0x3, 0x1, 0x7, 0xa}], 0x10, 0x7}, 0x94) r12 = socket(0xa, 0x1, 0x35a1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000012c0)={0x0, 0x40}, &(0x7f0000001300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000001340)=@assoc_id=r13, 0x4) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f0000001380)={{r9}, {@void, @max}}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1.821984806s ago: executing program 3 (id=8151): r0 = socket(0x2b, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x10002, &(0x7f0000001040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt(r1, 0x8, 0x80000001, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vcan0\x00', @remote}) 1.806179829s ago: executing program 3 (id=8152): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='v', 0xfdef}], 0x1) r3 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0x800) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x1, 0x2, {0xa, 0x4e24, 0xbb90, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}}, 0x32) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/58, 0x3a}, 0x0) 1.301988281s ago: executing program 0 (id=8165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) bind$can_raw(r5, &(0x7f00000003c0), 0x10) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300"], 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044840}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.243830579s ago: executing program 5 (id=8166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000071113600000000008510000002000000850000009896000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, &(0x7f00000000c0)}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20008804) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x6, {0x2, 0x4e20, @local}, 'bridge0\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4800f8af2a4d1202474858b0f39325f5f17000fcdb2f0753138b8a27b8fe882bdf2509000000050007001c76093af8942195b3bd1e5cdd70d3dbd04fb9273255fc6d7338a80b25c0ab33a4e63b1e312ddf8ca9b37968a6e3702544ca9f09bb8c2f36c798b43e7642a4a658562584118d25dd11ed859f68ab654a3edcbf855e988bb74177bd1f5dfd26a0ad4d1fc334719fff3759d724da329efcff2071c1fd6a70efd99e4d2765ba43fd168df48b937b1e5d016a0c1f8f3c681d990eb5d19f42", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="050008000d0000000c00060003000000000000000800010003000000"], 0x48}}, 0x10000040) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r12, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB="05220000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fadbdf251300000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x20001880) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) getsockopt$XDP_STATISTICS(r13, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x64, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000884) 925.091965ms ago: executing program 1 (id=8172): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000140)={0x3, @default, r2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28483, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nicvf0\x00', 0x4000}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000380)='-#', 0x2}], 0x1) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000202000000f3ffffff00000000"], 0x10}}, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f0000000080)) (async) close(0x3) 924.037939ms ago: executing program 0 (id=8173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000001c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000140)='THAWED\x00', 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x75fb3000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 911.254149ms ago: executing program 5 (id=8174): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0xfc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x45001}, 0x4000) 898.48734ms ago: executing program 3 (id=8175): r0 = socket(0x2c, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x2b5}, 0x8) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) (async) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r5, 0x1}, 0x20) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) connect$unix(r7, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) (async) connect$unix(r6, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) connect$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc1}) 818.115836ms ago: executing program 4 (id=8176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 787.410111ms ago: executing program 0 (id=8177): r0 = socket$inet(0x2, 0x4000000805, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="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", 0x143}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xa8, 0x110, 0xffffff44, "cd2976a35524687517e38c021983192673c53a58d5aa81785bf02242f9cac6283ddc573c12c28276927010f097eb3a708fe7fd00ea2d2f8d42c7b054c6e4cf94290eced424f025d13fe34448180b3b4271f2b25748a82591c290011f830723b229935efd50b9f6ef5f06c313a4fae9861cd3e8f07dcaf124b5f8ead8179393768ae42494b2da034ab811865feb8ca77d125edef693cd"}], 0xa8}}], 0x2, 0x0) 717.032748ms ago: executing program 1 (id=8178): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = socket(0x25, 0x6, 0x8) (async) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000000800)=""/214, 0xd6}], 0x4, &(0x7f0000000900)=""/169, 0xa9}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000009c0)=""/108, 0x6c}, {&(0x7f0000000a40)=""/175, 0xaf}, {&(0x7f0000000b00)=""/99, 0x63}, {&(0x7f0000000b80)=""/105, 0x69}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x6, &(0x7f0000001c80)=""/11, 0xb}, 0x5}, {{&(0x7f0000001cc0)=@generic, 0x80, &(0x7f0000001d40), 0x0, &(0x7f0000001d80)=""/137, 0x89}, 0x401}], 0x3, 0x2100, &(0x7f0000001f40)={r1, r2+60000000}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x4, 0x1, 0x80000001}, {0x7, 0x11, 0xcd, 0x7}]}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) (async, rerun: 64) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) r5 = accept(r4, &(0x7f0000000400)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x80) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xd4, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1fc0}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x61}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40008005}, 0x20044841) (async) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 712.661145ms ago: executing program 3 (id=8179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x34fd, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 666.060922ms ago: executing program 4 (id=8180): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x2, {0x3, @struct={0x3, 0xffffff2e}, 0x0, 0xffff, 0x9, 0x72, 0x500000000000000, 0x44c, 0xc0, @usage=0xffffffffffffff80, 0x10000, 0x2, [0x10, 0x8000000000000001, 0x6, 0x8b1, 0xffffffff]}, {0xfffffffffffffffa, @struct={0x9, 0x9}, 0x0, 0x5, 0x3, 0x2c59, 0x2, 0x9, 0x420, @usage=0xbf2, 0x9, 0x8, [0x8, 0x59c, 0x80000000, 0x0, 0x5]}, {0x34, @usage=0xad, 0x0, 0xfffffffffffffff9, 0x0, 0x800000000000000, 0x80, 0x1, 0x400, @struct={0x4, 0xc4}, 0x8, 0xd, [0x4, 0x9, 0x9, 0x6, 0x6, 0x8001]}, {0x7, 0x7, 0x9d}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={r2, 0x6, 0x0, [0x7f, 0x9, 0xffffffffffffffff, 0x3, 0xffffffffffffffff], [0x0, 0x7, 0x7, 0x8, 0x4, 0x100000001, 0x5, 0x80, 0x0, 0x3, 0x4, 0x1, 0x591c, 0x0, 0x100000000, 0xfffffffffffffffc, 0x7, 0x3, 0x101, 0x4, 0xfffffffffffffff9, 0x1, 0x5, 0xbf3, 0x8, 0xf, 0x9, 0x7f, 0x1, 0xbe, 0x9, 0x0, 0x6, 0x836e, 0x9, 0x8, 0x0, 0x2, 0x0, 0x7, 0x100, 0x3, 0x7, 0x80, 0xffffffffffffff8a, 0xa63, 0x5f, 0x0, 0xea, 0xd62c, 0xfffffffffffffff0, 0x2161, 0xffffffffffffff1d, 0xfffffffffffffff0, 0x7, 0x600000000000000, 0x71, 0x7, 0x6, 0x1, 0x2, 0x0, 0x6, 0x2, 0x8000, 0x40, 0x5, 0x8, 0x7, 0xfffffffffffffff7, 0x100000000, 0x80, 0x4, 0x1, 0x3, 0x0, 0x6, 0x10000, 0x36bf, 0x1, 0x618, 0x4, 0xffffffff, 0x4, 0x8, 0x6, 0x36, 0x101, 0xfff, 0x89d, 0x80000001, 0x7, 0x2, 0x9, 0x1ff, 0x8, 0x200, 0x649, 0x8, 0x4, 0x8000, 0x4, 0x3, 0x1ff, 0x9, 0x7fffffffffffffff, 0x7, 0x3, 0x7, 0x5, 0xb, 0x7e6, 0x0, 0xa, 0x8, 0x1, 0x1ff, 0x340, 0xfff, 0xffffffff, 0xb5]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 617.801793ms ago: executing program 0 (id=8181): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48, 0x20000080}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r2, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x3, 0x3, 0x2, 0x7}, {0xffff, 0x7, 0x9, 0x3}, {0x101, 0x3, 0x7, 0x7fff}, {0x8, 0x2, 0x3, 0x4}, {0x8, 0xf, 0x8, 0xa845b12}]}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) socketpair(0x29, 0x6, 0xfffffff9, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc209c200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10000080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000080), 0x4) 588.686549ms ago: executing program 1 (id=8182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 530.021081ms ago: executing program 4 (id=8183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 525.733411ms ago: executing program 3 (id=8184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xffff}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 523.832836ms ago: executing program 5 (id=8185): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7ff, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000500)="0093799ada000008", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x18) r5 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r5) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socketpair(0x29, 0x4, 0x17000, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)="775f0710c0eab8c4b2cec511bdbd403bb26bd8667beced45597cf832c81c7c7ad9e6f9a553c9f94bd01ee2fab14ce4dbbadf6f653002179f03da272768f48111f3ad9a2e814bd82e37abcea8ba9faa141f0717b180a9a56bd73758875f5b08860218c627ea9e4052336fcb92ba94d4267acbe2718b", 0x75) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}, {&(0x7f0000000180)="1199e15e719a80750acd0ab3ae9e8b666bc0ccb0a83c46a76bb0debb5b2df8775f53b7a68e487ad42b0171a8f60237b7bc8e48c173b311ea1bc8b98c6e20c662a0f6fc8344d4f247e978fc38f27fda1350eb06dff93f50b84b3cdea22980f6f4dc68006203f4d300"/117, 0x75}], 0x2}, 0x0) 488.762625ms ago: executing program 0 (id=8186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x42b, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001bc0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xe2b}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r12, {0x9, 0xb}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r14, 0x89eb, 0x0) 449.050224ms ago: executing program 1 (id=8187): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501fffffffff3ffffff2d00000008010300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000400fe00"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4], 0x70}}, 0x0) 332.790381ms ago: executing program 5 (id=8188): r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) r1 = socket(0x14, 0x5, 0x200) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffc04}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xb}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x77}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xc000, 0x5, 0x100, 0xed6, 0x6}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r2, 0x7}, 0x8) (async) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x19, 0x400, 0x70bd2c, 0x25dfdbfc, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040b1}, 0x4010) r3 = socket$unix(0x1, 0xe, 0x0) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xfffffffd, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001640)={'tunl0\x00', &(0x7f0000001540)={'sit0\x00', r4, 0x20, 0x80, 0x5, 0xa, {{0x2e, 0x4, 0x1, 0xa, 0xb8, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1b, 0x23, [@multicast1, @empty, @remote, @broadcast, @remote, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x12, "ffea0247bf98a7bc31877d552db055b9"}, @rr={0x7, 0x2b, 0x7b, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, @rand_addr=0x64010101, @remote, @broadcast, @empty]}, @cipso={0x86, 0x45, 0x3, [{0x0, 0x8, "258e0c824035"}, {0x6, 0xf, "8daccc95748f3bbad3504e95b3"}, {0x6, 0x8, "1d4dc4e02a07"}, {0x5, 0x4, "cf2b"}, {0x1, 0x12, "436618ce394fa671f6df9f2aa79739ef"}, {0x5, 0x7, "1bf3139c36"}, {0x1, 0x3, '~'}]}]}}}}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={r3, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001740), 0x8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r4}, 0x50) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x1e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x4, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x60, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x4, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001880)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff, r3, r10], &(0x7f00000018c0)=[{0x3, 0x2, 0xf, 0x8}, {0x2, 0x1, 0x6, 0xc}, {0x5, 0x5, 0x1}, {0x3, 0x5, 0xb, 0x8}, {0x5, 0x4, 0x9, 0xb}, {0x0, 0x1, 0x0, 0x7}, {0x2, 0x3, 0x9, 0x2}], 0x10, 0x4}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a40)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)=@ipmr_newroute={0xe8, 0x18, 0x20, 0x70bd25, 0x25dfdbff, {0x80, 0x20, 0x10, 0x4, 0xfe, 0x0, 0x0, 0x3, 0x100}, [@RTA_METRICS={0x9c, 0x8, 0x0, 0x1, "2575a417104895395f055793c3cdeae0be174e27a1bd34afb6ffc7f54bb5ce2054fd2ac67786d90c8b233c81cf641a2152bb45cefd4abaf4c82f2fd2560c1b2ec26bdba12d2dfe57c06c3cd7879477371d90eac51c2baa35831c5e9ca33d4b01eb475d3cd37e272191f6cb9e50bd8c8ef43ed731184bf86e9fe6cf1f1cbf69d49d7572a195cc2d943aeaec53e7594a1a48595bbfa8c5716a"}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x4, 0x2, r6}}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}}}}, @RTA_IIF={0x8, 0x3, r11}]}, 0xe8}}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000001c00)=0x2, 0x4) (async) r12 = accept(r0, &(0x7f0000001c40), &(0x7f0000001cc0)=0x80) sendmsg$NFT_MSG_GETTABLE(r12, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d40)={0xf4, 0x1, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xae, 0x6, "3a18784c9f476284c33d65ebe97c933cb419a03a59ad34ae306a26e5e31aa1da1b993d350d8808c21d7bab057a9691b108f7faf7f669cb9e52f424127a54d224d9aef419824a9066e09da26b8bcc33e1898e5ef3eaf2112c0885a97c26f29bacd23e2c062454a69039461c7a49ecfaa10a9bb6b753dbadeb4a609fa3bad61fd4bd2adcd3bcdabf636e2d82e2e7c8258d4655d37b0a1e8668d0aca11debffba5fc49e8212a9297db3e1bb"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r13, 0x942e, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000002240)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002200)={&(0x7f0000001f00)={0x2f4, 0x12, 0x800, 0x70bd2c, 0x25dfdbfd, {0x28, 0x3, 0x16, 0x2, {0x4e24, 0x4e20, [0xf, 0x7, 0xb5c9, 0xdc1], [0x1, 0x1, 0x1, 0x3], 0x0, [0xbd11, 0x1000]}, 0x2fff, 0x70}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "a3594dc7141c320067550811673ce08938d0bb06cf8e74a4f9fbf07b449400e39f2478b4f6b9c7314126626368a0b02a0860c5b17125f31449f27df0a2447f426d583d35b4f8726016fb1f6e397f6df816b980072e04a260ba2093c0494dfbe7e368199453ba2fe02217f3c11905889b290f44828b6e671a09bd2b1180a1f3d7b0"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "077e5791d717ec89bb7fa6219cd1cdde4c259e83642f3a3d9b71d61358fb0d24c578dee287a73571886143653c59877319ff514756e814e577251800248ca0fd37c0c90f3679b37e0556b3dc0da61a7f0c22a6ebb472882d59d0b573508349e065557e0ed21329fd8d3761c02cf57fa3423024e3af2e9bb3707e52893a2cb76b6e25aa51b224bd2326861defdf781c132cf75dbed3afb930059bb3258e2aa83d68bd7c4681e12531a34f2bf0ab957f4826242c18749071265aa62e53615e44631f1a6d462380dc8b9cbcb64437d6be9428186ad6cc5a84df0c9cd090a0dbec2e7e3376fb5224b87b7e"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "0f035b2c357a2aeab22ab8150ffee1500de92db2e6a9c5615cb7167917b921e3e234a6f28e8c901b515e5d568aa5a1376450110a73a71109c2c023b62b1c240c4925084ac00badfec8a29e269b2856626655716c127abfc5aae056c846752b1f20c1f094facd89151ff078bb322d80eb2f276411db57437eaea04bb28c4b3745fcd3282e1becccbd63df0a3393d2fa903914762e4a7bc49be3"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "bdd2cca2a66da7db3ad7c999031d607db54848a8beb841c0a0c869f7aa78345517b01b2f2d0bac400a70aae7e8e4bb353876125ca0ab83bdda0a96ca3f80ef338e3400e8c3cfe7ccfc5d2ef50a7d595408bffb7d207b3e083b0d17dd57d75f2e4f90287a24f240e7259b1aa3427f26f8e9ca5129bd8f9e1adb14ba8b7dc68123d56456dcaaa388ee44a3c9"}]}, 0x2f4}}, 0x40000) r14 = accept$nfc_llcp(r1, &(0x7f0000002280), &(0x7f0000002300)=0x60) sendmmsg(r14, &(0x7f0000003d40)=[{{&(0x7f0000002340)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @mcast2, 0xf}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000023c0)="12b913d19f969a5803fa5f3754c5e7760a92801920765e0a88595c0b75b20bb5c3223e46c5236f70ed5a6daa3865bd84328faa120884bf29807988f59296b1dce65a5a402e7c7510c47afcc16aee94732acaeef9981f6bfbfb7e357c05993dff1fd63e98a80ca815d93ad87a", 0x6c}], 0x1, &(0x7f0000002480)=[{0xc0, 0x108, 0x2, "a69efd59aa3975f3a4ef22e44be5e9f6756735b7583bf42af83940a8ca02e601076bb84da4c0a5d46518c8eb4694ee15a64010ef7e4232200f4036bbe9dede24c686f57ec422ce246479e16080548b858a46bc5d630592bc4ceb0ab038a77e39a5d9c2cb956cf8ef75708bbb70597c6c18e6574798737537c4c3605107c2e18a78a4a7aa22f94643f4786ab3d39ac71887ba49ce91a70efd2d0b712ef6203ff93b5faf495e398f871354413d"}, {0x88, 0x103, 0x0, "1762c1eae1e4ebbf97c64fc0c21ba4783744f83a8a69d0cb3455a09a4ae527907f66fc7a4ab9e9aea391afaa24267ccaebb6a9788e454bacb733417a09a534b52accdc391da2db9f7b0f6a74edf0d581bc147501dd0a8ddc2c056a796aa0ff17e0512e7cb8bbe8694566abbeb0dd75117db5ca"}, {0x98, 0x3a, 0x1, "e77bb06ce6ded6c2b0d42a4f234d1d536d8f2ac5effa1ad700fb69cd12b3fa86dd4293099a20c2a7d66afeaddf8e49413a7ede449bf75a03e8080f07ad8935013cf088acdf14108b2efdf0807556e338810528129012d97debcfcd43055fdcfb8355c58134879842790782667aacccb37894f3701afb4173890d54daea3cd37e20ee2af6859404"}], 0x1e0}}, {{&(0x7f0000002680)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002700)="cb4e28985bdc93c794e62f83cc30", 0xe}, {&(0x7f0000002740)="0b53f795940e78c76f0c6ac739636693a33979cd19e05341b29ef1e7fee90ef2d57e", 0x22}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="6992feb9ea220b524f449b209bb3273fb979f939128fa64f9c2271c8cf424a", 0x1f}, {&(0x7f00000037c0)="7218b738149b27a609b843136fca60c39144", 0x12}, {&(0x7f0000003800)="fb03c89972d4de5c93d505f9448680d561876a4d070c845ab25f5f665d652fbd66a440420c2e215271fc8f2b563de77d37ed37349299f3fa53272ad9077cbf677fe4a4ba5a775ef91e05b260ee580a2109383e82bfb9a09474c5bea0f6eeecdbd86655a115ff02654b490650e1f4e0be85b22358c1adad3da40bf64fa9fed2792f457f4d", 0x84}, {&(0x7f00000038c0)="9cd53e0b35d3d409cd682738cb9ba19c73a8393cce831738c0c1ef5b8e0aef8d79712b1e1438e91e5884b80927211ba7c06b0b0cad1a1eb0e73380cb38e8c7b16545a19f868cf59ffb29eefc4639da453c1f530dd82bf0a6496f582401d23f7964765f060e0725e6589f8edc44b835c64d5cb720b9c2127749310db2b55456d64352e893054ff0b6a4f37a1867fb258a2d3b9a65fcccbb9e2bc50366e1edb7d3e999e60aa04b8d10114517eef66b8b6d8ca902b1e1f7b5a0872ef40b85144288ae36e0731c3e0d4e6c65e23c4e5246ba5158fb88d3e5d754", 0xd8}], 0x7, &(0x7f0000003a40)=[{0xe0, 0x8a032a07e2fb6bab, 0xd1, "4b8e24bda59a57688668e39fffdaf84b53ebcb849e7a4852e9b8f531f55f28fd77a158811a8c2a4d8d3aa828232e1e1b03b541f48875ad1d6c76f7aebfadfe380e02aab8959e4787f51965d781a126699f70c738dd8d0a8af82a8d18de893d1454819b81c800e106698dc91110b8eab2a1180d3ef300a6c7cd75f6f8dfbcff48d68cde4e366cc13927b0a48cf6475c8674649ffc0116221ed027f965f93c4b4d945f872ed9b4cd7d1ff327c6b51ac3448e4f257a29f38a05aa8aaa97ce981ee7eec6f17a099f877da1"}, {0x70, 0x101, 0x4, "ad6788b7c5add51862bb75c9982fca3baed5fdc3c828b1530ef971b8d8c29249702e7bae2231a24e265df5cc5966adb58d95cd6814640e0bd35069268bf908f5c8fee8a6868ad8dadf2e2b303633d122b8bcd30ce145e40b1c5bce66a5bdde21"}, {0x38, 0x115, 0x5e06, "25be7a320b3466be01eabd6c5fa3ec24e9da100e37b3478a5b65aeded2831a495df6795b35"}, {0xe0, 0x88, 0x40, "b0e0011564b3de0663071d468bbfbc6f803576be9c4763401e3034ad3f1681974eceaac576b1c7a021d0aa0b8045a5cce9580528383ec590930571a7566afe7c9207f9129d942e8439c8653ba7b8e4897813766f2c654be7a9fda5a6c40f8d37354a9e0b71c6f6065671a921e7699933d3ee89ac41ed8cfa32cf837537dc1079fb49618b521a9f6b043ba1ffc1a98e6686c4899676d4ad5fdee88c59c188f89172b8f476bb20e74ea7f2def0b5b39c0a4e0db7f55332f31682dc901022e6d6baff16c442e74e6af31beb90780d"}, {0x80, 0x114, 0x8, "f4ca2c4f3edb3aebe8c032f1ed869228ef7b49a780ab66a039af6dfb6488d61ed60514e295f3a487386f2c67c4f8382baadd3f4eca6d2b63f1ee862f86363b618f74fe6309aa24dc08be5befdddd32e54d182b4fe46cf14c6cca2c77a372d0741fb66c05c6e50fb330"}], 0x2e8}}], 0x2, 0x20000080) (async) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r15, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000003dc0)=[@mss={0x2, 0x3}, @sack_perm], 0x2) 330.504251ms ago: executing program 4 (id=8189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r4, 0xb796, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r4, 0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$rxrpc(0x21, 0x2, 0x2) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bind$rose(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xfffffffffffffdbe}, 0x0) recvmsg$unix(r11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0xfff, 0x2}, &(0x7f00000001c0)=0xc) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0xfdda}, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r13, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) 316.113242ms ago: executing program 5 (id=8190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001", @ANYBLOB="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"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="5e2f0000000085f904f20818fa1f63e6a1537afa0000", @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x80) 220.362589ms ago: executing program 1 (id=8191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) (async) listen(r0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b7", 0x1}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x60}}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) (async) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001240)={'tunl0\x00', 0x0, 0x80, 0x1, 0x4, 0xffffffff, {{0x3b, 0x4, 0x0, 0x1, 0xec, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@noop, @timestamp_prespec={0x44, 0x4c, 0x20, 0x3, 0x3, [{@loopback, 0xd}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x80000001}, {@multicast1, 0x1}, {@local, 0x5}, {@multicast1, 0x1ae}, {@broadcast, 0xd1e1}, {@loopback, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_prespec={0x44, 0x2c, 0x27, 0x3, 0x9, [{@empty, 0x4}, {@local, 0x4}, {@rand_addr=0x64010101, 0xd}, {@private=0xa010100, 0xd}, {@multicast1, 0x6}]}, @ssrr={0x89, 0x13, 0xa5, [@private=0xa010100, @multicast1, @empty, @broadcast]}, @rr={0x7, 0x1b, 0xb7, [@rand_addr=0x64010102, @loopback, @loopback, @remote, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x8, [{@broadcast, 0x2}, {@multicast2, 0x8}, {@rand_addr=0x64010101}, {@private=0xa010102, 0xfffffffa}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x2c, &(0x7f0000001080)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0x2, 0x0, 0x2, 0xfffe, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000001200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, 0x0, r5, 0x8, &(0x7f00000013c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xe, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001440)=[r5, r5, r9], &(0x7f0000001480)=[{0x3, 0x3, 0x6, 0xc}, {0x0, 0x1, 0x2}, {0x2, 0x1, 0x2, 0x6}, {0x2, 0x2, 0x2, 0xa}], 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 121.830169ms ago: executing program 3 (id=8192): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e557deab516405e1cca1db0db0000f527c44d00b7d1a000"/41], 0x50) close(r5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @broadcast}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @generic={0xae, 0xf, 0x4, 0x800, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r9, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r9, &(0x7f0000000000)=""/252, 0xfc) 120.029957ms ago: executing program 4 (id=8193): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000b00)={{0x3, @netrom}, [@null, @null, @rose, @bcast, @bcast, @remote, @null, @rose]}, &(0x7f0000000240)=0x48, 0x80000) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000a00)=0x6, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x5, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x53, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$qrtr(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$packet(0x11, 0x2, 0x300) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x2004c810) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)=@phonet={0x23, 0x5, 0xfb, 0x4}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="fc43845393f2d042348243051390ca84305b5c0bb6cd7509512520ce76bca45ce451115aac23417c7f6ef3401d86437cc22bcafa11dcade57a88fb8270bda3ac75a6", 0x42}, {&(0x7f0000000340)="95c3280577285ddd7b69c6ef77e463412ae4aaf6b0e7fa9368d0617f798d6032347a3c39a2f2c4a31e87d4c353203b90bb62ab374c012da54fee436617eddb8422b817d09c80da70d3ec4fbcb6c11db122b1f01b29a39fac4f0dd446c7df", 0x5e}, {&(0x7f00000003c0)="69fc8e7bc66072e6958964f78b8c35a762afde1344c50d0b560c8ef0c520a8b6d2c2f9f02a11dc157fdabf165266432fa9c7cd2dba636e4e6ec492194a32abc22c7affdd4560eaa013d2681bd27a54a3b2ac78a7ef0f22c23c16fb936828545982c6b0e53a6b5bc349000af68bcdf09bc5e57321ba61cea7e912c9feb679ce655d34c932f52d65ea44b29b17872123d4a4c424749b66be4ce44efa4e7cf89b27cc718069fa4d7c9f663595854100ef759a01a7ce8e124f477a41bd9b04e3c01b8e597f41670cd365096893c38967979c9149dff5bb222d1d047f7e3690670a268a110e1046c878", 0xe7}, {&(0x7f00000005c0)="af5983685decd643cef7f705a184708d0df505d764310a45834249faa6717183d3c645163bdbd1e943733305998a1cd6c998dba3f7543c7e482317069f04a3cd0c88df97c1ef2c0cf0dc632f4ca54b4f2dd9d0562c6a3e3ed54ae1bea3cb0c732a7ec79330905f523849c92952987eb474baeca39528e934c146b4b692b3b0a56a03a0348b5208f8f989787d631c27255b0d6ff2e41f8b05e1ce4cff0031aebcecbd188282e3263944f60e26a30ab5f05dfa330cffaa2ccce4c46898107c5e8c976c60adadf128c3afebbfb91e", 0xcd}, {&(0x7f00000004c0)="791ad8d4f2bfb8cf84ead4a1a219ccaa9c1aa6bbb03624df7e9f0fdec878c1edb9a51d358ad91910b8d335d8a97199c6ab4831a243b70b049a0a92b7851b7a5e746491e1fd2015dcbbf754d4810b4b6004f159470249dc00f56a3ddc6277d3f1fc61", 0x62}, {&(0x7f00000006c0)="b6170b8c3537d624215edf29ead36c5f5aff73cb4a51bd558e4709e4f96463b97906fda971b7d30239f40806eff78179dd5b5a6879ea8e0eb0a0533b0968107b9a8deecdfea93c0fe821", 0x4a}, {&(0x7f0000000740)="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", 0xff}], 0x7}}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000240)}, {&(0x7f0000000540)="75877620eb5e0cabc665b6ccc675c7e538176a05de4c53e7f9de3224c00c05a01d61ccbca3145ad5875be320bf9dcb2055a400976fe1b3a990456a51d8f9", 0x3e}], 0x2}}, {{&(0x7f0000000980)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x0, 0x2}}, 0x80, &(0x7f0000000a00)}}], 0x3, 0x1) 75.725064ms ago: executing program 0 (id=8194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000e060108000000000000000004000000050001000700000005000100070000000000000900020073797a3100e4fdffffffffffff797a31000000000900020073797a32000000000900020073797a3200"/96], 0x60}}, 0x20008011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300340e39c6951fff7612800a000139d6637f8fa063"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x1, 0x4008440) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0), 0xfffffe81}, {&(0x7f00000003c0)="88b121f1e9e39bf1b820427ad77a372c3a419025ca1fa6836ad93f1ee249266f7289be1aa32f40a584942b8c152dd1da711156823fde1de8f393c77522e4cfed564e56bf22f664ef63d1815032ee561882db65da8192064e932b954ff3cf7e975da018e9fce1449f160e7f9f7804e301fb301f2e9c414fdf45d9a90701772403a84b95eeca61a8b54ced1dc48b740e729a72800c6abe92465859904d21662c775140709b989fac735f5d25e3f03d3aecc67a5c75bf89a147d43ef488105b8b8884465937b8e59e845b600db50925988180ebd768b9690fae41d8760b47c40f0a77", 0xe1}, {&(0x7f0000000140)="167fb0ecab7e4ec1caa505b340450fe16c769addfeaad44a15cd0606b892aeb38b77d5ae641ba373943d5ab58e869e18478067d36b", 0x35}, {&(0x7f0000000500)="4c5031efad075ae341b200382090e9deca4e9ce4c90ae061cba22694c76a38764f72ead7b11bd4c2d52ce4692e56f04537df52d6a72847435fff6ecf05bd9cb9bd2e786fd0c88052a5c1edf5d732909c35251deaf7b363ad72fd975ea60b3e98d9adb0edd3c1a0496054fe2a1ed369fb1c165dbd46c3ca9b40f400"/132, 0x84}], 0x4, &(0x7f00000005c0)=[{0x90, 0xff, 0x3, "4f46f1c05faf07fc906f78454102bb0c39855d612424f83941640206e1d930285e8d2f496efd7cb3bc9e615e08a106747fcd5d201c649acc4ba7d5380c47cec3a5a1f66d608372f5c709ae09ec07e240f149bfa1e1fc51d44fbe7bc01005e5b16ed439f2bc0fdc4ab6bf336f0656faacfac07658a49034a57f250fb2ac132cff"}], 0x90}}], 0x1, 0x4000040) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 64.78083ms ago: executing program 5 (id=8195): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) pwrite64(r0, &(0x7f0000000240)="1313f2a617adf8a877d957f0beb21964c798226280a7751d6b1c7c751c6637e752dbafc6e43a87542fdfe892535e4a70bc2646f4e3ef081d287a7f3b90f2fd68769ff4b7a4ecd2638fa859548c9ad76ce03dbc366aa5897a5c65a0da72dee8e25daa5dfe22e6b8dd4d298b5e24bb8a7fce5cd325ba94161f16319f05018eac3c8de0054d944ba01f8054f057e2c264abdbcae0ff66108dddb8911e812ce7ad031f43b4b1fe1e3b511eccd9aaf061a12dea93a3a9748ba092374243c315", 0xbd, 0x9) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) pwrite64(r0, &(0x7f0000000240)="1313f2a617adf8a877d957f0beb21964c798226280a7751d6b1c7c751c6637e752dbafc6e43a87542fdfe892535e4a70bc2646f4e3ef081d287a7f3b90f2fd68769ff4b7a4ecd2638fa859548c9ad76ce03dbc366aa5897a5c65a0da72dee8e25daa5dfe22e6b8dd4d298b5e24bb8a7fce5cd325ba94161f16319f05018eac3c8de0054d944ba01f8054f057e2c264abdbcae0ff66108dddb8911e812ce7ad031f43b4b1fe1e3b511eccd9aaf061a12dea93a3a9748ba092374243c315", 0xbd, 0x9) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) 847.658µs ago: executing program 1 (id=8196): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0xb, 0x148, 0xf0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x90, 0x0, {0xff0f000000000000}}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb4, &(0x7f00000016c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}, {0x4}, {0xd1b, 0x0, 0x1}, {0x4}], @ipv4=@icmp={{0x11, 0x4, 0x2, 0x3f, 0x96, 0x68, 0x0, 0x4, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, {[@rr={0x7, 0x13, 0x95, [@multicast2, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x37, 0x3, 0xf, [{@empty, 0xfffffff2}, {@empty, 0x6}, {@loopback, 0x5}]}]}}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0xe7dd, {0x12, 0x4, 0x0, 0x3, 0x9, 0x68, 0x8, 0x4, 0x21, 0x7, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x7, "3e9aa0ebbd"}, @timestamp_addr={0x44, 0x24, 0xa9, 0x1, 0x8, [{@rand_addr=0x64010102, 0xdda}, {@multicast2, 0x4}, {@multicast1, 0x7}, {@multicast1, 0xffffffc8}]}, @timestamp={0x44, 0x8, 0xdb, 0x0, 0x3, [0x100]}]}}, "fc4a"}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000000000000000000007000000140000000000000010010000020000000000000004000000"], 0x28}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r8, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) sendmmsg$inet6(r6, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x7, @empty, 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a49ccd846f5615d05b60f841df32be0103a4e78de5e50046bf21f143765fc83d427a525e95507060ab897a021ed48b93186304e9ad6ec304427e7d44c9a5c97a4c92bee254670509b7d15000c7c42af619f9ba30ca26a78195f0a55aa98e83dd19b9b9a816169e751e07361fef2c0e01423fec2abe21e1f08ae5a7cc", 0x7c}, {&(0x7f0000000240)="2ed75f00d14301b9043e94f6bce403f63538063cd50a7465e084cae22cf07a1f32a418ececfe2ea5465e6d7aa997697c94b9ea8279eaecc410a82c018818cf6abb94296feabcf1e15f6abffaa4f3db734b9e5a1e22acd3d829148b5d89cff47f3b66dad3cef6", 0x66}, {&(0x7f0000000300)="998ec8291a122eff1296acfeff28584cee13c3b1561a2668eb5191e670bd0511d61e0d3f5d28b764736c409565380cf9c148a97dc1b2d8c01b5093a2eedb2d17cb9cdc89d93229d05f5f4f92cab88a0dae8fe91b474e4045bacbc8534fcd18d6205082836976d02146cda046e8442ae319a767e0101520648d1ed1a125430676b4140dd365965c68fde871b32a46e37f0dc354", 0x93}, {&(0x7f0000000480)="8dd27ac38c2f7e41fb10a26314fb6491405c89a731d604bc9750491c08b0c0c5c84070ac50af089465abebc160152270a1b21b5f5e016b01fb22dfcb0797b3b4e4626b5d18a5a0b42dea0a3ba88cfd03cf65a99578db78effd993f9a64dbf9907032a28e28209ad002747a5c456c36b2253cebe98f42995bf6540687960181a67ca97077550865a6cfe32bd5a4693137b5ed54f5453c", 0x96}, {&(0x7f0000000540)="a5d6a464c2bccf0bb5996d8b5606f77b6c6227e361512587ad568876e8dfb91c8e36966aa7f77d575e9d050a170620908541d078ae0b9deabd611403f192795226fbdb8127a227f374be1451109dfe15864411e94613cf16230975abb6862589c597a55883322ed39fe24f4707049aa68e0887c573b28f29a6357fad399e4245", 0x80}, {&(0x7f0000000680)="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", 0xffa}, {&(0x7f00000017c0)="6c4af61cacc16bc4638b2c73419538bfb2f7fcaf27c82cc0f239f0656dfd8a7f796cdfc85fde3fb3029ff8699f37bf6d2fafd1301e8b089300f884485ee78699b512409c181eab4b082a078ed1e0b6132397e3c54d1cad38b85e3c75d6a13b4c7038a83a0a5bb9cace0a8998439c1ec450ac9eede435a8f77b2223b06a5a584c59159d45062370fd9e7a22f6823cbc988a4dbe125e9c90", 0x97}], 0x7, &(0x7f00000000c0)=[@dstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0xa6}}], 0x38}}], 0x1, 0x20004004) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r9 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 0s ago: executing program 4 (id=8197): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x14, 0x0, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x10}}, 0x4000000) kernel console output (not intermixed with test programs): gnoring new local tt entry: 01:00:5e:00:00:01 [ 607.107291][T30106] netlink: 'syz.1.6673': attribute type 1 has an invalid length. [ 607.119327][T30106] netlink: 'syz.1.6673': attribute type 2 has an invalid length. [ 607.167170][T30106] netlink: 'syz.1.6673': attribute type 1 has an invalid length. [ 607.217261][T30106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.423568][T30121] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6674'. [ 607.455876][T30119] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6674'. [ 607.563367][T30127] pimreg: entered allmulticast mode [ 607.622947][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.623884][T30131] gre1: entered promiscuous mode [ 607.637181][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.658484][T30131] gre1: entered allmulticast mode [ 608.071484][T30155] wg1 speed is unknown, defaulting to 1000 [ 608.168446][ T6255] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 608.183299][ T6255] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.205127][T30159] xt_policy: output policy not valid in PREROUTING and INPUT [ 608.443659][T30185] geneve3: entered promiscuous mode [ 608.448905][T30185] geneve3: entered allmulticast mode [ 608.466308][ T6255] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 608.475695][ T6255] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 608.550215][ T6255] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 608.578301][ T6255] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 608.740995][T30211] syzkaller0: entered promiscuous mode [ 608.748146][T30211] syzkaller0: entered allmulticast mode [ 608.794182][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 608.809870][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.158579][T30239] veth0: entered promiscuous mode [ 609.186574][T30241] veth0: left promiscuous mode [ 609.428701][T30259] sctp: [Deprecated]: syz.1.6724 (pid 30259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.428701][T30259] Use struct sctp_sack_info instead [ 609.433302][T30262] smc: net device gre0 applied user defined pnetid SYZ1 [ 609.467115][T30263] smc: net device gre0 erased user defined pnetid SYZ1 [ 609.719784][T30285] validate_nla: 5 callbacks suppressed [ 609.719798][T30285] netlink: 'syz.1.6730': attribute type 10 has an invalid length. [ 609.770875][T30284] bond2: entered promiscuous mode [ 609.777146][T30284] bond2: entered allmulticast mode [ 609.786107][T30284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.822310][T30285] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 609.891776][T30294] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 609.932140][T30294] tipc: Enabled bearer , priority 0 [ 609.961915][T30294] syzkaller0: entered promiscuous mode [ 609.976862][T30294] syzkaller0: entered allmulticast mode [ 609.990235][T30294] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 610.062535][T30294] tipc: Resetting bearer [ 610.216482][T30320] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 610.249410][T30323] lo: entered allmulticast mode [ 610.486843][T30341] syzkaller0: entered promiscuous mode [ 610.492479][T30341] syzkaller0: entered allmulticast mode [ 610.521435][T30341] tipc: Enabled bearer , priority 0 [ 610.539878][T30281] tipc: Resetting bearer [ 610.586551][T30281] tipc: Disabling bearer [ 610.631285][T30340] tipc: Resetting bearer [ 610.704133][T30340] tipc: Disabling bearer [ 610.867890][T30358] __nla_validate_parse: 15 callbacks suppressed [ 610.867908][T30358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6751'. [ 611.048400][T30375] netlink: 'syz.3.6752': attribute type 4 has an invalid length. [ 611.067814][T30375] netlink: 'syz.3.6752': attribute type 4 has an invalid length. [ 611.365451][T30397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6762'. [ 611.468812][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x25 [ 611.582478][T30416] netlink: 'syz.0.6763': attribute type 12 has an invalid length. [ 611.626081][T30416] xt_NFQUEUE: number of total queues is 0 [ 611.648725][T30416] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 611.807743][T30430] xt_hashlimit: size too large, truncated to 1048576 [ 611.923799][ T13] net_ratelimit: 11 callbacks suppressed [ 611.923815][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.925080][T30442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6773'. [ 611.929539][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.987881][T30437] veth3: entered promiscuous mode [ 612.483552][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.498067][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.623537][T30474] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6781'. [ 612.966835][ T5148] Bluetooth: hci1: command tx timeout [ 613.050415][ T6255] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.065776][ T6255] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.080243][T30519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6794'. [ 613.257163][T30526] openvswitch: netlink: IP tunnel TTL not specified. [ 613.358068][T30536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'. [ 613.374241][T30535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'. [ 613.383193][T30536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6798'. [ 613.392234][T30535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6798'. [ 613.424306][T30536] netlink: 'syz.3.6798': attribute type 6 has an invalid length. [ 613.432106][T30535] netlink: 'syz.3.6798': attribute type 6 has an invalid length. [ 613.664781][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.679013][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.215177][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.239844][T30590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6816'. [ 614.335739][T30596] netlink: 'syz.5.6817': attribute type 1 has an invalid length. [ 614.381316][T30596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 614.394258][ T30] audit: type=1800 audit(1767162568.671:3): pid=30596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6817" name="memory.events" dev="tmpfs" ino=2332 res=0 errno=0 [ 614.402227][T30596] macvlan3: entered promiscuous mode [ 614.421268][T30596] macvlan3: entered allmulticast mode [ 614.436728][T30596] bond7: entered allmulticast mode [ 614.441935][T30596] bond7: entered promiscuous mode [ 614.448503][T30596] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 614.474187][ T30] audit: type=1804 audit(1767162568.671:4): pid=30596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6817" name="/newroot/456/memory.events" dev="tmpfs" ino=2332 res=1 errno=0 [ 614.497429][T30596] team0: Port device macvlan3 added [ 614.508573][T30602] xfrm1: entered promiscuous mode [ 614.572682][T30602] xfrm1: entered allmulticast mode [ 614.654734][T30612] netlink: 'syz.0.6822': attribute type 2 has an invalid length. [ 614.847011][T30626] netlink: 'syz.5.6826': attribute type 21 has an invalid length. [ 614.891569][T30626] bond0: entered promiscuous mode [ 614.892249][T30636] sctp: [Deprecated]: syz.1.6828 (pid 30636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.892249][T30636] Use struct sctp_sack_info instead [ 614.911872][T30626] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 614.921186][T30626] debugfs: 'hsr1' already exists in 'hsr' [ 614.938780][T30626] Cannot create hsr debugfs directory [ 614.953904][T30626] hsr1: entered promiscuous mode [ 615.769512][T30692] netlink: 'syz.1.6847': attribute type 7 has an invalid length. [ 616.375829][T30741] __nla_validate_parse: 10 callbacks suppressed [ 616.375846][T30741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6862'. [ 616.529009][T30748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6868'. [ 616.586406][T30754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6865'. [ 616.697680][T30766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6865'. [ 616.729506][T30766] netlink: 'syz.0.6865': attribute type 5 has an invalid length. [ 616.743803][T30766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6865'. [ 616.787026][T30748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.798784][T30748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.815870][T30748] bond0 (unregistering): (slave .): Releasing backup interface [ 616.829702][T30748] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 616.848495][T30748] bond0 (unregistering): Released all slaves [ 616.895920][T30781] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6873'. [ 617.052131][T30783] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 617.062347][T30785] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 617.070746][T30783] netlink: 'syz.4.6874': attribute type 2 has an invalid length. [ 617.080121][T30785] netlink: 'syz.4.6874': attribute type 2 has an invalid length. [ 617.302907][ T2978] net_ratelimit: 12 callbacks suppressed [ 617.302925][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 617.324359][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.509810][T30759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.550983][T30759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.819744][T30759] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 617.845692][T25599] block nbd5: Possible stuck request ffff888025328000: control (read@0,1024B). Runtime 120 seconds [ 617.856554][T25599] block nbd5: Possible stuck request ffff888025328200: control (read@1024,1024B). Runtime 120 seconds [ 617.868039][T25599] block nbd5: Possible stuck request ffff888025328400: control (read@2048,1024B). Runtime 120 seconds [ 617.878109][ T1143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 617.881053][T25599] block nbd5: Possible stuck request ffff888025328600: control (read@3072,1024B). Runtime 120 seconds [ 617.893841][ T1143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.003923][T30765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6870'. [ 618.045790][T30766] geneve2: entered promiscuous mode [ 618.051026][T30766] geneve2: entered allmulticast mode [ 618.087667][ T2978] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.129596][ T2978] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 618.153748][ T2978] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.174681][ T2978] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 618.186526][ T2978] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.196187][ T2978] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 618.239185][ T2978] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.249616][T17300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.261783][ T2978] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 618.274388][ T1143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.366720][T30818] netlink: 'syz.3.6885': attribute type 3 has an invalid length. [ 618.374723][T30818] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6885'. [ 618.385250][T30818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6885'. [ 618.396116][T30818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6885'. [ 618.424062][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 618.439067][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.488462][T30818] erspan0: entered promiscuous mode [ 618.521795][T30818] batadv_slave_1: entered promiscuous mode [ 618.531093][T30818] batadv_slave_1: left promiscuous mode [ 618.540240][T30818] erspan0: left promiscuous mode [ 618.724705][ T1143] wlan0: Trigger new scan to find an IBSS to join [ 618.910359][T30854] gtp0: entered promiscuous mode [ 618.992980][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.007331][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.045648][ T5908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.174608][T30865] sctp: [Deprecated]: syz.5.6904 (pid 30865) Use of int in max_burst socket option. [ 619.174608][T30865] Use struct sctp_assoc_value instead [ 619.285450][ T1157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.298742][ T1157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.414781][T30886] netlink: 'syz.5.6910': attribute type 1 has an invalid length. [ 619.540750][T30895] bond8: Invalid ad_actor_system MAC address. [ 619.552311][T30895] bond8: option ad_actor_system: invalid value (1) [ 619.561921][T30895] bond8 (unregistering): Released all slaves [ 619.605192][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.619333][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.306901][T30942] team1: entered promiscuous mode [ 620.311951][T30942] team1: entered allmulticast mode [ 620.334219][T17300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.607679][T30958] netlink: 'syz.0.6929': attribute type 1 has an invalid length. [ 620.607796][T30957] netlink: 'syz.0.6929': attribute type 1 has an invalid length. [ 620.624246][T30956] netlink: 'syz.5.6930': attribute type 10 has an invalid length. [ 620.634582][T30956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.645235][T30956] batadv0: entered promiscuous mode [ 620.650745][T30956] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 621.010504][T30967] netlink: 'syz.3.6936': attribute type 10 has an invalid length. [ 621.041133][T30967] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 621.340570][T30988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.402066][T30988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.424542][T30988] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 621.451449][T30988] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 621.459061][T31006] __nla_validate_parse: 19 callbacks suppressed [ 621.459076][T31006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6947'. [ 621.557457][T31012] syzkaller0: entered promiscuous mode [ 621.563262][T31012] syzkaller0: entered allmulticast mode [ 621.766802][ T1157] wlan0: Trigger new scan to find an IBSS to join [ 621.991045][T31033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6952'. [ 622.101171][T31039] netlink: 'syz.5.6953': attribute type 8 has an invalid length. [ 622.536889][T31056] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6959'. [ 622.550222][T31059] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6961'. [ 622.641011][T31062] net_ratelimit: 12 callbacks suppressed [ 622.641026][T31062] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 622.681830][T31064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6964'. [ 622.694367][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 622.703332][T31071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6963'. [ 622.708509][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.739645][ T1157] wlan0: Creating new IBSS network, BSSID 12:d4:ec:76:07:8e [ 622.764358][T31075] sctp: [Deprecated]: syz.5.6966 (pid 31075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.764358][T31075] Use struct sctp_sack_info instead [ 622.814407][T31064] vlan2: entered allmulticast mode [ 622.819542][T31064] veth1: entered allmulticast mode [ 622.831706][T31078] sctp: [Deprecated]: syz.0.6967 (pid 31078) Use of int in maxseg socket option. [ 622.831706][T31078] Use struct sctp_assoc_value instead [ 622.888509][T31069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.929881][T31069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.969756][T31085] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.6968'. [ 622.989679][T31085] netlink: ct family unspecified [ 623.049405][T31076] syzkaller1: entered promiscuous mode [ 623.064175][T31076] syzkaller1: entered allmulticast mode [ 623.095762][T31084] veth0: entered promiscuous mode [ 623.208873][T31083] veth0: left promiscuous mode [ 623.244341][ T1143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.260093][ T1143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.470882][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6978'. [ 623.486875][T31118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6978'. [ 623.526423][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6978'. [ 623.535678][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.814886][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.829495][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.250011][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.264577][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.266075][T31174] netlink: 'syz.0.6999': attribute type 1 has an invalid length. [ 624.351804][T31174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.391708][T31178] bond5: (slave geneve3): making interface the new active one [ 624.396034][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.402288][T31178] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 624.426594][ T1143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.468240][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.515064][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.525223][T31184] xt_hashlimit: size too large, truncated to 1048576 [ 624.543763][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.604235][T31190] netlink: 'syz.3.7006': attribute type 5 has an invalid length. [ 624.632306][T31190] netlink: 'syz.3.7006': attribute type 6 has an invalid length. [ 624.725719][T31192] netlink: 'syz.1.7008': attribute type 2 has an invalid length. [ 624.736452][T31206] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 624.897962][T31221] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 625.014155][T31228] netlink: 'syz.0.7018': attribute type 39 has an invalid length. [ 625.025171][T31230] syzkaller0: entered promiscuous mode [ 625.030780][T31230] syzkaller0: entered allmulticast mode [ 625.256881][T31246] Bluetooth: MGMT ver 1.23 [ 625.337628][T31249] syz_tun: entered allmulticast mode [ 625.421473][T31257] tipc: Enabled bearer , priority 0 [ 625.430045][T31257] syzkaller0: entered promiscuous mode [ 625.436771][T31257] syzkaller0: entered allmulticast mode [ 625.465854][T31257] tipc: Resetting bearer [ 625.590499][T31256] tipc: Resetting bearer [ 625.665804][T31256] tipc: Disabling bearer [ 625.879302][T31284] macvlan0: entered promiscuous mode [ 626.107864][T31302] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 626.778018][T31337] __nla_validate_parse: 78 callbacks suppressed [ 626.778037][T31337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7047'. [ 627.033038][T31356] validate_nla: 1 callbacks suppressed [ 627.033055][T31356] netlink: 'syz.0.7053': attribute type 21 has an invalid length. [ 627.054607][T31356] IPv6: NLM_F_CREATE should be specified when creating new route [ 627.065276][T31356] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7053'. [ 627.360403][T31379] netlink: 'syz.5.7060': attribute type 12 has an invalid length. [ 627.494098][T31384] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7061'. [ 627.638135][T31400] netlink: 'syz.5.7065': attribute type 3 has an invalid length. [ 627.659848][T31406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7066'. [ 627.815336][T31416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7071'. [ 628.023284][T31431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7077'. [ 628.039274][T31431] net_ratelimit: 79 callbacks suppressed [ 628.039290][T31431] openvswitch: netlink: Flow actions attr not present in new flow. [ 628.087214][ T3748] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.102311][ T3748] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.205038][T31440] xt_hashlimit: size too large, truncated to 1048576 [ 628.381556][T31452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7085'. [ 628.423903][T31454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7085'. [ 628.461435][T31456] netlink: 192324 bytes leftover after parsing attributes in process `syz.4.7086'. [ 628.662775][ T6255] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.679063][ T6255] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.698690][T31472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7092'. [ 629.057684][T31498] netlink: 'syz.0.7100': attribute type 4 has an invalid length. [ 629.059696][T31484] veth3: entered allmulticast mode [ 629.085158][T31498] `: renamed from bond0 [ 629.263078][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.278450][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.832768][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.847202][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.272400][T31565] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 630.555313][T31584] syzkaller1: entered promiscuous mode [ 630.560867][T31584] syzkaller1: entered allmulticast mode [ 630.689282][T31604] netlink: 'syz.3.7130': attribute type 1 has an invalid length. [ 630.738546][T31604] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 630.750607][T31604] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 630.793760][T31610] netlink: 'syz.0.7131': attribute type 1 has an invalid length. [ 630.940550][T31604] gretap1: entered promiscuous mode [ 631.154671][T31635] tipc: Enabling of bearer rejected, already enabled [ 631.169527][T31641] rdma_op ffff8880539419f0 conn xmit_rdma 0000000000000000 [ 631.182000][T31640] 8021q: VLANs not supported on ipvlan1 [ 631.202894][T31640] xt_hashlimit: invalid rate [ 631.263346][T31641] syzkaller1: entered promiscuous mode [ 631.279973][T31641] syzkaller1: entered allmulticast mode [ 631.681711][T31676] netlink: 'syz.5.7150': attribute type 1 has an invalid length. [ 631.778264][T31676] 8021q: adding VLAN 0 to HW filter on device bond8 [ 631.877424][T31683] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 631.923992][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.054331][T31701] __nla_validate_parse: 24 callbacks suppressed [ 632.054349][T31701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7156'. [ 632.071669][T31695] bridge0: port 2(syz_tun) entered blocking state [ 632.080833][T31695] bridge0: port 2(syz_tun) entered disabled state [ 632.089146][T31701] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7156'. [ 632.093500][T31707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7158'. [ 632.109205][T31695] syz_tun: entered allmulticast mode [ 632.116834][T31695] syz_tun: entered promiscuous mode [ 632.368666][T31721] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20001 [ 632.437649][T31730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 632.547584][T31733] netlink: 'syz.4.7166': attribute type 1 has an invalid length. [ 632.616197][T31746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 633.483555][ T6018] net_ratelimit: 13 callbacks suppressed [ 633.483573][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.504878][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.521254][T31777] bridge0: entered allmulticast mode [ 633.642232][T31786] tipc: Enabling of bearer rejected, failed to enable media [ 633.702198][T31785] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 633.858912][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7184'. [ 633.917520][T31801] veth9: entered promiscuous mode [ 633.935958][T31801] veth9: entered allmulticast mode [ 633.990040][T31807] netlink: 'syz.1.7186': attribute type 1 has an invalid length. [ 634.013751][T31807] netlink: 'syz.1.7186': attribute type 1 has an invalid length. [ 634.087913][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.101999][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 634.168597][T31811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7188'. [ 634.194272][T31811] netlink: 'syz.5.7188': attribute type 1 has an invalid length. [ 634.250152][T31824] openvswitch: netlink: Flow actions attr not present in new flow. [ 634.402490][T31840] netlink: 'syz.3.7197': attribute type 1 has an invalid length. [ 634.452406][T31840] bond2: (slave veth5): Enslaving as an active interface with a down link [ 634.463883][T31840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7197'. [ 634.475499][T31840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.654518][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.668800][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.040750][T31829] netlink: 'syz.5.7195': attribute type 10 has an invalid length. [ 635.053623][T31829] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7195'. [ 635.231476][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 635.245653][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.267415][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7207'. [ 635.318701][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7210'. [ 635.327718][T31878] netlink: 'syz.3.7210': attribute type 30 has an invalid length. [ 635.393338][T31884] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 635.794689][T31921] macvtap1: entered allmulticast mode [ 635.810934][T31921] veth0_macvtap: entered allmulticast mode [ 635.861312][T31925] netlink: 'syz.4.7223': attribute type 2 has an invalid length. [ 635.978688][T31928] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 635.995837][T31928] bond3: entered promiscuous mode [ 636.001080][T31928] bond3: entered allmulticast mode [ 636.012205][T31928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.196373][T31953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7230'. [ 636.336870][T31967] netlink: 'syz.3.7233': attribute type 5 has an invalid length. [ 636.447444][T31968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.448888][T31974] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 636.524424][T31962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.557573][T31962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.668069][T31962] xfrm1: left promiscuous mode [ 636.673180][T31962] xfrm1: left allmulticast mode [ 636.678450][T31962] gtp0: left promiscuous mode [ 636.686380][T31962] veth3: left allmulticast mode [ 636.691389][T31962] gretap1: left promiscuous mode [ 636.701703][T31962] veth0_macvtap: left allmulticast mode [ 636.707607][T31962] macvtap1: left allmulticast mode [ 636.717593][T31962] bond3: left promiscuous mode [ 636.722353][T31962] bond3: left allmulticast mode [ 636.767744][T31967] geneve2: entered promiscuous mode [ 636.780932][T31988] netlink: 'syz.5.7239': attribute type 17 has an invalid length. [ 636.788012][T31967] geneve2: entered allmulticast mode [ 636.800876][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.826467][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.835744][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 636.867130][T31988] gretap0: entered promiscuous mode [ 636.875162][T31988] gretap0: left promiscuous mode [ 636.887832][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.897748][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.909104][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 636.918218][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.929468][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.939522][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 636.977267][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.987479][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.998402][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 637.053557][T31994] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 637.085347][T31994] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 637.102200][T31994] gretap1: entered promiscuous mode [ 637.110947][T31994] gretap1: entered allmulticast mode [ 637.139177][T32008] __nla_validate_parse: 7 callbacks suppressed [ 637.139192][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7245'. [ 637.415940][T32028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7248'. [ 637.487482][T32030] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 637.625478][T32047] tipc: Enabled bearer , priority 13 [ 637.816250][T32058] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 637.924907][T32066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7262'. [ 637.961613][T32066] validate_nla: 1 callbacks suppressed [ 637.961627][T32066] netlink: 'syz.1.7262': attribute type 2 has an invalid length. [ 637.964996][T32070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7265'. [ 637.973796][T32068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7264'. [ 638.008597][T32068] pimreg: entered allmulticast mode [ 638.167846][T32077] bond9: Unable to set up delay as MII monitoring is disabled [ 638.219078][T32077] bond9 (unregistering): Released all slaves [ 638.466763][T32112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7276'. [ 638.560571][T32129] netlink: 'syz.1.7281': attribute type 16 has an invalid length. [ 638.569133][T32129] netlink: 'syz.1.7281': attribute type 17 has an invalid length. [ 638.607098][T32129] syz_tun: left allmulticast mode [ 638.620851][T32129] net_ratelimit: 12 callbacks suppressed [ 638.620862][T32129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.636548][T32116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.660110][ T5908] tipc: Node number set to 4035721637 [ 638.852827][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 638.867550][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.024103][T32145] veth11: entered promiscuous mode [ 639.029256][T32145] veth11: entered allmulticast mode [ 639.143188][T32158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7289'. [ 639.230642][T32158] xt_l2tp: v2 tid > 0xffff: 1114244 [ 639.301983][T32169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7291'. [ 639.403933][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.418220][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.489141][T32183] netlink: 'syz.5.7297': attribute type 13 has an invalid length. [ 639.517427][T32183] veth0_macvtap: left promiscuous mode [ 639.535182][T32183] macvtap0: entered allmulticast mode [ 639.560694][T32183] macvtap0: refused to change device tx_queue_len [ 639.583748][T32184] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 639.659220][T32191] Cannot find add_set index 2 as target [ 639.701594][T32198] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7302'. [ 639.779284][T32198] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 639.794454][T32198] bond0 (unregistering): Released all slaves [ 639.949615][T32211] `: entered promiscuous mode [ 639.955634][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.955663][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.980753][T32213] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7307'. [ 639.994376][T32211] bond_slave_0: entered promiscuous mode [ 640.000265][T32211] bond_slave_1: entered promiscuous mode [ 640.279209][T32231] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 640.302814][T32231] mac80211_hwsim hwsim52 syzkaller0: left allmulticast mode [ 640.400785][T32247] bond0: (slave vlan1): Opening slave failed [ 640.462802][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.477110][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.840840][T32273] netlink: 'syz.5.7323': attribute type 3 has an invalid length. [ 640.875792][T32273] netlink: 'syz.5.7323': attribute type 1 has an invalid length. [ 640.884382][T32273] NCSI netlink: No device for ifindex 813332851 [ 641.095841][T32285] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 641.761774][T32341] netlink: 'syz.4.7345': attribute type 6 has an invalid length. [ 641.811162][T32341] netlink: 'syz.4.7345': attribute type 6 has an invalid length. [ 642.186700][T32378] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 642.280459][T32380] lo: Caught tx_queue_len zero misconfig [ 642.302036][T32382] __nla_validate_parse: 7 callbacks suppressed [ 642.302052][T32382] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7358'. [ 642.325605][T32357] infiniband !yz!: set down [ 642.331877][T32357] infiniband !yz!: added team_slave_0 [ 642.342014][T32357] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 642.347821][T32357] infiniband !yz!: Couldn't open port 1 [ 642.388402][T32357] RDS/IB: !yz!: added [ 642.393526][T32357] smc: adding ib device !yz! with port count 1 [ 642.406100][T32357] smc: ib device !yz! port 1 has no pnetid [ 642.776574][T32405] bond0: entered promiscuous mode [ 642.781651][T32405] syz_tun: entered promiscuous mode [ 642.815679][T32405] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 642.851171][T32405] batadv0: entered promiscuous mode [ 642.865140][T32405] debugfs: 'hsr1' already exists in 'hsr' [ 642.881790][T32405] Cannot create hsr debugfs directory [ 642.911959][T32405] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 643.030150][T32425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7368'. [ 643.216031][T32439] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7372'. [ 643.242692][T32439] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7372'. [ 643.321127][T32445] tipc: Enabled bearer , priority 0 [ 643.419571][T32451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7375'. [ 643.450894][T32445] syzkaller0: entered promiscuous mode [ 643.457707][T32445] syzkaller0: entered allmulticast mode [ 643.468653][T32445] tipc: Resetting bearer [ 643.563552][T32443] tipc: Resetting bearer [ 644.092919][ T3464] net_ratelimit: 15 callbacks suppressed [ 644.092955][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.113482][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 644.632914][ T1034] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.647659][ T1034] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.088399][T32443] tipc: Disabling bearer [ 645.172915][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.187593][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.268732][T32475] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 645.285193][T32478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7380'. [ 645.447197][T32489] netlink: 'syz.0.7385': attribute type 1 has an invalid length. [ 645.534112][T32489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.705123][T32492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.721403][T32492] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 645.733760][T32492] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 645.744938][ T3748] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.759359][ T3748] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.840143][T32494] veth7: entered promiscuous mode [ 645.851160][T32494] bond0: (slave veth7): Enslaving as an active interface with a down link [ 645.876056][T32489] vlan2: entered allmulticast mode [ 645.888632][T32489] bond0: entered allmulticast mode [ 645.991278][T32506] syzkaller1: entered promiscuous mode [ 646.023388][T32506] syzkaller1: entered allmulticast mode [ 646.329044][ T3748] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.439751][T32542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7396'. [ 646.479923][T32542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7396'. [ 646.803259][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 646.873467][T32572] team0: Caught tx_queue_len zero misconfig [ 646.920377][T32581] xt_TCPMSS: Only works on TCP SYN packets [ 646.928942][T32581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7408'. [ 647.309913][T32609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7414'. [ 647.357746][T32609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 647.664243][T32626] syzkaller1: entered promiscuous mode [ 647.669755][T32626] syzkaller1: entered allmulticast mode [ 647.897478][T32638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7423'. [ 647.925650][T25599] block nbd5: Possible stuck request ffff888025328000: control (read@0,1024B). Runtime 150 seconds [ 647.936497][T25599] block nbd5: Possible stuck request ffff888025328200: control (read@1024,1024B). Runtime 150 seconds [ 647.948548][T25599] block nbd5: Possible stuck request ffff888025328400: control (read@2048,1024B). Runtime 150 seconds [ 647.959687][T25599] block nbd5: Possible stuck request ffff888025328600: control (read@3072,1024B). Runtime 150 seconds [ 648.043994][T32643] veth15: entered promiscuous mode [ 648.049297][T32643] veth15: entered allmulticast mode [ 648.245478][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7428'. [ 648.263868][T32648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7428'. [ 648.359463][T32651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7429'. [ 648.535714][T32664] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7433'. [ 648.563117][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.593536][T32662] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7432'. [ 648.934051][T32684] netlink: 'syz.0.7435': attribute type 29 has an invalid length. [ 648.959742][T32687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7441'. [ 649.174409][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 649.182512][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 649.200648][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 649.210991][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 649.221937][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 649.337898][T32693] wg1 speed is unknown, defaulting to 1000 [ 649.384294][T32696] netlink: 'syz.1.7443': attribute type 26 has an invalid length. [ 649.413529][ T78] net_ratelimit: 12 callbacks suppressed [ 649.413545][ T78] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 649.434609][ T78] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 649.566857][T32702] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 649.862773][T32714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7449'. [ 649.883419][T32714] syz_tun: left allmulticast mode [ 649.888484][T32714] syz_tun: left promiscuous mode [ 649.904301][T32714] bridge0: port 2(syz_tun) entered disabled state [ 649.924294][T32714] bridge_slave_0: left allmulticast mode [ 649.930040][T32714] bridge_slave_0: left promiscuous mode [ 649.944046][T32714] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.984428][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 649.998515][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.011761][T32713] can: request_module (can-proto-0) failed. [ 650.531937][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 650.547789][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.598459][T32744] batman_adv: batadv0: Adding interface: veth11 [ 650.605641][T32744] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 650.631139][T32744] batman_adv: batadv0: Interface activated: veth11 [ 650.655055][T32748] netlink: 'syz.0.7460': attribute type 1 has an invalid length. [ 650.928524][T32763] netlink: 'syz.4.7463': attribute type 1 has an invalid length. [ 651.021825][T32765] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 651.073845][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.088571][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.244542][ T313] bond5: (slave lo): Device is not bonding slave [ 651.251014][ T313] bond5: option active_slave: invalid value (lo) [ 651.264654][ T313] bond5 (unregistering): Released all slaves [ 651.284821][ T5148] Bluetooth: hci0: command tx timeout [ 651.299613][T32693] chnl_net:caif_netlink_parms(): no params data found [ 651.468593][ T330] bond0: entered promiscuous mode [ 651.480222][ T330] bond_slave_0: entered promiscuous mode [ 651.486482][ T330] bond_slave_1: entered promiscuous mode [ 651.493797][ T330] batadv0: entered promiscuous mode [ 651.500270][ T330] debugfs: 'hsr1' already exists in 'hsr' [ 651.506169][ T330] Cannot create hsr debugfs directory [ 651.511636][ T330] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 651.523219][ T330] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 651.535643][ T330] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 651.602147][ T338] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 651.636475][ T330] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 651.645298][ T330] bond5: option packets_per_slave: allowed values 0 - 65535 [ 651.666439][ T330] bond5 (unregistering): Released all slaves [ 651.889386][T32693] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.896764][T32693] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.904906][T32693] bridge_slave_0: entered allmulticast mode [ 651.911885][T32693] bridge_slave_0: entered promiscuous mode [ 651.923792][ T5148] Bluetooth: hci2: command 0x0401 tx timeout [ 651.941320][T32693] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.948574][T32693] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.957142][T32693] bridge_slave_1: entered allmulticast mode [ 651.965013][T32693] bridge_slave_1: entered promiscuous mode [ 651.974528][ T357] syzkaller0: entered promiscuous mode [ 651.980013][ T357] syzkaller0: entered allmulticast mode [ 652.105595][T32693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.140838][T32693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.190509][ T371] batadv0 (unregistering): left promiscuous mode [ 652.356186][ T383] netlink: 'syz.3.7486': attribute type 1 has an invalid length. [ 652.385369][T32693] team0: Port device team_slave_0 added [ 652.395275][T32693] team0: Port device team_slave_1 added [ 652.474881][ T392] netlink: 'syz.1.7488': attribute type 15 has an invalid length. [ 652.515769][T32693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.536179][T32693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.565313][T32693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.578067][T32693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.585464][T32693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.612031][T32693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.724969][ T404] __nla_validate_parse: 13 callbacks suppressed [ 652.724983][ T404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7493'. [ 652.812288][T32693] hsr_slave_0: entered promiscuous mode [ 652.830120][T32693] hsr_slave_1: entered promiscuous mode [ 652.848781][T32693] debugfs: 'hsr0' already exists in 'hsr' [ 652.863665][T32693] Cannot create hsr debugfs directory [ 653.002079][ T418] netlink: 'syz.1.7499': attribute type 1 has an invalid length. [ 653.225539][ T434] netlink: 536 bytes leftover after parsing attributes in process `syz.0.7503'. [ 653.277391][ T439] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7507'. [ 653.313165][ T438] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7507'. [ 653.329007][T32693] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.360149][T32693] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.370618][ T5832] Bluetooth: hci0: command tx timeout [ 653.376187][T32693] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 653.419054][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7507'. [ 653.464989][ T450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7509'. [ 653.477550][T32693] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.487876][T32693] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.499911][T32693] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 653.605011][T32693] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.621492][T32693] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.641825][T32693] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 653.709471][ T465] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7514'. [ 653.852174][T32693] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.867863][ T476] netlink: 'syz.4.7517': attribute type 12 has an invalid length. [ 653.878681][ T476] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7517'. [ 653.890949][T32693] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.915840][T32693] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 653.944514][ T483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7517'. [ 653.984733][ T482] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.7519'. [ 654.104930][ T486] netlink: 'syz.1.7520': attribute type 4 has an invalid length. [ 654.298720][ T492] xt_CT: No such helper "syz1" [ 654.333363][ T493] xt_CT: No such helper "syz1" [ 654.363691][T32693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 654.389747][T32693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 654.406827][T32693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 654.465020][T32693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 654.468294][ T513] SET target dimension over the limit! [ 654.490762][ T513] net_ratelimit: 12 callbacks suppressed [ 654.490776][ T513] openvswitch: netlink: Flow actions attr not present in new flow. [ 654.547500][ T509] wg1 speed is unknown, defaulting to 1000 [ 654.634463][ T530] netlink: 'syz.3.7528': attribute type 5 has an invalid length. [ 654.654480][ T529] netlink: 'syz.3.7528': attribute type 5 has an invalid length. [ 654.721540][ T534] netlink: 'syz.4.7529': attribute type 62 has an invalid length. [ 654.744319][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 654.759189][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 654.779725][T32693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.886021][T32693] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.915722][T22458] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.922913][T22458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.965573][T13310] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.972747][T13310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.365493][ T144] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 655.380171][ T144] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.443323][ T5832] Bluetooth: hci0: command tx timeout [ 655.671372][T32693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.944928][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 655.959130][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.073592][ T593] syzkaller0: entered promiscuous mode [ 656.100232][ T593] syzkaller0: entered allmulticast mode [ 656.160211][ T593] tipc: Enabled bearer , priority 0 [ 656.188814][ T592] tipc: Resetting bearer [ 656.265239][ T592] tipc: Disabling bearer [ 656.436819][T32693] veth0_vlan: entered promiscuous mode [ 656.466166][T32693] veth1_vlan: entered promiscuous mode [ 656.523929][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.538936][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.575547][T32693] veth0_macvtap: entered promiscuous mode [ 656.608455][T32693] veth1_macvtap: entered promiscuous mode [ 656.647361][ T617] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.662016][ T6005] IPVS: starting estimator thread 0... [ 656.671219][ T624] : renamed from hsr0 [ 656.753222][T32693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.776349][ T629] IPVS: using max 28 ests per chain, 67200 per kthread [ 656.796996][T32693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.823567][ T634] validate_nla: 1 callbacks suppressed [ 656.823581][ T634] netlink: 'syz.0.7556': attribute type 1 has an invalid length. [ 656.851780][T19091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.865077][T19091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.895019][ T644] netlink: 'syz.0.7556': attribute type 1 has an invalid length. [ 656.937236][ T634] bond6: entered promiscuous mode [ 656.942415][ T634] bond6: entered allmulticast mode [ 656.952978][ T634] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.962379][T19091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.977082][ T639] netlink: 'syz.1.7557': attribute type 3 has an invalid length. [ 656.997116][T19091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.133789][T19091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.141698][T19091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.206980][ T656] xt_CT: No such helper "snmp_trap" [ 657.426853][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.444829][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.525697][ T5148] Bluetooth: hci0: command tx timeout [ 657.866111][ T712] mac80211_hwsim hwsim66 wlan0: Caught tx_queue_len zero misconfig [ 657.924856][ T709] __nla_validate_parse: 14 callbacks suppressed [ 657.924872][ T709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7576'. [ 658.350139][ T731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7582'. [ 658.365476][ T735] netlink: 'syz.4.7583': attribute type 5 has an invalid length. [ 658.397112][ T731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7582'. [ 658.411847][ T735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7583'. [ 658.444546][ T731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7582'. [ 658.546954][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7588'. [ 658.609831][ T752] netlink: 'syz.0.7590': attribute type 1 has an invalid length. [ 658.641474][ T754] syzkaller0: entered promiscuous mode [ 658.647299][ T752] netlink: 'syz.0.7590': attribute type 2 has an invalid length. [ 658.647330][ T752] netlink: 'syz.0.7590': attribute type 2 has an invalid length. [ 658.668475][ T754] syzkaller0: entered allmulticast mode [ 658.685721][ T751] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7589'. [ 658.788666][ T762] netlink: 'syz.4.7592': attribute type 1 has an invalid length. [ 658.839756][ T762] bond5: entered promiscuous mode [ 658.846955][ T762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 658.895764][ T762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7592'. [ 658.927563][ T762] bond5: entered allmulticast mode [ 658.966693][ T762] bond5: (slave bridge0): making interface the new active one [ 658.995914][ T762] bridge0: entered promiscuous mode [ 659.007563][ T762] bridge0: entered allmulticast mode [ 659.027380][ T762] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 659.135586][ T790] netlink: 'syz.0.7599': attribute type 39 has an invalid length. [ 659.603645][ T5148] Bluetooth: hci0: command 0x0405 tx timeout [ 659.628412][ T826] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 659.640799][ T823] xt_l2tp: v2 doesn't support IP mode [ 659.640987][ T826] netlink: 'syz.4.7611': attribute type 5 has an invalid length. [ 659.666008][ T826] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7611'. [ 659.684110][T22458] net_ratelimit: 12 callbacks suppressed [ 659.684125][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 659.705867][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.723668][ T830] tipc: Enabled bearer , priority 0 [ 659.735959][ T832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7614'. [ 659.736706][ T830] syzkaller0: MTU too low for tipc bearer [ 659.750713][ T830] tipc: Disabling bearer [ 659.777514][ T832] bond6: option coupled_control: invalid value (83) [ 659.785643][ T832] bond6 (unregistering): Released all slaves [ 660.223532][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 660.237724][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.764605][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 660.779373][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.025629][ T886] macsec1: entered promiscuous mode [ 661.031324][ T888] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20000 [ 661.045646][ T886] macsec1: entered allmulticast mode [ 661.055245][ T886] bond3: (slave macsec1): Error -34 calling dev_set_mtu [ 661.304334][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 661.318475][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.873668][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 661.887900][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.164986][ T5148] Bluetooth: hci5: command 0x0406 tx timeout [ 662.472033][ T963] validate_nla: 1 callbacks suppressed [ 662.472048][ T963] netlink: 'syz.5.7650': attribute type 11 has an invalid length. [ 662.535375][ T6187] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.556701][ T963] netlink: 'syz.5.7650': attribute type 11 has an invalid length. [ 662.613830][ T6187] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.623120][ T6187] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.649396][ T6187] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.717482][ T983] netlink: 'syz.5.7655': attribute type 11 has an invalid length. [ 662.759635][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.793401][ T6187] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 662.804566][ T987] netlink: 'syz.4.7654': attribute type 29 has an invalid length. [ 663.680497][ T1015] __nla_validate_parse: 10 callbacks suppressed [ 663.680667][ T1015] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7663'. [ 663.860232][ T1036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7667'. [ 663.870755][ T1036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7667'. [ 663.954750][ T1051] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2456478585/2456478586 [ 663.959133][ T1042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7669'. [ 663.964982][ T1051] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2456478585/2456478586 [ 664.016808][ T1058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7671'. [ 664.657370][ T1080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7675'. [ 664.671317][ T1079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7674'. [ 664.707698][ T1084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7676'. [ 664.738864][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7676'. [ 664.894061][ T1097] netlink: 'syz.1.7681': attribute type 1 has an invalid length. [ 664.902455][ T1097] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7681'. [ 664.953002][T19091] net_ratelimit: 11 callbacks suppressed [ 664.953017][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 664.973788][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.029825][ T1103] netlink: 'syz.4.7685': attribute type 1 has an invalid length. [ 665.041845][ T1107] ksmbd: Unknown IPC event: 3, ignore. [ 665.047431][ T1105] geneve4: entered promiscuous mode [ 665.047452][ T1105] geneve4: entered allmulticast mode [ 665.118218][ T1112] siw: device registration error -23 [ 665.189465][ T1114] bond6: (slave bridge3): making interface the new active one [ 665.215013][ T1114] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 665.349690][ T1128] netlink: 'syz.3.7695': attribute type 30 has an invalid length. [ 665.504121][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 665.519260][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.054037][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 666.068149][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.608706][ T1201] nftables ruleset with unbound set [ 666.633130][ T1201] netlink: 'syz.4.7715': attribute type 1 has an invalid length. [ 666.704385][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 666.719558][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.951531][ T1193] Cannot find add_set index 0 as target [ 667.067102][ T1214] x_tables: unsorted underflow at hook 3 [ 667.203151][ T5148] Bluetooth: hci0: command 0x0405 tx timeout [ 667.243942][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.258064][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.510728][ T1247] syzkaller0: entered promiscuous mode [ 667.529775][ T1247] syzkaller0: entered allmulticast mode [ 667.597948][ T1261] sctp: [Deprecated]: syz.0.7731 (pid 1261) Use of int in max_burst socket option deprecated. [ 667.597948][ T1261] Use struct sctp_assoc_value instead [ 667.679322][ T1268] netlink: 'syz.3.7732': attribute type 2 has an invalid length. [ 667.710025][ T1271] netlink: 'syz.0.7733': attribute type 13 has an invalid length. [ 667.710047][ T1272] netlink: 'syz.0.7733': attribute type 13 has an invalid length. [ 669.105489][ T1268] : entered promiscuous mode [ 669.168830][ T1271] `: left promiscuous mode [ 669.185139][ T1271] bond_slave_0: left promiscuous mode [ 669.190661][ T1271] bond_slave_1: left promiscuous mode [ 669.301296][ T1271] bridge0: left allmulticast mode [ 669.313481][ T1271] geneve2: left promiscuous mode [ 669.318563][ T1271] geneve2: left allmulticast mode [ 669.338548][ T1271] gretap1: left promiscuous mode [ 669.343648][ T1271] gretap1: left allmulticast mode [ 669.352220][ T1271] veth7: left promiscuous mode [ 669.359581][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.377560][ T1271] bond6: left promiscuous mode [ 669.382588][ T1271] bond6: left allmulticast mode [ 669.391895][ T1271] geneve4: left promiscuous mode [ 669.400086][ T1271] geneve4: left allmulticast mode [ 669.435007][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.459617][ T1276] bond7: Unable to set down delay as MII monitoring is disabled [ 669.469150][ T1296] __nla_validate_parse: 16 callbacks suppressed [ 669.469165][ T1296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7738'. [ 669.489198][ T1276] bond7 (unregistering): Released all slaves [ 669.544842][ T1293] wg1 speed is unknown, defaulting to 1000 [ 669.741550][ T1310] netlink: 512 bytes leftover after parsing attributes in process `syz.1.7743'. [ 669.847588][ T1318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7744'. [ 669.956828][ T1326] netlink: 'syz.1.7748': attribute type 13 has an invalid length. [ 669.959208][ T1321] netlink: 'syz.4.7746': attribute type 30 has an invalid length. [ 670.000162][ T1333] syzkaller0: entered promiscuous mode [ 670.024180][ T1333] syzkaller0: entered allmulticast mode [ 670.228350][ T1321] bond7: option arp_missed_max: invalid value (0) [ 670.238442][ T1321] bond7: option arp_missed_max: allowed values 1 - 255 [ 670.254157][ T1321] bond7 (unregistering): Released all slaves [ 670.325033][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 670.373017][ T36] net_ratelimit: 11 callbacks suppressed [ 670.373033][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 670.393879][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.494033][ T5908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.638355][ T1357] netlink: 300 bytes leftover after parsing attributes in process `syz.5.7755'. [ 670.787851][ T1362] syzkaller0: entered promiscuous mode [ 670.815725][ T1362] syzkaller0: entered allmulticast mode [ 670.829241][ T1365] netlink: 'syz.0.7759': attribute type 1 has an invalid length. [ 670.856867][ T1369] netlink: 'syz.1.7760': attribute type 1 has an invalid length. [ 670.879327][ T1368] netlink: 'syz.0.7759': attribute type 1 has an invalid length. [ 670.936973][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7760'. [ 670.994333][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 671.008723][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.025218][ T1383] netlink: 'syz.4.7764': attribute type 3 has an invalid length. [ 671.034729][ T1383] netlink: 'syz.4.7764': attribute type 3 has an invalid length. [ 671.361774][ T1402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7771'. [ 671.568937][T26556] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 671.583477][T26556] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.687523][ T1417] bond7: Removing last arp target with arp_interval on [ 671.701525][ T1414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7774'. [ 671.841841][ T1435] openvswitch: netlink: IP tunnel TTL not specified. [ 671.888428][ T1437] set match dimension is over the limit! [ 671.993793][ T1443] bond0: Error: Cannot enslave bond to itself. [ 672.023903][ T1444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7784'. [ 672.041863][ T1444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7784'. [ 672.153772][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 672.168891][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.279732][ T1462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7789'. [ 672.331885][T27327] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.362276][T27327] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.386661][ T1467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.422842][T27327] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.431803][T27327] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.872494][ T1508] wg1 speed is unknown, defaulting to 1000 [ 673.545783][ T1553] tipc: Started in network mode [ 673.550687][ T1553] tipc: Node identity f6aa06027813, cluster identity 4711 [ 673.580270][ T1553] tipc: Enabled bearer , priority 0 [ 673.921708][ T1545] tipc: Disabling bearer [ 674.031757][ T1580] geneve2: left promiscuous mode [ 674.060384][ T1580] geneve2: left allmulticast mode [ 674.135759][T22458] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 674.154406][T22458] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 674.185017][T22458] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 674.237312][ T1588] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 674.281241][T22458] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 674.691139][ T1625] __nla_validate_parse: 8 callbacks suppressed [ 674.691156][ T1625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7834'. [ 674.938896][ T1643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7833'. [ 675.003115][ T1645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7833'. [ 675.445173][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 675.805706][ T13] net_ratelimit: 12 callbacks suppressed [ 675.805725][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 675.826569][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.342899][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 676.357340][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.498839][ T1658] syzkaller0: entered promiscuous mode [ 676.515738][ T1658] syzkaller0: entered allmulticast mode [ 676.523598][ T1657] tipc: Enabled bearer , priority 0 [ 676.553492][ T1653] tipc: Enabling of bearer rejected, already enabled [ 676.570018][ T1653] tipc: Enabling of bearer rejected, already enabled [ 676.600180][ T1653] tipc: Enabling of bearer rejected, already enabled [ 676.611551][ T1653] tipc: Enabling of bearer rejected, already enabled [ 676.631061][ T1653] tipc: Enabling of bearer rejected, already enabled [ 676.649526][ T1653] tipc: Enabling of bearer rejected, already enabled [ 676.799856][ T1653] tipc: Resetting bearer [ 676.828350][ T1680] validate_nla: 2 callbacks suppressed [ 676.828365][ T1680] netlink: 'syz.4.7847': attribute type 1 has an invalid length. [ 676.861775][ T1653] tipc: Disabling bearer [ 676.895575][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 676.910460][ T6018] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.915739][ T1680] 8021q: adding VLAN 0 to HW filter on device bond8 [ 676.941910][ T1685] macvlan0: entered promiscuous mode [ 676.952835][ T1685] macvlan0: entered allmulticast mode [ 676.968122][ T1687] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7849'. [ 676.995437][ T1687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.037747][ T1687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.217500][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052de4800: rx timeout, send abort [ 677.246962][ T1710] netlink: 'syz.4.7854': attribute type 10 has an invalid length. [ 677.276251][ T1710] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 677.295106][ T1710] batman_adv: batadv0: Adding interface: netdevsim0 [ 677.314422][ T1710] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 677.344367][ T1710] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 677.400686][ T1710] veth3: left allmulticast mode [ 677.408744][ T1710] bond1: left promiscuous mode [ 677.409649][ T1715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7855'. [ 677.415753][ T1710] team1: left promiscuous mode [ 677.430384][ T1710] team1: left allmulticast mode [ 677.437669][ T1710] batman_adv: batadv0: Interface deactivated: veth11 [ 677.461135][ T1710] bond5: left promiscuous mode [ 677.467409][ T1710] bridge0: left promiscuous mode [ 677.472561][ T1710] bond5: left allmulticast mode [ 677.478364][ T1710] bridge0: left allmulticast mode [ 677.512780][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 677.528533][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.556714][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 677.717687][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553bf400: rx timeout, send abort [ 677.726571][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052de4800: abort rx timeout. Force session deactivation [ 677.887347][ T1739] netlink: 'syz.5.7860': attribute type 3 has an invalid length. [ 677.917143][ T1739] : renamed from hsr0 (while UP) [ 677.971603][ T1748] netlink: 'syz.0.7863': attribute type 1 has an invalid length. [ 678.007875][T25599] block nbd5: Possible stuck request ffff888025328000: control (read@0,1024B). Runtime 180 seconds [ 678.020032][T25599] block nbd5: Possible stuck request ffff888025328200: control (read@1024,1024B). Runtime 180 seconds [ 678.032128][T25599] block nbd5: Possible stuck request ffff888025328400: control (read@2048,1024B). Runtime 180 seconds [ 678.043367][T25599] block nbd5: Possible stuck request ffff888025328600: control (read@3072,1024B). Runtime 180 seconds [ 678.056046][ T1034] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.070481][ T1034] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.226016][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553bf400: abort rx timeout. Force session deactivation [ 678.359912][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7869'. [ 678.407587][ T1773] macvtap1: entered promiscuous mode [ 678.413429][ T1773] vlan0: entered promiscuous mode [ 678.418959][ T1773] macvtap1: entered allmulticast mode [ 678.424764][ T1773] vlan0: entered allmulticast mode [ 678.431075][ T1773] veth0_vlan: entered allmulticast mode [ 678.817395][ T1796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7876'. [ 678.969900][ T1808] syzkaller1: entered promiscuous mode [ 678.975598][ T1808] syzkaller1: entered allmulticast mode [ 678.991537][ T1808] vlan1: entered allmulticast mode [ 678.998834][ T1808] veth0_vlan: entered allmulticast mode [ 679.297674][ T1818] lo: Caught tx_queue_len zero misconfig [ 679.326087][ T1822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7884'. [ 679.356508][ T1819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7883'. [ 679.826627][ T1860] netlink: 'syz.4.7895': attribute type 1 has an invalid length. [ 679.930778][ T1863] __nla_validate_parse: 2 callbacks suppressed [ 679.930796][ T1863] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7896'. [ 679.959009][ T1864] netlink: 'syz.1.7897': attribute type 11 has an invalid length. [ 680.010613][ T1869] Bluetooth: MGMT ver 1.23 [ 680.036958][ T1869] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7897'. [ 680.111645][ T1878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7899'. [ 680.165260][ T5908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.180376][ T1880] netlink: 'syz.3.7900': attribute type 1 has an invalid length. [ 680.198866][ T1880] netlink: 'syz.3.7900': attribute type 1 has an invalid length. [ 680.357495][ T1891] netlink: 'syz.1.7903': attribute type 1 has an invalid length. [ 680.374488][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.768440][ T1921] macvlan0: entered promiscuous mode [ 680.987155][ T1939] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7917'. [ 681.068347][ T1946] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 681.144518][ T50] net_ratelimit: 11 callbacks suppressed [ 681.144533][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 681.164682][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 681.240795][ T1959] netlink: 'syz.4.7924': attribute type 1 has an invalid length. [ 681.249930][ T1959] netlink: 'syz.4.7924': attribute type 1 has an invalid length. [ 681.257941][ T1959] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7924'. [ 681.273760][ T1961] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7924'. [ 681.495809][ T1974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7929'. [ 681.514971][ T1974] openvswitch: netlink: Missing key (keys=40, expected=80) [ 681.684558][T26556] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 681.699055][T26556] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 681.741698][ T1989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7932'. [ 681.751681][ T1992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.782576][ T1989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7932'. [ 681.961246][ T2007] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7937'. [ 681.982077][ T2007] validate_nla: 9 callbacks suppressed [ 681.982093][ T2007] netlink: 'syz.1.7937': attribute type 9 has an invalid length. [ 682.287833][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 682.301999][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.418374][ T2040] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 682.483177][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.618013][ T2054] netlink: 'syz.4.7951': attribute type 11 has an invalid length. [ 682.647680][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 682.656880][ T2055] netlink: 'syz.4.7951': attribute type 11 has an invalid length. [ 682.827284][ T2061] veth7: entered promiscuous mode [ 682.837908][ T2061] veth7: entered allmulticast mode [ 682.872842][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 682.923762][ T2063] syzkaller0: entered promiscuous mode [ 682.939535][ T2063] syzkaller0: entered allmulticast mode [ 683.099485][ T2061] veth9: entered promiscuous mode [ 683.112143][ T2061] veth9: entered allmulticast mode [ 684.699491][ T2080] batadv1: entered allmulticast mode [ 684.726133][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 684.969835][ T2123] tipc: Enabled bearer , priority 0 [ 684.980685][ T2124] syzkaller0: entered promiscuous mode [ 684.986822][ T2124] syzkaller0: entered allmulticast mode [ 685.034137][ T2125] tipc: Resetting bearer [ 685.109030][ T2125] tipc: Disabling bearer [ 685.281647][ T2151] __nla_validate_parse: 4 callbacks suppressed [ 685.281663][ T2151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7981'. [ 685.330029][ T2151] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7981'. [ 685.399277][ T2159] x_tables: ip_tables: ah match: only valid for protocol 51 [ 685.485439][ T2165] veth0_to_team: entered promiscuous mode [ 685.554648][ T2167] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 685.644638][ T30] audit: type=1107 audit(1767162639.911:5): pid=2174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 685.689668][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 685.821619][ T2181] netlink: 'syz.0.7992': attribute type 29 has an invalid length. [ 685.948270][ T2189] ipt_REJECT: TCP_RESET invalid for non-tcp [ 685.983217][ T2189] xt_limit: Overflow, try lower: 604147548/4200216962 [ 685.990803][ T2191] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7994'. [ 686.326227][T26556] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 686.405583][ T2212] gre0: entered promiscuous mode [ 686.420827][ T2212] gre0: entered allmulticast mode [ 686.438104][ T2216] veth0: entered promiscuous mode [ 686.456595][ T2216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8004'. [ 686.473565][T19091] net_ratelimit: 15 callbacks suppressed [ 686.473580][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 686.496244][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 686.666054][ T2232] netlink: 'syz.3.8005': attribute type 12 has an invalid length. [ 686.714362][ T2232] netlink: 'syz.3.8005': attribute type 12 has an invalid length. [ 686.746297][ T2232] netlink: 'syz.3.8005': attribute type 12 has an invalid length. [ 686.773646][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8010'. [ 686.783386][ T2232] netlink: 'syz.3.8005': attribute type 12 has an invalid length. [ 686.791820][ T2236] netlink: 'syz.5.8010': attribute type 5 has an invalid length. [ 686.802135][ T2236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8010'. [ 686.828557][ T2232] netlink: 'syz.3.8005': attribute type 12 has an invalid length. [ 686.846986][ T2241] netlink: 328 bytes leftover after parsing attributes in process `syz.1.8012'. [ 686.858883][ T2241] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8012'. [ 687.023592][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 687.038321][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.059664][ T2256] validate_nla: 28 callbacks suppressed [ 687.059680][ T2256] netlink: 'syz.1.8014': attribute type 1 has an invalid length. [ 687.147263][ T2258] bond5: (slave ip6gretap1): making interface the new active one [ 687.173892][ T2258] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.181806][ T2258] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.195628][ T2258] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 687.214740][ T2260] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 687.236665][ T2260] bond4: (slave lo): Enslaving as a backup interface with an up link [ 687.245782][ T2260] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 687.309196][ T2267] netlink: 'syz.3.8021': attribute type 1 has an invalid length. [ 687.328927][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8022'. [ 687.383400][ T2278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8024'. [ 687.394722][ T2267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.421733][ T2273] veth9: entered promiscuous mode [ 687.438928][ T2273] bond6: (slave veth9): Enslaving as an active interface with an up link [ 687.593580][T26556] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 687.608589][T26556] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.885409][ T2303] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.993683][ T2312] veth1_macvtap: left promiscuous mode [ 688.081339][ T2319] tipc: Enabled bearer , priority 0 [ 688.102860][ T2320] ip6tnl0: Caught tx_queue_len zero misconfig [ 688.121435][ T2310] syzkaller0: entered promiscuous mode [ 688.133682][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 688.147817][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.184684][ T2310] syzkaller0: entered allmulticast mode [ 688.249886][ T2310] tipc: Resetting bearer [ 688.264307][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.272268][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.287753][ T2308] tipc: Resetting bearer [ 688.362073][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.371186][ T2308] tipc: Disabling bearer [ 688.384267][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.396455][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.405397][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.414777][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.424227][ T2325] netlink: 'syz.0.8039': attribute type 24 has an invalid length. [ 688.687557][ T2339] tipc: Enabled bearer , priority 0 [ 688.701039][ T2339] syzkaller0: entered promiscuous mode [ 688.730714][ T2339] syzkaller0: entered allmulticast mode [ 688.736721][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 688.761237][ T2339] tipc: Resetting bearer [ 688.917564][ T2338] tipc: Resetting bearer [ 688.955795][ T2338] tipc: Disabling bearer [ 690.656052][ T2370] syzkaller0: entered promiscuous mode [ 690.661558][ T2370] syzkaller0: entered allmulticast mode [ 690.846815][ T2388] __nla_validate_parse: 4 callbacks suppressed [ 690.846832][ T2388] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8057'. [ 690.903736][ T2388] NCSI netlink: No device for ifindex 131092 [ 691.189573][ T2423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8065'. [ 691.573692][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 691.647783][ T2459] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8074'. [ 691.705573][ T2465] IPVS: set_ctl: invalid protocol: 192 172.20.20.170:20001 [ 691.784742][ T2471] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8075'. [ 691.833485][ T6187] net_ratelimit: 12 callbacks suppressed [ 691.833500][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 691.854198][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.001775][ T2485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8080'. [ 692.067453][ T2495] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8082'. [ 692.171525][ T2500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8084'. [ 692.180773][ T2500] validate_nla: 31 callbacks suppressed [ 692.180787][ T2500] netlink: 'syz.3.8084': attribute type 7 has an invalid length. [ 692.195599][ T2500] netlink: 'syz.3.8084': attribute type 8 has an invalid length. [ 692.204193][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8084'. [ 692.204529][ T2498] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 692.227607][ T2498] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 692.253831][ T2504] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8087'. [ 692.346203][ T2503] netlink: 'syz.0.8086': attribute type 23 has an invalid length. [ 692.413141][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 692.427465][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.492569][ T2527] netlink: 'syz.3.8092': attribute type 39 has an invalid length. [ 692.501354][ T2528] netlink: 'syz.3.8092': attribute type 39 has an invalid length. [ 692.861858][ T2555] vlan1 (unregistering): left allmulticast mode [ 692.869244][ T2555] veth0_vlan: left allmulticast mode [ 692.954100][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 692.968745][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.503297][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 693.518079][ T6187] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 694.043778][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 694.058222][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 695.934466][T27327] .: left allmulticast mode [ 695.940151][T27327] .: left promiscuous mode [ 695.945751][T27327] bridge0: port 2(.) entered disabled state [ 695.954925][T27327] bridge_slave_0: left allmulticast mode [ 695.960571][T27327] bridge_slave_0: left promiscuous mode [ 695.966898][T27327] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.259542][T27327] bond10 (unregistering): (slave gretap2): Releasing active interface [ 696.309340][T27327] dvmrp0 (unregistering): left allmulticast mode [ 696.326897][T27327] bond13 (unregistering): (slave geneve3): Releasing active interface [ 696.344561][T27327] bond2 (unregistering): (slave geneve2): Releasing active interface [ 696.764693][T27327] bond11 (unregistering): (slave bridge9): Releasing backup interface [ 696.773022][T27327] bridge9 (unregistering): left promiscuous mode [ 696.851631][T27327] bond12 (unregistering): (slave bridge11): Releasing backup interface [ 696.860247][T27327] bridge11 (unregistering): left promiscuous mode [ 697.099201][T27327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.108081][T27327] bond_slave_0: left promiscuous mode [ 697.115225][T27327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.124980][T27327] bond_slave_1: left promiscuous mode [ 697.126707][T22458] net_ratelimit: 10 callbacks suppressed [ 697.126720][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 697.150496][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.165929][T27327] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 697.174895][T27327] dummy0: left promiscuous mode [ 697.181402][T27327] bond0 (unregistering): Released all slaves [ 697.194342][T27327] bond1 (unregistering): Released all slaves [ 697.295929][T27327] bond2 (unregistering): Released all slaves [ 697.308078][T27327] bond3 (unregistering): Released all slaves [ 697.402564][T27327] bond4 (unregistering): Released all slaves [ 697.496734][T27327] bond5 (unregistering): Released all slaves [ 697.598753][T27327] bond6 (unregistering): Released all slaves [ 697.611541][T27327] bond7 (unregistering): (slave bond8): Releasing backup interface [ 697.621151][T27327] bond7 (unregistering): (slave bond9): Releasing backup interface [ 697.630199][T27327] bond7 (unregistering): Released all slaves [ 697.672755][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 697.687767][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.752139][T27327] bond8 (unregistering): Released all slaves [ 697.848459][T27327] bond9 (unregistering): Released all slaves [ 697.861405][T27327] bond10 (unregistering): Released all slaves [ 697.957054][T27327] bond11 (unregistering): Released all slaves [ 698.055442][T27327] bond12 (unregistering): Released all slaves [ 698.149879][T27327] bond13 (unregistering): Released all slaves [ 698.162106][T27327] bond14 (unregistering): Released all slaves [ 698.203031][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 698.217477][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.311436][T27327] tipc: Disabling bearer [ 698.319122][T27327] tipc: Left network mode [ 698.737121][T27327] hsr_slave_0: left promiscuous mode [ 698.742815][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 698.757719][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.773084][T27327] hsr_slave_1: left promiscuous mode [ 699.276185][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 699.290908][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.576781][T27327] IPVS: stop unused estimator thread 0... [ 702.363585][T13310] net_ratelimit: 10 callbacks suppressed [ 702.363607][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 702.383292][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 702.903604][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 702.917664][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.444861][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.458893][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.983552][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.997702][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 704.524252][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 704.538847][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.613175][T29261] net_ratelimit: 10 callbacks suppressed [ 707.613192][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 707.633577][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.092747][T25599] block nbd5: Possible stuck request ffff888025328000: control (read@0,1024B). Runtime 210 seconds [ 708.104071][T25599] block nbd5: Possible stuck request ffff888025328200: control (read@1024,1024B). Runtime 210 seconds [ 708.115333][T25599] block nbd5: Possible stuck request ffff888025328400: control (read@2048,1024B). Runtime 210 seconds [ 708.127029][T25599] block nbd5: Possible stuck request ffff888025328600: control (read@3072,1024B). Runtime 210 seconds [ 708.162914][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.177145][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.693148][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.707250][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.223099][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 709.237137][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.752775][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 709.767337][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 712.843673][T22458] net_ratelimit: 10 callbacks suppressed [ 712.843693][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 712.864131][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.382955][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.397669][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.914201][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.928459][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.453679][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 714.467952][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.993971][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 715.008095][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 718.084588][T29261] net_ratelimit: 10 callbacks suppressed [ 718.084608][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 718.104340][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 718.323930][T29261] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.623630][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 718.637665][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 719.153283][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 719.167477][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 719.682899][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 719.697518][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 720.212783][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 720.227621][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.302760][ T3464] net_ratelimit: 10 callbacks suppressed [ 723.302774][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 723.322478][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.843220][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 723.857629][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 724.383166][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 724.397594][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 724.912972][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 724.927912][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 725.446976][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 725.461073][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 728.533603][ T2978] net_ratelimit: 10 callbacks suppressed [ 728.533617][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 728.553378][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 729.084468][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 729.098974][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 729.622768][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 729.637715][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 730.152850][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 730.167116][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 730.692989][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 730.707464][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 733.773169][T13324] net_ratelimit: 10 callbacks suppressed [ 733.773184][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 733.793606][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 734.313866][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 734.328221][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 734.853290][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 734.867747][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 735.382823][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 735.396973][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 735.913254][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 735.927375][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.166246][T25599] block nbd5: Possible stuck request ffff888025328000: control (read@0,1024B). Runtime 240 seconds [ 738.177513][T25599] block nbd5: Possible stuck request ffff888025328200: control (read@1024,1024B). Runtime 240 seconds [ 738.188498][T25599] block nbd5: Possible stuck request ffff888025328400: control (read@2048,1024B). Runtime 240 seconds [ 738.199632][T25599] block nbd5: Possible stuck request ffff888025328600: control (read@3072,1024B). Runtime 240 seconds [ 739.003018][T13324] net_ratelimit: 10 callbacks suppressed [ 739.003035][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 739.023492][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 739.542739][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 739.556987][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 740.073219][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 740.087883][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 740.603756][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 740.617850][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 741.132837][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 741.147348][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.213114][T13310] net_ratelimit: 10 callbacks suppressed [ 744.213130][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 744.233630][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.753150][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 744.767227][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 745.283660][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 745.298513][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 745.822773][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 745.837268][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 746.363194][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 746.377754][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 747.129756][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 749.443031][T27327] net_ratelimit: 11 callbacks suppressed [ 749.443051][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 749.463419][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 749.983279][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 749.997433][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 750.322977][ T3464] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 750.523215][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 750.537341][T22458] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 751.052803][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 751.066851][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 751.582795][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 751.597204][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.683246][T27327] net_ratelimit: 10 callbacks suppressed [ 754.683267][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 754.703533][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 755.223136][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 755.237493][T29261] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 755.753129][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 755.767525][ T1157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 756.283011][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 756.297148][T19091] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 756.813549][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 756.827663][T13310] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 758.050153][ T2561] __nla_validate_parse: 2 callbacks suppressed [ 758.050171][ T2561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8102'. [ 758.263420][ T2587] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 33554429, id = 0 [ 758.555934][ T2613] IPv6: Can't replace route, no match found [ 758.601768][ T2618] pim6reg1: entered promiscuous mode [ 758.608559][ T2618] pim6reg1: entered allmulticast mode [ 758.910448][ T2642] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 759.050450][ T2659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8126'. [ 759.148742][ T2673] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8125'. [ 759.357726][ T2692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8135'. [ 759.442991][ T5148] Bluetooth: hci3: command 0x0405 tx timeout [ 759.572465][ T2708] netlink: 'syz.1.8139': attribute type 4 has an invalid length. [ 759.601106][ T2708] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8139'. [ 759.621300][ T2714] netlink: 'syz.3.8142': attribute type 1 has an invalid length. [ 759.638856][ T2714] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8142'. [ 759.656723][ T2708] `: renamed from bond0 (while UP) [ 759.716607][ T2724] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.8144'. [ 759.798008][ T2729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8146'. [ 759.819574][ T2731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8145'. [ 759.893746][ T50] net_ratelimit: 11 callbacks suppressed [ 759.893762][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 759.905985][ T2740] Bluetooth: MGMT ver 1.23 [ 759.914303][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.388148][ T2779] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 760.399431][ T2778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8160'. [ 760.455575][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 760.469733][ T2978] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.525281][ T2788] netlink: 'syz.0.8165': attribute type 2 has an invalid length. [ 760.655914][ T2788] bond10: option resend_igmp: invalid value (32767) [ 760.665752][ T2803] netlink: 'syz.4.8167': attribute type 10 has an invalid length. [ 760.674509][ T2788] bond10: option resend_igmp: allowed values 0 - 255 [ 760.687027][ T2788] bond10 (unregistering): Released all slaves [ 760.828269][ T2822] netlink: 'syz.4.8170': attribute type 4 has an invalid length. [ 760.993565][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 761.007688][ T3464] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 761.340191][ T2867] xt_socket: unknown flags 0xe4 [ 761.412305][ T2874] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 761.451446][ T2874] bond8 (unregistering): Released all slaves [ 761.612978][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 761.627919][T27327] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 761.856389][ T31] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 761.884311][ T31] Not tainted syzkaller #0 [ 761.899710][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 761.918433][ T31] task:kworker/0:0H state:D stack:25216 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 761.931661][ T31] Workqueue: kblockd blk_mq_requeue_work [ 761.937777][ T31] Call Trace: [ 761.941167][ T31] [ 761.944603][ T31] __schedule+0x14bc/0x5000 [ 761.949148][ T31] ? do_raw_spin_lock+0x121/0x290 [ 761.954618][ T31] ? __pfx___schedule+0x10/0x10 [ 761.959486][ T31] ? schedule+0x91/0x360 [ 761.964226][ T31] schedule+0x165/0x360 [ 761.968401][ T31] schedule_timeout+0x12b/0x270 [ 761.973591][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 761.978981][ T31] ? __pfx_process_timeout+0x10/0x10 [ 761.985859][ T31] ? prepare_to_wait_event+0x437/0x480 [ 761.991344][ T31] nbd_queue_rq+0x662/0xf10 [ 761.996369][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 762.001404][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 762.007566][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 762.013542][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 762.018596][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 762.025084][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 762.030899][ T31] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 762.037391][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 762.044381][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 762.049669][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 762.056230][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 762.061515][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 762.066742][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 762.071954][ T31] blk_mq_requeue_work+0x717/0x760 [ 762.077468][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 762.085696][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 762.091406][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 762.097305][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 762.104229][ T31] process_scheduled_works+0xad1/0x1770 [ 762.109866][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 762.116345][ T31] worker_thread+0x8a0/0xda0 [ 762.120957][ T31] kthread+0x711/0x8a0 [ 762.125091][ T31] ? __pfx_worker_thread+0x10/0x10 [ 762.130297][ T31] ? __pfx_kthread+0x10/0x10 [ 762.135857][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 762.141065][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 762.146830][ T31] ? __pfx_kthread+0x10/0x10 [ 762.151523][ T31] ret_from_fork+0x599/0xb30 [ 762.156355][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 762.161484][ T31] ? __switch_to_asm+0x39/0x70 [ 762.166676][ T31] ? __switch_to_asm+0x33/0x70 [ 762.171542][ T31] ? __pfx_kthread+0x10/0x10 [ 762.176628][ T31] ret_from_fork_asm+0x1a/0x30 [ 762.181409][ T31] [ 762.184750][ T31] [ 762.184750][ T31] Showing all locks held in the system: [ 762.193840][ T31] 4 locks held by kworker/0:0H/11: [ 762.195818][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 762.198965][ T31] #0: ffff888140ec1948 ((wq_completion)kblockd [ 762.213447][T13324] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 762.234913][ T31] ){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 762.242029][ T31] #1: ffffc90000107b80 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 762.257655][ T31] #2: ffff888141bdb118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 762.267501][ T31] #3: ffff888025148380 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 762.276563][ T31] 1 lock held by khungtaskd/31: [ 762.281427][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 762.292149][ T31] 2 locks held by getty/5588: [ 762.297189][ T31] #0: ffff88814d4f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 762.307167][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 762.317730][ T31] 1 lock held by udevd/22731: [ 762.322410][ T31] #0: ffff888025100358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 762.332197][ T31] 1 lock held by udevd/23393: [ 762.337033][ T31] #0: ffff8880252ab358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 762.346679][ T31] 2 locks held by syz.5.8195/2912: [ 762.351776][ T31] #0: ffff888051d39908 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 762.362462][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 762.373868][ T31] [ 762.376201][ T31] ============================================= [ 762.376201][ T31] [ 762.387791][ T31] NMI backtrace for cpu 1 [ 762.387806][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 762.387825][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.387835][ T31] Call Trace: [ 762.387842][ T31] [ 762.387850][ T31] dump_stack_lvl+0x189/0x250 [ 762.387876][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.387895][ T31] ? __pfx__printk+0x10/0x10 [ 762.387931][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 762.387957][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 762.387982][ T31] ? __pfx__printk+0x10/0x10 [ 762.388004][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 762.388020][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 762.388035][ T31] sys_info+0x135/0x170 [ 762.388046][ T31] watchdog+0xf95/0xfe0 [ 762.388062][ T31] ? watchdog+0x20a/0xfe0 [ 762.388078][ T31] kthread+0x711/0x8a0 [ 762.388092][ T31] ? __pfx_watchdog+0x10/0x10 [ 762.388104][ T31] ? __pfx_kthread+0x10/0x10 [ 762.388116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 762.388130][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 762.388140][ T31] ? __pfx_kthread+0x10/0x10 [ 762.388152][ T31] ret_from_fork+0x599/0xb30 [ 762.388163][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 762.388177][ T31] ? __switch_to_asm+0x39/0x70 [ 762.388189][ T31] ? __switch_to_asm+0x33/0x70 [ 762.388200][ T31] ? __pfx_kthread+0x10/0x10 [ 762.388212][ T31] ret_from_fork_asm+0x1a/0x30 [ 762.388231][ T31] [ 762.388235][ T31] Sending NMI from CPU 1 to CPUs 0: [ 762.543950][ C0] NMI backtrace for cpu 0 [ 762.543964][ C0] CPU: 0 UID: 0 PID: 2897 Comm: syz.3.8192 Not tainted syzkaller #0 PREEMPT(full) [ 762.543982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.543992][ C0] RIP: 0010:lock_release+0x287/0x3b0 [ 762.544011][ C0] Code: 24 08 48 c7 c7 63 93 97 8d e8 55 36 bd 09 b8 ff ff ff ff 65 0f c1 05 78 4c e0 10 83 f8 01 75 4d 48 c7 44 24 20 00 00 00 00 9c <8f> 44 24 20 f7 44 24 20 00 02 00 00 75 52 f7 c3 00 02 00 00 74 01 [ 762.544024][ C0] RSP: 0018:ffffc9000c067508 EFLAGS: 00000046 [ 762.544039][ C0] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 06ef4e41ecbff700 [ 762.544050][ C0] RDX: 0000000000000003 RSI: ffffffff8d979363 RDI: ffffffff8bc08360 [ 762.544061][ C0] RBP: ffff88804fff8ba8 R08: ffffffff8233b88a R09: ffffffff8df41ae0 [ 762.544073][ C0] R10: dffffc0000000000 R11: fffff940001f3491 R12: 0000000000000003 [ 762.544084][ C0] R13: 0000000000000003 R14: ffffffff8df41ae0 R15: ffff88804fff8000 [ 762.544095][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 762.544108][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.544119][ C0] CR2: 00007f8b1b9b7198 CR3: 000000002f810000 CR4: 00000000003526f0 [ 762.544134][ C0] Call Trace: [ 762.544141][ C0] [ 762.544149][ C0] ? pfn_valid+0xba/0x490 [ 762.544165][ C0] ? pfn_valid+0xba/0x490 [ 762.544180][ C0] pfn_valid+0x3b2/0x490 [ 762.544197][ C0] page_table_check_clear+0x21/0x5f0 [ 762.544211][ C0] ? vm_normal_page+0x10d/0x240 [ 762.544230][ C0] unmap_page_range+0x3257/0x4170 [ 762.544263][ C0] ? mas_next_slot+0xc20/0xcf0 [ 762.544284][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 762.544305][ C0] ? mas_find+0xb0e/0xd30 [ 762.544319][ C0] ? unmap_vmas+0x144/0x580 [ 762.544337][ C0] unmap_vmas+0x399/0x580 [ 762.544358][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 762.544388][ C0] exit_mmap+0x239/0xb10 [ 762.544402][ C0] ? uprobe_clear_state+0x20f/0x290 [ 762.544421][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 762.544433][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 762.544457][ C0] ? __pfx_exit_aio+0x10/0x10 [ 762.544483][ C0] ? uprobe_clear_state+0x27c/0x290 [ 762.544501][ C0] __mmput+0x118/0x430 [ 762.544521][ C0] exit_mm+0x1da/0x2c0 [ 762.544541][ C0] ? __pfx_exit_mm+0x10/0x10 [ 762.544564][ C0] do_exit+0x658/0x2310 [ 762.544582][ C0] ? preempt_schedule+0xae/0xc0 [ 762.544597][ C0] ? preempt_schedule_common+0x83/0xd0 [ 762.544612][ C0] ? preempt_schedule+0xae/0xc0 [ 762.544626][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 762.544641][ C0] ? __pfx_do_exit+0x10/0x10 [ 762.544662][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 762.544681][ C0] do_group_exit+0x21c/0x2d0 [ 762.544703][ C0] __x64_sys_exit_group+0x3f/0x40 [ 762.544722][ C0] x64_sys_call+0x2210/0x2210 [ 762.544740][ C0] do_syscall_64+0xfa/0xf80 [ 762.544757][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.544772][ C0] ? clear_bhb_loop+0x60/0xb0 [ 762.544796][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.544810][ C0] RIP: 0033:0x7fb2da58f749 [ 762.544823][ C0] Code: Unable to access opcode bytes at 0x7fb2da58f71f. [ 762.544832][ C0] RSP: 002b:00007ffe2d7245b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 762.544847][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb2da58f749 [ 762.544859][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.544868][ C0] RBP: 00007ffe2d72461c R08: 000000122d7246af R09: 00000000000927c0 [ 762.544879][ C0] R10: 0000000000000144 R11: 0000000000000246 R12: 0000000000000157 [ 762.544889][ C0] R13: 00000000000927c0 R14: 00000000000b9ec4 R15: 00007ffe2d724670 [ 762.544909][ C0] [ 762.909785][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 762.916634][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 762.925722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.935765][ T31] Call Trace: [ 762.939028][ T31] [ 762.941941][ T31] dump_stack_lvl+0x99/0x250 [ 762.946520][ T31] ? __asan_memcpy+0x40/0x70 [ 762.951091][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.956269][ T31] ? __pfx__printk+0x10/0x10 [ 762.960850][ T31] vpanic+0x237/0x6d0 [ 762.964821][ T31] ? __pfx_vpanic+0x10/0x10 [ 762.969328][ T31] ? preempt_schedule_common+0x83/0xd0 [ 762.974780][ T31] panic+0xb9/0xc0 [ 762.978488][ T31] ? __pfx_panic+0x10/0x10 [ 762.982914][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 762.988275][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 762.994411][ T31] watchdog+0xfdf/0xfe0 [ 762.998561][ T31] ? watchdog+0x20a/0xfe0 [ 763.002884][ T31] kthread+0x711/0x8a0 [ 763.006938][ T31] ? __pfx_watchdog+0x10/0x10 [ 763.011607][ T31] ? __pfx_kthread+0x10/0x10 [ 763.016194][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 763.021411][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 763.026602][ T31] ? __pfx_kthread+0x10/0x10 [ 763.031186][ T31] ret_from_fork+0x599/0xb30 [ 763.035815][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 763.040951][ T31] ? __switch_to_asm+0x39/0x70 [ 763.045728][ T31] ? __switch_to_asm+0x33/0x70 [ 763.050480][ T31] ? __pfx_kthread+0x10/0x10 [ 763.055058][ T31] ret_from_fork_asm+0x1a/0x30 [ 763.059823][ T31] [ 763.063187][ T31] Kernel Offset: disabled [ 763.067498][ T31] Rebooting in 86400 seconds..