last executing test programs: 3m5.192126389s ago: executing program 2 (id=3905): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) (async, rerun: 32) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (rerun: 32) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x8080) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) 3m4.922333223s ago: executing program 2 (id=3909): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001680), 0x0, 0x40010002, 0x0) 3m4.792219071s ago: executing program 2 (id=3913): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = accept4(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x800) recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/206, 0xce}], 0x1, &(0x7f0000000280)=[{0x70, 0x0, 0x0, ""/90}], 0x70, 0x140}, 0x38, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private1, 0x4e21, 0xffd4, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x2f, r2, r3}, {0x550, 0x1, 0x4, 0x1, 0x0, 0x4, 0x3, 0x7fffffffffffffff}, {0x3, 0x1, 0x1, 0x100000000}, 0x6, 0x6e6bb2, 0x1, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d4, 0x33}, 0x2, @in=@loopback, 0x3504, 0x4, 0x3, 0x3, 0xfffffff8, 0x1ff}}, 0xe8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000640)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x1, 0x9, 0x4, 0x38, 0x2], 0x9, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000780)={0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'lblc\x00', 0x0, 0xc0000000, 0x46}, 0x2c) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f00000007c0)=""/4096, &(0x7f00000017c0)=0x1000) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8200080}, 0xc, &(0x7f0000001980)={&(0x7f0000001840)={0x110, 0xa, 0xa, 0x202, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x319}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6c}, @NFTA_SET_EXPR={0x68, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd22}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4d6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x30000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x24008410) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x10, 0x3f8, 0x2, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001b00)=@assoc_value, &(0x7f0000001b40)=0x8) unshare(0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c40)={0x0, 0x2}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002000)={0xffffffffffffffff, 0x20, &(0x7f0000001fc0)={&(0x7f0000001e40)=""/246, 0xf6, 0x0, &(0x7f0000001f40)=""/112, 0x70}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002040)={r1, 0x0, 0x6, 0x7e7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@bloom_filter={0x1e, 0x0, 0x7, 0x9, 0x60288, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x1c, 0x1e, &(0x7f0000001c80)=@raw=[@jmp={0x5, 0x0, 0xc, 0x1, 0xa, 0xffffffffffffff70, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x9d}], &(0x7f0000001d80)='GPL\x00', 0x3, 0xb, &(0x7f0000001dc0)=""/11, 0x40f00, 0x40, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x0, 0x3, 0xc212, 0xc5dd}, 0x10, r6, r7, 0x3, &(0x7f0000002100)=[r8], &(0x7f0000002140)=[{0x5, 0x5, 0x4, 0x9}, {0x2, 0x4, 0xa, 0xb}, {0x1, 0x4, 0x7, 0x6}], 0x10, 0x2}, 0x94) getpeername$packet(r1, &(0x7f0000002240)={0x11, 0x0, 0x0}, &(0x7f0000002280)=0x14) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000022c0)={0x0, 0x4, 0x2, 0x101, @vifc_lcl_ifindex=r9, @local}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r1) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x54, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x48010) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000002480)={0xfffffff1}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x41) r12 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r12, &(0x7f0000002880)={&(0x7f00000025c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002640)=""/122, 0x7a}, {&(0x7f00000026c0)=""/195, 0xc3}], 0x2, &(0x7f0000002800)=""/93, 0x5d}, 0x2121) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000028c0)='wg0\x00', 0x4) 3m4.766387569s ago: executing program 2 (id=3915): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0xb) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2, 0x2}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0xd63}, 0x50) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 3m4.551302416s ago: executing program 2 (id=3920): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xfffffffffffffeff, 0x0, 0x7}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0xb, 0x30, 0x10}, @ldst={0x1, 0x2, 0x6, 0xb, 0x9, 0x8, 0x1}, @ldst={0x1, 0x1, 0x2, 0x5, 0xb, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1a, &(0x7f00000000c0)=""/26, 0x41000, 0x6, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[{0x2, 0x3, 0x8, 0x8}, {0x3, 0x5, 0x7, 0xa}, {0x1, 0x3, 0x5}, {0x1, 0x3, 0x4, 0x1}, {0x5, 0x1, 0x9}, {0x3, 0x4, 0xa, 0xa}, {0x2, 0x4, 0x4, 0x3}, {0x4, 0x1, 0xe, 0x4}], 0x10, 0x6}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0x7fffffff, 0x3, 0x4, r2, 0x3, '\x00', r1, r2, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x0, 0x5, 0x100, r4, 0x2, '\x00', r1, r2, 0x4, 0x3, 0x5, 0x7}, 0x50) (async) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, r3}, 0x18) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0x5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback=r3, r5, 0x2e, 0x103b, 0xffffffffffffffff, @void, @void, @void, @value=r6}, 0x20) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast2, 0x4e20, 0x0, 0x4e24, 0xfff, 0x0, 0x80, 0xe8ae1295f53b6417, 0x33, r1, 0xee01}, {0x3b49714d80, 0xb6, 0xf546, 0x4, 0x30, 0x8000000000000000, 0x5, 0x1}, {0x9, 0x0, 0x2, 0xffffffffffff8001}, 0x0, 0x6e6bb5, 0x2, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xff}, 0xa, @in=@empty, 0x0, 0x2, 0x0, 0x3, 0x8, 0x6b2, 0x7}}, 0xe8) (async) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000005c0), &(0x7f0000000600)=0xc) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0xbb8, 0x57, &(0x7f0000000700)=""/87, 0x0, 0x20, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x9, 0x5, 0x10000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000800)=[r4, r4, r4, r4, r4], &(0x7f0000000840)=[{0x5, 0x1, 0x4, 0x2}, {0x4, 0x4, 0xe, 0x8}, {0x1, 0x3, 0x5}, {0x3, 0x3, 0x4, 0x1}, {0x0, 0x4, 0xf, 0x2}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x10, 0x8}, {0x2, 0x10, 0x0, 0x2}, {0x5, 0x4, 0x8, 0xa}, {0x2, 0x5, 0x3, 0xc}], 0x10, 0x2}, 0x94) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f00000009c0), 0x10) (async) sendmmsg$inet(r0, &(0x7f00000014c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a40)="36f4e242fbdc0b77084f2c0592d58c3b1d31502d090d58c9b1493a49fbe9101fde13deefbdc2", 0x26}, {&(0x7f0000000a80)="7d542c1a8a2378d06a33d575fe56d12109abeee579124adabbea19f764412d7aaefd82852367abdd25195af23dbf4a8d2fd3d257be4143b638332dc3a51e3b7a6004ea85292a2ca72980204973fe9e301847a13b9715302c7936c0325c12d4bd1b40445f6258817f7e2427fb05c10db22fec0493bb637fa4fa5a10d1e50f2f2cce5b0f14d7587ff54b98d86752548ee20c14e9b0f8379058069675116e1647651b5c2631eb37cd24bf27c0bd9256220f5212c09704fd5b3e67d5cb6af41a4780e8caf78f29b9e260f369c854980b5625f852b4e13391d0a2f8c7d996d0f83f610c4b6a4d52b505973f2037bdfd6f2966b55a", 0xf2}, {&(0x7f0000000b80)="b544b171e4b3f1c55df95f76261c34a0370201e54de0e4a1efc87da64061fbcb81d5d066cee22a0298a990d43518e19ac130e32c23b6b6ed9363118b105d284ba588b9350d89f18e1023c0dd807ae84f3d042a8f52ec292d510cf2960eb861b414c752b43e5038ba564e037787ea493977f3bfeb68109f4abf90ee73b735ac99fa9b9390a5fc5e00a38640e46ec849f6a4ec144a32de439093769925ce67061fe7b3b15355754d731521821acf11586d0d562125a47732026a40b0e35897213c4985b2cf3b3c44997066774ba18caf3c5dead4658bbc30a3dfd2445353423595eeb34f49034026dc63f6", 0xea}], 0x3, &(0x7f0000000cc0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0x9e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}, @rr={0x7, 0x1b, 0x57, [@multicast1, @multicast2, @empty, @private=0xa010101, @broadcast, @multicast1]}, @lsrr={0x83, 0xb, 0x5, [@broadcast, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x24, 0x59, 0x3, 0x1, [{@multicast1, 0x50}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0xeb7b}, {@loopback, 0x9}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}], 0xe8}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000e00)="f68362cc0ed69e105391314c8edd32739ee84b124639c9bc0aa86e9d3ad058e5d6d444d6285bf027b8fa7abdc803d6f7364205a622966450354812bc02e42f755ca13fd30ca19f63681a8e14e3fee8226a937a6b45025e058f396d939546e08c8521f5d9b00d9d31884fd7108bfa6dfacaeabe8444544675", 0x78}, {&(0x7f0000000e80)="bc9823fdbaf9f4eeaa88333215ae795123be7f5e8873472b82dfedcb12e235f439692c5cdafc872b771037993dbda6334c583746fc2c1c02eccb510c99f58de8f938349ebd54dcf443b73893165a1d9bfb710265e963b19e6d30eacaa8bdf5c359fd4b0067b4b6e7371c4c8dc74707248d677ed260bb4c084489c54f491e88fe9cfe0dce35dc264a410b0d368d9f16c48e64ea7734a123d56ebea4e5577107a5f89e431b82ac593f9a15bdc1b406441f615d263868852093d5c49c1226d451f4155058a8d25537e58ce607042c992becffd04c170db9ed34b6", 0xd9}, {&(0x7f0000000f80)="076a880141c637535d70dda89bed60d2705efd46c3b5baea57be878b358a94663453c4985cc35a35aa3f635a25fc90f6d2243898c391fdaeb9ea9dd4c1eedc87744a4367047208839fae50aa21ccfbcc0c47e672338380a00eb98ed21eb81b8efcdd000d6e9292439e648e51041f80", 0x6f}, {&(0x7f0000001000)="57e6a42126c39e91b7e43fabd557e3ad9b7b27f0312114098f6b94e58eebcb0b26bcf7eefeb0b79aec641285efbce1458dc81db22cedf1f47eb1a5f7c756f27cd30fc057086fe5cc267e0cae0634b3f19986e0a76e6887e345d718f805660f9af6358a2924cdced03ae5b7f1c3232e1762c9721007", 0x75}, {&(0x7f0000001080)="6698cc13b1924f7fe895ccd6fd43400c73821642fabecbb32365472417c50d911bb9428d0c41c3989bd5901ef8aaf246bcf0eed4b71cdd18cc9b81930da0c12b035db4917bbc1e2ecd81605f99516cec450a7dbb61e02c1a36f49aa8c1720b5a2a70e0628e3ff08fd8584b025a2bed3228bcf0242b015c45b57a077a630c252faf68832b554d164cb4119868008c0d892313955966f5b27c4e147fc81ee0bc9280616c72ddea055cfebf39a74eba945b35124a81b0a0cd01ff6025244ad9ac3ec66475491e2c798779d92054f928190df66a7df604604c7f65cd47f5f6", 0xdd}], 0x5, &(0x7f0000001200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x66c8}}], 0x18}}, {{&(0x7f0000001240)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001280)="84b77201037f8b6a363cef30f0e268e7e4e6aa219162fbb1d87e8594d9a533206756b58e2379875de277b2ca329c4c6631668a78e77263b3cb3e9373d33a7a564b855605ac966b2222382ef8a8cc7625e2bed82251a4a1906f23e3d2b9076ca7a3d2d1f184c08d79570735c4e7bfcf2bf88fe0de12d295aa79901a1e8256b89bcbdb", 0x82}, {&(0x7f0000001340)="f69b5f598c782fc265bbcbadbbe4f2179189a0dae411d4f39daacc71e4481026503819ea1412a67c77d8ca5a67415048fa523549c40332422aed69e50556df464ebce8b47333e3a5c459923b11e41c91d7", 0x51}, {&(0x7f00000013c0)="95e76bb298978da85ffa8afdad46d5a4650aef6eb894577aa600150b9c25ca2b4bb484290321615ba4159896ed8eb84ac0553e3186e1266ee9c9f7f0c060d1f8ff59a25dded35c65968ba1e9e8547784e73fdc9c498aff46e6636495582c79f668585a389b232fac087e827d4d81fdaa00c9bd97a1084a91313d", 0x7a}], 0x3, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x38}}], 0x3, 0x20000000) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000001580)={0x7, 'ip6_vti0\x00', {0x5}, 0x7}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000015c0)={'vxcan1\x00'}) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000001600)={0x2, 0x4e22, @loopback}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000001640)=[{{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}], 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001680)={0x1ff, 0x0}, 0x8) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000016c0)={r10}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x400000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001740)={0x2, 'veth0_to_hsr\x00', {0xfff}, 0x5}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001780), 0x1, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000017c0)={r7, r2, 0x19, 0x0, @void}, 0x10) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001800)=@generic={0x1, 0x100000001, 0x100000001}) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001840)=r11, 0x4) (async) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000001880)) 3m4.207472271s ago: executing program 2 (id=3927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80503, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'netpci0\x00', @link_local}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}}, 0x20000800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) sendmsg(r3, &(0x7f00000007c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="ff32dd", 0x3}], 0x1}, 0x40) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0103, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) 3m3.94945683s ago: executing program 32 (id=3927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80503, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'netpci0\x00', @link_local}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}}, 0x20000800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) sendmsg(r3, &(0x7f00000007c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="ff32dd", 0x3}], 0x1}, 0x40) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0103, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) 1m50.157390984s ago: executing program 5 (id=5153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095f1ff0000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 1m49.938824354s ago: executing program 5 (id=5159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xbf28, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='ipvlan1\x00', 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000140)='ipvlan1\x00', 0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000480)={r4, 0x4}, &(0x7f0000000700)=0x8) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r4, 0x4) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x1024) (async) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 1m49.058008913s ago: executing program 5 (id=5180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000043000701fefffffffcdbdf25017c0000040045805c00018058005c802dde06dd2d6fb527ff41e9716a45cce84f369c2a36346365fd7f05704d7102cd0898a0a0a91a923e7e7a7afe1ceb1d3ce47c0e7b6a133a34edaf1225882ffac804002b8038a5cb93d7953666cf29edb1d6792c52dd1a5772a9fac08562645a59c91de7cfdc44b31ce5baad5d3af4a77aab0db31278667ba20f20efa7fe4ae64f073a"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1m48.983556738s ago: executing program 5 (id=5183): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x2c, @loopback, 0x4e23, 0x2, 'fo\x00', 0x2, 0x1, 0x2b}, 0x2c) listen(r0, 0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, &(0x7f0000000080)="818c365c0b69e4b73c2359d70e83d536eec8b350d68ed3143de9c914089a6d8a38607cf3491025a22ceccf10e9cdf4e7fef76beb3bb4b2a4bed0d01e2dc140ad732180", 0x43, 0x400000c, &(0x7f0000000100)={0xa, 0x0, 0x6, @private2, 0xf88a, 0x3}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x800, 0x8, 0x3, 0x10000, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r3, 0x3, 0xfffffffb, 0xfffd, 0x7, 0x2, 0x7fb4, 0xb, {r4, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0x41af, 0xf9e0, 0x4, 0x5}}, &(0x7f0000000300)=0xb0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14, 0x80000) sendto$packet(r6, &(0x7f00000003c0)="ea514f792085ede001b5de6388ce28baeb4ebe6c85e4f9933fa1e19fb811eb42ab87136765925b1b941e84bba4462a65d684d9ef90b2401291ced3b76a211861b1dc769bb331b16c2a", 0x49, 0x4004, &(0x7f0000000440)={0x11, 0x8, 0x0, 0x1, 0xd5, 0x6, @local}, 0x14) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x58, [0x7, 0x7, 0x2, 0x93d0, 0x4, 0x1], 0x3, &(0x7f0000000480)=[{}, {}, {}], &(0x7f00000004c0)=""/88}, &(0x7f00000005c0)=0x78) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x18) socket$kcm(0x29, 0x7, 0x0) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0), 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000840)={r5, 0x9, 0x77, "2df273bc8af67d98cd37593697cacc8cea50e08314b5e1c7851ae427c0f55c47f54cd769ea6f1539105513f37fa0b073426d8c45b475bbd429c43c035589dc502fdda9085cadecdb58093128f23a1f8bf592169152f857ace5766c0e9879a310eda4095b442681d9fe57c9717c79947f22c4437bcc92a5"}, 0x7f) r9 = getpid() sendmsg$AUDIT_SET(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfc, {0x44, 0x0, 0x1, r9, 0x9, 0x5, 0x7, 0x7, 0x0, 0x82, 0x4}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f00000009c0)='vlan0\x00') r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8cca}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xd94fbf35c44361da}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xc8, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040044}, 0x40) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000dc0)={r4, 0x2}, 0x8) 1m48.874238385s ago: executing program 5 (id=5186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000280)={{r0}, 0x0, 0x12, @unused=[0x3, 0x0, 0x8000, 0x8], @subvolid=0xfd}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m48.816610278s ago: executing program 5 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) listen(r3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) 1m33.790919405s ago: executing program 33 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) listen(r3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) 57.608207754s ago: executing program 3 (id=5867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xe, 0x800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10000}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000130001002cbd7700fcdbdf2500000000", @ANYRESHEX=0x0, @ANYBLOB="000000031f4c058008000a00", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x20004000) 57.151253557s ago: executing program 3 (id=5873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x84005) 56.970993526s ago: executing program 3 (id=5875): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000a00)="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", 0x601}], 0x1) 56.786375297s ago: executing program 3 (id=5878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x804}, {&(0x7f0000001040)="9d7fcf3e", 0x4}], 0x2, &(0x7f00000010c0)}, 0x9fc) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 56.549611562s ago: executing program 3 (id=5880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, [@tail_call, @generic={0x7, 0x0, 0xf, 0x1ff, 0x7}, @ringbuf_query, @cb_func={0x18, 0x2}, @ldst={0x2, 0x3, 0x6, 0x9, 0x1, 0xfffffffffffffff7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x40}, @jmp={0x5, 0x1, 0xd, 0xa, 0x5, 0x50}]}, &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x60780, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x633f}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xd, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[{0x3, 0x1, 0xb}, {0x5, 0x4, 0x9, 0xc}, {0x2, 0x3, 0x0, 0x4}, {0x0, 0x5, 0xa}, {0x3, 0x5, 0xb, 0xc}, {0x4, 0x3, 0x7, 0x5}, {0x5, 0x5, 0x5, 0x2}, {0x4, 0x2, 0xf, 0xb}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0x3}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)=""/75, 0xad, 0x4b, 0x1, 0x8, 0x10000}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) unshare(0xa6030a80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800070000005c0016805800018054000c80"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x24040001) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000002540)=[{{&(0x7f00000006c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000007c0)="ccbac5d53cc1f02920895a7fc226fc2c10bcf52939bf7b162ed8b6b89fe8176fbbe59816c9b786937abe359e3b8f2c1825a0fde0d7a7b479a5beb0fb96399e9ff3c16929519151f12fdb2ba61bd6c2bc2e939bc770", 0x55}, {&(0x7f0000000a80)="588eb70abd625a4d381a8987127627ea2a1b68e620bbd452bab737ea6ea2f61c311da09a4f62665d4df7626ac8403240bf0c68c0a817d4abe62149ea4529da53d85c490ef1608c464ac2482101cde2d89209a6a9e160b8b62235f561b967a60e8ed7dc39d08e1f7148281044955f0ad6f240682a8af3c0022fb281c6219e8fdad1e0608c90e6341ab20825e7ab062bfa827e4956781d6b7e826e8a49b478499d296edc64142d5edde86c034f08630d78aff497342d05", 0xb6}], 0x2, &(0x7f0000000b40)=[@flowinfo={{0x14, 0x29, 0xb, 0x81}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf7a}}, @hopopts={{0xd8, 0x29, 0x36, {0x87, 0x17, '\x00', [@generic={0x80, 0xb6, "d10805f6acd3aca2abfcd28428a80684c99df548a0c75b69af4f22573f0664440ef885ca4fecc8ca74d9e4b1cb81a886d348f61fa046cc43f79b40e137ef13172afb452c0b724010132054ad39a6908d367776d8376029253a554a82fe42ccb7494931c65d959609b3c24f35130ea86f30ad59ea1ae98d715009a9a5dccef8a72c6f23d232edc8d8e43704b3dd621dd7e76b4f60f80d68d8ff754a0db9052b4ddf186791b2b42fbc5ff85284214f0006b23bab392ae7"}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@enc_lim]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x1, 0x2, 0x0, [@private1, @mcast2, @rand_addr=' \x01\x00', @private2, @mcast2, @remote, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts={{0x48, 0x29, 0x36, {0x6c, 0x5, '\x00', [@ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast2}, @pad1, @ra={0x5, 0x2, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x228}}, {{&(0x7f0000000d80)={0xa, 0x4e23, 0xfffffffa, @loopback, 0x6}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000000dc0)="53cf58a6d8c7adb842c9712fdf1b5dfa1bae54dfc94e5fcefdc3110fe49106bbcf48be8f3c65bfb52e33574d80ecd9cee4ea50e0bb9de1bf79b3728357ae87c6e5df696b0bd6cbd702cb75ca787d9fe6ff08136707371c31c2b5f635495ad8f2f44c1d256fb1b4d78f1e56bd03ee2a9af69f0f99701f63794541832fd1e4f4efc8c8b9fa9cf6fbe728fc25f163043b574b7a0762b9df040b7e6162c81769062e0fb8eb137794f2d7dea70b90ea049009ad9e1347ccf9c55c1054e39f2c4a33275efefed7c8bcce5ffd347d80f1988725274eda1af1bda5c0a38b7e3e3d5bd78ef4e28158e906003c98f9b12901ed6e267813857badebe30f8f59f9db3b74fae9674aeaebe93a3c99284bdb0004e2a91bf5b8d36d7cbef18d57464d787a5fbc4ca02e288455430431d703babde29034b1b8a2cce73843e98853247cf714dc55891e064290e61fe1f0b7fe7ec26f2078fb9fca9034ecb35d9e1ff9eb151145c0978140e94a561b4f472c08e202a8896aeb1248f957cb003feb4e05f78d1e2d1464ef40210edc3cd7acc27707e0c468eda8b118fecd0944652b9482e73fdaf0768c61f420e431b286317ba23495b5df41ea65136cc875946cd9432d07039e53dd8f7ef7accc4df847a47578e595545b069320b0821f26c8c3819aa96da7677087b91d99a72dd8b278be016ad5046cd961ead026f95d949fafb2e6707c0fab7cc23000ee515fcfc1d327af9926393870928fbcb41ee7b81985ee50879fe5ac5729966980c35bf98b595723ea7d7d5686d5557781fbc3060f6d73994c8c5d8edf9a6bd21f215aee5f663f3326fce3794e4e073fddeaed864251dfc386bf0a038509cccaf77069fc9a6ca0679129ca316e40dc45d620b399b5e94c0a3d17c694ae453933d1d836bc8ab66d1fa5537779f7fcf84f4020ddabbdfc505f35fa5f8f4c2ed3871a8309a3d41c68f70a4c60bd7ad67694745c271c4de349e772d87def8ed236368338dc7a2a6bfbf899eb0bf2c8edd32f8d911cebb0718de5f8a7b67a494acf5cd9ab1e1622afeb7ec09ad0aca2c8d23425fc600ddcbef61f6432ed6d720771a3bb3970f287768e59f20167143c8670cf14361e59941de37b923952836c98f08eba8be7a386788323cd07907e347d51e4449ab5189f4cfce3a129bad92e15ca38f9dae5ca064c066c4a768e4afc06127e589acf46d26ff6982c0137577437b5522ac9d327c3db792b9f86c3edaca1ff859d65ed27ed27c4e7b40aa42aeebae00b6e5b75f69de6c04fc4fbfa57c85ffddb00b9107aa51309929b9d6853ce811aff91d007fc8cadb34edef76a800847cd9d184f70bd01723b62e21f5da67d1158b67ebfb3426b940f51c97480065a79e57e30da04dcb916b900f0260938062cdd13519c6d59c25d3305edd96c1f67f1fce75aa7b5637c4e446d66ff74c1222f2ac654092d13940e3a9953fae8ccaf5c6d850f84af045e61babc61f59fbaf1cc04677be08316a139925c60288dae8a00b8a110dab1af6708132c90756f0105ed9bea8c717267915d4e67b8a695933b18e5f131576e847ab83377e959220b0d2d0701d0b76a9019f91e8fbe653aa8ea04f469711181edacb22b01ca84331b17430a7f49f95e7881454baf6432602a004332620632618564117f0ddc2289daf234321dfd5aa770e0e446308e7f16b6a2d6c0f8e97f57494d6c713a0de9fbef89d412c50e814b0b2aa1dacd8bad51cce65a572fd73159682cb79f4d698f082e4c94acb65767978e9227355f5368a00134ff7c1d342e472b5512bd69004d69b84e3b78176a644b897fe4454ebac7bcef9799c39f237c257af6ddf5ac71d0ea769ee593f1beebfeda70595953a86de768a8c5fc92f998cb33872e1f8a0317a2d6f9595d924c2ff1d45f5287d3c7612112cad721c0e7ed7e4e26887db39aa514089bacbba12aa149f5fb08122579516e5e917efc1b37ee11feaefd74b1c911e9a640da92aff558b5076630d5f9085b03689868284f19fe12fdc47e28edd91f0c8e40ca7b2c3cecfc68d16b7ec9836a6d86e104b28ab8cda17ae0d67d7231c6d68bee5828eac1bda61b25c79711c0d0d6a790885ab02afba93932ef888fd72fd73f86c765c58b4d28f74fed07634964e7d18e4970ac7068e13ca19cb9d1fcbcbc6e824ffe0eee3b2bd4d909609b606acd71001bd89167db224cfcbb46276e186d3a00f050425fd6bf900f052fbe21f1d744f08364c3ccc2c8b8f02a5a4a7ab1a5ee9586d94d2f66f18e91bb330d6470370ac7f641b73a02926d22a4c0edd33c224441f49e76c91400125c6121d1ad8272c3640832cb25daa5a756b5c5731a180c602b96e577fcba05b2384059d5da56bf73a6f97ca389a7081c10795c656f785c08553353b4c18b66a45a12e5e1936fb348a626bbac83ab71762004e26823a5767ab3e9068242225dbb73ff663bd76b6ec190e2c299fc42aa52cd51c86196f4eceeeb9b08a3a989742a7e7e9eedc2385ad783b9296cf7ecd28c08cffae486d23fd905c0666d0718d8c121e7cc485013725e454347e78d468579404a436e845b5a574613e1e612b2e64deed689d2d4bfe4539457202774b83eeb48ae53984e2a1f24d99c3abb2a63505be02589aeb21ab2d9ed11a30d7c779247a04e24345acd298545400eab1c858b125167f37bb4902bbadd0594c1f2ee8ff6f0520d92a298f911a9f8faf0b723b41500b0096de10281b4262729df0fc7ee8ce058cb5ded7d2db9cd038cc9d27b7b686f974d23c6918b27df77f33ba13fda8c2cd8c57f86a7774ef562c7e64dcca16d7f322a5bb9920408f9af053e7153210cb9e8b12f4dc112af9c2291b7f1b14a1182a24bd1bc995c845713ea21a1bc8638a9a66b770ccec69ba1fee56658f454a4f886997e4ff35920deb84b1e3aa892b9989e5afd0f279f60b66d2e08a43361aa40d75c043f5b03ebe0a0c30ce2bbec193c76666002acff6b1af91dab759caf8ed950129cfd35fcad6e4949aa240ba0f2f79af6866a6f883529ec1f9249a84b6b5001e9859e283e2aa11ed275873fd188ce988f619321ca2baa2e48f397b27f9efc1f102f837adce9950ebbc6b27fdca43f5bfb831f86f0163bff75584601557f4814652fce2487f5af0ebbc7cb65e89d0c2f852060e9d5cc1c7deebd4fa25237ed4da97302f96bdc57272decc1f374f82345a64474c5f32f9ede2701f97605594c13be8b860d35b8a918c51b5ef9cd5a8bdf08ba4a19a1b2b8aac8abad0760e14b8e88fee7bf166dc15dab6811ca6a75a9daeebd24c56e0c0ae43b8e41986306b8ffda32697de82f4379072a4b4f862efc0939f2f82b49ee86e8446c9556e66a97db6428985c838225446615974829b75ed334986f3c0e026ed5b751c3fccdc1dac3e24699dccdce7870d4acd8ce218cb5946f6ee1f87f853d8205e4276d8cc05f576b642178755f83ca55bcabd69ec84d4fb85e59a29eb686d0cae62902dabccac909ad9dd160de28de0cf1cfd849f6ce6c48bffcf7aacd36bdbad84c57773a0500ab39b08ba3b3d1b03fe1acdf984389fbe04b0bfc0b15d45117e410750975a92cb38847f67a1957c7be37c8e703e6b11870ac08b4c602bc36e29896d9613cf2d803cf4bd540812aace56aeb87948cb9110e0ea65e0e0bd08844f935b237eaa8d336a84f28cd67bc0f22ace162a41def6a2f27f37b2d8451d430f9db956109d147dbf58b55b0a002710ae5291b8f8f11025270f65ff825810aaabf09ecec213ef752838cc85decbabaf4f2f955b6665f34c1f16d383d843ba67979e0397962631198afc9e4e35f26008fe7a01487c836c5b86d1020e48f59a075cb595a6577185fecb69355500cffd07beef2c9f4d256c04f731c260789ca477155991a439af7b7f1e7e83b214beb083241171ee046d395623f5b7bb64ee11aa3d6932b7e95639a2b63c5e8e5a0238f17c964ed1a49d0a4b0d20e370db518cc1f04391e674bfb17483fd090a9761178fdadfd7f776e6c77f863b821a15cff186a350c3ebf82da62841008123a6533fd7505edaaab5b2f4f18ab6d42586c46e4101c23e7bcf130adf5b6352934d79d17f08ef2a9f0ece8d901250e2d07694bca1db7ed89fcdb1e99013a300dcdb9822d73bb89746196fc2db47649fbd568d1f548358a5d5c6f653a662b6f566780fd43d1c4c96668756c9c0491da13d36a486a6d243e867e1ea49bee51ca94a309d3bfb50d138311c34b4df85bf2a257bfe1b6213eeac08acf963807e950eaf47ffa9ff44924bba6f92e6725d3df67c05fcef1ec5aafa4de3f9e3ef983b8d0db3a1837d64eac31f3cbe51bf88406639e6c71ed7641cc3fa9e412d9514da46e15359424beefdd821435b743d645377a5ddf34cb514a0575b97c6e17b0a9ef5bd5730c3ef91615a582487ebaad900c13280fb74ae2867af6205487e2d75fa2e85baf33051bd90426ce6d0aa159fd6afc2bf10e7faf876854e6e2c4eca84dfa4eae31153134093f8116b5ec2ca8a7983e199d42c626a96ec15e0a6a33d5049f16639177f4a229972f7a4bd995625aa69ddbb9552e3cac5a2a6f39bc47928fe68ab3d6dc524f9640cd169020f70be5b1c2b924147d7ebff900a550ba9dd08523508e1279d5a81b94a126ea03572a75218d6f30267318d4829d1d0a0bc616efb8c3c7e75f5dd98d6f376d150557ab0aa49c6034da8e0230a811a90c2bd1d18cda57709d3cecdb690ac111ffa5624d6e74abf8e07d057a5709201c0ceda92bbf8059c649e8670d6868e5bb8d11d0570c24a5a9b68daf148d41933ae5e2a91e7378f2b44b9fce144773943ff0f837b4e597af9d737c530955f76b71c98452e02a8e13723d6a0c2dad06dfc35259bd50616e9babad4a7f664148fe04f018713cb1bad3a44d9ab8cc1354191c8e5982df4346f883aa768710c6115321abf9ce4b9783db7578d146bc2f554a165812be6ca0bceef3fea1f9093c203ca8342a22313cf37e7b3c51873908335b96a17d6e141980f8b86008c10a3378f0108c256a839acc890e6d73f738e13bea1389a70f58f1028c2e1051cd811713ee5511b0f3a8769e47a633f4909c15b3bad5f459232cc42e321651545d2ac6299590a738ad4b9d59682af27f724e9f12b01a4a74137c0b2641b8943ad4c2bd0d472459cb0b540fdc00e0c2ee64fdc1be355e1f01db2d25d6175e2539150fe1861d7952ca4a855954ace431983a42e6d70ca1290d5b9717a5ebf3a608bb563222c05c316a0a663fbd430fb7eb43957be6ca4782abc60149c4e2e25b977d3e460a746ea47130e2812ba2a8b7af916014ecdfc12b4c53ccb593afcc83f881cd25833b2ddb45bb0b66ef6b200930d60348be36f29560d3cac97a0c1bbe037831a8c9926500d55373b430e48a3054aaeaa262f33bea2187c52937a743639bb0a3930baa24cfd0399f3e7bb6620a62a163c1e52a7e7608bcd85a38586cbbb1734f9616580a8f922aa84f15bd458f27fc78be68508094ff63236d2ac89851659847d13c30bb25118b0334ceee2817f1136231f47a5c2ab07716f9ab3c34ba51f194a6d3674189f0d367087c47b59b11157e1aa2971c1eb417b9f9044c8d623613924c07f4188fd3381a18706b35db0e1624bf17dd4d6e02c1168be567fa9d6700d0d70f21af292bc9397a3b792e8129acc4b2db4a6466dc26167931c816240ab9e758805ea8467d2c7d5ac905ec3690252ed404478e8698951d79029a186a8996174b47c2270b069d84849c1f59b676cf8c85c2e621bf83b596b9acb38e00b86571", 0x1000}, {&(0x7f0000001dc0)="9f35b86d1e4805ac1f15aa57dff9dd2203378d3dda5c2d6fb503046cde83fe8e5fa99839f8cbd8b494be43eb7b83f1acfa88fea7432948ce1d4d50322ff1af78dca5fe82fdeff739350c489e7a82bc4fba6235697c05c0fdfe7ae5732b761f4a8b0c1e59edb5405270294bed074761a85c9aad1d97963b929909f93cdca7af333f55cb", 0x83}], 0x2, &(0x7f0000001ec0)=[@hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x7, [0x2, 0x1, 0x2, 0x9, 0x3]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2, 0xc, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2f}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x32, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1ff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x101}}, @dstopts={{0x138, 0x29, 0x37, {0x73, 0x23, '\x00', [@generic={0x2, 0xd1, "301796777c63350afd48f298a3c9c74d79e5d908b49cbaf123c07c620273d8f47398367493451557adcfdc715b740dd3fe72f83bd492e5eb63fe2cc3ac34963a9dd0bcec31852de01f8b9bd5a8f7bc2307601b483410a09ec094c9f7b3260dad0e229c9a831da06c38eec4566dad538022c00572fb44f830c73fb9ee6ddfdbfa80a4a51b56efd5b8475118a68412308241f1841201c8ac6267e89090507c30c0807ada960b94f74ef832846c626b574735b07d155330e2ec7351466a5b83b7b37830c2f19aa7b37db25bedbd2db58e7c98"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x16}}, @pad1, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0xe}]}}}], 0x250}}, {{&(0x7f0000002140)={0xa, 0x4e20, 0x10000, @local, 0xe}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000002180)="e0ecb7e408", 0x5}, {&(0x7f00000021c0)="4b81aac49196de0f12a664dfb7027cf153fc5fe1fd295d01e79f9232aae967c3fa552b36173085732b07289cd4b6d86937cb1684201c6b4a0cb1e1b64f47289be60fa83017adc87631d56771270ccdf9cc339eff4758cdc1c38cdba26b510e181d75c99af43695087fb67b71ce72f23564aabdd4d5c6c2b6de64191107c9431f9e123f901a7dbb94ac450f2efc2664af882012376f85417e4591cfa1e9cb68e1dd6d3d54e9a54f1b039dfef0512fec59bd036422423e51fb7cbdb2f6c14db5759697c9f3", 0xc4}, {&(0x7f00000022c0)="31ff86de8eec498adf47acac65fa4ad28c9b17806ba0b11fc50f04906177bdca8b1a15bc60fd97dd2c4336467e8d47c83772057e8520d9c39739d61d4439a1415d2927a964dafaa79415e0e223bd2296b3eaceb8b6e366218fef6a8aa5b4ce32444a4e1f0d24de9e7d5af385b6c90795bc35875c93da66cf52c71283c570a8a18efc048312cee6bea5ff1b1aa6790a456b3ff822e056001482968725c2bfc4bbd0359b804e3aa2c5a15d33", 0xab}], 0x3, &(0x7f00000023c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r9}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r12}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x2b, 0x1d, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @ra, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0xe, 0x7, [0x100000000, 0xe02]}}, @generic={0x2, 0xac, "84e8e7ad8602780bb9de100d5a79dad9dc237690b5175c66d4aaa4506ab9f66e97b79db909319f007b504fd1f2ec01621f037ad6ebdf8c7038dad3b7c31068e7199ecadce31c3c10785dc97e102dc6ac4a1e72707a8b8322b9d0caf979667cff94c0f17b046e7d779cbbc6a6abbfbd0e6ee4c30d3b8e0aff2bdfa759da611489d40b1df0c3dcd7f37f7bae3e413019126b846609c6e73228d3f80cbbe741647799a9764a4a1aa5f996bc415b"}, @pad1]}}}], 0x170}}], 0x3, 0x40800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c31b0000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 56.111807508s ago: executing program 3 (id=5886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) 47.622633238s ago: executing program 1 (id=5957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r8, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xffffffffffffff91, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x20044000) 47.487948869s ago: executing program 1 (id=5960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) (async) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) 47.354105195s ago: executing program 1 (id=5963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x2}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0xfffffffc, 0xffffffff}, {0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfa}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {0x0, 0x0, 0x0, 0x40000, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100, 0x0, 0x0, 0xffffffff}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5c64ed906b676229}, {0x5}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x3, @private0, 0x537}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="741fe5f7c356d3e5e41ed2ab920e25c10fb61206e51b2fd4c51613da0794df5bcd96423bd15d212ae006e494af4ab27c4dd0c186353f267cb17c7976c31f68bca454f79e63a7bde938f604330b0571fd54214b1e0bd08e396952e388653caedfb460aaeb2a64e02b1f", 0x69}, {&(0x7f0000000500)="23105a0ef21de3380c89a21c098f6cbbd02c1ab89c9998db8d90ebe853323cdae0856cb99c14e8344f230755db505e446826804ddace31a24991c8e674e759a64d269d88996feaf7bcf073f595a6ba47214400ac0ede648989306850db4d5e1aa1cc3b1907", 0x65}, {&(0x7f0000000180)="50eb2e4679cfee5903dbd4103ea47fa4385420ef529b545f67f086a441ee3d5e6a810b5034aa8403871a4e7a7257db3a1d2eaa9383783316acb43e", 0x3b}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f0000000300)="106b86e01f18a6e92b1920c490a6d584e422a2e4d5a0666700649159914da2f1d044de0b3a8ce13488a842", 0x2b}, {&(0x7f0000000580)='$', 0x1}], 0x6}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 47.326644765s ago: executing program 4 (id=5964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=':\b', 0x2}], 0x1}, 0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r7, 0x9bbb, 0xfff, 0x100}) openat$cgroup_ro(r8, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000880)=""/213, 0xd5}], 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @fwd={0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 47.152372358s ago: executing program 4 (id=5966): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x0, @private=0xffffffff}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, @in={0x2, 0x4e20, @broadcast}], 0x4c) 47.133282823s ago: executing program 1 (id=5967): syz_emit_ethernet(0x51, &(0x7f00000000c0)={@remote, @random="1800a1e152e6", @void, {@mpls_mc={0x8848, {[{0x5}, {0x1}, {0x2}, {0x0, 0x0, 0x1}, {0x3f82}, {0x1000, 0x0, 0x1}, {0x1}], @llc={@llc={0x0, 0xf8, "6396", "48daa9866c467158c200707b9dabe52f68b411388cc550e15e41708f3ec91edf555ab7"}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0xb86, 0xb7d, 0xb13, 0x2f5]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 47.000160128s ago: executing program 4 (id=5968): socket$inet_udplite(0x2, 0x2, 0x88) socket$isdn(0x22, 0x2, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 46.98918316s ago: executing program 1 (id=5970): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}], 0x18}, 0x81) 46.924400459s ago: executing program 4 (id=5971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="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"], 0x2c8}, 0x1, 0x0, 0x0, 0x5}, 0x44050) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000e3000000000000060000009dbcfbc6e1f946a000a500030084f7204b54f8f0a3bb647814285972885e0a84b09eeb0cb455a6003e24912ae2ba28321913dbb28b50783f8619ec8481e5d46159bd1c4157fef0575feac5fb9c36f48cba6a67f59370d9ee3b7e7187c663bf1272f955813b0fbba28b8467aee1c240d226b3c516fb7b1fdc4a03a08a046c6b2a", @ANYRES32=r2, @ANYBLOB="0a00e8000802110000010000"], 0x28}}, 0x0) 46.848064308s ago: executing program 1 (id=5972): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, r5, 0x1, 0x2, 0x7, 0x4, "e23dee3438bfff7dba9dac1ab57de6169859000454e81119580313f3c5381ae8bca0ced11de311b19b7ad87ddef4e0b5080816424796e99c580456ca065721", 0x17}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 46.816297086s ago: executing program 4 (id=5974): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1}, [@RTA_VIA={0x14, 0x12, {0x10, "998e704f1b07c1b80950359dd266"}}]}, 0x30}}, 0x0) 46.651597037s ago: executing program 4 (id=5975): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xac8, @empty, 0xc, 0x3}, 0x20) 15.547260963s ago: executing program 0 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6002adf700183a00fe880000000000000000000000000001ff020000000000000000000000000001c4009078000700000000000000000000000000000000000110cc455059ebe4d598d183b1af303e99e2915877f5adfeafbc37ff19cd70c1d15bcce54553213f123c4869cbdfa783aab5fbb0aa53374405c536ba6670def4d2b430f7f6e9aba18255f50d908d562906b60e929caccdc802678c7c1b1ace2d654243d7d82208508760dd0c5422f38a7c7acd560a015ef4c5945af752291c6cbffc20805d5324e1b0e4774df3c5297581e2088ed47c300df3b0c6a3a3b0e27723a1e6f28e93acc8ed2c7b6343a09f06896e960e2a6c3f"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x4080) 15.546326514s ago: executing program 0 (id=5985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xc, 0xffff}, {0x4, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x308, r2, 0x1100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x140, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa5}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7a}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6cdd7311b3522f47f6e5597c702f505ee83c5cd23b5bda02d533c13a8cf25eb3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x9c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0xfffff302}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "81d2899d4d14dc40f76a6fdae1288e167da8e42c76473e99e34aa5f5a8539044"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3d90e72efd6a57311fe42f79bd3c65418d683217a54f1929abd7e3e47f194565"}]}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0c3ccf04fa9b484bfc5efc7bd4e5d4a0"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b0d7a421640415f817900f2c848387bb0c6ef8c4814737aeaadc33da74cf4bac"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d557aac88852c1144127bd0fe629a439"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, @NL802154_ATTR_SEC_KEY={0x68, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "31ece87a56169ca4d48c1a73107c0e1059aaf9939a144021c954c7e2a3e9071e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8eccfa3889b6b799d2b8b135c6487669"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "72f5034695d7ebf9d221c81add781e8f4105ad143b91eddf6eab877d7361551d"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xdc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0xac, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xe5d29da042a7ed65}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0afd7e12b76254c46a2f804f434089daff7ff04915b678a9407ffd6d0b5568cb"}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x20080085}, 0x4c040) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 15.545771153s ago: executing program 0 (id=5986): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 15.537541424s ago: executing program 0 (id=5987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 15.53703178s ago: executing program 0 (id=5988): socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x0, 0x5, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "047362d4843af5cce037a189c9077f3f"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x0, 0x5, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "047362d4843af5cce037a189c9077f3f"}]}}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb1c9cfcb74e875ca, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000ac06bf0750d3ae41d9d64cb35584b2698b0a73bf1877f818940064b62a1af8adbc2b53531af8e948e18e1414bb000000000000000000000000000012f0bb93ceeffe0e92cdcdf5f10e135db3646dee2dc3b4724d3688332454194e544696c0f89be224816701c626cd48aecbb5526569bcf5375288e4f109099acbf5f3b1eb5121046ad6e76152597a457add8000822017f5974b5526", @ANYRES32=0x0, @ANYRES32], 0x1bc}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000ac06bf0750d3ae41d9d64cb35584b2698b0a73bf1877f818940064b62a1af8adbc2b53531af8e948e18e1414bb000000000000000000000000000012f0bb93ceeffe0e92cdcdf5f10e135db3646dee2dc3b4724d3688332454194e544696c0f89be224816701c626cd48aecbb5526569bcf5375288e4f109099acbf5f3b1eb5121046ad6e76152597a457add8000822017f5974b5526", @ANYRES32=0x0, @ANYRES32], 0x1bc}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r2, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) ioctl$EXT4_IOC_SETFSUUID(r5, 0x8004b708, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) 15.536576609s ago: executing program 0 (id=5989): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = accept4(r3, 0x0, &(0x7f0000000180), 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x2a, 0x12021, 0x0, 0x0) 15.536077126s ago: executing program 6 (id=5990): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) 15.535819573s ago: executing program 6 (id=5991): socket$kcm(0x11, 0x2, 0x300) (async) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 15.535578285s ago: executing program 34 (id=5972): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, r5, 0x1, 0x2, 0x7, 0x4, "e23dee3438bfff7dba9dac1ab57de6169859000454e81119580313f3c5381ae8bca0ced11de311b19b7ad87ddef4e0b5080816424796e99c580456ca065721", 0x17}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 15.535527863s ago: executing program 35 (id=5975): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xac8, @empty, 0xc, 0x3}, 0x20) 15.535370542s ago: executing program 36 (id=5989): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = accept4(r3, 0x0, &(0x7f0000000180), 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x2a, 0x12021, 0x0, 0x0) 15.535232928s ago: executing program 6 (id=5994): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r0, &(0x7f00000016c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x302008}, 0xc, &(0x7f0000001680)={&(0x7f0000000180)={0x1500, 0x26, 0x800, 0x70bd2c, 0x25dfdbff, {0x1a}, [@generic="6a1f793e696953d230874b4b25499ffefe452076f317c5e99552366670efafbd5910ccb5c1465771059dcb6ef5c764fdd8fac66f9c44bd4f87a9dbd4d552313fc7f4cdba71e3714f479affb7e4336f8251caff8d06e866619fb147ad089f2cb68e0778de69e2225644fcc94e506f39dede49833698935147124a90c028ff57f6a217050743249b7714219f570608987a4bf9bcc2e715403d78775c33c087176aef3c3a20a33bbf9eefc5c3471cb5c3b8c2e10d2b905ba8e1a93ca071884c6bb47e17a15b99417a1f7067fc20396da5eceb7b7dc78d46930b8574fe3e9bfca1531cc52df2fe5becedc9f8e13e33e3135ea0682462961a921845b8f333a8004984a7e2afd479c788089957d821fc81ff0220389a6fe9650957ecc6067ae294e0f3f043275a2b506f38edf440669a2bd589c287becbd1ff86232f2e18c0f230035c10d95c653b139a6e9dc253cca6cc57d9ed579d266b335a9918e0c4b8b6630bf8c03e69f456d1d37e03d0e96b34e0785013c698bdf83a76d64a02320ae4fe3ee066d3b5652bc3105fbf56179390146b56f0147b29c951d7f2b2b168d10a424768b9c839b0628503ede4a30cac074bbad3a82e64b607915b53e31b1d3e9b735483748edb7a7e3cf9588d87d3b47f894a6def08bbd323e871c75fedc163b953997d24858a11dda43ec44381daca81d03c11aed2e1d5746c3f117ff118a40f7b0d07a0482c785d9febc0d5a20ab6075d7c8f2c2b08f2be9aea66108d89d2071ee643fa14973b303775c1a443292167050488b719b56f1a3a37c48110959505008dee74c20d143091e5eb17a6a700c5454cee8c5ec157f539636c03c11f3fe862fcc1f86795078fbe068a21642cea015661093de0b55d0c1cba69d13936595be49ed161df7c5a0350ab7b74157028d148fc17da2d4251a9e91298099b2aece6c154334abecfec0c3ba01e8db2694c0579c49933b9564099c8e6a29e2c50144c330249da200dcd9929e89f4fad6a6daed55233ccf7c5740ecf830ba31d47fbb3d680ec84f50ffef7be6085e9ff45c76b51cde477e04871271de2b73ba0b49b52993b2b4ee8f28510330b2ed64338345ad334cfe8ae73bcd4068095fc751393037311faa6cd87a13438b95bce0cadc33fad0ad2bf78dc2482c442fb36a382c51d0958204ee40cb3cb072700bc634ec979185e2e569924a42ec2aa2aa30ada50010fc9f4d13c323a1f7d41fcc3dbe21cc0e7641dfa92d67e6c9916f35127df0f7ee249524d653ae0ad7c54a85d119fd185316d615920aa4d598973dba98cd66359d5a50df037937d644458af5b5c68d1b83e9b428ae8e43a2066d4b9fe516a20af107184d89daeac116c47ea73889884f5c484151072de0608100032a182b74e6cedb5b806815df1371e2e4362bab1d7101e2c7100ff1fd850ceb1133751d14f09b3ba87adb190aaf62b0ac75a484dbbe70c6ce359b29ffa166b87ef4af382d3a8ae56a95ec428f2f9cd5f0d1cd02a921c4de0010361a0aa8aa60019488f6f6616d92a2e57498abac8c188867d106d03955a1a06f230b980200b18a7f1d4075e458620ff768211814319827fccaec0e2ad7e9ef51fd92ff1d40ae451894daeea3aa72b5f3291ce07b5e25aba367a484714826a016b02d5551be540d6b8f2a7a5d1121fe1236734dbdf3f748a81518d9ca8a6c3326bb28f88b7c7b05b717a9c5034b5ff93a920ef74f927f1f51d2a3c6c761119af658efabac8ccd51823a9e2f4699396e5f58ccce256b48b744812aa8997690490e649d206da4ab737de8da698996552772fcfec2b13f1ed3ec5a19dd6c8ce4ded4003f12a72ddcea9f4aa5d9aefe956470467803824ff0bd69cb56130a9fae223a0233837c17cd9022b64ccde699d3964f712609869eb2be9198e57dbb7e4bda10fa0bbb2d7ab78c42731acc09cd08568eee5b5cab32b3aefeb2a096231795609adea3fe688c4af7ff5e041c455bf7944c3a67b63298e65b25e3611ee97457aebd80eb551cbf8de905db84066506ca3b9e577b5a15c43e6fd3907bc20be3041757a480c629e896918945ca18eab729a956e9eecae05f8c3743754975c3898d2f926809f5c0d0f1a431dfc3aba4ec06366159f6ea8361d75332ac37a6726d6f4f0069fda266cc98f35001f76045e3c77f5c879c7374b33fa1294475f5fd634a7dc5f140a0c92e8aaeb902fc14de63a52268aeeb00397b9c741328d2f525e74ff66b9e26d89482432ad595303ce1d5eb3e9a4fd157056f0c03bbcdd3cddfc960e3a6416ebb0671bfe633aeadd618f716b6b52a04bb1dde272d20c75ed93cc09b4df1b8ee0cc363a1b85e36dfdb2108822b4cdd6dc38b3e7d1cb4f1f735e1135c07ca66451050929a7ae42ce9c27c7c274d23562c87e13547f5ba1cbbcd5c06a7396e99ff8d6ac74ead8d2416501a7df2fb7f88cca4f7c210836c6553e4f0d4a67b96e9e8fc1b9ea4a4dc2e53ed10464f8048af587553e68ca51be66434e3db9c1cf68eaf58a8e76f32d26d1694b7a45b718573a7bb966e15411878dbb1faa226ee2a757017efefb8e6b8d30979314d5c851fd4e88043484ddc816cc9c375e00e9b7b485a879d06dd2ebea148198e6f559f4f286c5c33dd4987ac004dd9a3822ef99327704f0ba0d289fc96375d5424f0d3d095042fea2545ac404d8c0a630dd5fab6e44cabd8eab8c677d690fdd7d2250b8469cc604cb4111b73a449ea7acf3abc3d8060d9eb58de9fd301bfddcfb4b9ab78e06fcbbf13512c13d9aaa540b85638372f015a0298b18a78d4d8b59a646d3627b9f69ab02e764d602dba3977bfde8dda1387252142ba0fd160819930e868e2b60e902b94f1f9ca983d3d4d6167e4fd0124047534e1df9280afecc94bbe072a6471e8c51cd74732c34e2f2287bbbbb3260639d1942cff9e96e291c679144b7dd8193060777c270c5bf248dcf2be7cfeed19caa96134ec8fbc55087eaf7c266ff57232ede9645a0fcaf647ca86fdae55f94cdad318dcd09999a36083bd6af17b712f9ae4f23b41fbde628c34c09ea2c6d51145dd4e74c40eaf4c625a7e18203ea9a1f47627756ecbef4adbc6e517c890a9bb4250f28feef6a0b3d13bc0660dd50c1ed76638f76c9a6da6cf8fa720985fece79b763d7ef994dab1bfc39c677f0b623bda1f2829c5e251c7ae158625a25eef05b6b9fe61d6c4743008eb41f9eb1b5b37e702639e5f7ef1c8a662bc9cf02348fb2ef0be3f6cedf7720fb9c988a508432dbbe5aa8cd789af3c6d48cfe2e775c453ff538c6b84c466d9ae39907ab73b3bf2ab3193a4a06bf3fac7829b1f9fe267b1154bff1c10f32abfdf5923424eb5ae459f1e9fede9f8661099fc4a3b892cfe94cadbc558a72c6ce18b0f7ed26f23c9a0f861312e2df91265556b35e4592be0f1477ad4bb21fadee7ebbd722d23b29bbda189159c51557b790fd84a7cb3ab870439817cf4a41d7d27646a263ab717b90617763e3c179af6fe8d84bdef5f90fc8c6dd3070b71592094f413b4980478f4f107859b731b49e256cc12c1725235ffbee7b309e0f04dc8e2c585e7bb3136c8ab76037e1f7d5a68ce1a73aa7cb618abbc01c26b323e2280b1a6662766487913b8c6ee041f6b80b7921750721fc0dc375477be8e6c07505e87f207ad2d191f2fbafebf7202a8e4e2211315f97ef8815eb317dc745da481cc7594087b040255f107dcaa3de8e6b930580d40c1183f4fe9a2bac3f06f706a9852d9d5aa5165fd9ee769d7b31c9b6a7a9c1412cb3a95953a03728c9e30bcb4dba43bde8f715221352151bee6fbb78dfd17b4de7bef1c10cc566712cdf21c0daa83e7af5470eca91db9e222e5c7046f13b4f1eb57c490b05493e920530ed5a13e67724affbf5ad0c09761501e59075fcbacd9c4b2575ed99a3ace45fa6f81ca8644b14a2ae1a10bd7e4250f2878acdf8894a9aa9db04bdaf20afc68935d062e1e49f9dad9b841c23783224ab9c7dc9bd940414d86cfc62550bf2ef45d0db436326755b3b7e12b23080173afe8544e59280cad883d4f8c0814e674fd1148c71d14fb0c551fd49a53c935c58b6ad3dca65a72e840957b274b411ff89ad9aad6ee2b4001c6c96620827da5985540d7e92fa7059ba9c891c72a519e3af64337e0f24428c5b49d8265c187e53516314e9cb0af9336d6ee2f63c9d24a6d50db07fee23ddc70e810baa4ca565b74f6f0a7fa821e347031eaed9ddb4de895b77b8cf36150aec460cdb6f85a515d051a4e7107f81693d2a82f48db3bc20812461b3053d637a76a4be1d609fa974bb3e3e25bb4fd33862d0bb6de8d38001165a1f3cc961a06fcfedfe554c804e109712aa4aae80d2cabceb7ba29494e4e955639463b20fd30dd53f5e58b48bb165844ba776847a69d0e8a27361a171ae1efc47d80d8a2174bed8285336e7644a38af9f30c9ea33fdb3f6eb6d1d5fd361fdaf830cda9065d67f0d90fb6ddf44af407fe0caa353b8e70429073d68a4257d6e55426b1582847b7991d38d6e1a0f6e5404dacf8ec1cd313574ecf238603b484afb1b973d5c0692643abb1dae07554c1aef4ab49c1c13f3a4b1d31f05ffa9e6d112f7566711292d4f80a2a9340db3cb2a7b048c416f77dfd64b18fab535c326dc3e9934b0b25d39c42625229816a105d23b70931c2be40fdfc85e63b0df6d640fe5e81e5fe596f711b35818c9387aae1e2345b78f83ba9def8e8469476052c98ca29c4398a5c2674aee6ce67150a09e5bff574825d8aecaa0a92164d4464d2e5e4ae4f29f922cdfb4e48b508d715feff06feecf63db83abbf59820458f49685faff38d4012ccb179d51a386f239824b93215a2089a44dfada94e6fdf7d0344fa230c4b0a6e7b6df5d6065864f1bd4a694a953c8b0fb1405455214a7852e9b5ed5a4d6ef5c00931ce1fbc6e93bde9dcea5a3b2c8d508c1adc0e84412d023bc674ca39de5610affc7f4c01d6a810e268340566704d5f90b9986091d2bc5a6b2ccafd9df380b5094b96c3294f020124e41792ea1ad1e7bbd576d31950819d4b4c6aca74921130a4fc2d6ed4a690efc84d21c5f54f29d0707793f15d106f1a7ec58387a9afe87c699c489369a60d9cd056799de47845417262ba474716074240dc0207f600a4d623b284145683fc573efc1ea9c8809adef65654185a0f93960f260064b8e2b98c47bf27bac57d750d942a71d0da9828382fe95d489cd461a861e6ba1f6b6bdd299775ad01af33fb182829ad4eed83b35205087c8ffd3c727c1c9f3a2dc816152d270d3dd6ea54b8fea79d40d74d4a0da8ffe4712cd68e3480f3f9a7e28af8c583bde41ba51e4b2f114d3fde72c6e40381af203f1fcfe860ea68c95d983c27c875a75852a59978b46d51407d189a86efad882ca2d5924cd515c5a993c94c5de0a240e2191284f440f6e20ceb5f65be63d26fef373aa0d4f69b7e355e513b5bc04c63556fae1be0514a47216d43d07dc6efea67010a23050969cf3e2a53313f736b151eb52c9970977152adffc90137d3532711bf09fa9181e32d8fea7d2bae8ee44e677189a9d6931b40f10834b031eaf52626b80ff169f37a3a2cf49ba51422745e9488440703e96bb25796bf83fdb9581631804f17fc785ffb1e0e5b8e078ce62ff056b5350613987b1ba6290abe43cd57d2f2c6072fe40266f73d44549d6cda5a79b99b6535a1dca5bd2bbd8493930a635b8d5a14edc822664752dacdd1527eff94f6457824da1e34d203e2c4b73789c5fbad73f011cb9e234eaaba779046e8ef464c5f34260abef2b00", @nested={0xc, 0x71, 0x0, 0x1, [@typed={0x7, 0x125, 0x0, 0x0, @str=')\\\x00'}]}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xe9, 0x12a, 0x0, 0x0, @binary="de6d1046e13173f409be1de7d2b0de2bdbd68646b2268884f448083a08b715a305f45efcc558f0f5bd268de9a08f101e0c488b1e4a8ae54817eca21b60f06d3d0a3cad913ea5594e718dbdf6a1e463a47c45f8cb038c3dd1aaa45d6c31443a74c19b7d6dc18e6734c7418a0b4d8ac22be8b706f1bc44a9b8c8f8dc8438c3d782cd8c807ec8cd59cc3b7c2566fc6ee13b36fcc971961cd2a80105d2c9e0005f04c0386305e713357876c14f381eaa0f6bd6effdc08e9e45e8703c297d8b910732b6415f804853946cd507312dd78a70ea89a928ec7bb6d5c50d8d20ef882d333bc9bd99e193"}, @nested={0x11e, 0x13b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0xc9}, @nested={0x4, 0x102}, @typed={0xc, 0x134, 0x0, 0x0, @str=':\'r+.#}\x00'}, @generic, @generic="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", @nested={0x4, 0xf6}]}, @nested={0xa3, 0x20, 0x0, 0x1, [@generic="5bcc2224cedc6bce2ff751f2fc69606956ab2905de44d66309bf8932d0bdb4f7f5d64cbe9af37c07d164328f46a6907439c97cb7869d4b1ac68a4e93f6b4aef8c56559e291ad71b700a88476193f84d0d3b65e7a0837a64cae6df8958afd48db1e712896cbdac0ab6213b2d2e5ea3c7707ee62295c8219782b2b3ced4e833dbbf421d55f534e850327095076b1e135b72dd5baf368308cc886b7188ef8545e"]}, @nested={0x21f, 0x15, 0x0, 0x1, [@nested={0x4, 0x33}, @typed={0x8, 0xaa, 0x0, 0x0, @uid=r3}, @generic="af3998085d83e6a8851546d1c5b5710ff950bfcf76b2064e78be74006e1b68dd1128dad329bdc41401c1849a6d0af6a37367285b4ae751bdb86a8fd788240c233e07d28c5a86d0051d3d497e7efb51c3d70b25dd3e6830ebec797f57351cea0b60bf2c92ec670fe51cfcae6cf2487c84b730eb0ad12c9f5985061c826dd68699d1506ff2cc2227c131f9cdc479472828b6777495bb1f23bab631543aeae31f25f6780dde4d28199a6a63a434961c522f63e1672ebe857b353ca9845aa686b4e7", @nested={0x4, 0x114}, @generic="c37a4e1d6fe62ebe8e04452b2f156307a23d746f3bf5bac1587a07ff62b05da62177ad4ccf4a15f2b2ca9a06eb42491eab64225f91367757b35248726d0642a4ca48a48f64c6a20558ce3172514fa9e4e1da04a457806d1b7d4534c344331352d9dccb2d5dde8efeb8f742fdc880d8d50db7d09db6", @generic="765b49686eeb1bfdbb4b5cdbac491690307529f572cf9f6c754e6bb91a49ac4cda8909a6bad06116f0af49c2d6b0929f30848bd42e4d9e18905352ac91b0f6c19afdadc25c21c9a2a9bd9f2cdbc1fb1978b42e622d2ed0f2522e94bc4bf8c4dfacec87ef0832dfb96ce4906b8ae51e8d4c2ab00934a8cfe5cfe7ea7eb2498510cac8325d33526ceb0dcad8f23784a145ce6fe2800dc5caacd43d8286c3bc949bb6238f42730a34d53038084e30e658cd742b5ff13cd9b84b094ad430664776412f9f181d44a6376bf40ab770e4955d80a829", @nested={0x4, 0x12a}]}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0xec6}]}, 0x1500}, 0x1, 0x0, 0x0, 0x8041}, 0x20040000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)="d9b604") socket$netlink(0x10, 0x3, 0x0) 15.371057131s ago: executing program 6 (id=5996): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x107, 0x14, 0x0, 0x20000000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040c1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000000)={@remote, @multicast1, 0x0, "36a5364ba7698c47ecc643a2aab8e295a89292e5d9f4d42589eca3331ea5e9ed", 0x5, 0x6, 0x3ff, 0x5}, 0x3c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x7, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x72c4}, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) 15.087534833s ago: executing program 6 (id=5997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xda, 0x8}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002ca3ef1b15921b7770000000"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r6, 0x80089000) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.030722287s ago: executing program 6 (id=5998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 0s ago: executing program 37 (id=5998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): tipc: Disabling bearer [ 419.021086][T19959] netlink: 'syz.0.4017': attribute type 13 has an invalid length. [ 419.036705][T19962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4019'. [ 419.095483][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4019'. [ 419.149009][T19965] netlink: 'syz.4.4019': attribute type 13 has an invalid length. [ 419.542479][T19965] macvlan2: left promiscuous mode [ 419.570025][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4021'. [ 419.668150][T10781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.676130][T10781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.728682][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.736517][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.906056][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3929'. [ 419.916658][T19985] tipc: Enabled bearer , priority 11 [ 420.009911][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4026'. [ 420.091246][T19997] syz_tun: entered allmulticast mode [ 420.365189][T20016] netlink: 'syz.0.4034': attribute type 1 has an invalid length. [ 420.391442][T20016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.796502][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4041'. [ 420.914083][T20049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4044'. [ 420.962510][T20056] netlink: 'syz.5.4046': attribute type 21 has an invalid length. [ 421.051226][T20063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4048'. [ 421.329836][T20080] netlink: 'syz.5.4054': attribute type 1 has an invalid length. [ 421.514889][T20089] tipc: Enabling of bearer rejected, failed to enable media [ 421.639417][T20101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.655938][T20092] syzkaller0: entered promiscuous mode [ 421.686846][T20092] syzkaller0: entered allmulticast mode [ 423.099123][T20078] wlan0 speed is unknown, defaulting to 1000 [ 423.288211][T20123] netlink: 'syz.1.4066': attribute type 4 has an invalid length. [ 423.372505][T20131] sit0: entered promiscuous mode [ 423.377837][T20131] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 423.665822][T20152] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 423.676465][T20152] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 423.686858][T20152] __nla_validate_parse: 14 callbacks suppressed [ 423.686874][T20152] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.4076'. [ 423.709713][T20152] mac80211_hwsim hwsim22 wlan1: Caught tx_queue_len zero misconfig [ 423.740845][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4076'. [ 423.895395][T20164] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 424.010067][T20170] tipc: Enabled bearer , priority 0 [ 424.071593][T20170] syzkaller0: entered promiscuous mode [ 424.078101][T20170] syzkaller0: entered allmulticast mode [ 424.084939][T20170] tipc: Resetting bearer [ 424.102861][T20168] tipc: Resetting bearer [ 424.392434][T20194] netlink: 'syz.5.4087': attribute type 21 has an invalid length. [ 424.513902][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4088'. [ 425.149949][ T5154] Bluetooth: hci0: command tx timeout [ 425.515730][T20168] tipc: Disabling bearer [ 425.527545][T20179] tipc: Enabled bearer , priority 0 [ 425.535026][T20185] syzkaller0: entered allmulticast mode [ 425.550389][T20194] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4087'. [ 425.564918][T20197] tipc: Resetting bearer [ 425.612998][T20174] tipc: Resetting bearer [ 425.675226][T20174] tipc: Disabling bearer [ 425.756985][T20209] syzkaller0: entered promiscuous mode [ 425.788060][T20209] syzkaller0: entered allmulticast mode [ 425.808232][T20229] netlink: 'syz.3.4094': attribute type 4 has an invalid length. [ 425.817847][T20229] Cannot find add_set index 0 as target [ 425.964687][T20236] netlink: 'syz.4.4095': attribute type 29 has an invalid length. [ 426.008870][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4095'. [ 426.094059][T20250] ip6tnl0: Caught tx_queue_len zero misconfig [ 426.120381][T20240] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.4096'. [ 426.368751][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'. [ 426.379143][T20274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4108'. [ 426.389664][T20274] netlink: 'syz.3.4108': attribute type 23 has an invalid length. [ 426.397857][T20273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4107'. [ 426.414623][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4107'. [ 426.447658][T20276] team0: No ports can be present during mode change [ 426.511724][T20278] veth1: entered allmulticast mode [ 426.513437][T20280] No such timeout policy "syz0" [ 426.711112][T20295] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 426.725320][T20295] netlink: 'syz.5.4114': attribute type 2 has an invalid length. [ 426.962590][T20316] netlink: 'syz.1.4121': attribute type 4 has an invalid length. [ 427.241590][T20329] Unsupported ieee802154 address type: 0 [ 427.657732][T20364] lo: Caught tx_queue_len zero misconfig [ 427.696485][T20369] nbd: illegal input index -8454144 [ 428.039259][T20406] netlink: 'syz.5.4150': attribute type 19 has an invalid length. [ 428.087005][ T3959] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.100847][T20406] netlink: 'syz.5.4150': attribute type 19 has an invalid length. [ 428.109054][ T3959] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.128505][ T3959] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.153372][ T3959] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.611849][T20458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.901090][T20475] __nla_validate_parse: 14 callbacks suppressed [ 428.901106][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4175'. [ 428.926257][T20473] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 429.042230][T20473] netlink: 'syz.1.4172': attribute type 4 has an invalid length. [ 429.106642][T20494] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4179'. [ 429.162342][T20492] syzkaller0: entered promiscuous mode [ 429.167897][T20492] syzkaller0: entered allmulticast mode [ 429.490028][T20511] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 429.562991][T20511] bond2: entered promiscuous mode [ 429.568536][T20511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.576441][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4185'. [ 429.576682][T20517] netlink: 'syz.4.4187': attribute type 21 has an invalid length. [ 429.585683][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4185'. [ 429.623462][T20517] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4187'. [ 429.808297][T20540] Cannot find add_set index 2 as target [ 429.945315][T20545] sctp: [Deprecated]: syz.0.4197 (pid 20545) Use of int in maxseg socket option. [ 429.945315][T20545] Use struct sctp_assoc_value instead [ 429.973536][T20545] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4197'. [ 429.983720][T20550] syzkaller1: entered promiscuous mode [ 429.990659][T20550] syzkaller1: entered allmulticast mode [ 430.056834][T20554] geneve2: entered promiscuous mode [ 430.136394][T20554] geneve2: entered promiscuous mode [ 430.233033][T20554] geneve2: entered promiscuous mode [ 430.287081][T20571] delete_channel: no stack [ 430.321844][T20554] geneve2: entered promiscuous mode [ 430.361399][T20573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4203'. [ 430.435779][T20554] geneve2: entered promiscuous mode [ 430.505168][T20582] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.536886][T20554] geneve2: entered promiscuous mode [ 430.613083][T20554] geneve2: entered promiscuous mode [ 430.675193][T20554] geneve2: entered promiscuous mode [ 430.687970][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4211'. [ 430.778965][T20554] geneve2: entered promiscuous mode [ 430.911847][T20607] netlink: 'syz.3.4215': attribute type 17 has an invalid length. [ 430.921081][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4215'. [ 430.932068][T20607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4215'. [ 430.961128][T20609] syzkaller0: entered promiscuous mode [ 430.980773][T20609] syzkaller0: entered allmulticast mode [ 431.002680][T20610] 0: reclassify loop, rule prio 0, protocol 800 [ 431.015489][T20609] 0: reclassify loop, rule prio 0, protocol 800 [ 431.030532][T20618] netlink: 'syz.5.4217': attribute type 1 has an invalid length. [ 431.150095][T20618] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 431.279067][T20628] veth3: entered promiscuous mode [ 431.433764][T20648] netlink: 'syz.4.4222': attribute type 2 has an invalid length. [ 431.451817][T20647] team0: Caught tx_queue_len zero misconfig [ 431.630395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 432.037946][T20685] pimreg3: entered allmulticast mode [ 432.098388][T20692] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 432.196924][T20699] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 432.451303][T20710] xt_hashlimit: invalid rate [ 432.765484][T20732] netlink: 'syz.5.4254': attribute type 12 has an invalid length. [ 432.891720][T20735] syzkaller1: entered promiscuous mode [ 432.897203][T20735] syzkaller1: entered allmulticast mode [ 432.998956][T20740] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 433.018152][T20740] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 433.083126][T20744] bridge3: entered promiscuous mode [ 433.104461][T20744] bridge3: entered allmulticast mode [ 433.141909][T20744] team0: Port device bridge3 added [ 433.181918][T20744] bridge0: port 3(team0) entered blocking state [ 433.212427][T20744] bridge0: port 3(team0) entered disabled state [ 433.223527][T20757] sctp: [Deprecated]: syz.4.4261 (pid 20757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.223527][T20757] Use struct sctp_sack_info instead [ 433.236814][T20744] team0: entered allmulticast mode [ 433.251050][T20744] team_slave_0: entered allmulticast mode [ 433.271617][T20744] team_slave_1: entered allmulticast mode [ 433.310333][T20744] team0: entered promiscuous mode [ 433.322494][T20744] team_slave_0: entered promiscuous mode [ 433.335227][T20744] team_slave_1: entered promiscuous mode [ 433.354517][T20764] netlink: 'syz.5.4263': attribute type 1 has an invalid length. [ 433.362600][T20744] bridge0: port 3(team0) entered blocking state [ 433.369215][T20744] bridge0: port 3(team0) entered forwarding state [ 433.508513][T20768] netlink: 'syz.5.4263': attribute type 1 has an invalid length. [ 433.540677][T20764] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 433.551026][T20777] netlink: 'syz.1.4267': attribute type 10 has an invalid length. [ 433.560983][T20764] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 433.573872][T20764] bond1: (slave xfrm1): making interface the new active one [ 433.582081][T20764] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 433.600751][T20777] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 433.621837][T20777] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 433.689324][T20764] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 433.702490][T20764] bond1 (unregistering): Released all slaves [ 433.911741][T20798] bond3 (unregistering): Released all slaves [ 434.441633][T20820] __nla_validate_parse: 74 callbacks suppressed [ 434.441652][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4278'. [ 434.458007][T20824] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 434.804356][T20853] netlink: 'syz.3.4288': attribute type 1 has an invalid length. [ 434.854366][T20853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.863887][T20860] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4291'. [ 434.896474][T20853] macvlan3: entered promiscuous mode [ 434.902444][T20853] macvlan3: entered allmulticast mode [ 434.908685][T20853] bond3: entered allmulticast mode [ 434.913815][T20853] bond3: entered promiscuous mode [ 434.919636][T20853] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 434.933193][T20853] team0: Port device macvlan3 added [ 435.442756][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4301'. [ 435.533524][T20907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.017852][T20926] tipc: Enabled bearer , priority 0 [ 436.025003][T20926] syzkaller0: entered promiscuous mode [ 436.030783][T20926] syzkaller0: entered allmulticast mode [ 436.066254][T20926] tipc: Resetting bearer [ 436.075856][T20924] tipc: Resetting bearer [ 436.099249][T20924] tipc: Disabling bearer [ 436.281858][ T7656] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.320516][T20951] netlink: 'syz.0.4316': attribute type 2 has an invalid length. [ 436.516603][T20959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.011570][T20958] ksmbd: Unknown IPC event: 3, ignore. [ 437.573922][T20995] syzkaller0: entered promiscuous mode [ 437.582376][T20995] syzkaller0: entered allmulticast mode [ 437.626166][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 437.654159][T20995] netlink: 'syz.4.4331': attribute type 8 has an invalid length. [ 437.746884][T21014] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20001 [ 437.763766][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4335'. [ 437.960875][T21026] netlink: 'syz.5.4340': attribute type 23 has an invalid length. [ 438.085427][T21034] netlink: 'syz.0.4344': attribute type 3 has an invalid length. [ 438.119971][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 438.133869][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 438.254984][T21045] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 438.260875][T21043] netlink: 'syz.4.4348': attribute type 10 has an invalid length. [ 438.283209][T21049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4351'. [ 438.509546][T21067] netlink: 'syz.0.4356': attribute type 9 has an invalid length. [ 438.545226][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4356'. [ 438.581641][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4360'. [ 438.742848][T21090] netlink: 'syz.0.4362': attribute type 2 has an invalid length. [ 438.843611][T21094] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 438.852824][T21094] bond3: option packets_per_slave: allowed values 0 - 65535 [ 438.865853][T21094] bond3 (unregistering): Released all slaves [ 438.983818][T21109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.070346][T21117] --map-set only usable from mangle table [ 439.076316][T21118] --map-set only usable from mangle table [ 439.702576][T21153] netlink: 'syz.4.4380': attribute type 9 has an invalid length. [ 439.710875][T21153] __nla_validate_parse: 4 callbacks suppressed [ 439.710889][T21153] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.4380'. [ 439.735392][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 439.903864][T21172] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4383'. [ 439.959752][T21172] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 440.112967][T21177] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4386'. [ 440.315120][T21181] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4386'. [ 440.442646][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 440.668664][T21196] veth0_to_team: entered promiscuous mode [ 441.266011][T21243] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 441.303619][T21247] validate_nla: 2 callbacks suppressed [ 441.303634][T21247] netlink: 'syz.1.4412': attribute type 21 has an invalid length. [ 441.323595][T21247] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4412'. [ 441.392793][T21251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4413'. [ 441.409393][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4412'. [ 441.659826][T21276] netlink: 'syz.4.4421': attribute type 10 has an invalid length. [ 441.746988][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 442.078969][T21304] netlink: 'syz.1.4429': attribute type 1 has an invalid length. [ 442.100146][T21303] netlink: 'syz.0.4430': attribute type 13 has an invalid length. [ 442.108294][T21303] netlink: 'syz.0.4430': attribute type 5 has an invalid length. [ 442.159571][T21309] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 442.386600][T21322] syzkaller1: entered promiscuous mode [ 442.394991][T21322] syzkaller1: entered allmulticast mode [ 442.545788][T21339] netlink: 'syz.0.4441': attribute type 21 has an invalid length. [ 442.736006][T21357] sctp: [Deprecated]: syz.5.4447 (pid 21357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.736006][T21357] Use struct sctp_sack_info instead [ 443.996884][T21391] xt_cgroup: path and classid specified [ 444.574492][T21409] netlink: 'syz.4.4461': attribute type 29 has an invalid length. [ 444.597458][T21409] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 444.732557][T21435] __nla_validate_parse: 38 callbacks suppressed [ 444.732573][T21435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4467'. [ 444.820819][T21429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4467'. [ 444.915184][T21444] netlink: 'syz.1.4470': attribute type 13 has an invalid length. [ 445.125983][T21455] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 445.251105][T21458] syzkaller1: entered promiscuous mode [ 445.270212][T21458] syzkaller1: entered allmulticast mode [ 445.362521][T21473] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4478'. [ 445.445411][T21481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4480'. [ 445.611178][T21491] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4485'. [ 445.712683][T21496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4487'. [ 445.928714][T21514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 445.952349][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4492'. [ 446.017688][T21517] x_tables: duplicate underflow at hook 2 [ 446.121087][T21524] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4496'. [ 446.133525][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4497'. [ 446.161958][T21488] IPv6: sit2: Disabled Multicast RS [ 446.202992][T21488] sit2: entered allmulticast mode [ 446.242393][T21536] openvswitch: netlink: Key type 160 is out of range max 32 [ 446.756958][T21577] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 446.960710][T21592] netlink: 'syz.0.4514': attribute type 1 has an invalid length. [ 447.342796][T21621] netlink: 'syz.3.4523': attribute type 1 has an invalid length. [ 447.389647][T21621] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 447.400454][T21621] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 447.413000][T21621] bond4: (slave xfrm1): making interface the new active one [ 447.421367][T21621] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 447.455835][T21621] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 447.481605][T21621] bond4 (unregistering): Released all slaves [ 447.665163][T21642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.695586][T21646] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 447.828515][T21650] bond4: (slave geneve3): making interface the new active one [ 447.848940][T21650] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 447.877872][ T7648] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 447.889037][T21655] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 447.903213][ T7648] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 447.937471][ T7656] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 447.958825][ T7656] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 447.995214][T21664] lo: Caught tx_queue_len zero misconfig [ 448.749579][T21724] hsr_slave_0 (unregistering): left promiscuous mode [ 448.826239][T11127] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x1 [ 448.845127][T11127] hid-generic 0005:0C45:1010.0002: ignoring exceeding usage max [ 448.866854][T11127] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x4 [ 448.877419][T11127] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x5 [ 448.898120][T11127] hid-generic 0005:0C45:1010.0002: hidraw0: BLUETOOTH HID v0.c3 Device [syz0] on aa:aa:aa:aa:aa:aa [ 449.020080][T21744] netlink: 'syz.3.4558': attribute type 1 has an invalid length. [ 449.027875][T21746] x_tables: duplicate underflow at hook 2 [ 449.070721][T21744] bond4: entered promiscuous mode [ 449.076325][T21744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.090417][T21744] bond4: entered allmulticast mode [ 449.113058][T21744] bond4: (slave bridge7): making interface the new active one [ 449.120960][T21744] bridge7: entered promiscuous mode [ 449.126381][T21744] bridge7: entered allmulticast mode [ 449.133734][T21744] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 449.225329][T21751] netlink: 'syz.3.4561': attribute type 3 has an invalid length. [ 449.566606][T21774] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 449.639659][T21777] netlink: 'syz.3.4570': attribute type 1 has an invalid length. [ 449.726479][T21778] ipvlan0: mtu less than device minimum [ 449.741369][T21777] __nla_validate_parse: 20 callbacks suppressed [ 449.741385][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4570'. [ 449.760538][T21777] bond5 (unregistering): Released all slaves [ 449.892132][T21790] netlink: 'syz.3.4574': attribute type 11 has an invalid length. [ 450.026948][T21792] dvmrp6: entered allmulticast mode [ 450.056302][T21800] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 450.134828][T21803] netlink: 'syz.0.4578': attribute type 1 has an invalid length. [ 450.361151][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4583'. [ 450.646006][T21830] netlink: 'syz.0.4586': attribute type 3 has an invalid length. [ 450.772017][T21838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4589'. [ 450.868514][T21838] nbd4: detected capacity change from 0 to 63 [ 450.875550][T21847] block nbd4: NBD_DISCONNECT [ 450.883170][T21847] block nbd4: Disconnected due to user request. [ 450.893385][T21842] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4591'. [ 450.916346][T21842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 450.928674][T21847] block nbd4: shutting down sockets [ 451.644185][T21890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.820574][T21894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4608'. [ 451.902904][T21898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4609'. [ 452.123154][T21907] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.4612'. [ 452.200925][T21907] bond5: entered allmulticast mode [ 452.206601][T21907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.294934][T21913] ip6gre1: entered promiscuous mode [ 452.302533][T21913] ip6gre1: entered allmulticast mode [ 452.487600][T21927] tipc: Disabling bearer [ 452.519505][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4617'. [ 452.555660][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4619'. [ 452.569014][T21927] validate_nla: 1 callbacks suppressed [ 452.569030][T21927] netlink: 'syz.3.4617': attribute type 1 has an invalid length. [ 452.571223][T21930] netlink: 'syz.5.4619': attribute type 5 has an invalid length. [ 452.617462][T21930] geneve3: entered promiscuous mode [ 452.624700][T21930] geneve3: entered allmulticast mode [ 452.634161][ T7650] netdevsim netdevsim5 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 256 - 0 [ 452.669542][ T5154] Bluetooth: hci1: command tx timeout [ 452.756944][ T7650] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 452.789075][ T7650] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 452.806625][T21954] Bluetooth: MGMT ver 1.23 [ 452.812076][ T7650] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 452.893239][T21961] netlink: 'syz.1.4625': attribute type 1 has an invalid length. [ 452.917862][T21961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.934752][T21964] bond0: entered promiscuous mode [ 452.953090][T21970] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20001 [ 453.001262][T21972] netlink: 'syz.5.4629': attribute type 1 has an invalid length. [ 453.099078][T21979] syzkaller1: entered promiscuous mode [ 453.117446][T21979] syzkaller1: entered allmulticast mode [ 453.159947][T21982] xt_hashlimit: overflow, rate too high: 0 [ 453.284741][T21993] xt_limit: Overflow, try lower: 271964/0 [ 453.409796][T22003] netlink: 'syz.5.4642': attribute type 12 has an invalid length. [ 453.424059][T22003] netlink: 'syz.5.4642': attribute type 11 has an invalid length. [ 453.738329][T22033] block nbd3: Unsupported socket: should be TCP or UNIX. [ 453.873054][T22039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.144029][T22051] sit0: left promiscuous mode [ 454.205234][T22051] bridge0: port 3(team0) entered disabled state [ 454.211912][T22051] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.221249][T22051] bridge0: left allmulticast mode [ 454.492381][T22051] veth0_to_team: left promiscuous mode [ 454.523693][T22051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.544748][T22051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.644328][T22051] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 454.714700][T22051] vxlan0: left promiscuous mode [ 454.721061][T22051] vxlan0: left allmulticast mode [ 454.745142][T22051] vlan0: left allmulticast mode [ 454.753096][T22051] veth0_vlan: left allmulticast mode [ 454.758767][T22051] vlan0: left promiscuous mode [ 454.764800][T22051] macvtap1: left promiscuous mode [ 454.778579][T22051] macvtap1: left allmulticast mode [ 454.804910][T22051] geneve2: left promiscuous mode [ 454.810576][T22051] geneve2: left allmulticast mode [ 454.833890][T22080] __nla_validate_parse: 9 callbacks suppressed [ 454.833904][T22080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4661'. [ 454.834160][T22051] bond2: left promiscuous mode [ 454.867523][T22051] bond3: left allmulticast mode [ 454.872481][T22051] bond3: left promiscuous mode [ 454.890683][T22051] bond4: left promiscuous mode [ 454.895545][T22051] bridge7: left promiscuous mode [ 454.901165][T22051] bond4: left allmulticast mode [ 454.906081][T22051] bridge7: left allmulticast mode [ 454.918351][T22051] bond5: left allmulticast mode [ 454.942578][ T7656] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.956884][ T7656] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.966813][T22057] syzkaller0: entered promiscuous mode [ 454.972992][T22057] syzkaller0: entered allmulticast mode [ 455.009360][ T7656] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.019102][ T7656] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.116094][ T7656] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.129706][ T7656] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.174482][T22096] tipc: Enabling of bearer rejected, failed to enable media [ 455.184171][ T7650] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.225787][ T7650] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.527113][T22119] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4673'. [ 455.600629][T22119] block nbd0: reconnected socket [ 455.613177][ T5154] block nbd0: Receive control failed (result -32) [ 455.703740][T22130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4679'. [ 455.722415][T22130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4679'. [ 455.797006][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 455.811299][T22146] openvswitch: netlink: Message has 1 unknown bytes. [ 455.831448][T22146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.850871][T22148] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4684'. [ 455.904136][T22150] pim6reg: entered allmulticast mode [ 455.916282][T22148] xt_TCPMSS: Only works on TCP SYN packets [ 455.965842][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4687'. [ 456.113893][T22164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4690'. [ 456.179956][T22164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4690'. [ 456.211929][T22164] openvswitch: netlink: Missing key (keys=40, expected=80) [ 456.247878][T22176] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.448472][T22193] ipt_REJECT: TCP_RESET invalid for non-tcp [ 456.473869][T22197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4698'. [ 456.490965][T22192] netlink: 'syz.4.4695': attribute type 10 has an invalid length. [ 456.518028][T22192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.535026][T22192] batadv0: entered promiscuous mode [ 456.542192][T22192] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 456.611314][T22204] syzkaller0: entered promiscuous mode [ 456.616823][T22204] syzkaller0: entered allmulticast mode [ 456.623378][T22207] nbd: must specify a device to reconfigure [ 456.712018][T22210] veth0_to_bond: entered allmulticast mode [ 456.722672][T22217] set match dimension is over the limit! [ 456.787014][T22222] x_tables: duplicate underflow at hook 1 [ 456.908036][T22226] netlink: 'syz.0.4708': attribute type 83 has an invalid length. [ 456.996069][T22228] nbd: must specify at least one socket [ 457.066044][T22240] syzkaller0: entered promiscuous mode [ 457.089335][T22240] syzkaller0: entered allmulticast mode [ 457.124532][T22248] tipc: Bearer : already 2 bearers with priority 10 [ 457.132713][T22248] tipc: Bearer : trying with adjusted priority [ 457.140562][T22248] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 457.344929][T22269] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 457.697548][T22301] netlink: 'syz.4.4730': attribute type 1 has an invalid length. [ 457.755140][T22301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.012649][T22330] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 458.100050][T22337] : renamed from bridge_slave_0 (while UP) [ 458.264668][T22346] team0: Caught tx_queue_len zero misconfig [ 458.382067][T22355] IPVS: length: 239 != 24 [ 458.756958][T22377] wireguard0: entered promiscuous mode [ 458.762782][T22377] wireguard0: entered allmulticast mode [ 458.776999][T22377] team0: Port device wireguard0 added [ 458.891149][T22375] netlink: zone id is out of range [ 458.912226][T22375] netlink: zone id is out of range [ 458.929579][T22375] netlink: zone id is out of range [ 459.241112][T22417] netlink: 'syz.0.4763': attribute type 5 has an invalid length. [ 459.338056][T22417] geneve2: entered promiscuous mode [ 459.343359][T22417] geneve2: entered allmulticast mode [ 459.375185][ T7656] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 459.407087][ T7656] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 459.449885][T22433] netlink: 'syz.3.4766': attribute type 1 has an invalid length. [ 459.471786][ T7656] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 459.486247][ T7656] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 459.498291][T22435] syzkaller0: entered promiscuous mode [ 459.503857][T22435] syzkaller0: entered allmulticast mode [ 459.523385][T22435] tipc: Enabled bearer , priority 0 [ 459.555980][T22434] tipc: Resetting bearer [ 459.583486][T22434] tipc: Disabling bearer [ 460.013272][T22468] Cannot find add_set index 2 as target [ 460.136837][T22473] bond6: option lp_interval: invalid value (0) [ 460.143521][T22473] bond6: option lp_interval: allowed values 1 - 2147483647 [ 460.152494][T22473] bond6 (unregistering): Released all slaves [ 460.181537][T22472] bond6: option lp_interval: invalid value (0) [ 460.195196][T22472] bond6: option lp_interval: allowed values 1 - 2147483647 [ 460.204445][T22472] bond6 (unregistering): Released all slaves [ 460.433897][T22492] __nla_validate_parse: 20 callbacks suppressed [ 460.433915][T22492] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4784'. [ 460.450365][T22493] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4784'. [ 460.472144][T10783] dummy0: left allmulticast mode [ 460.489619][T10783] dummy0: left promiscuous mode [ 460.500281][T10783] bridge0: port 2(dummy0) entered disabled state [ 460.520329][T10783] veth0_to_bridge: left allmulticast mode [ 460.526062][T10783] veth0_to_bridge: left promiscuous mode [ 460.535113][T10783] bridge0: port 3(veth0_to_bridge) entered disabled state [ 460.546294][T10783] bridge_slave_0: left allmulticast mode [ 460.552631][T10783] bridge_slave_0: left promiscuous mode [ 460.560279][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.665091][T10783] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 460.670331][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 460.708600][T10783] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 460.828711][T22511] netlink: 'syz.0.4790': attribute type 10 has an invalid length. [ 460.926063][T10783] bond6 (unregistering): (slave geneve3): Releasing active interface [ 461.318895][T22498] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 461.659910][T10783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.669832][T10783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.680043][T10783] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.689584][T10783] bond0 (unregistering): Released all slaves [ 461.777755][T10783] bond1 (unregistering): Released all slaves [ 461.862054][T10783] bond2 (unregistering): Released all slaves [ 461.946328][T10783] bond3 (unregistering): (slave veth5): Releasing active interface [ 461.955016][T10783] bond3 (unregistering): Released all slaves [ 462.043101][T10783] bond4 (unregistering): Released all slaves [ 462.055463][T10783] bond5 (unregistering): Released all slaves [ 462.073264][T10783] bond6 (unregistering): Released all slaves [ 462.094152][T10783] bond7 (unregistering): Released all slaves [ 462.236571][T10783] bond8 (unregistering): Released all slaves [ 462.365931][T10783] bond9 (unregistering): Released all slaves [ 462.458958][T10783] bond10 (unregistering): Released all slaves [ 462.546013][T10783] bond11 (unregistering): Released all slaves [ 462.569586][T22511] batman_adv: batadv0: Adding interface: netdevsim0 [ 462.576499][T22511] batman_adv: batadv0: Interface activated: netdevsim0 [ 462.614288][T22516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.669384][T22521] syzkaller1: entered promiscuous mode [ 462.674879][T22521] syzkaller1: entered allmulticast mode [ 462.792780][T10783] 9: left promiscuous mode [ 462.856963][T22528] netlink: 'syz.4.4795': attribute type 1 has an invalid length. [ 462.924385][T22528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.938809][T10783] tipc: Disabling bearer [ 462.971479][T10783] tipc: Left network mode [ 463.004012][T22538] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4799'. [ 463.040599][T22537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4797'. [ 463.185866][T22553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4803'. [ 463.334136][T22555] sit0: Caught tx_queue_len zero misconfig [ 463.475816][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'. [ 463.666527][T22567] syzkaller0: entered promiscuous mode [ 463.672322][T22567] syzkaller0: entered allmulticast mode [ 463.708705][T10783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.733375][T10783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.797167][T10783] pim6reg (unregistering): left allmulticast mode [ 463.967105][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'. [ 464.454432][T10783] team0 (unregistering): Port device team_slave_1 removed [ 464.995955][T22623] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4825'. [ 465.089773][T22629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4827'. [ 465.110928][T22631] tipc: Enabling of bearer rejected, failed to enable media [ 465.251778][T22642] netlink: 'syz.4.4832': attribute type 14 has an invalid length. [ 465.327706][T22641] tipc: Enabled bearer , priority 0 [ 465.358173][T22641] syzkaller0: entered promiscuous mode [ 465.373540][T22641] syzkaller0: entered allmulticast mode [ 465.410314][T22641] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 465.422727][T22654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.495054][T22641] tipc: Resetting bearer [ 465.509346][T10783] IPVS: stop unused estimator thread 0... [ 465.523224][T22658] __nla_validate_parse: 3 callbacks suppressed [ 465.523237][T22658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4838'. [ 465.677950][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4842'. [ 465.711537][T22640] tipc: Resetting bearer [ 465.785511][T22640] tipc: Disabling bearer [ 465.941701][T22693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.961538][T22693] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.984023][T22693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.000009][T22700] netlink: 'syz.5.4852': attribute type 21 has an invalid length. [ 466.015175][T22700] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4852'. [ 466.157043][T22708] team_slave_0: entered promiscuous mode [ 466.163120][T22708] team_slave_1: entered promiscuous mode [ 466.174636][T22708] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 466.192389][T22708] team0: Device macvtap0 is already an upper device of the team interface [ 466.203432][T22708] team_slave_0: left promiscuous mode [ 466.208894][T22708] team_slave_1: left promiscuous mode [ 466.398767][T22734] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4862'. [ 466.483315][T22744] netlink: 'syz.0.4866': attribute type 21 has an invalid length. [ 466.540938][T22744] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 466.556282][T22744] bond5 (unregistering): Released all slaves [ 466.685006][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4869'. [ 466.949722][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4870'. [ 467.017092][T22780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4875'. [ 467.094002][T22788] netlink: 'syz.4.4877': attribute type 1 has an invalid length. [ 467.106267][T22789] xt_bpf: check failed: parse error [ 467.148777][T22785] netlink: 'syz.0.4878': attribute type 1 has an invalid length. [ 467.222016][T22786] bond5: (slave geneve3): making interface the new active one [ 467.231872][T22786] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 467.254432][T10790] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 467.271672][T10790] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 467.281802][T10790] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 467.327651][T10790] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 467.408807][T22805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4885'. [ 467.782879][T22824] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4890'. [ 467.807944][T22824] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4890'. [ 467.920578][T22841] netlink: 'syz.4.4894': attribute type 10 has an invalid length. [ 467.994579][T22841] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 468.011649][T22841] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 468.161589][T22856] netlink: 'syz.4.4898': attribute type 3 has an invalid length. [ 468.532774][T22884] netlink: 'syz.1.4905': attribute type 1 has an invalid length. [ 468.545498][T22884] netlink: 'syz.1.4905': attribute type 2 has an invalid length. [ 468.752919][T22889] nbd: must specify a size in bytes for the device [ 468.768112][T22895] xt_l2tp: missing protocol rule (udp|l2tpip) [ 469.214139][T22931] nbd: illegal input index -8454144 [ 469.292822][T22944] syzkaller0: entered promiscuous mode [ 469.298604][T22944] syzkaller0: entered allmulticast mode [ 469.521956][ T5845] block nbd3: Receive control failed (result -32) [ 469.540552][T22959] netlink: 'syz.3.4926': attribute type 1 has an invalid length. [ 469.690879][T22959] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.704923][T22959] bond6: (slave bond7): making interface the new active one [ 469.727224][T22959] bond6: (slave bond7): Enslaving as an active interface with an up link [ 469.750639][T22971] netem: change failed [ 469.772462][T22973] syzkaller0: entered promiscuous mode [ 469.789122][T22973] syzkaller0: entered allmulticast mode [ 470.246018][T23003] netlink: 'syz.3.4940': attribute type 1 has an invalid length. [ 470.546540][T23025] __nla_validate_parse: 8 callbacks suppressed [ 470.546559][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4944'. [ 470.859460][T23029] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 470.880352][T23029] syzkaller0: entered promiscuous mode [ 470.886044][T23029] syzkaller0: entered allmulticast mode [ 470.912702][T23025] ip6gre1: entered allmulticast mode [ 470.923740][T23032] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 470.957521][T23039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4947'. [ 470.976941][T23040] tipc: Enabled bearer , priority 0 [ 471.145712][T23063] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 472.390685][T23045] syzkaller0: entered promiscuous mode [ 472.396246][T23045] syzkaller0: entered allmulticast mode [ 472.404367][T23033] tipc: Resetting bearer [ 472.411277][T23063] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 472.439005][T23024] tipc: Resetting bearer [ 472.459807][T23081] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 472.494089][T23024] tipc: Disabling bearer [ 472.512260][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'. [ 472.536914][T23088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4959'. [ 473.032961][T23123] nbd: socks must be embedded in a SOCK_ITEM attr [ 473.272487][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'. [ 473.351003][T23152] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4973'. [ 473.352388][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4974'. [ 473.380047][T23154] bond0: Caught tx_queue_len zero misconfig [ 473.410563][T23157] netlink: 'syz.4.4976': attribute type 2 has an invalid length. [ 473.479898][T23157] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4976'. [ 473.508756][T23160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4977'. [ 473.587772][T23169] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4979'. [ 473.815487][T23193] IPVS: length: 24 != 43032 [ 474.178792][T23212] netlink: 'syz.0.4993': attribute type 8 has an invalid length. [ 474.341658][T23216] netlink: 'syz.0.4993': attribute type 8 has an invalid length. [ 474.608252][T23226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.852380][T23237] A link change request failed with some changes committed already. Interface 1!€ÿ may have been left with an inconsistent configuration, please check. [ 475.365160][T23265] netlink: 'syz.0.5008': attribute type 1 has an invalid length. [ 475.382351][T23265] netlink: 'syz.0.5008': attribute type 2 has an invalid length. [ 475.460607][T23268] netlink: 'syz.5.5009': attribute type 16 has an invalid length. [ 475.495603][T23261] bond0: left promiscuous mode [ 475.506311][T23261] batadv0: left promiscuous mode [ 475.511636][T23261] mac80211_hwsim hwsim27 wlan1: left promiscuous mode [ 475.983002][T23278] __nla_validate_parse: 3 callbacks suppressed [ 475.983022][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5013'. [ 476.151615][T23261] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 476.309083][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5008'. [ 476.330572][ T7650] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.347428][ T7650] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.374398][ T7650] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 476.411048][ T7650] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.422746][ T7650] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.442978][ T7650] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 476.452059][ T7650] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.461282][ T7650] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.470226][ T7650] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 476.479268][ T7650] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.488308][ T7650] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.502482][ T7650] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 476.570689][T23296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5018'. [ 476.596370][T23304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5020'. [ 476.704099][T23312] sctp: [Deprecated]: syz.0.5025 (pid 23312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.704099][T23312] Use struct sctp_sack_info instead [ 476.793281][T23304] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.817213][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5020'. [ 476.819796][T23326] netlink: 45 bytes leftover after parsing attributes in process `syz.1.5027'. [ 476.828343][T23304] bond8: (slave bond9): Enslaving as an active interface with an up link [ 476.861130][T23314] bond8 (unregistering): (slave bond9): Releasing backup interface [ 476.909849][T23314] bond8 (unregistering): Released all slaves [ 476.911849][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 476.954073][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 476.964441][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 476.983858][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 477.773593][T23398] netlink: 'syz.0.5043': attribute type 2 has an invalid length. [ 477.799829][T23398] : entered promiscuous mode [ 477.870867][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 478.030202][T23404] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.275931][T23427] netlink: 'syz.4.5049': attribute type 16 has an invalid length. [ 478.285031][T23427] netlink: 'syz.4.5049': attribute type 17 has an invalid length. [ 478.409000][T23427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.423804][T23427] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.437126][T23427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.495537][T23432] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 478.508112][T23432] bond1 (unregistering): Released all slaves [ 478.536709][T23433] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 478.668886][T23452] netlink: 'syz.5.5055': attribute type 1 has an invalid length. [ 478.785917][T23452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.146247][T23483] netlink: 'syz.3.5063': attribute type 11 has an invalid length. [ 479.704910][T23499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.724027][T23500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.479524][T23557] lo: entered promiscuous mode [ 480.489738][T23557] tunl0: entered promiscuous mode [ 480.495218][T23557] gre0: entered promiscuous mode [ 480.515899][T23557] gretap0: entered promiscuous mode [ 480.528548][T23557] erspan0: entered promiscuous mode [ 480.534781][T23557] ip_vti0: entered promiscuous mode [ 480.667962][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.244715][T23609] __nla_validate_parse: 35 callbacks suppressed [ 481.244727][T23609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5095'. [ 481.492122][T23619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5097'. [ 481.531143][T23622] netlink: 'syz.5.5099': attribute type 1 has an invalid length. [ 481.547993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.615561][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5102'. [ 481.671314][T23637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5103'. [ 481.709402][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.860633][T23652] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5107'. [ 482.035411][T11127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.119969][T23676] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5116'. [ 482.163822][T23676] netlink: 'syz.3.5116': attribute type 1 has an invalid length. [ 482.172582][T23676] netlink: 'syz.3.5116': attribute type 10 has an invalid length. [ 482.186576][T23676] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 482.221880][T23676] xt_l2tp: v2 sid > 0xffff: 1114112 [ 482.257505][T23684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5121'. [ 482.285229][T23691] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 482.320769][T23676] bond8 (unregistering): Released all slaves [ 482.338795][T23691] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.5119'. [ 482.349040][T23687] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5118'. [ 482.422404][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5122'. [ 482.728833][T23717] netlink: 'syz.0.5130': attribute type 11 has an invalid length. [ 482.749041][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.840581][T23724] netlink: 'syz.3.5131': attribute type 2 has an invalid length. [ 482.864442][T23724] netlink: 'syz.3.5131': attribute type 1 has an invalid length. [ 482.864525][T23727] xt_l2tp: v2 doesn't support IP mode [ 482.985705][T23732] netlink: 'syz.3.5136': attribute type 26 has an invalid length. [ 482.998687][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 483.471819][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.481154][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.495246][T11127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.508821][T23767] x_tables: unsorted underflow at hook 3 [ 483.788974][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.157733][T23830] delete_channel: no stack [ 484.381561][T23844] ip6erspan0: entered promiscuous mode [ 484.387491][T23844] ip6erspan0: entered allmulticast mode [ 484.470260][T23851] netlink: 'syz.3.5169': attribute type 1 has an invalid length. [ 484.479589][T23851] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 484.505418][T23858] sctp: [Deprecated]: syz.3.5170 (pid 23858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.505418][T23858] Use struct sctp_sack_info instead [ 484.837671][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.951561][T23885] netlink: zone id is out of range [ 484.956797][T23885] netlink: zone id is out of range [ 484.961960][T23885] netlink: zone id is out of range [ 484.967126][T23885] netlink: zone id is out of range [ 484.976250][T23885] netlink: zone id is out of range [ 485.024849][T23887] bond0: Caught tx_queue_len zero misconfig [ 485.080611][T23892] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 485.105462][T23893] tipc: Enabled bearer , priority 0 [ 485.116489][T23893] syzkaller0: entered promiscuous mode [ 485.128567][T23893] syzkaller0: entered allmulticast mode [ 485.257596][T23891] tipc: Resetting bearer [ 485.314479][T23891] tipc: Disabling bearer [ 485.339587][ T30] audit: type=1107 audit(1765396925.235:11): pid=23907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 485.369993][ T30] audit: type=1107 audit(1765396925.265:12): pid=23907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 485.555725][T23924] netlink: 'syz.0.5194': attribute type 3 has an invalid length. [ 485.600687][T23924] netlink: 'syz.0.5194': attribute type 1 has an invalid length. [ 485.688685][T23935] netlink: 'syz.3.5197': attribute type 4 has an invalid length. [ 485.826292][T23951] sctp: [Deprecated]: syz.1.5202 (pid 23951) Use of int in maxseg socket option. [ 485.826292][T23951] Use struct sctp_assoc_value instead [ 485.987522][T23964] tipc: Bearer : already 2 bearers with priority 10 [ 485.995024][T23964] tipc: Bearer : trying with adjusted priority [ 486.022372][T23964] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 486.163249][T23973] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 486.331692][T23979] __nla_validate_parse: 24 callbacks suppressed [ 486.331709][T23979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5209'. [ 486.338122][T23958] wlan0 speed is unknown, defaulting to 1000 [ 486.439795][T23981] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 486.512038][T23990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5212'. [ 486.544815][T23990] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5212'. [ 486.585344][T23992] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 486.652123][T23994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'. [ 486.713374][T23997] x_tables: unsorted entry at hook 1 [ 486.731995][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'. [ 486.752612][T23998] x_tables: unsorted entry at hook 1 [ 486.804645][T23992] syz_tun: entered allmulticast mode [ 486.842529][T23997] netlink: 884 bytes leftover after parsing attributes in process `syz.4.5216'. [ 486.852839][T23997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5216'. [ 486.914076][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5219'. [ 487.130932][T24025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5224'. [ 487.179673][T24030] netlink: 'syz.0.5226': attribute type 3 has an invalid length. [ 487.216525][T24032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5227'. [ 487.271710][T24036] macvlan1: entered promiscuous mode [ 487.277388][T24036] macvlan1: entered allmulticast mode [ 487.282893][T24036] veth1_vlan: entered allmulticast mode [ 487.361644][T24043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.370840][T24043] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.584721][T24060] sctp: [Deprecated]: syz.3.5236 (pid 24060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.584721][T24060] Use struct sctp_sack_info instead [ 487.671838][T24067] netlink: 'syz.3.5239': attribute type 10 has an invalid length. [ 487.681009][T24067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.690702][T24067] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 487.917018][T24080] veth3: entered allmulticast mode [ 487.932437][T24082] syzkaller0: entered promiscuous mode [ 487.947163][T24082] syzkaller0: entered allmulticast mode [ 488.089355][T24095] netlink: 'syz.3.5249': attribute type 2 has an invalid length. [ 488.103937][T24095] netlink: 'syz.3.5249': attribute type 2 has an invalid length. [ 488.113188][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 488.987852][T21952] net_ratelimit: 13 callbacks suppressed [ 488.987870][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.551335][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.032194][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.792003][T24194] syzkaller0: entered allmulticast mode [ 490.871159][T24194] xt_l2tp: missing protocol rule (udp|l2tpip) [ 490.879262][T24196] syzkaller0: entered promiscuous mode [ 490.889230][T24196] syzkaller0: entered allmulticast mode [ 490.903065][T24194] º: renamed from veth1_to_bond [ 491.069152][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.179939][T24214] pimreg: entered allmulticast mode [ 491.238555][ T7650] team0: left allmulticast mode [ 491.245510][ T7650] team_slave_0: left allmulticast mode [ 491.253139][ T7650] team_slave_1: left allmulticast mode [ 491.253639][T24225] openvswitch: netlink: IPv4 tunnel dst address is zero [ 491.258840][ T7650] team0: left promiscuous mode [ 491.258879][ T7650] team_slave_0: left promiscuous mode [ 491.259070][ T7650] team_slave_1: left promiscuous mode [ 491.259486][ T7650] bridge0: port 2(team0) entered disabled state [ 491.343671][ T7650] bridge_slave_0: left allmulticast mode [ 491.357476][ T7650] bridge_slave_0: left promiscuous mode [ 491.363279][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.382446][ T7650] veth0_to_bond: left allmulticast mode [ 491.389156][ T7650] veth0_to_bond: left promiscuous mode [ 491.394784][ T7650] bridge4: port 1(veth0_to_bond) entered disabled state [ 491.623891][ T7650] bond7 (unregistering): (slave gretap4): Releasing active interface [ 491.688298][ T7650] bond1 (unregistering): (slave geneve2): Releasing active interface [ 491.986135][ T7650] bond5 (unregistering): (slave bridge5): Releasing active interface [ 492.108247][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.126457][ T7650] team0: Port device bridge8 removed [ 492.241575][ T7650] bond0 (unregistering): left promiscuous mode [ 492.247993][ T7650] bond_slave_0: left promiscuous mode [ 492.254580][ T7650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.263850][ T7650] bond0 (unregistering): Released all slaves [ 492.276076][ T7650] bond1 (unregistering): Released all slaves [ 492.291062][ T7650] bond2 (unregistering): Released all slaves [ 492.303858][ T7650] bond3 (unregistering): Released all slaves [ 492.401421][ T7650] bond4 (unregistering): Released all slaves [ 492.413993][ T7650] bond5 (unregistering): Released all slaves [ 492.503738][ T7650] bond6 (unregistering): Released all slaves [ 492.587747][T11132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.592201][ T7650] bond7 (unregistering): Released all slaves [ 492.611036][T24233] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 492.637893][T24242] batman_adv: batadv0: Adding interface: dummy0 [ 492.684740][T24242] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.717132][T24242] batman_adv: batadv0: Interface activated: dummy0 [ 492.743972][T24243] batadv0: mtu less than device minimum [ 492.751954][T24243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 492.763235][T24243] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 492.791459][ T7650] : left promiscuous mode [ 492.820643][T24248] netem: change failed [ 492.866201][ T7650] tipc: Left network mode [ 492.893265][ T7650] IPVS: stopping backup sync thread 8518 ... [ 493.165010][ T7656] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 493.205337][T24283] xt_TCPMSS: Only works on TCP SYN packets [ 493.245916][T24281] __nla_validate_parse: 19 callbacks suppressed [ 493.245932][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5306'. [ 493.403418][T24293] netlink: 'syz.4.5309': attribute type 2 has an invalid length. [ 493.610700][T24302] SET target dimension over the limit! [ 493.748205][ T7650] batadv0: left promiscuous mode [ 493.760281][ T7650] hsr_slave_0: left promiscuous mode [ 493.767354][ T7650] hsr_slave_1: left promiscuous mode [ 493.773436][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.782930][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.816511][T24310] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5314'. [ 493.894633][ T7650] pimreg (unregistering): left allmulticast mode [ 494.088345][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5317'. [ 494.198310][T21948] net_ratelimit: 18 callbacks suppressed [ 494.198328][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.256112][ T7650] team0 (unregistering): Port device team_slave_1 removed [ 494.291120][ T7650] team0 (unregistering): Port device team_slave_0 removed [ 494.299285][ T3473] smc: removing ib device !yz! [ 494.964685][T24341] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5325'. [ 495.015895][T24340] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 495.044435][T24346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5326'. [ 495.170011][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5327'. [ 495.228564][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.308798][T24355] xt_TCPMSS: Only works on TCP SYN packets [ 495.633703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.279065][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.198261][T24379] netlink: 'syz.3.5335': attribute type 1 has an invalid length. [ 497.229603][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 497.248281][T24383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5336'. [ 497.269644][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 497.308298][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.455968][T24403] netlink: 'syz.4.5344': attribute type 6 has an invalid length. [ 497.469243][T24397] batadv_slave_1: entered promiscuous mode [ 497.491774][T24395] batadv_slave_1: left promiscuous mode [ 497.502268][ T7650] IPVS: stop unused estimator thread 0... [ 497.783917][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5350'. [ 497.924628][T24438] netlink: 'syz.3.5352': attribute type 1 has an invalid length. [ 497.932675][T24438] netlink: 'syz.3.5352': attribute type 1 has an invalid length. [ 497.940507][T24438] netlink: 'syz.3.5352': attribute type 1 has an invalid length. [ 497.948731][T24438] netlink: 'syz.3.5352': attribute type 2 has an invalid length. [ 497.958325][T24438] netlink: 'syz.3.5352': attribute type 2 has an invalid length. [ 498.348626][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.357555][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 498.686592][T11132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.844228][T24461] __nla_validate_parse: 1 callbacks suppressed [ 498.844246][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5359'. [ 498.864746][T24461] team0: left allmulticast mode [ 498.870210][T24461] team_slave_0: left allmulticast mode [ 498.873717][T24463] netlink: 'syz.0.5357': attribute type 3 has an invalid length. [ 498.875676][T24461] team_slave_1: left allmulticast mode [ 498.875693][T24461] bridge3: left allmulticast mode [ 498.895953][T24461] macvlan3: left allmulticast mode [ 498.904442][T24463] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5357'. [ 498.905578][T24461] team0: left promiscuous mode [ 498.920794][T24461] team_slave_0: left promiscuous mode [ 498.922162][T24463] IPVS: length: 8 != 1152 [ 498.926464][T24461] team_slave_1: left promiscuous mode [ 498.936187][T24461] bridge3: left promiscuous mode [ 498.941370][T24461] macvlan3: left promiscuous mode [ 498.946714][T24461] bridge0: port 3(team0) entered disabled state [ 498.954719][T24461] bridge_slave_1: left allmulticast mode [ 498.960489][T24461] bridge_slave_1: left promiscuous mode [ 498.966147][T24461] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.976123][T24461] bridge_slave_0: left promiscuous mode [ 498.976913][T24467] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5361'. [ 498.981973][T24461] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.265976][T24485] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 499.311823][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5367'. [ 499.334183][T24488] vxcan2: entered allmulticast mode [ 499.388028][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.523747][T24497] bond7 (unregistering): Released all slaves [ 500.008021][T24538] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 500.427910][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.436263][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 500.559200][T24572] bond0: (slave wg1): Error: Device can not be enslaved while up [ 500.810400][T24588] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 500.810637][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.829691][T24588] bond8: (slave lo): Enslaving as a backup interface with an up link [ 500.837588][T24588] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 500.842363][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.861721][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.876183][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.897124][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 501.224719][T24621] siw: device registration error -23 [ 501.255584][T24624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.367840][T24630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.470912][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.471113][T24634] syzkaller1: entered promiscuous mode [ 501.509422][T24634] syzkaller1: entered allmulticast mode [ 501.565668][T24590] chnl_net:caif_netlink_parms(): no params data found [ 501.707491][T11132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.765812][T24655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5411'. [ 501.814514][T24663] xt_hashlimit: overflow, try lower: 3/0 [ 501.882598][T24590] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.897441][T24590] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.904727][T24590] bridge_slave_0: entered allmulticast mode [ 501.913961][T24590] bridge_slave_0: entered promiscuous mode [ 501.924382][T24590] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.932555][T24590] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.940112][T24590] bridge_slave_1: entered allmulticast mode [ 501.947851][T24590] bridge_slave_1: entered promiscuous mode [ 502.006458][T24590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.042311][T24590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.178147][T24590] team0: Port device team_slave_0 added [ 502.190840][T24590] team0: Port device team_slave_1 added [ 502.307747][T24687] netlink: 'syz.0.5426': attribute type 1 has an invalid length. [ 502.330823][T24590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.338072][T24590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.377092][T24590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.422604][T24687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.465157][T24691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.473490][T24691] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 502.484933][T24691] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 502.507563][T21952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.530297][T24590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.537651][T24590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.568658][T24590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.611744][T24694] veth3: entered promiscuous mode [ 502.645004][T24708] netlink: 592 bytes leftover after parsing attributes in process `syz.3.5430'. [ 502.691406][T24687] vlan3: entered allmulticast mode [ 502.696545][T24687] bond6: entered allmulticast mode [ 502.787078][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 502.820715][T24707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5432'. [ 502.855580][T24590] hsr_slave_0: entered promiscuous mode [ 502.861172][T24707] netlink: 'syz.4.5432': attribute type 6 has an invalid length. [ 502.901277][T24590] hsr_slave_1: entered promiscuous mode [ 502.909711][T24590] debugfs: 'hsr0' already exists in 'hsr' [ 502.915566][T24590] Cannot create hsr debugfs directory [ 502.924177][T24719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5434'. [ 502.930879][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 502.940349][T24720] netlink: 'syz.0.5435': attribute type 29 has an invalid length. [ 502.943267][T24707] netlink: 'syz.4.5432': attribute type 6 has an invalid length. [ 502.960037][ T3473] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.970864][ T3473] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.987509][ T5840] Bluetooth: hci3: command tx timeout [ 503.029149][ T3473] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.050901][T24726] netlink: 'syz.0.5436': attribute type 24 has an invalid length. [ 503.057963][ T3473] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.340806][T24745] netlink: 'syz.0.5443': attribute type 3 has an invalid length. [ 503.382561][T24748] netlink: 'syz.3.5444': attribute type 21 has an invalid length. [ 503.402872][T24748] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.525519][T24755] syzkaller1: entered promiscuous mode [ 503.546184][T24755] syzkaller1: entered allmulticast mode [ 503.547481][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.565238][T24590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 503.640153][T24590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 503.662236][T24590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 503.691597][T24590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 503.739846][T24774] netlink: 'syz.4.5451': attribute type 1 has an invalid length. [ 503.761274][T24774] bond7: entered promiscuous mode [ 503.766633][T24774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.862018][T24774] __nla_validate_parse: 5 callbacks suppressed [ 503.862034][T24774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5451'. [ 503.964416][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5454'. [ 504.000508][T24789] tipc: Enabled bearer , priority 0 [ 504.070371][T24789] syzkaller0: entered promiscuous mode [ 504.076189][T24789] syzkaller0: entered allmulticast mode [ 504.082574][T24789] tipc: Resetting bearer [ 504.137534][T24787] tipc: Resetting bearer [ 504.219459][T24805] netlink: 'syz.3.5458': attribute type 27 has an invalid length. [ 504.590833][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.749780][T11132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.069183][ T5840] Bluetooth: hci3: command tx timeout [ 505.584862][T24787] tipc: Disabling bearer [ 505.626186][T11132] tipc: Node number set to 2535717161 [ 505.632072][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.773290][T24813] IPVS: set_ctl: invalid protocol: 60 172.20.20.33:20003 [ 505.814070][T24590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.878827][T24590] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.919285][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.926423][T10783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.042482][ T7648] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.055096][ T7648] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.069887][ T7648] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 506.094421][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.101624][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.120850][T24839] syzkaller0: entered promiscuous mode [ 506.126330][T24839] syzkaller0: entered allmulticast mode [ 506.196048][T24831] tipc: Enabled bearer , priority 0 [ 506.235013][T24831] netlink: 'syz.4.5465': attribute type 4 has an invalid length. [ 506.263887][ T7648] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.285385][T24839] netlink: 'syz.4.5465': attribute type 4 has an invalid length. [ 506.299110][ T7648] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.323451][ T7648] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 506.462708][ T7648] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.487522][ T7648] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.499514][ T7648] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 506.513774][T24859] netlink: 'syz.0.5472': attribute type 11 has an invalid length. [ 506.526118][T24858] sctp: [Deprecated]: syz.1.5473 (pid 24858) Use of int in max_burst socket option. [ 506.526118][T24858] Use struct sctp_assoc_value instead [ 506.544085][T24859] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5472'. [ 506.571959][T24858] sctp: [Deprecated]: syz.1.5473 (pid 24858) Use of int in max_burst socket option deprecated. [ 506.571959][T24858] Use struct sctp_assoc_value instead [ 506.650670][ T7648] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.668888][ T7648] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.691393][ T7648] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 506.723443][T24851] netlink: 'syz.3.5470': attribute type 29 has an invalid length. [ 506.752560][T24823] tipc: Resetting bearer [ 506.850060][T24823] tipc: Disabling bearer [ 506.885958][T24864] netlink: 'syz.3.5470': attribute type 29 has an invalid length. [ 507.014266][T24590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.153270][ T5154] Bluetooth: hci3: command tx timeout [ 507.197687][ T7648] bridge_slave_1: left allmulticast mode [ 507.210452][ T7648] bridge_slave_1: left promiscuous mode [ 507.218995][T24890] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 507.226850][T24890] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5481'. [ 507.236745][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.268592][ T7648] bridge_slave_0: left allmulticast mode [ 507.274226][ T7648] bridge_slave_0: left promiscuous mode [ 507.304938][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.310357][T24892] xt_time: unknown flags 0xf4 [ 508.078840][ T7648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.090869][ T7648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.100842][ T7648] bond0 (unregistering): Released all slaves [ 508.200660][ T7648] bond1 (unregistering): Released all slaves [ 508.231346][T24915] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 508.287747][T24916] syzkaller0: entered promiscuous mode [ 508.312579][T24916] syzkaller0: entered allmulticast mode [ 508.625139][T24946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5494'. [ 508.761162][ T7648] hsr_slave_0: left promiscuous mode [ 508.771887][ T7648] hsr_slave_1: left promiscuous mode [ 508.792004][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.807494][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.821708][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.847433][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.947922][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5501'. [ 508.951278][ T7648] veth1_macvtap: left promiscuous mode [ 508.962483][ T7648] veth0_macvtap: left promiscuous mode [ 508.969438][ T7648] veth1_vlan: left promiscuous mode [ 508.973589][T24965] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 508.974888][ T7648] veth0_vlan: left promiscuous mode [ 509.060228][T24971] x_tables: duplicate underflow at hook 1 [ 509.071451][T24971] xt_hashlimit: size too large, truncated to 1048576 [ 509.237321][ T5154] Bluetooth: hci3: command tx timeout [ 509.501985][ T7648] team0 (unregistering): Port device team_slave_1 removed [ 509.534315][ T7648] team0 (unregistering): Port device team_slave_0 removed [ 509.859030][T24590] veth0_vlan: entered promiscuous mode [ 509.896796][T24590] veth1_vlan: entered promiscuous mode [ 509.992743][T24590] veth0_macvtap: entered promiscuous mode [ 510.020553][T24590] veth1_macvtap: entered promiscuous mode [ 510.128604][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5508'. [ 510.181870][T24590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.227839][T24996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5509'. [ 510.233051][T24590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.290309][T10779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.326328][T10779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.372607][T10779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.429319][T10779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.449520][T25005] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5511'. [ 510.480175][T25009] netlink: 'syz.0.5513': attribute type 6 has an invalid length. [ 510.549490][T25009] netlink: 'syz.0.5513': attribute type 6 has an invalid length. [ 510.629589][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.660860][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.734267][ T7648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.742265][ T7648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.942603][T25034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5519'. [ 511.020672][T25036] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5384'. [ 511.047761][T25036] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5384'. [ 511.076909][T25036] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5384'. [ 511.114429][T25036] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5384'. [ 511.179858][T25036] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5384'. [ 511.783488][T25078] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 511.853372][T25078] bond7 (unregistering): Released all slaves [ 511.963139][T25090] netlink: 'syz.4.5535': attribute type 4 has an invalid length. [ 512.009974][T25079] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 512.034784][T25079] bond7 (unregistering): Released all slaves [ 512.462485][T25118] batman_adv: batadv0: Interface deactivated: dummy0 [ 512.484492][T25118] batman_adv: batadv0: Removing interface: dummy0 [ 512.592182][T25107] infiniband !yz!: set active [ 512.596942][T25107] infiniband !yz!: added team_slave_0 [ 512.643072][T25107] RDS/IB: !yz!: added [ 512.647133][T25107] smc: adding ib device !yz! with port count 1 [ 512.654640][T25118] bond0: (slave batadv0): Releasing backup interface [ 512.682715][T25107] smc: ib device !yz! port 1 has no pnetid [ 512.690674][T25118] bond0: (slave 1!€ÿ): Releasing backup interface [ 512.709325][T25131] netlink: 'syz.0.5547': attribute type 1 has an invalid length. [ 512.717956][T25118] bond0: (slave bond_slave_1): Releasing backup interface [ 512.738333][T25118] team0: Port device team_slave_0 removed [ 512.746629][T25118] team0: Port device team_slave_1 removed [ 512.754202][T25118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.762189][T25118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.771282][T25118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 512.838609][T25131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 512.900513][T25138] x_tables: duplicate underflow at hook 2 [ 513.264691][T25161] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 513.550306][T25184] x_tables: unsorted underflow at hook 4 [ 513.862858][T25198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.345405][T25225] netlink: 'syz.1.5575': attribute type 39 has an invalid length. [ 514.373359][T25225] syz_tun (unregistering): left allmulticast mode [ 514.506914][T25241] tipc: Enabling of bearer rejected, failed to enable media [ 514.556562][T25243] netlink: 'syz.4.5579': attribute type 1 has an invalid length. [ 514.624502][T25243] netlink: 'syz.4.5579': attribute type 2 has an invalid length. [ 514.793286][T25260] netlink: 'syz.0.5581': attribute type 1 has an invalid length. [ 514.807306][T25260] __nla_validate_parse: 70 callbacks suppressed [ 514.807328][T25260] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5581'. [ 514.825960][T25260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5581'. [ 514.836650][T25256] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 514.851071][T25256] +: renamed from syzkaller0 [ 514.861323][T25255] netlink: 'syz.0.5581': attribute type 1 has an invalid length. [ 514.869176][T25255] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5581'. [ 515.379218][T25294] netlink: 'syz.1.5592': attribute type 11 has an invalid length. [ 515.669028][T25311] bond8: option all_slaves_active: invalid value (222) [ 515.691197][T25311] bond8 (unregistering): Released all slaves [ 515.734667][T25325] netlink: 'syz.1.5604': attribute type 29 has an invalid length. [ 515.742981][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 515.888302][T25327] syzkaller0: entered promiscuous mode [ 515.904000][T25327] syzkaller0: entered allmulticast mode [ 515.925171][T25327] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5605'. [ 515.942418][T25327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5605'. [ 516.107149][T25334] netlink: 'syz.3.5608': attribute type 10 has an invalid length. [ 516.125410][T25334] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.138374][T25334] bond0: (slave team0): Enslaving as an active interface with an up link [ 516.227076][T25339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5609'. [ 516.556917][T25358] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 516.592255][T25358] bond12 (unregistering): Released all slaves [ 516.744436][T25371] netlink: 'syz.0.5617': attribute type 8 has an invalid length. [ 516.763929][T25371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5617'. [ 516.778778][T25373] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5618'. [ 516.809250][T25371] bond0: entered promiscuous mode [ 516.824788][T25371] dummy0: entered promiscuous mode [ 516.851824][T25371] bond0: left promiscuous mode [ 516.856615][T25371] dummy0: left promiscuous mode [ 516.895947][T25381] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 517.090856][T25403] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5625'. [ 517.168398][T25405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.189123][T25408] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 517.211367][T25408] bond1 (unregistering): Released all slaves [ 517.861605][T25460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.913016][T25462] bridge0: entered allmulticast mode [ 517.923417][T25462] netlink: 'syz.1.5643': attribute type 1 has an invalid length. [ 518.238668][T25490] netlink: 'syz.1.5652': attribute type 10 has an invalid length. [ 518.264822][T25490] team0: Port device geneve0 added [ 518.320109][T25492] vlan0: entered promiscuous mode [ 518.325201][T25492] geneve1: entered promiscuous mode [ 518.336820][T25492] vlan0: entered allmulticast mode [ 518.342368][T25492] geneve1: entered allmulticast mode [ 518.363494][T25496] netlink: 'syz.1.5655': attribute type 3 has an invalid length. [ 518.372749][T25496] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 518.388108][T25496] syzkaller0: entered promiscuous mode [ 518.408035][T25496] syzkaller0: entered allmulticast mode [ 518.459081][T25500] netlink: 'syz.3.5656': attribute type 1 has an invalid length. [ 518.556777][T25506] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 518.747752][T25513] netlink: 'syz.0.5661': attribute type 11 has an invalid length. [ 518.857712][T25519] syz.1.5663 (25519) used obsolete PPPIOCDETACH ioctl [ 518.899279][T25521] syzkaller0: entered promiscuous mode [ 518.904883][T25521] syzkaller0: entered allmulticast mode [ 518.920776][T25521] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 519.012624][T25533] gretap0: entered promiscuous mode [ 519.021997][T25533] gretap0: left promiscuous mode [ 519.071212][T25534] delete_channel: no stack [ 519.213652][T25548] netlink: 'syz.0.5675': attribute type 5 has an invalid length. [ 519.264066][T25553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.294834][T25550] netlink: 'syz.1.5674': attribute type 3 has an invalid length. [ 519.510887][T25566] macsec1: entered promiscuous mode [ 519.524635][T25566] macsec1: entered allmulticast mode [ 519.855008][T25590] __nla_validate_parse: 23 callbacks suppressed [ 519.855026][T25590] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.5690'. [ 519.874454][ T3442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.947717][T25592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5691'. [ 519.950199][T21948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.967533][T25592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5691'. [ 520.148045][T25596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5692'. [ 520.223213][ T7646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.250580][ T7646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.258807][T25604] netlink: 'syz.3.5692': attribute type 23 has an invalid length. [ 520.286296][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.296494][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.305481][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.314554][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.322358][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.379667][ T7646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.403851][ T7646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.521316][ T7646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.532636][ T7646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.642780][T25616] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.650562][T25616] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.833607][T25616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.852075][T25616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.006986][ T7646] bond0: (slave netdevsim0): Releasing backup interface [ 521.018981][ T7646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.030432][ T7646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.066026][ T3507] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.076360][ T3507] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.103087][ T3507] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.122318][ T3507] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.196492][T25641] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 521.451411][ T7646] bridge_slave_1: left allmulticast mode [ 521.483817][ T7646] bridge_slave_1: left promiscuous mode [ 521.508417][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.528652][ T7646] bridge_slave_0: left allmulticast mode [ 521.534317][ T7646] bridge_slave_0: left promiscuous mode [ 521.541519][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.570768][ T7646] tipc: Resetting bearer [ 522.349369][ T5154] Bluetooth: hci0: command tx timeout [ 522.546514][ T7646] tipc: Disabling bearer [ 522.634186][ T7646] team0: Port device geneve0 removed [ 522.662452][ T7646] bridge0 (unregistering): left allmulticast mode [ 522.980121][ T7646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.991197][ T7646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.001056][ T7646] bond0 (unregistering): Released all slaves [ 523.013963][ T7646] bond1 (unregistering): Released all slaves [ 523.106656][ T7646] bond2 (unregistering): Released all slaves [ 523.119574][ T7646] bond3 (unregistering): Released all slaves [ 523.133204][ T7646] bond4 (unregistering): Released all slaves [ 523.145196][ T7646] bond5 (unregistering): Released all slaves [ 523.160575][ T7646] bond6 (unregistering): Released all slaves [ 523.182044][ T7646] bond7 (unregistering): Released all slaves [ 523.197207][ T7646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.206066][ T7646] bond8 (unregistering): (slave lo): Releasing backup interface [ 523.214627][ T7646] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 523.229797][ T7646] bond8 (unregistering): Released all slaves [ 523.253754][T25660] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 523.454247][T25682] syzkaller0: entered promiscuous mode [ 523.488348][T25682] syzkaller0: entered allmulticast mode [ 523.489493][T25689] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5718'. [ 523.508958][T25688] gtp0: entered promiscuous mode [ 523.509979][T25691] netlink: 'syz.4.5718': attribute type 33 has an invalid length. [ 523.513913][T25688] gtp0: entered allmulticast mode [ 523.527116][T25605] chnl_net:caif_netlink_parms(): no params data found [ 523.568216][T25691] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 523.673993][T25691] bond8 (unregistering): Released all slaves [ 523.788772][T25694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5721'. [ 524.022875][T25712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5723'. [ 524.023039][T25711] netem: change failed [ 524.057646][T25605] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.069120][T25605] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.076366][T25605] bridge_slave_0: entered allmulticast mode [ 524.084221][T25605] bridge_slave_0: entered promiscuous mode [ 524.095621][T25605] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.102900][T25605] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.110269][T25605] bridge_slave_1: entered allmulticast mode [ 524.119514][T25605] bridge_slave_1: entered promiscuous mode [ 524.161329][T25717] Bluetooth: MGMT ver 1.23 [ 524.203081][T25605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.239466][T25605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.341309][T25605] team0: Port device team_slave_0 added [ 524.363237][T25605] team0: Port device team_slave_1 added [ 524.414354][T25733] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5734'. [ 524.434979][T25605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.437904][ T5154] Bluetooth: hci0: command tx timeout [ 524.443030][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.474395][T25605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.499742][T25605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.506779][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.534251][T25605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.632248][T25605] hsr_slave_0: entered promiscuous mode [ 524.649065][T25605] hsr_slave_1: entered promiscuous mode [ 524.655349][T25605] debugfs: 'hsr0' already exists in 'hsr' [ 524.661483][T25605] Cannot create hsr debugfs directory [ 524.973835][T25761] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.5742'. [ 525.015354][ T7646] tipc: Disabling bearer [ 525.027919][ T7646] tipc: Disabling bearer [ 525.049746][ T7646] tipc: Left network mode [ 525.329151][T25777] syzkaller0: entered promiscuous mode [ 525.334664][T25777] syzkaller0: entered allmulticast mode [ 525.652985][T25805] netlink: 'syz.0.5756': attribute type 1 has an invalid length. [ 525.776529][T25808] bond8: (slave gretap2): making interface the new active one [ 525.795473][T25808] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 525.839894][T25605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.912323][T25805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5756'. [ 525.929115][T25605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.961366][T25805] bond8 (unregistering): (slave gretap2): Releasing active interface [ 525.994672][T25805] bond8 (unregistering): Released all slaves [ 526.059725][T25605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 526.110126][T25605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 526.330122][ T7646] hsr_slave_0: left promiscuous mode [ 526.356745][ T7646] hsr_slave_1: left promiscuous mode [ 526.379806][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.397465][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.411847][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.432973][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.445413][ T7646] veth1_vlan: left promiscuous mode [ 526.451086][ T7646] veth0_vlan: left promiscuous mode [ 526.508095][ T5154] Bluetooth: hci0: command tx timeout [ 526.574835][ T7646] pim6reg (unregistering): left allmulticast mode [ 526.840467][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 526.873109][ T7646] team0 (unregistering): Port device team_slave_0 removed [ 527.213407][T25605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.248933][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5764'. [ 527.262951][T25605] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.301997][T25836] : entered promiscuous mode [ 527.315094][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.322264][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.375777][ T3959] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.382966][ T3959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.395908][T25842] netlink: 'syz.4.5765': attribute type 1 has an invalid length. [ 527.452952][T25843] netlink: 'syz.0.5766': attribute type 1 has an invalid length. [ 527.510393][T25845] bond8 (unregistering): Released all slaves [ 527.526996][T25842] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 527.775241][ T7646] IPVS: stop unused estimator thread 0... [ 527.980541][T25870] xt_CT: No such helper "snmp_trap" [ 528.205986][T25605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.235718][T25876] can: request_module (can-proto-0) failed. [ 528.300203][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5775'. [ 528.347014][T25881] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 528.383550][T25886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5775'. [ 528.553730][T25605] veth0_vlan: entered promiscuous mode [ 528.592636][T25605] veth1_vlan: entered promiscuous mode [ 528.634237][ T5154] Bluetooth: hci0: command tx timeout [ 528.780552][T25605] veth0_macvtap: entered promiscuous mode [ 528.833860][T25605] veth1_macvtap: entered promiscuous mode [ 528.911154][T25605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.944943][T25605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.998584][ T7650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.020574][ T7650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.048532][ T7650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.076320][ T7650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.092286][T25906] tipc: Enabled bearer , priority 0 [ 529.193489][T25906] syzkaller0: entered promiscuous mode [ 529.199246][T25906] syzkaller0: entered allmulticast mode [ 529.205486][T25906] tipc: Resetting bearer [ 529.325620][ T7650] tipc: Resetting bearer [ 529.392759][T25905] tipc: Resetting bearer [ 529.641897][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5788'. [ 529.762103][T25935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5788'. [ 531.293462][T25837] Set syz1 is full, maxelem 65536 reached [ 531.540270][T25938] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 531.624512][T25905] tipc: Disabling bearer [ 531.656970][T25938] netlink: 'syz.6.5789': attribute type 4 has an invalid length. [ 531.709287][T25944] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 531.756762][T25944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 531.906574][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.931311][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.169891][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.178521][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.222745][T25965] openvswitch: netlink: IP tunnel dst address not specified [ 532.396801][T25975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 532.422025][T25975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 532.859907][T25992] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 533.048424][T16414] syz_tun (unregistering): left allmulticast mode [ 533.085623][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.098844][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.109060][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.115550][T26006] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 533.123218][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.132361][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.326061][T26013] syzkaller0: entered promiscuous mode [ 533.348563][T26013] syzkaller0: entered allmulticast mode [ 533.380516][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5809'. [ 533.651439][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5815'. [ 533.838672][T26046] netlink: 'syz.1.5818': attribute type 1 has an invalid length. [ 533.873978][T26046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5818'. [ 533.894489][T26046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5818'. [ 534.001703][T26055] syzkaller0: entered promiscuous mode [ 534.007215][T26055] syzkaller0: entered allmulticast mode [ 534.063457][T26055] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 534.114721][T26002] chnl_net:caif_netlink_parms(): no params data found [ 534.144203][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5822'. [ 534.157610][T26072] nbd: device at index 6 is going down [ 534.176102][T26055] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 534.195064][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5822'. [ 534.371257][T26002] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.388246][T26002] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.416448][T26002] bridge_slave_0: entered allmulticast mode [ 534.443901][T26002] bridge_slave_0: entered promiscuous mode [ 534.447386][T26098] netlink: 'syz.4.5834': attribute type 21 has an invalid length. [ 534.453686][T26002] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.469197][T26002] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.476455][T26002] bridge_slave_1: entered allmulticast mode [ 534.485407][T26002] bridge_slave_1: entered promiscuous mode [ 534.517176][T26098] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5834'. [ 534.551990][T26002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.620945][T26002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.653819][T26108] netlink: 'syz.4.5836': attribute type 11 has an invalid length. [ 534.685791][T26002] team0: Port device team_slave_0 added [ 534.699199][T26002] team0: Port device team_slave_1 added [ 534.704968][T26108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5836'. [ 534.802026][T26002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.818290][T26002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.857640][T26002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.870833][T26002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.878114][T26002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.888384][T26121] x_tables: duplicate underflow at hook 2 [ 534.905973][T26002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.916626][T26121] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 535.014827][T26002] hsr_slave_0: entered promiscuous mode [ 535.034808][T26002] hsr_slave_1: entered promiscuous mode [ 535.042858][T26002] debugfs: 'hsr0' already exists in 'hsr' [ 535.050087][T26002] Cannot create hsr debugfs directory [ 535.149228][ T5840] Bluetooth: hci2: command tx timeout [ 535.304670][T26002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.316279][T26002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.327136][T26002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 535.337862][T26002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 535.429505][T26002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.446043][T26002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.456506][T26002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 535.479842][T26002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 535.583822][T26002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.608226][T26002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.625507][T26002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 535.636204][T26002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 535.692852][T26002] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 535.780924][T26002] batman_adv: batadv0: Removing interface: netdevsim0 [ 535.790666][T26158] netlink: 'syz.4.5855': attribute type 19 has an invalid length. [ 535.800833][T26002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.812138][T26002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.836479][T26002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 535.847121][T26002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 536.065594][T26002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 536.079937][T26002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 536.091144][T26002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 536.105821][T26002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 536.310218][T26002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.362998][T26002] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.444816][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.451998][ T7648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.492659][T26209] netlink: 'syz.6.5868': attribute type 3 has an invalid length. [ 536.530015][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.537185][ T7648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.720220][T26219] team0: Device ipvlan1 failed to register rx_handler [ 537.231395][ T5840] Bluetooth: hci2: command tx timeout [ 537.241763][T26002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.405963][T26002] veth0_vlan: entered promiscuous mode [ 537.456081][T26002] veth1_vlan: entered promiscuous mode [ 537.537894][T26002] veth0_macvtap: entered promiscuous mode [ 537.654883][T26002] veth1_macvtap: entered promiscuous mode [ 537.711753][T26002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.730294][T26002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.766364][ T4119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.794170][ T4119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.836867][ T4119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.856528][ T4119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.069992][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.098079][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.148356][T10779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.164806][T10779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.174466][T26279] __nla_validate_parse: 12 callbacks suppressed [ 538.174480][T26279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5885'. [ 538.562522][T26289] bond1: entered allmulticast mode [ 538.577862][T26289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.018442][T26304] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5894'. [ 539.110167][T26307] veth0: entered promiscuous mode [ 539.137590][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5895'. [ 539.269603][T26307] veth0 (unregistering): left promiscuous mode [ 539.307873][ T5840] Bluetooth: hci2: command tx timeout [ 539.428867][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 539.471863][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 539.490704][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 539.493671][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.512185][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.521188][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.529607][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 539.542012][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.550916][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.562672][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 539.572133][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 539.583194][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5896'. [ 540.398496][T26357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.170024][ T7656] team0: Port device bridge3 removed [ 541.335977][ T7656] bond4 (unregistering): (slave bridge7): Releasing backup interface [ 541.388364][ T5154] Bluetooth: hci2: command tx timeout [ 541.630763][ T5154] Bluetooth: hci4: command tx timeout [ 541.668491][ T7656] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 541.682828][ T7656] bond0 (unregistering): (slave team0): Releasing backup interface [ 541.692621][ T7656] bond0 (unregistering): Released all slaves [ 541.704928][ T7656] bond1 (unregistering): Released all slaves [ 541.809228][ T7656] bond2 (unregistering): Released all slaves [ 541.907405][ T7656] team0: Port device macvlan3 removed [ 541.916152][ T7656] bond3 (unregistering): Released all slaves [ 542.007697][ T7656] bond4 (unregistering): Released all slaves [ 542.099854][ T7656] bond5 (unregistering): Released all slaves [ 542.112647][ T7656] bond6 (unregistering): (slave bond7): Releasing backup interface [ 542.122233][ T7656] bond6 (unregistering): Released all slaves [ 542.213260][ T7656] bond7 (unregistering): Released all slaves [ 542.303001][ T7656] bond9 (unregistering): Released all slaves [ 542.315004][ T7656] bond8 (unregistering): Released all slaves [ 542.326948][ T7656] bond10 (unregistering): Released all slaves [ 542.339220][ T7656] bond11 (unregistering): Released all slaves [ 542.363190][ T7656] bond12 (unregistering): Released all slaves [ 542.590873][ T7656] : left promiscuous mode [ 542.696401][T26403] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 542.713232][T26409] netlink: 'syz.6.5917': attribute type 1 has an invalid length. [ 542.771528][ T7656] tipc: Left network mode [ 542.855534][T26318] chnl_net:caif_netlink_parms(): no params data found [ 542.896016][T26413] syzkaller0: entered promiscuous mode [ 542.918143][T26413] syzkaller0: entered allmulticast mode [ 542.951943][T26413] tipc: Enabled bearer , priority 0 [ 543.039423][T26412] tipc: Resetting bearer [ 543.055073][T26424] netlink: 'syz.0.5924': attribute type 11 has an invalid length. [ 543.086523][T26412] tipc: Disabling bearer [ 543.707402][ T5154] Bluetooth: hci4: command tx timeout [ 543.779181][T26318] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.789573][T26318] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.796913][T26318] bridge_slave_0: entered allmulticast mode [ 543.806697][T26318] bridge_slave_0: entered promiscuous mode [ 543.910138][T26318] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.966969][T26318] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.994063][T26318] bridge_slave_1: entered allmulticast mode [ 544.001854][T26318] bridge_slave_1: entered promiscuous mode [ 544.026177][T26456] pim6reg1: entered promiscuous mode [ 544.031839][T26456] pim6reg1: entered allmulticast mode [ 544.259354][T26467] netlink: 'syz.4.5933': attribute type 1 has an invalid length. [ 544.269169][T26467] __nla_validate_parse: 29 callbacks suppressed [ 544.269184][T26467] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5933'. [ 544.290695][T26318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.323126][T26464] syzkaller0: entered promiscuous mode [ 544.328903][T26464] syzkaller0: entered allmulticast mode [ 544.363637][T26318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.423534][T26474] ipt_REJECT: TCP_RESET invalid for non-tcp [ 544.580897][ T7656] hsr_slave_0: left promiscuous mode [ 544.678938][ T7656] pim6reg (unregistering): left allmulticast mode [ 545.451623][T26318] team0: Port device team_slave_0 added [ 545.470657][T26318] team0: Port device team_slave_1 added [ 545.572078][T26492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5939'. [ 545.646144][T26492] netlink: 'syz.4.5939': attribute type 1 has an invalid length. [ 545.654588][T26492] netlink: 'syz.4.5939': attribute type 2 has an invalid length. [ 545.664029][T26492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5939'. [ 545.702705][T26318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.732591][T26318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.761894][T26318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.798341][ T5154] Bluetooth: hci4: command tx timeout [ 545.815241][T26506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5947'. [ 545.839922][T26318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.846878][T26318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.875342][T26318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.919096][T26509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.062568][T26318] hsr_slave_0: entered promiscuous mode [ 546.083489][T26318] hsr_slave_1: entered promiscuous mode [ 546.090154][T26318] debugfs: 'hsr0' already exists in 'hsr' [ 546.095953][T26318] Cannot create hsr debugfs directory [ 546.102379][T26514] syzkaller0: entered promiscuous mode [ 546.111823][T26514] syzkaller0: entered allmulticast mode [ 546.125307][ T7656] IPVS: stop unused estimator thread 0... [ 546.183303][T26514] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5950'. [ 546.328909][T26529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5954'. [ 546.710938][T26555] netlink: 'syz.4.5964': attribute type 10 has an invalid length. [ 546.719021][T26555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5964'. [ 546.728410][T26555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 546.796905][T26558] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5965'. [ 546.946760][T26318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.963659][T26318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.995502][T26318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.004021][T26568] delete_channel: no stack [ 547.039768][T26318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.211866][T26318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.256832][T26318] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.289652][T10790] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.297081][T10790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.358043][T10790] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.365219][T10790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.392984][T26601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5976'. [ 547.657089][T26318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.701995][T26318] veth0_vlan: entered promiscuous mode [ 547.716860][T26318] veth1_vlan: entered promiscuous mode [ 547.744052][T26318] veth0_macvtap: entered promiscuous mode [ 547.754027][T26318] veth1_macvtap: entered promiscuous mode [ 547.772446][T26318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.788728][T26318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.803838][ T7656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.812689][ T7656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.822862][ T7656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.834437][ T7656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.868024][ T5154] Bluetooth: hci4: command tx timeout [ 548.156375][T26599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.162626][T26599] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 548.172971][T26599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.179555][T26599] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 548.214980][T26599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.224391][T26599] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 548.259710][T26599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.265625][T26599] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 549.055855][T26632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5983'. [ 549.133938][T26638] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 549.142658][T26638] netlink: 'syz.0.5985': attribute type 2 has an invalid length. [ 549.612113][T26659] Unsupported ieee802154 address type: 0 [ 549.654167][T26661] netlink: 'syz.6.5991': attribute type 10 has an invalid length. [ 603.801459][ T3979] dummy0: left allmulticast mode [ 603.806543][ T3979] bridge0: port 2(dummy0) entered disabled state [ 603.814283][ T3979] batadv3: left allmulticast mode [ 603.819984][ T3979] batadv3: left promiscuous mode [ 603.825015][ T3979] bridge0: port 1(batadv3) entered disabled state [ 604.027178][ T3979] bond6 (unregistering): (slave gretap1): Releasing active interface [ 604.045018][ T3979] bond7 (unregistering): (slave gretap2): Releasing active interface [ 604.064567][ T3979] bond8 (unregistering): (slave gretap3): Releasing active interface [ 604.121395][ T3979] bond9 (unregistering): (slave geneve4): Releasing active interface [ 604.139734][ T3979] bond5 (unregistering): (slave geneve3): Releasing backup interface [ 604.757991][ T3979] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 604.771105][ T3979] bond0 (unregistering): Released all slaves [ 604.796626][ T3979] bond1 (unregistering): Released all slaves [ 604.815761][ T3979] bond2 (unregistering): Released all slaves [ 604.827778][ T3979] bond3 (unregistering): Released all slaves [ 604.920071][ T3979] bond4 (unregistering): Released all slaves [ 604.932021][ T3979] bond5 (unregistering): Released all slaves [ 605.022063][ T3979] bond6 (unregistering): Released all slaves [ 605.035044][ T3979] bond7 (unregistering): Released all slaves [ 605.046912][ T3979] bond8 (unregistering): Released all slaves [ 605.139238][ T3979] bond9 (unregistering): Released all slaves [ 605.248523][ T3979] : left promiscuous mode [ 605.279622][ T3979] : left promiscuous mode [ 605.346238][ T3979] tipc: Disabling bearer [ 605.357502][ T3979] tipc: Left network mode [ 699.788814][ T31] INFO: task kworker/0:30:11129 blocked for more than 143 seconds. [ 699.796746][ T31] Not tainted syzkaller #0 [ 699.801709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.810431][ T31] task:kworker/0:30 state:D stack:23608 pid:11129 tgid:11129 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 699.822473][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 699.829190][ T31] Call Trace: [ 699.832454][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 699.835369][ T31] __schedule+0x14bc/0x5000 [ 699.839918][ T31] ? __pfx___schedule+0x10/0x10 [ 699.844773][ T31] ? schedule+0x91/0x360 [ 699.849985][ T31] schedule+0x165/0x360 [ 699.854967][ T31] schedule_preempt_disabled+0x13/0x30 [ 699.860509][ T31] __mutex_lock+0x7e6/0x1350 [ 699.865115][ T31] ? __mutex_lock+0x5bb/0x1350 [ 699.906091][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 699.917308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.922362][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 699.937314][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 699.943054][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 699.949296][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 699.955006][ T31] process_scheduled_works+0xad1/0x1770 [ 699.960574][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.966548][ T31] worker_thread+0x8a0/0xda0 [ 699.971156][ T31] kthread+0x711/0x8a0 [ 699.975209][ T31] ? __pfx_worker_thread+0x10/0x10 [ 699.980321][ T31] ? __pfx_kthread+0x10/0x10 [ 699.984894][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.990106][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 699.995284][ T31] ? __pfx_kthread+0x10/0x10 [ 699.999903][ T31] ret_from_fork+0x599/0xb30 [ 700.004492][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 700.009644][ T31] ? __switch_to_asm+0x39/0x70 [ 700.014387][ T31] ? __switch_to_asm+0x33/0x70 [ 700.019201][ T31] ? __pfx_kthread+0x10/0x10 [ 700.023802][ T31] ret_from_fork_asm+0x1a/0x30 [ 700.028714][ T31] [ 700.031791][ T31] INFO: task syz-executor:26318 blocked for more than 143 seconds. [ 700.039807][ T31] Not tainted syzkaller #0 [ 700.044785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.053515][ T31] task:syz-executor state:D stack:21432 pid:26318 tgid:26318 ppid:1 task_flags:0x400140 flags:0x00080002 [ 700.065444][ T31] Call Trace: [ 700.068732][ T31] [ 700.071648][ T31] __schedule+0x14bc/0x5000 [ 700.076148][ T31] ? __pfx___schedule+0x10/0x10 [ 700.081128][ T31] ? schedule+0x91/0x360 [ 700.085375][ T31] schedule+0x165/0x360 [ 700.089543][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.094980][ T31] __mutex_lock+0x7e6/0x1350 [ 700.099592][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.104340][ T31] ? rfkill_fop_open+0x12d/0x820 [ 700.109423][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.114455][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 700.119750][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 700.125109][ T31] rfkill_fop_open+0x12d/0x820 [ 700.129881][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 700.135147][ T31] misc_open+0x2d5/0x350 [ 700.139558][ T31] chrdev_open+0x4cc/0x5e0 [ 700.143979][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 700.148939][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 700.155275][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 700.160282][ T31] do_dentry_open+0x7ce/0x1420 [ 700.165038][ T31] vfs_open+0x3b/0x340 [ 700.169116][ T31] ? path_openat+0x33f3/0x3dd0 [ 700.173869][ T31] path_openat+0x340e/0x3dd0 [ 700.178488][ T31] ? do_sys_openat2+0xbc/0x200 [ 700.183230][ T31] ? __x64_sys_openat+0x138/0x170 [ 700.188337][ T31] ? __pfx_path_openat+0x10/0x10 [ 700.193286][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 700.198269][ T31] do_filp_open+0x1fa/0x410 [ 700.202769][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 700.207835][ T31] ? _raw_spin_unlock+0x28/0x50 [ 700.212666][ T31] ? alloc_fd+0x64c/0x6c0 [ 700.216982][ T31] do_sys_openat2+0x121/0x200 [ 700.221762][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.226963][ T31] ? fput_close_sync+0x113/0x220 [ 700.231911][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 700.237175][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 700.242397][ T31] __x64_sys_openat+0x138/0x170 [ 700.247441][ T31] do_syscall_64+0xfa/0xf80 [ 700.251948][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.258030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 700.262685][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.268601][ T31] RIP: 0033:0x7f759d18df90 [ 700.273013][ T31] RSP: 002b:00007ffc63147af0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 700.281453][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f759d18df90 [ 700.289429][ T31] RDX: 0000000000000002 RSI: 00007f759d214a62 RDI: 00000000ffffff9c [ 700.297421][ T31] RBP: 00007f759d214a62 R08: 0000000000000000 R09: 0000000000000000 [ 700.305371][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 700.313375][ T31] R13: 0000000000000003 R14: 00007ffc63147ec8 R15: 0000000000000000 [ 700.321403][ T31] [ 700.324420][ T31] INFO: task syz.1.5972:26586 blocked for more than 143 seconds. [ 700.332570][ T31] Not tainted syzkaller #0 [ 700.337537][ T31] Blocked by coredump. [ 700.342100][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.350793][ T31] task:syz.1.5972 state:D stack:25984 pid:26586 tgid:26585 ppid:25605 task_flags:0x40054c flags:0x00080001 [ 700.362733][ T31] Call Trace: [ 700.366012][ T31] [ 700.368968][ T31] __schedule+0x14bc/0x5000 [ 700.373474][ T31] ? __pfx___schedule+0x10/0x10 [ 700.378347][ T31] ? schedule+0x91/0x360 [ 700.382590][ T31] schedule+0x165/0x360 [ 700.386724][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.392195][ T31] __mutex_lock+0x7e6/0x1350 [ 700.396777][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.401558][ T31] ? rfkill_unregister+0xc8/0x220 [ 700.406563][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.411620][ T31] ? __pfx_device_del+0x10/0x10 [ 700.416463][ T31] ? __cancel_work_sync+0x5c/0x110 [ 700.421617][ T31] rfkill_unregister+0xc8/0x220 [ 700.426456][ T31] nfc_unregister_device+0x96/0x2a0 [ 700.432225][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 700.438165][ T31] virtual_ncidev_close+0x56/0x90 [ 700.443194][ T31] __fput+0x44c/0xa70 [ 700.447165][ T31] task_work_run+0x1d4/0x260 [ 700.451781][ T31] ? __pfx_task_work_run+0x10/0x10 [ 700.456877][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 700.462084][ T31] do_exit+0x6c5/0x2310 [ 700.466228][ T31] ? cgroup1_freezing+0x20/0x350 [ 700.471192][ T31] ? __pfx_do_exit+0x10/0x10 [ 700.475767][ T31] ? cgroup1_freezing+0x20/0x350 [ 700.480789][ T31] ? cgroup1_freezing+0x20/0x350 [ 700.485720][ T31] do_group_exit+0x21c/0x2d0 [ 700.490327][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 700.495509][ T31] get_signal+0x1285/0x1340 [ 700.500102][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 700.505659][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 700.511856][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 700.517331][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 700.522611][ T31] ? rcu_is_watching+0x15/0xb0 [ 700.527394][ T31] do_syscall_64+0x2e3/0xf80 [ 700.531969][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.538039][ T31] ? clear_bhb_loop+0x60/0xb0 [ 700.542697][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.548603][ T31] RIP: 0033:0x7f005ed8f749 [ 700.552997][ T31] RSP: 002b:00007f005fc8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.561424][ T31] RAX: fffffffffffffffc RBX: 00007f005efe5fa0 RCX: 00007f005ed8f749 [ 700.569418][ T31] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 700.577414][ T31] RBP: 00007f005ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 700.585373][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.596153][ T31] R13: 00007f005efe6038 R14: 00007f005efe5fa0 R15: 00007ffcdd3b4fe8 [ 700.604167][ T31] [ 700.607186][ T31] INFO: task syz.4.5975:26599 blocked for more than 144 seconds. [ 700.620042][ T31] Not tainted syzkaller #0 [ 700.624967][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.633647][ T31] task:syz.4.5975 state:D stack:25464 pid:26599 tgid:26598 ppid:17061 task_flags:0x400040 flags:0x00080002 [ 700.645578][ T31] Call Trace: [ 700.648866][ T31] [ 700.651785][ T31] __schedule+0x14bc/0x5000 [ 700.656286][ T31] ? __pfx___schedule+0x10/0x10 [ 700.661170][ T31] ? schedule+0x91/0x360 [ 700.665397][ T31] schedule+0x165/0x360 [ 700.669718][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.675159][ T31] __mutex_lock+0x7e6/0x1350 [ 700.679829][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.684597][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 700.689907][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.694918][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 700.700126][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 700.706001][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 700.712347][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 700.718084][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 700.723178][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 700.728907][ T31] rfkill_set_block+0x1d2/0x440 [ 700.733744][ T31] rfkill_fop_write+0x44b/0x570 [ 700.738653][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 700.744041][ T31] ? security_kernfs_init_security+0x270/0x290 [ 700.750459][ T31] ? rw_verify_area+0x255/0x4d0 [ 700.755327][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 700.760762][ T31] vfs_write+0x27e/0xb30 [ 700.765009][ T31] ? __pfx_vfs_write+0x10/0x10 [ 700.769873][ T31] ? __fget_files+0x2a/0x420 [ 700.774449][ T31] ? __fget_files+0x2a/0x420 [ 700.779051][ T31] ? __fget_files+0x3a0/0x420 [ 700.783707][ T31] ? __fget_files+0x2a/0x420 [ 700.788315][ T31] ksys_write+0x145/0x250 [ 700.792630][ T31] ? __pfx_ksys_write+0x10/0x10 [ 700.797491][ T31] ? do_syscall_64+0xbe/0xf80 [ 700.802150][ T31] do_syscall_64+0xfa/0xf80 [ 700.806634][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.812718][ T31] ? clear_bhb_loop+0x60/0xb0 [ 700.817416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.823309][ T31] RIP: 0033:0x7fc50db8f749 [ 700.827806][ T31] RSP: 002b:00007fc50e998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.836200][ T31] RAX: ffffffffffffffda RBX: 00007fc50dde5fa0 RCX: 00007fc50db8f749 [ 700.844200][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 700.852195][ T31] RBP: 00007fc50dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 700.860203][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.868224][ T31] R13: 00007fc50dde6038 R14: 00007fc50dde5fa0 R15: 00007ffcf43db2f8 [ 700.876200][ T31] [ 700.879260][ T31] INFO: task syz.0.5989:26651 blocked for more than 144 seconds. [ 700.886972][ T31] Not tainted syzkaller #0 [ 700.891942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.900656][ T31] task:syz.0.5989 state:D stack:28152 pid:26651 tgid:26650 ppid:26002 task_flags:0x400040 flags:0x00080002 [ 700.912602][ T31] Call Trace: [ 700.915868][ T31] [ 700.918821][ T31] __schedule+0x14bc/0x5000 [ 700.923326][ T31] ? __pfx___schedule+0x10/0x10 [ 700.928190][ T31] ? schedule+0x91/0x360 [ 700.932416][ T31] schedule+0x165/0x360 [ 700.936551][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.942021][ T31] __mutex_lock+0x7e6/0x1350 [ 700.946594][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 700.951547][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.956296][ T31] ? misc_open+0x51/0x350 [ 700.960640][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.965663][ T31] misc_open+0x51/0x350 [ 700.969857][ T31] chrdev_open+0x4cc/0x5e0 [ 700.974264][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 700.979201][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 700.985511][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 700.990548][ T31] do_dentry_open+0x7ce/0x1420 [ 700.995301][ T31] vfs_open+0x3b/0x340 [ 700.999369][ T31] ? path_openat+0x33f3/0x3dd0 [ 701.004115][ T31] path_openat+0x340e/0x3dd0 [ 701.008740][ T31] ? do_sys_openat2+0xbc/0x200 [ 701.013480][ T31] ? __x64_sys_openat+0x138/0x170 [ 701.018551][ T31] ? __pfx_path_openat+0x10/0x10 [ 701.023491][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 701.028453][ T31] do_filp_open+0x1fa/0x410 [ 701.032940][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 701.038046][ T31] ? _raw_spin_unlock+0x28/0x50 [ 701.042892][ T31] ? alloc_fd+0x64c/0x6c0 [ 701.047211][ T31] do_sys_openat2+0x121/0x200 [ 701.051911][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 701.057090][ T31] ? rcu_is_watching+0x15/0xb0 [ 701.061861][ T31] __x64_sys_openat+0x138/0x170 [ 701.066693][ T31] do_syscall_64+0xfa/0xf80 [ 701.071303][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.078025][ T31] ? clear_bhb_loop+0x60/0xb0 [ 701.082810][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.088831][ T31] RIP: 0033:0x7faf21b8f749 [ 701.093334][ T31] RSP: 002b:00007faf22984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 701.101747][ T31] RAX: ffffffffffffffda RBX: 00007faf21de5fa0 RCX: 00007faf21b8f749 [ 701.109736][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 701.117714][ T31] RBP: 00007faf21c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 701.125667][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.133660][ T31] R13: 00007faf21de6038 R14: 00007faf21de5fa0 R15: 00007ffd12810f78 [ 701.141670][ T31] [ 701.144681][ T31] INFO: task syz.0.5989:26652 blocked for more than 144 seconds. [ 701.152544][ T31] Not tainted syzkaller #0 [ 701.157708][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.166372][ T31] task:syz.0.5989 state:D stack:28152 pid:26652 tgid:26650 ppid:26002 task_flags:0x400040 flags:0x00080002 [ 701.178358][ T31] Call Trace: [ 701.181634][ T31] [ 701.184555][ T31] __schedule+0x14bc/0x5000 [ 701.189107][ T31] ? __pfx___schedule+0x10/0x10 [ 701.193946][ T31] ? schedule+0x91/0x360 [ 701.198235][ T31] schedule+0x165/0x360 [ 701.202390][ T31] schedule_preempt_disabled+0x13/0x30 [ 701.207898][ T31] __mutex_lock+0x7e6/0x1350 [ 701.212489][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 701.217445][ T31] ? __mutex_lock+0x5bb/0x1350 [ 701.222192][ T31] ? misc_open+0x51/0x350 [ 701.226501][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 701.231557][ T31] misc_open+0x51/0x350 [ 701.235698][ T31] chrdev_open+0x4cc/0x5e0 [ 701.240184][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 701.245121][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 701.251531][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 701.256452][ T31] do_dentry_open+0x7ce/0x1420 [ 701.261244][ T31] vfs_open+0x3b/0x340 [ 701.265291][ T31] ? path_openat+0x33f3/0x3dd0 [ 701.270072][ T31] path_openat+0x340e/0x3dd0 [ 701.274661][ T31] ? do_sys_openat2+0xbc/0x200 [ 701.279424][ T31] ? __x64_sys_openat+0x138/0x170 [ 701.284427][ T31] ? __pfx_path_openat+0x10/0x10 [ 701.289373][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 701.294294][ T31] do_filp_open+0x1fa/0x410 [ 701.298895][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 701.304024][ T31] ? _raw_spin_unlock+0x28/0x50 [ 701.308902][ T31] ? alloc_fd+0x64c/0x6c0 [ 701.313224][ T31] do_sys_openat2+0x121/0x200 [ 701.317935][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 701.323157][ T31] ? __fget_files+0x3a0/0x420 [ 701.327901][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 701.333115][ T31] __x64_sys_openat+0x138/0x170 [ 701.337997][ T31] do_syscall_64+0xfa/0xf80 [ 701.342486][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.348559][ T31] ? clear_bhb_loop+0x60/0xb0 [ 701.353217][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.359117][ T31] RIP: 0033:0x7faf21b8f749 [ 701.363513][ T31] RSP: 002b:00007faf22963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 701.371941][ T31] RAX: ffffffffffffffda RBX: 00007faf21de6090 RCX: 00007faf21b8f749 [ 701.379937][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 701.387931][ T31] RBP: 00007faf21c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 701.395884][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.403868][ T31] R13: 00007faf21de6128 R14: 00007faf21de6090 R15: 00007ffd12810f78 [ 701.411877][ T31] [ 701.414910][ T31] [ 701.414910][ T31] Showing all locks held in the system: [ 701.422649][ T31] 1 lock held by khungtaskd/31: [ 701.427529][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 701.437393][ T31] 4 locks held by kworker/u8:14/3979: [ 701.442737][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 701.453679][ T31] #1: ffffc9000d8a7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 701.464270][ T31] #2: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 701.473595][ T31] #3: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 701.483718][ T31] 2 locks held by kworker/u8:15/4119: [ 701.489117][ T31] 2 locks held by getty/5592: [ 701.493780][ T31] #0: ffff88814d8ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 701.503540][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 701.513636][ T31] 3 locks held by kworker/0:30/11129: [ 701.519042][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 701.530012][ T31] #1: ffffc90003637b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 701.543593][ T31] #2: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 701.554924][ T31] 1 lock held by syz-executor/25605: [ 701.560249][ T31] #0: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 701.570404][ T31] 2 locks held by syz-executor/26318: [ 701.575757][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.584232][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 701.594262][ T31] 2 locks held by syz.1.5972/26586: [ 701.599476][ T31] #0: ffff888074de9100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 701.609263][ T31] #1: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 701.619442][ T31] 2 locks held by syz.4.5975/26599: [ 701.624631][ T31] #0: ffffffff8f5e15a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 701.637765][ T31] #1: ffff888074de9100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 701.647463][ T31] 1 lock held by syz.0.5989/26651: [ 701.652547][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.661009][ T31] 1 lock held by syz.0.5989/26652: [ 701.666109][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.674573][ T31] 1 lock held by syz-executor/26675: [ 701.679884][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.688346][ T31] 1 lock held by syz-executor/26679: [ 701.693610][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.702076][ T31] 1 lock held by syz-executor/26680: [ 701.707474][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.715942][ T31] 1 lock held by syz.6.5998/26682: [ 701.721106][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.729590][ T31] 1 lock held by syz-executor/26687: [ 701.734853][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.743357][ T31] 1 lock held by syz-executor/26689: [ 701.748656][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.757073][ T31] 1 lock held by syz-executor/26693: [ 701.762373][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.770826][ T31] 1 lock held by syz-executor/26694: [ 701.776105][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.784598][ T31] 1 lock held by syz-executor/26695: [ 701.789971][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.798450][ T31] 1 lock held by syz-executor/26697: [ 701.803712][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.812161][ T31] 1 lock held by syz-executor/26699: [ 701.817450][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.825870][ T31] 1 lock held by syz-executor/26702: [ 701.831164][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.839624][ T31] 1 lock held by syz-executor/26703: [ 701.844885][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 701.853418][ T31] [ 701.855738][ T31] ============================================= [ 701.855738][ T31] [ 701.864382][ T31] NMI backtrace for cpu 1 [ 701.864397][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 701.864408][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.864414][ T31] Call Trace: [ 701.864418][ T31] [ 701.864423][ T31] dump_stack_lvl+0x189/0x250 [ 701.864439][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.864449][ T31] ? __pfx__printk+0x10/0x10 [ 701.864467][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 701.864479][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 701.864489][ T31] ? __pfx__printk+0x10/0x10 [ 701.864503][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 701.864518][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 701.864529][ T31] watchdog+0xf3c/0xf80 [ 701.864543][ T31] ? watchdog+0x1e2/0xf80 [ 701.864557][ T31] kthread+0x711/0x8a0 [ 701.864576][ T31] ? __pfx_watchdog+0x10/0x10 [ 701.864586][ T31] ? __pfx_kthread+0x10/0x10 [ 701.864598][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 701.864609][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 701.864620][ T31] ? __pfx_kthread+0x10/0x10 [ 701.864631][ T31] ret_from_fork+0x599/0xb30 [ 701.864646][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 701.864665][ T31] ? __switch_to_asm+0x39/0x70 [ 701.864675][ T31] ? __switch_to_asm+0x33/0x70 [ 701.864685][ T31] ? __pfx_kthread+0x10/0x10 [ 701.864696][ T31] ret_from_fork_asm+0x1a/0x30 [ 701.864715][ T31] [ 701.864718][ T31] Sending NMI from CPU 1 to CPUs 0: [ 702.009271][ C0] NMI backtrace for cpu 0 [ 702.009287][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 702.009306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 702.009317][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 702.009341][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 702.009355][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 702.009369][ C0] RAX: 7e6b961957af6400 RBX: ffffffff8197438a RCX: 7e6b961957af6400 [ 702.009382][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd90 RDI: ffffffff8bbfc660 [ 702.009393][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 702.009405][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 702.009417][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 702.009427][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 702.009440][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.009452][ C0] CR2: 00007fba56d17d60 CR3: 0000000031b60000 CR4: 00000000003526f0 [ 702.009466][ C0] Call Trace: [ 702.009473][ C0] [ 702.009479][ C0] default_idle+0x13/0x20 [ 702.009501][ C0] default_idle_call+0x73/0xb0 [ 702.009523][ C0] do_idle+0x1ea/0x520 [ 702.009539][ C0] ? irqentry_exit+0x5ba/0x660 [ 702.009560][ C0] ? __pfx_do_idle+0x10/0x10 [ 702.009583][ C0] cpu_startup_entry+0x44/0x60 [ 702.009599][ C0] rest_init+0x2de/0x300 [ 702.009615][ C0] start_kernel+0x3ae/0x410 [ 702.009631][ C0] x86_64_start_reservations+0x24/0x30 [ 702.009651][ C0] x86_64_start_kernel+0x143/0x1c0 [ 702.009671][ C0] common_startup_64+0x13e/0x147 [ 702.009697][ C0]