last executing test programs: 3m17.95881244s ago: executing program 3 (id=735): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0xfff, 0x5, 0x6, 0xe0, 0xffffffffffffffff, 0x15ed, '\x00', 0x0, r0, 0x5, 0x4, 0x2}, 0x50) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='reno', 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="040000001a0000000100008000000000d1dff8581cb854403239fa9029b45dab0923b05709441ad8240f45fa3679f2ba8284a840645d28da9743c4ce199e5af8eca44b1a2fe30154e23042305a3a8f086b7618e6b1d22dddc87f6d4839eed32b56c7e3079dcbd3d304c6937cce6c8464a0496933bc5b95e45454a94af943e3efbc3bd37ad86675812013697146c4b2c50d8fd530e6a315f49c49957cda3447083032e06f53abd5300ded5e68128b3621f41bf8c48c31", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400008001000000040000400302000083c4a27c6cad905d"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000b40)=0xa, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close(0x3) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000540)) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r11 = socket$inet6(0xa, 0x6, 0x8) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r11, 0x0, 0x0, 0x4c881, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)="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", 0x5ac}], 0x1}}], 0x2, 0x400c404) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4020) ioctl$SIOCSIFHWADDR(r12, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x30c08473}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff0000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 3m17.854042082s ago: executing program 2 (id=738): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x2000000, 0x0, @void, @value=0x0}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0x80000001}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x2000000, 0x0, @void, @value=0x0}, 0x20) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0x80000001}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x0) (async) 3m17.80263295s ago: executing program 4 (id=739): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000002c0)={0x0, 0x0, "16c6f6dbc9bf2307e7a7fbdd34c3b913"}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000180), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xfffffa3c, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getsockname$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 3m17.67191797s ago: executing program 1 (id=740): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x84, &(0x7f0000000240)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0xcd, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, @in6={0xa, 0x8, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={r0, 0x7, 0x6, [0x5, 0x8, 0xddd7, 0x4, 0x3, 0x95]}, 0x14) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000040)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4) 3m17.671678071s ago: executing program 2 (id=741): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) (async) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) (async, rerun: 64) socket$isdn(0x22, 0x3, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x72}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 3m17.669973193s ago: executing program 3 (id=743): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000040000007300000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x80, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 3m17.510014873s ago: executing program 1 (id=744): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b2000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000befb7fbd1829ca2a5c049005a3b8574e0afeba7d7d244d3cf2c57cfb856f9ab90724d96c486c366f4dceadc7619a55cf7081cbc5caf723179c9e7abb519fb65921683a22"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4080) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x81, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000366f0000007110ab0000f7b0ed3d7974c52200000847ab1db1f01c0575133bd643fc2ff0e244a83877b4d84bcb47af9b387b84effb57999745453a200d82aed6c567928dd6151efbdfbed8f7f96672aa1de20f7ec63170f38f1f1d28eb33a7e5d452f2b3d7c56a9782df31d6cf39c94ffe717edb62e85d40aa875215eb8bdd1380132d92ad558399f60bc84f9e44f0bdc2874fccf490d4d369834960b5c7893baff9a9fff99bad53b069ffaf0efe97fd65d09e3e794c342cb388f5b7a120abf503c66340ce04aef2048119cbe3a796e9943eb94f52b92e4ec4912ee385ab0955d608bc03e5ac5f690955958064a6f02073b3182aecbb6152d9a681d609b9ddc459918117255b4f184f96f981bb3142"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m17.509581839s ago: executing program 3 (id=745): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340)={0x1}, 0x8) close(r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002000000240761c2f410fe34257fee55b2407500048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000001100"], 0x78}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x8c, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x6, 0x0, {0x7, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xc77, 0x2}}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x6, 0x1}, {0x60, 0x1}, {0x1b, 0x1}, {0x9, 0x1}, {0x60}, {0x4, 0x1}, {0x6, 0x1}, {0x9}, {0xc, 0x1}, {0xc, 0x1}, {0x36}, {0x16, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5}]}, @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') 3m17.502810418s ago: executing program 4 (id=746): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000049000d0c27bd7900fddbdf250a000100", @ANYRES32=0x0, @ANYBLOB="3b000000080002000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3m17.495309912s ago: executing program 2 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000140)="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") ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000600)={0x0, 0x6, 0x1, [0x3, 0xfffffffffffffffd, 0x800, 0x7fffffff], [0x5, 0x9, 0x5, 0x2, 0x2, 0xfff, 0x9, 0x719e, 0x8, 0x0, 0x7, 0xab8, 0xffffffff, 0x9, 0x7fffffff, 0x6, 0x1, 0xfffffffffffffffc, 0xffffffc000000000, 0xffff, 0x8000000000000001, 0x9, 0x100, 0x84, 0x3, 0xffffffffffffff7f, 0x5, 0x0, 0xf, 0x2, 0x6, 0x1, 0xfffffffc00000000, 0xffff, 0x5, 0x2, 0x7ff, 0xfffffffffffffff9, 0x8, 0x2, 0x8, 0x6, 0x9, 0x3457, 0x0, 0x8000, 0x1, 0x0, 0x3b, 0x1e98, 0x2, 0x9, 0x8, 0x9, 0x7, 0x5, 0x9, 0x5, 0x8, 0x3, 0xffffffffffffffff, 0x4, 0x3, 0xe, 0x1, 0x0, 0x1f1, 0x9, 0x3, 0x528, 0x8, 0xb5, 0x849, 0xfffffffffffffffd, 0x6, 0x1, 0xffff, 0x4, 0x4, 0x6, 0x10001, 0x7, 0x4, 0x2, 0xffffffffffff8000, 0x1, 0x0, 0x7fffffff, 0x4dc, 0x6592d51b, 0x7fffffffffffffff, 0x2, 0x3, 0x8000000000000000, 0x4, 0x4, 0x2, 0x8000, 0x46c, 0x0, 0x11a, 0x9, 0x3, 0x7f, 0x7, 0x100000000, 0x3f2, 0x4, 0xc6a, 0x4, 0x10, 0x5, 0x800, 0x0, 0x4, 0x35e, 0x6ecd, 0xdd, 0xff, 0x5, 0x30f6add5]}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000040)={{r0}, {@val={r5}, @max}}) getsockopt$inet6_tcp_int(r4, 0x6, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r2, 0x0, 0x0, 0x0}, 0x30) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @link_local={0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, 'I', "282896", 0xd, "f69b32a2a5cb407308"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m17.358140458s ago: executing program 1 (id=748): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acb", 0xad}, {&(0x7f0000001400)="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", 0xfba}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000940)="4ad894cbfd42afde9309d99bf77b923ffda3d6ccb19348317a79424b8f62c35bf7e6302da5ac18b2d881e693dca7eb10cf55aa3c76df3f55efc6e2170d97e3851d338998d38c6fd474257af7ffffffffffffffdf47c5e8593af9d0249715ff36383ef0e755ae77129602addc8d0267a66537616c38f3a10fc35f94d31352c34a8fc1a54142", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)="5506b697", 0x4}, {&(0x7f0000000a00)="36e26f22b5d01a57120a31509d17fb3c41765ab36c62fb77b3ceb28fb33d92865f1a0f3ed46a8548a914c234b6dcd79101bcd8acdf60cf4efd61f8764c067f1be36028fb5a4059dbb13c05af99a68b79e26159d9763283257c5affea130631c729667f6ffbaac848001b1bf112771e928590b007a95355480183514d77fe6b2d462fa9aa4859dbf5e8fdc1432e2955fe3beb658ab98b483826190622eec5ee0bf9c24f921ef0b3bc643c592dfe5dbc7495cd4bc11ac9aae1e74e2fe0", 0xbc}], 0x2}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) socket$inet6(0xa, 0x4, 0x3a) 3m17.329514597s ago: executing program 4 (id=750): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000020101010000000000822c0203ada9"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) 3m17.262101649s ago: executing program 2 (id=751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r1, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffc, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="2c99d880556e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x4e24, 0x5, 0x4e22, 0x0, 0xa, 0x180, 0x0, 0x4, r4, r8}, {0x5, 0x4, 0xb, 0x2, 0xffffffffffffffa8, 0x5, 0x0, 0xd}, {0x3, 0x4, 0xff, 0x7}, 0x80, 0x0, 0x2, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x32}, 0xa, @in=@local, 0x3507, 0x3, 0x9fd8b09a0a2eaf07, 0x9, 0x79a, 0x8, 0x81}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffc, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="2c99d880556e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x4e24, 0x5, 0x4e22, 0x0, 0xa, 0x180, 0x0, 0x4, r4, r8}, {0x5, 0x4, 0xb, 0x2, 0xffffffffffffffa8, 0x5, 0x0, 0xd}, {0x3, 0x4, 0xff, 0x7}, 0x80, 0x0, 0x2, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x32}, 0xa, @in=@local, 0x3507, 0x3, 0x9fd8b09a0a2eaf07, 0x9, 0x79a, 0x8, 0x81}}, 0xe8) (async) 3m17.236731538s ago: executing program 3 (id=753): r0 = socket$inet6(0xa, 0x80000, 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x8000, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = socket(0x29, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8080) 3m17.14684708s ago: executing program 4 (id=754): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x46, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r0, 0x28, 0x46, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) 3m17.080283232s ago: executing program 1 (id=755): socket(0x1000000000000010, 0x80802, 0x0) (async) r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet6_buf(r4, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r5}) setsockopt$sock_void(r8, 0x1, 0x24, 0x0, 0x0) (async) setsockopt$sock_void(r8, 0x1, 0x24, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x5, &(0x7f0000001100)=ANY=[@ANYRES16=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x5, &(0x7f0000001100)=ANY=[@ANYRES16=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) r11 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x0, 0x808000, 0x23, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0x6}}) 3m17.014124803s ago: executing program 2 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104405100000000000000000000ad291cb012a9947d8b759f23f8", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3m16.962399823s ago: executing program 4 (id=757): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) (async) syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r4, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 3m16.933605642s ago: executing program 1 (id=758): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) socket(0x23, 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x99, 0x6}, &(0x7f0000000340)=0x8) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r8, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) sendto$packet(r2, &(0x7f0000000040)="10031400", 0x4, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x6044810}, 0x40804) 3m16.882071183s ago: executing program 3 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x21, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) close(0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x80, r7, 0x424, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0xc0015) close(r6) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r10, 0x0, 0x7f}, 0x18) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r12, 0x0, 0x7f}, 0x18) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x80) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x1e, 0x0, "a1e6c7030e64fe0110f53a64d4d17bde44eb9bc4a67e5693d9695f4918d4334e64441a7fdb5521c32a13c9609690275c1895f8c78c0514baf150cc88eb6d97feb1bff8b13b8405ae2f0f428030503a06"}, 0xd8) 3m16.762626796s ago: executing program 2 (id=761): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x5c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000040) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newchain={0x3b4, 0x64, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0xe}, {0x1, 0x5}, {0xe, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x388, 0x2, [@TCA_U32_SEL={0x374, 0x5, {0x9, 0x4, 0x9, 0x4bcc, 0x5, 0x4, 0xc, 0x9, [{0x7, 0x7, 0xb, 0xffff}, {0x9, 0x7, 0x101, 0x8}, {0x7, 0xd, 0x3, 0x3}, {0x7, 0x0, 0x8, 0x2}, {0x1, 0x6, 0x7, 0x7fff}, {0x0, 0x2, 0x772, 0x9cf}, {0x3, 0xed26, 0x1, 0xffffffff}, {0x8e9, 0x0, 0x8, 0x4}, {0x0, 0xfffffe00, 0x6, 0xfffffffe}, {0x6, 0x3, 0x99c, 0x2}, {0x1, 0x401, 0x4c, 0x6}, {0x8, 0x288, 0x1, 0x6}, {0x6, 0x5, 0x6, 0x9}, {0xed, 0x7, 0x3, 0x5}, {0x537, 0x6, 0x5, 0x5}, {0x3, 0x81, 0x3, 0x9}, {0x2, 0x80000000, 0x5, 0x6}, {0x81, 0x3, 0x7, 0x800}, {0x0, 0x9, 0x0, 0x56}, {0x7, 0x8000, 0x81, 0x3}, {0xffff, 0x8, 0xfffff0d5, 0x1}, {0xfffffffb, 0x600000, 0x4, 0xfffffffd}, {0x1, 0x3, 0x7f, 0x9}, {0xc84, 0x800, 0x5, 0xd}, {0x2, 0x8, 0xa, 0x5eef}, {0x54dcecd6, 0x9, 0xaed, 0x6}, {0x7, 0x6, 0x1, 0xc5}, {0xf44, 0x9, 0x7a57, 0x3}, {0x3, 0x401, 0xcd3f, 0x9}, {0x6, 0x3, 0x3, 0x3}, {0x4, 0xffffffff, 0x48, 0x2}, {0x5, 0x2, 0x5, 0x1}, {0xfffffff3, 0xc1, 0x8, 0x140000}, {0x9b7e, 0x5, 0x200, 0xfffffffc}, {0x398, 0x4, 0x5, 0x1}, {0x6, 0x6, 0x3, 0x10002}, {0x9, 0x8, 0xa, 0x9}, {0xb00, 0xf, 0x1400000, 0xa9}, {0x1, 0xb, 0xfffffff7, 0x4}, {0xfffffff7, 0x6, 0x5}, {0x3d, 0x321c, 0x7, 0x6}, {0x7c, 0x7, 0x8, 0x100}, {0x1, 0x466, 0x5, 0xffff}, {0x0, 0xfffeffff, 0x2, 0x8}, {0xfffffffd, 0x10000, 0x101}, {0x2, 0x4, 0x8, 0x80}, {0x8, 0x7, 0x2a5, 0x3}, {0xffff7fff, 0x80000000, 0xd, 0x10000}, {0x8, 0x624, 0x6, 0xff}, {0x1, 0x0, 0x8, 0x2}, {0x2ff, 0x6, 0x8, 0x80000001}, {0x4, 0x3, 0x0, 0x6}, {0x3, 0x0, 0x5, 0x200}, {0x6, 0x0, 0x9, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10001}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}]}, 0x3b4}}, 0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0xc, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40008d0) 3m16.438883509s ago: executing program 32 (id=761): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x5c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000040) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newchain={0x3b4, 0x64, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0xe}, {0x1, 0x5}, {0xe, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x388, 0x2, [@TCA_U32_SEL={0x374, 0x5, {0x9, 0x4, 0x9, 0x4bcc, 0x5, 0x4, 0xc, 0x9, [{0x7, 0x7, 0xb, 0xffff}, {0x9, 0x7, 0x101, 0x8}, {0x7, 0xd, 0x3, 0x3}, {0x7, 0x0, 0x8, 0x2}, {0x1, 0x6, 0x7, 0x7fff}, {0x0, 0x2, 0x772, 0x9cf}, {0x3, 0xed26, 0x1, 0xffffffff}, {0x8e9, 0x0, 0x8, 0x4}, {0x0, 0xfffffe00, 0x6, 0xfffffffe}, {0x6, 0x3, 0x99c, 0x2}, {0x1, 0x401, 0x4c, 0x6}, {0x8, 0x288, 0x1, 0x6}, {0x6, 0x5, 0x6, 0x9}, {0xed, 0x7, 0x3, 0x5}, {0x537, 0x6, 0x5, 0x5}, {0x3, 0x81, 0x3, 0x9}, {0x2, 0x80000000, 0x5, 0x6}, {0x81, 0x3, 0x7, 0x800}, {0x0, 0x9, 0x0, 0x56}, {0x7, 0x8000, 0x81, 0x3}, {0xffff, 0x8, 0xfffff0d5, 0x1}, {0xfffffffb, 0x600000, 0x4, 0xfffffffd}, {0x1, 0x3, 0x7f, 0x9}, {0xc84, 0x800, 0x5, 0xd}, {0x2, 0x8, 0xa, 0x5eef}, {0x54dcecd6, 0x9, 0xaed, 0x6}, {0x7, 0x6, 0x1, 0xc5}, {0xf44, 0x9, 0x7a57, 0x3}, {0x3, 0x401, 0xcd3f, 0x9}, {0x6, 0x3, 0x3, 0x3}, {0x4, 0xffffffff, 0x48, 0x2}, {0x5, 0x2, 0x5, 0x1}, {0xfffffff3, 0xc1, 0x8, 0x140000}, {0x9b7e, 0x5, 0x200, 0xfffffffc}, {0x398, 0x4, 0x5, 0x1}, {0x6, 0x6, 0x3, 0x10002}, {0x9, 0x8, 0xa, 0x9}, {0xb00, 0xf, 0x1400000, 0xa9}, {0x1, 0xb, 0xfffffff7, 0x4}, {0xfffffff7, 0x6, 0x5}, {0x3d, 0x321c, 0x7, 0x6}, {0x7c, 0x7, 0x8, 0x100}, {0x1, 0x466, 0x5, 0xffff}, {0x0, 0xfffeffff, 0x2, 0x8}, {0xfffffffd, 0x10000, 0x101}, {0x2, 0x4, 0x8, 0x80}, {0x8, 0x7, 0x2a5, 0x3}, {0xffff7fff, 0x80000000, 0xd, 0x10000}, {0x8, 0x624, 0x6, 0xff}, {0x1, 0x0, 0x8, 0x2}, {0x2ff, 0x6, 0x8, 0x80000001}, {0x4, 0x3, 0x0, 0x6}, {0x3, 0x0, 0x5, 0x200}, {0x6, 0x0, 0x9, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10001}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}]}, 0x3b4}}, 0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0xc, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40008d0) 3m16.421751928s ago: executing program 1 (id=765): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acb", 0xad}, {&(0x7f0000001400)="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", 0xfba}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000940)="4ad894cbfd42afde9309d99bf77b923ffda3d6ccb19348317a79424b8f62c35bf7e6302da5ac18b2d881e693dca7eb10cf55aa3c76df3f55efc6e2170d97e3851d338998d38c6fd474257af7ffffffffffffffdf47c5e8593af9d0249715ff36383ef0e755ae77129602addc8d0267a66537616c38f3a10fc35f94d31352c34a8fc1a54142", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)="5506b697", 0x4}, {&(0x7f0000000a00)="36e26f22b5d01a57120a31509d17fb3c41765ab36c62fb77b3ceb28fb33d92865f1a0f3ed46a8548a914c234b6dcd79101bcd8acdf60cf4efd61f8764c067f1be36028fb5a4059dbb13c05af99a68b79e26159d9763283257c5affea130631c729667f6ffbaac848001b1bf112771e928590b007a95355480183514d77fe6b2d462fa9aa4859dbf5e8fdc1432e2955fe3beb658ab98b483826190622eec5ee0bf9c24f921ef0b3bc643c592dfe5dbc7495cd4bc11ac9aae1e74e2fe0", 0xbc}], 0x2}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) socket$inet6(0xa, 0x4, 0x3a) 3m16.111556061s ago: executing program 33 (id=765): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acb", 0xad}, {&(0x7f0000001400)="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", 0xfba}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000940)="4ad894cbfd42afde9309d99bf77b923ffda3d6ccb19348317a79424b8f62c35bf7e6302da5ac18b2d881e693dca7eb10cf55aa3c76df3f55efc6e2170d97e3851d338998d38c6fd474257af7ffffffffffffffdf47c5e8593af9d0249715ff36383ef0e755ae77129602addc8d0267a66537616c38f3a10fc35f94d31352c34a8fc1a54142", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)="5506b697", 0x4}, {&(0x7f0000000a00)="36e26f22b5d01a57120a31509d17fb3c41765ab36c62fb77b3ceb28fb33d92865f1a0f3ed46a8548a914c234b6dcd79101bcd8acdf60cf4efd61f8764c067f1be36028fb5a4059dbb13c05af99a68b79e26159d9763283257c5affea130631c729667f6ffbaac848001b1bf112771e928590b007a95355480183514d77fe6b2d462fa9aa4859dbf5e8fdc1432e2955fe3beb658ab98b483826190622eec5ee0bf9c24f921ef0b3bc643c592dfe5dbc7495cd4bc11ac9aae1e74e2fe0", 0xbc}], 0x2}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) socket$inet6(0xa, 0x4, 0x3a) 3m16.068132174s ago: executing program 3 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0xa, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0x100, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) 3m15.964454602s ago: executing program 34 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0xa, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0x100, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) 3m15.922014353s ago: executing program 4 (id=767): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m15.921614385s ago: executing program 35 (id=767): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 19.00664379s ago: executing program 6 (id=1875): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001a00fd5800006c610e2a00000a"], 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0xb7e, 0x52, 0x2, 0x1, 0x2, 0x0, [{0x7, 0x5, 0xffffffffffffffff, '\x00', 0x5}, {0x3, 0x9b3, 0xffffffffffff10eb}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0xd2b8aa67d9e2781f, 0xffffffffffffffff, 0x57ab3000) ioctl$IMGETCOUNT(r1, 0x61d9, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301410000000000950000004d000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1ac, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2f3}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfffc}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4054}, 0x0) 18.259810747s ago: executing program 7 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r4, 0xff02, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x4, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x488c5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000100008000000000fc800c00018006000600800a0000100002800c0017800400e28007da73e6"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 18.12922406s ago: executing program 7 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f46666c6f616400000000100002800900010073797a31000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x80087601, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r7, 0x0, 0x8000f25, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16}}}}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400eb3212c82d723564678f0000", @ANYRES16=r11, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00000000000800020005000000"], 0x34}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x60, 0x0, 0x1}, {0x6}]}, 0x10) 18.09793147s ago: executing program 6 (id=1895): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000014000100000000f80800000000000000"], 0x14}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="1b0d29bd7000fedbdf25050000000e0001006e657464657673696d0001540f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 17.992303257s ago: executing program 7 (id=1897): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.933441687s ago: executing program 8 (id=1898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b40e60000002c0004802800018008000100667764001c000280080002400100000d0800014000000016080003"], 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x6d5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r9, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c00000400000014000180060006"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) socket$inet6(0xa, 0x800, 0x7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) 17.901333661s ago: executing program 7 (id=1900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x4, 0x7}, 0x9b, 0x0, 0xa, 0x4, 0x6, 0x9, 0x15, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20040800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/161, 0xa1, 0x0, &(0x7f0000000400)=""/10, 0xa}}, 0x10) socket$inet(0x2, 0x80000, 0x2) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='devices.list\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x54}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbc9}, @generic={0x2, 0x8, 0x4, 0x3, 0xe3cd}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x56}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x20, &(0x7f0000000140)=""/32, 0x41100, 0x30, '\x00', r6, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x7fff, 0xf9}, 0x10, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000500)=[r0, r8, r0, r1], &(0x7f0000000680)=[{0x4, 0x1, 0xd, 0x2}, {0x2, 0x4, 0xf}, {0x3, 0x4, 0x5, 0xb}, {0x0, 0x5, 0x4}, {0x1, 0x5, 0x6, 0x2}, {0x3, 0x2, 0x7, 0x9}, {0x5, 0x2, 0xc, 0x1}, {0x0, 0x4, 0x2, 0x8}, {0x2, 0x4, 0x6, 0x6}], 0x10, 0x5}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x40003}, @ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0x20}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2008000}, 0x94) 17.846310798s ago: executing program 6 (id=1901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0x0, 0x24000845, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000080)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x501, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb231}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 64) pipe(&(0x7f0000000000)) (rerun: 64) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x0, 0x96a2}, 0x8) 17.600250985s ago: executing program 6 (id=1904): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async) socket(0x1f, 0x6, 0x45b4) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0x40000, 0x8000000009ffffc}) (rerun: 32) 17.401208343s ago: executing program 8 (id=1906): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) (async) syz_emit_ethernet(0x92, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@remote, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x19, 0x1, 0xe, [{@multicast1, 0x88}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@multicast1, 0x852}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}]}, @ssrr={0x89, 0x17, 0xbd, [@multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}, @ra={0x94, 0x4}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) (async) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x3ada, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async, rerun: 32) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) (async) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "96ccd9f4c7b21421"}, 0x10}}, 0x44101) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0xa, [0x9, 0x89c1, 0x10, 0x1ff, 0xfffd, 0xfff7, 0x6, 0x3, 0x6a, 0x7237]}, &(0x7f0000000040)=0x18) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) 17.346245641s ago: executing program 6 (id=1907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r1, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) 17.181156802s ago: executing program 8 (id=1908): syz_emit_ethernet(0x88, &(0x7f0000000640)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x25, 0x1, 0xe]}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x3}}}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003200010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c000480080001400000000006"], 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 17.171628074s ago: executing program 6 (id=1909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) 17.061944271s ago: executing program 8 (id=1911): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket(0x21, 0x4, 0x8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="e054da36fceb0048ddf85ba379cb4b11", 0x10}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000001480)=0x2, 0x12) 16.933334157s ago: executing program 8 (id=1914): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x6, 0x1, 0x1ff) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r12, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000000)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020500020e000000000000000000000005001700000000000a000000000000000000000000000000000000000000000000000200010000000002000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100"/112], 0x70}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020500020e000000000000000000000005001700000000000a000000000000000000000000000000000000000000000000000200010000000002000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100"/112], 0x70}}, 0x0) 16.93257283s ago: executing program 7 (id=1915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000210000030000000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xd8f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000002", @ANYRES16=r3, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000001b00)={'gretap0\x00', 0x0, 0x10, 0x8, 0x200, 0x9, {{0x28, 0x4, 0x0, 0x1, 0xa0, 0x65, 0x0, 0x78, 0x4, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x9d, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf18}, {@multicast2, 0x3}, {@multicast1, 0x8001}]}, @end, @noop, @rr={0x7, 0xf, 0x51, [@rand_addr=0x64010102, @empty, @remote]}, @timestamp_addr={0x44, 0x1c, 0x22, 0x1, 0x8, [{@rand_addr=0x64010100, 0x2}, {@loopback, 0x9}, {@private=0xa010100, 0x3}]}, @end, @rr={0x7, 0xb, 0xda, [@empty, @private=0xa010101]}, @rr={0x7, 0x1f, 0xe6, [@loopback, @empty, @loopback, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}, @ssrr={0x89, 0x17, 0xe, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @private=0xa010102, @multicast2]}]}}}}}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@delqdisc={0x34, 0x25, 0x200, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x4}, {0x4, 0xd}, {0x0, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x35, 0x1, 0x3}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002", @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=ANY=[@ANYBLOB="1800000002000000000000000800000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702dfff000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r19}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000100), 0xc, &(0x7f00000019c0)={&(0x7f0000002480)=ANY=[@ANYBLOB="3c180000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="14000200766972745f77696669300000000000001800028004000100040001000800020007000000040001000c00018008000300020000000c00018008000100", @ANYRES32=r13, @ANYBLOB="680001801400020068737230000000000000000000000000140002006d6163767461703000000000000000000800030003000000080003000000000008000100f670dc43e0d721ec492418a08b9d9c2f9dab432a1bda39e62e1025c94c4794be3ba2a97f0dd1214df3af65485636946c293efcbfb6d57a647283236a87542e65214e7a47e770cf00f9d17ec70f0b7a9be6a43d", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="14000200726f73653000000000000000000000000800030000000000"], 0x183c}, 0x1, 0x0, 0x0, 0x20000002}, 0x40004) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) 16.579511375s ago: executing program 7 (id=1922): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x10, 0x70bd2c, 0x25dffbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xad}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x400c818) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) 16.55779415s ago: executing program 8 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 16.461063676s ago: executing program 0 (id=1926): socket$kcm(0x2, 0xa, 0x73) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2}}, 0x0, 0x7ffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.32639736s ago: executing program 0 (id=1927): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@remote, @multicast2}, 0xc) 16.297068922s ago: executing program 0 (id=1928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="100000000d0a010300000000000000000a0000010000000073797a3100"/44], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 16.222344965s ago: executing program 0 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x4000000) 16.220979674s ago: executing program 0 (id=1930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000280)={0x3, 0xf6, 0x9, 0x3, 0x6, 0x100000001, 0x9d63, 0x2}, &(0x7f0000000340)={0x305, 0x3, 0x7, 0x8, 0x3, 0x9, 0x6, 0x95f}, &(0x7f0000000380)={0x0, 0x9, 0x1, 0x7, 0x6000000, 0x4, 0x7, 0x8001}, &(0x7f00000003c0), &(0x7f00000004c0)={&(0x7f0000000400)={[0x7]}, 0x8}) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r3, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) listen(r4, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa347, 0x10}, &(0x7f0000000200)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={r5, 0xc}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) 16.189147458s ago: executing program 0 (id=1931): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) sendto$packet(r1, 0x0, 0x300, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r13, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4048894) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="410306a0b9cdb6f89f09e5"], 0xb) 15.417833097s ago: executing program 5 (id=1938): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x29, 0x800, 0x100) accept4$bt_l2cap(r4, &(0x7f0000000600), &(0x7f0000000640)=0xe, 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3, 0xa, [0x6, 0xff, 0x9, 0x80, 0x7, 0x800, 0x800, 0x6, 0x101, 0x5]}, &(0x7f0000000400)=0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r5, 0xff}, &(0x7f0000000480)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="65009032", @ANYRES16=r2, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f0000000000000000000000ffffac14140008000a00000000000600020000000000080018007f000001"], 0x50}}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000400000018430000030000000000000000000000950067000000000006820300000000001845000006000000000000000000000085600000080000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4cf, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x1, 0x9, 0xc}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0xfffffffd, 0x6}, {0x5, 0x3, 0xd, 0xa}, {0x2, 0x2, 0xe}, {0x0, 0x1, 0x2, 0x5}, {0x3, 0x5, 0x9, 0xb}, {0x4, 0x2, 0x4, 0x5}, {0x5, 0x4, 0xf, 0x7}, {0x1, 0x4, 0x7, 0x7}, {0x2, 0x5, 0x0, 0x8}, {0x5, 0x1, 0x3, 0x9}], 0x10, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800c0c0) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r12, 0xa2d, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmmsg$inet(r10, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x20000014) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r6) 15.387205787s ago: executing program 5 (id=1939): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x86, 0x3, 0x2, 0x4, 0x42, 0x0, 0xf, 0x5}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840), 0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x6, @rand_addr=0x64010101, 0x4e21, 0x6, 'lc\x00', 0xd, 0xc, 0x77}, {@remote, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) recvmmsg$unix(r3, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000001540)=""/82, 0x52}, {&(0x7f00000004c0)=""/48, 0x30}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001780)=""/220, 0xdc}, {&(0x7f0000001880)=""/35, 0x23}, {&(0x7f00000018c0)=""/145, 0x91}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x4, &(0x7f00000029c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002b40)=""/122, 0x7a}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/26, 0x1a}, {&(0x7f0000002c80)=""/246, 0xf6}, {&(0x7f0000002d80)=""/133, 0x85}, {&(0x7f0000002e40)=""/165, 0xa5}], 0x6, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000003080), 0x6e, &(0x7f0000003700)=[{&(0x7f0000003100)=""/19, 0x13}, {&(0x7f0000003140)=""/227, 0xe3}, {&(0x7f0000003240)=""/235, 0xeb}, {&(0x7f0000003340)=""/164, 0xa4}, {&(0x7f0000003400)=""/49, 0x31}, {&(0x7f0000003440)=""/161, 0xa1}, {&(0x7f0000003500)=""/24, 0x18}, {&(0x7f0000003540)=""/44, 0x2c}, {&(0x7f0000003580)=""/124, 0x7c}, {&(0x7f0000003600)=""/229, 0xe5}], 0xa, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003840), 0x6e, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/24, 0x18}, {&(0x7f0000003900)=""/146, 0x92}], 0x2}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003a80)=""/83, 0x53}], 0x1, &(0x7f0000003b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000004e40)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/101, 0x65}, {&(0x7f0000004cc0)=""/6, 0x6}, {&(0x7f0000004d00)=""/46, 0x2e}, {&(0x7f0000004d40)=""/196, 0xc4}], 0x5, &(0x7f0000004ec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000005000)=@abs, 0x6e, &(0x7f0000005180)=[{&(0x7f0000005080)=""/247, 0xf7}], 0x1, &(0x7f00000051c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005200)=@abs, 0x6e, &(0x7f0000007600)=[{&(0x7f0000005280)=""/55, 0x37}, {&(0x7f00000052c0)=""/138, 0x8a}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/172, 0xac}, {&(0x7f0000006440)=""/165, 0xa5}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/221, 0xdd}], 0x7, &(0x7f0000007680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f00000077c0)=@abs, 0x6e, &(0x7f0000009b00)=[{&(0x7f0000007840)=""/195, 0xc3}, {&(0x7f0000007940)=""/4096, 0x1000}, {&(0x7f0000008940)=""/133, 0x85}, {&(0x7f0000008a00)=""/226, 0xe2}, {&(0x7f0000008b00)=""/4096, 0x1000}], 0x5, &(0x7f0000009b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0xa, 0x40, &(0x7f0000009ec0)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x86, 0x3, 0x2, 0x4, 0x42, 0x0, 0xf, 0x5}, 0xe) (async) shutdown(r0, 0x1) (async) recvmmsg(r0, &(0x7f0000000840), 0x1, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x6, @rand_addr=0x64010101, 0x4e21, 0x6, 'lc\x00', 0xd, 0xc, 0x77}, {@remote, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) recvmmsg$unix(r3, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000001540)=""/82, 0x52}, {&(0x7f00000004c0)=""/48, 0x30}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001780)=""/220, 0xdc}, {&(0x7f0000001880)=""/35, 0x23}, {&(0x7f00000018c0)=""/145, 0x91}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x4, &(0x7f00000029c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002b40)=""/122, 0x7a}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/26, 0x1a}, {&(0x7f0000002c80)=""/246, 0xf6}, {&(0x7f0000002d80)=""/133, 0x85}, {&(0x7f0000002e40)=""/165, 0xa5}], 0x6, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000003080), 0x6e, &(0x7f0000003700)=[{&(0x7f0000003100)=""/19, 0x13}, {&(0x7f0000003140)=""/227, 0xe3}, {&(0x7f0000003240)=""/235, 0xeb}, {&(0x7f0000003340)=""/164, 0xa4}, {&(0x7f0000003400)=""/49, 0x31}, {&(0x7f0000003440)=""/161, 0xa1}, {&(0x7f0000003500)=""/24, 0x18}, {&(0x7f0000003540)=""/44, 0x2c}, {&(0x7f0000003580)=""/124, 0x7c}, {&(0x7f0000003600)=""/229, 0xe5}], 0xa, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003840), 0x6e, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/24, 0x18}, {&(0x7f0000003900)=""/146, 0x92}], 0x2}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003a80)=""/83, 0x53}], 0x1, &(0x7f0000003b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000004e40)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/101, 0x65}, {&(0x7f0000004cc0)=""/6, 0x6}, {&(0x7f0000004d00)=""/46, 0x2e}, {&(0x7f0000004d40)=""/196, 0xc4}], 0x5, &(0x7f0000004ec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000005000)=@abs, 0x6e, &(0x7f0000005180)=[{&(0x7f0000005080)=""/247, 0xf7}], 0x1, &(0x7f00000051c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005200)=@abs, 0x6e, &(0x7f0000007600)=[{&(0x7f0000005280)=""/55, 0x37}, {&(0x7f00000052c0)=""/138, 0x8a}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/172, 0xac}, {&(0x7f0000006440)=""/165, 0xa5}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/221, 0xdd}], 0x7, &(0x7f0000007680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f00000077c0)=@abs, 0x6e, &(0x7f0000009b00)=[{&(0x7f0000007840)=""/195, 0xc3}, {&(0x7f0000007940)=""/4096, 0x1000}, {&(0x7f0000008940)=""/133, 0x85}, {&(0x7f0000008a00)=""/226, 0xe2}, {&(0x7f0000008b00)=""/4096, 0x1000}], 0x5, &(0x7f0000009b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0xa, 0x40, &(0x7f0000009ec0)) (async) 15.250201553s ago: executing program 5 (id=1940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x42}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x74de, 0x48}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) 15.174082616s ago: executing program 5 (id=1941): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000), 0x4) (async) setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20009091) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20009091) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x10004, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40080c6) 15.173613838s ago: executing program 5 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r1}, 0x38) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x25, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r9], 0x60}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r10, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001080)="3aae1baf930b4569b9ddef9797ffd9350000000066b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f32f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e633d2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdce7d3e851583ba1cf53a90a7f7bce5703de57ce9faca72aa60503d91dc0d82c23ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248fe56246ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8993c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410cc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aafdb20d5570ebf24b30bbc6dfc3f70f85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429ff012edfeffbf34d6e7c7cf4aa73c002000000000000000071f1c2b66458ca4d96b58765363a5d7b8dfe5b768174cdd94fc595c28c1520646ce5b740695e9182ab5d57bbce9df2c03b0c1548ab67aad34ec0a756991619b4de5bdf5e8f1d379bf34ade81f8956dd859b8c66a834b0886b92c1af990e60b545116a351a21e823933fbb36be0ee6d5410362c7e5e21d8b3dafd9e13277f83e3df309433cbf4a608d9faca6ab01586eb38796800136e711d7858d67751cb89e53687ec8b7545c346405c52379879b7f1cb7170f652e0ecf6e7a950729f4395191166547eecebdf352ca5f6fec571e543b82935bda2c45afa8d0b22b9394cd727c7de3b83ff97dd37b0c818af6a0a3d9456526ee46387c32c2e508cd80c2634c560b2199a5de837ebf2517eec4e3e64082a44c38ef8b930f5277d7552a43805ae791f83c7904a83a9ea9ecc1480cbe468c69f23eb3f94006ead0d77252bfbc8cdb4ab2e700d77b19b4335606e643cec3835c0c2", 0x42f}, {&(0x7f00000002c0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc906dc9b1477866b7882c57bb6f7f7c3ee17c420000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e", 0x151}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 15.094179001s ago: executing program 5 (id=1943): getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x400, 0x30, 0x8000000000000000, 0x695}, &(0x7f0000000040)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x400, 0x30, 0x8000000000000000, 0x695}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x9}, &(0x7f00000000c0)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2008800}, 0x10040) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={r1, 0xf2eb, 0x1, 0x2088}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r4, 0x95, "5b1b6333d2a7b2e93906d1ae53c4f227aa05064c133e9b68445298bd4097dbcb6a95c38e8078412c287c0030d3d9c1cae45a78b452a76fe9683af726b6f353ae08acb636c580fca4a3e20bf34dfe8e095a81f241845a7179c0193a1ae7df55228bda3f6865e3ed740d5ae07a642c7e03671e66a8e1e875e7b657822e092951683ab7092a4ea2ff488fd3b8f10619df7a7b4fa15b1a"}, &(0x7f0000000340)=0x9d) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r4, 0x95, "5b1b6333d2a7b2e93906d1ae53c4f227aa05064c133e9b68445298bd4097dbcb6a95c38e8078412c287c0030d3d9c1cae45a78b452a76fe9683af726b6f353ae08acb636c580fca4a3e20bf34dfe8e095a81f241845a7179c0193a1ae7df55228bda3f6865e3ed740d5ae07a642c7e03671e66a8e1e875e7b657822e092951683ab7092a4ea2ff488fd3b8f10619df7a7b4fa15b1a"}, &(0x7f0000000340)=0x9d) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000003c0)=0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r1, 0x8001}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000480)={r5, 0x9, 0x0, 0x100000000, 0x5}, &(0x7f00000004c0)=0x18) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000500)={0x1, 'macvlan1\x00', {}, 0x71}) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000540)={0xc, @multicast2, 0x4e20, 0x2, 'dh\x00', 0x27, 0x8, 0x7f}, 0x2c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x86be76fb0a44605c}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xda000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x44) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000006c0)='virt_wifi0\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={r4, @in6={{0xa, 0x4e21, 0xad, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000}}, 0x8, 0x3, 0x0, 0x5, 0x9}, &(0x7f00000007c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r6, 0x4, 0xed8}, &(0x7f0000000840)=0xc) accept(r2, &(0x7f0000000880)=@ax25={{0x3, @default}, [@null, @rose, @remote, @bcast, @remote, @netrom, @null, @bcast]}, &(0x7f0000000900)=0x80) (async) r7 = accept(r2, &(0x7f0000000880)=@ax25={{0x3, @default}, [@null, @rose, @remote, @bcast, @remote, @netrom, @null, @bcast]}, &(0x7f0000000900)=0x80) recvfrom$l2tp(r7, &(0x7f0000000940)=""/225, 0xe1, 0x40000000, &(0x7f0000000a40)={0x2, 0x0, @multicast2}, 0x10) (async) recvfrom$l2tp(r7, &(0x7f0000000940)=""/225, 0xe1, 0x40000000, &(0x7f0000000a40)={0x2, 0x0, @multicast2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x2004c048) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r7) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r7) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000c00)={r1, 0x9, 0x100, 0x81, 0x4, 0x2}, &(0x7f0000000c40)=0x14) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000c00)={r1, 0x9, 0x100, 0x81, 0x4, 0x2}, &(0x7f0000000c40)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000dc0)=[{}], 0x8, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)=0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001080)={0x0, @xdp={0x2c, 0x1, r9, 0x23}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, @nfc={0x27, r10, 0xffffffffffffffff}, 0xaa, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)='ip6_vti0\x00', 0xfffffffffffffffb, 0x2, 0x3}) (async) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001080)={0x0, @xdp={0x2c, 0x1, r9, 0x23}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, @nfc={0x27, r10, 0xffffffffffffffff}, 0xaa, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)='ip6_vti0\x00', 0xfffffffffffffffb, 0x2, 0x3}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r11, 0x8040942d, &(0x7f0000001100)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000001180)={'sit0\x00', &(0x7f0000001140)={@empty, @multicast1, 0x1f, 0x12}}) 2.124334936s ago: executing program 36 (id=1909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) 1.107203838s ago: executing program 37 (id=1931): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) sendto$packet(r1, 0x0, 0x300, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r13, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4048894) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="410306a0b9cdb6f89f09e5"], 0xb) 1.072058163s ago: executing program 38 (id=1922): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x10, 0x70bd2c, 0x25dffbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xad}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x400c818) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.018418973s ago: executing program 39 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 0s ago: executing program 40 (id=1943): getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x400, 0x30, 0x8000000000000000, 0x695}, &(0x7f0000000040)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x400, 0x30, 0x8000000000000000, 0x695}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x9}, &(0x7f00000000c0)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2008800}, 0x10040) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={r1, 0xf2eb, 0x1, 0x2088}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r4, 0x95, "5b1b6333d2a7b2e93906d1ae53c4f227aa05064c133e9b68445298bd4097dbcb6a95c38e8078412c287c0030d3d9c1cae45a78b452a76fe9683af726b6f353ae08acb636c580fca4a3e20bf34dfe8e095a81f241845a7179c0193a1ae7df55228bda3f6865e3ed740d5ae07a642c7e03671e66a8e1e875e7b657822e092951683ab7092a4ea2ff488fd3b8f10619df7a7b4fa15b1a"}, &(0x7f0000000340)=0x9d) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r4, 0x95, "5b1b6333d2a7b2e93906d1ae53c4f227aa05064c133e9b68445298bd4097dbcb6a95c38e8078412c287c0030d3d9c1cae45a78b452a76fe9683af726b6f353ae08acb636c580fca4a3e20bf34dfe8e095a81f241845a7179c0193a1ae7df55228bda3f6865e3ed740d5ae07a642c7e03671e66a8e1e875e7b657822e092951683ab7092a4ea2ff488fd3b8f10619df7a7b4fa15b1a"}, &(0x7f0000000340)=0x9d) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000003c0)=0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r1, 0x8001}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000480)={r5, 0x9, 0x0, 0x100000000, 0x5}, &(0x7f00000004c0)=0x18) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000500)={0x1, 'macvlan1\x00', {}, 0x71}) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000540)={0xc, @multicast2, 0x4e20, 0x2, 'dh\x00', 0x27, 0x8, 0x7f}, 0x2c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x86be76fb0a44605c}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xda000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x44) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000006c0)='virt_wifi0\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000700)={r4, @in6={{0xa, 0x4e21, 0xad, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000}}, 0x8, 0x3, 0x0, 0x5, 0x9}, &(0x7f00000007c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000800)=@sack_info={r6, 0x4, 0xed8}, &(0x7f0000000840)=0xc) accept(r2, &(0x7f0000000880)=@ax25={{0x3, @default}, [@null, @rose, @remote, @bcast, @remote, @netrom, @null, @bcast]}, &(0x7f0000000900)=0x80) (async) r7 = accept(r2, &(0x7f0000000880)=@ax25={{0x3, @default}, [@null, @rose, @remote, @bcast, @remote, @netrom, @null, @bcast]}, &(0x7f0000000900)=0x80) recvfrom$l2tp(r7, &(0x7f0000000940)=""/225, 0xe1, 0x40000000, &(0x7f0000000a40)={0x2, 0x0, @multicast2}, 0x10) (async) recvfrom$l2tp(r7, &(0x7f0000000940)=""/225, 0xe1, 0x40000000, &(0x7f0000000a40)={0x2, 0x0, @multicast2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x2004c048) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r7) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r7) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000c00)={r1, 0x9, 0x100, 0x81, 0x4, 0x2}, &(0x7f0000000c40)=0x14) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000c00)={r1, 0x9, 0x100, 0x81, 0x4, 0x2}, &(0x7f0000000c40)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000dc0)=[{}], 0x8, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001000)=0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001080)={0x0, @xdp={0x2c, 0x1, r9, 0x23}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, @nfc={0x27, r10, 0xffffffffffffffff}, 0xaa, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)='ip6_vti0\x00', 0xfffffffffffffffb, 0x2, 0x3}) (async) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001080)={0x0, @xdp={0x2c, 0x1, r9, 0x23}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, @nfc={0x27, r10, 0xffffffffffffffff}, 0xaa, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)='ip6_vti0\x00', 0xfffffffffffffffb, 0x2, 0x3}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r11, 0x8040942d, &(0x7f0000001100)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000001180)={'sit0\x00', &(0x7f0000001140)={@empty, @multicast1, 0x1f, 0x12}}) kernel console output (not intermixed with test programs): [ T6210] Cannot find add_set index 2 as target [ 84.381946][ T6210] IPv6: sit1: Disabled Multicast RS [ 84.585630][ T6212] x_tables: duplicate underflow at hook 3 [ 84.625011][ T6090] lo speed is unknown, defaulting to 1000 [ 85.448385][ T6241] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.505209][ T6241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.579223][ T6258] openvswitch: netlink: Flow key attr not present in new flow. [ 85.588536][ T6257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.695754][ T6261] pim6reg: entered allmulticast mode [ 85.704812][ T6261] pim6reg: left allmulticast mode [ 85.741952][ T6264] netlink: 'syz.3.108': attribute type 12 has an invalid length. [ 85.750529][ T6264] netlink: 'syz.3.108': attribute type 29 has an invalid length. [ 85.989037][ T6276] netlink: 'syz.4.110': attribute type 142 has an invalid length. [ 86.045572][ T6276] netlink: 'syz.4.110': attribute type 3 has an invalid length. [ 86.511439][ T6304] lo: entered allmulticast mode [ 86.535435][ T6304] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 86.708402][ T6313] bridge0: port 3(batadv1) entered blocking state [ 86.725625][ T6313] bridge0: port 3(batadv1) entered disabled state [ 86.732428][ T6313] batadv1: entered allmulticast mode [ 86.741686][ T6313] batadv1: entered promiscuous mode [ 86.759673][ T9] cfg80211: failed to load regulatory.db [ 86.841919][ T6324] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.855058][ T6324] __nla_validate_parse: 44 callbacks suppressed [ 86.855075][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 86.896233][ T6324] erspan1: entered allmulticast mode [ 87.099695][ T6333] netlink: 348 bytes leftover after parsing attributes in process `syz.1.127'. [ 87.183863][ T3857] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 87.193314][ T3857] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 87.214705][ T6339] Illegal XDP return value 2210024016 on prog (id 33) dev N/A, expect packet loss! [ 87.638224][ T6362] netlink: 'syz.0.137': attribute type 25 has an invalid length. [ 87.892422][ T6373] netlink: 156 bytes leftover after parsing attributes in process `syz.2.139'. [ 87.965113][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 88.162994][ T6387] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 88.590194][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.152'. [ 88.894161][ T6421] syzkaller0: refused to change device tx_queue_len [ 88.960926][ T6423] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.063291][ T6429] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 89.128393][ T6429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.170120][ T6429] bond1: (slave veth3): Enslaving as an active interface with a down link [ 89.194239][ T6429] tipc: Started in network mode [ 89.199277][ T6429] tipc: Node identity , cluster identity 4711 [ 89.205973][ T6429] tipc: Failed to obtain node identity [ 89.211611][ T6429] tipc: Enabling of bearer rejected, failed to enable media [ 89.225048][ T6429] syzkaller0: entered promiscuous mode [ 89.230673][ T6429] syzkaller0: entered allmulticast mode [ 89.275425][ T6429] veth5: entered promiscuous mode [ 89.295225][ T6439] netlink: 44 bytes leftover after parsing attributes in process `syz.1.164'. [ 89.460639][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 89.573004][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 89.841011][ T6463] tipc: Started in network mode [ 89.850758][ T6462] netlink: 1 bytes leftover after parsing attributes in process `syz.4.170'. [ 89.871250][ T6463] tipc: Node identity 42f5, cluster identity 1 [ 89.918328][ T6463] tipc: Node number set to 17141 [ 89.997165][ T6462] tipc: Enabling of bearer rejected, failed to enable media [ 90.249453][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 90.270784][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 90.280132][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 90.400969][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 90.554870][ T6496] netlink: 'syz.4.181': attribute type 21 has an invalid length. [ 90.816084][ T6475] infiniband syz2: set active [ 90.821919][ T6475] infiniband syz2: added vxcan1 [ 90.949815][ T6475] RDS/IB: syz2: added [ 90.957026][ T6475] smc: adding ib device syz2 with port count 1 [ 90.963217][ T6475] smc: ib device syz2 port 1 has no pnetid [ 91.051048][ T927] vxcan1 speed is unknown, defaulting to 1000 [ 91.085138][ T5899] vxcan1 speed is unknown, defaulting to 1000 [ 91.092100][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 91.994637][ T6549] raw_sendmsg: syz.1.194 forgot to set AF_INET. Fix it! [ 92.003057][ T6550] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 92.024785][ T6550] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 92.107192][ T6558] __nla_validate_parse: 5 callbacks suppressed [ 92.107210][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 92.108111][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 92.138013][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 92.256763][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 92.596182][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 92.597214][ T6588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.208'. [ 92.634066][ T6588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.208'. [ 92.673250][ T6594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.210'. [ 92.877522][ T6602] netlink: 156 bytes leftover after parsing attributes in process `syz.0.214'. [ 92.898959][ T6600] bridge1: entered promiscuous mode [ 92.909766][ T6600] bridge1: entered allmulticast mode [ 92.925349][ T6606] netlink: 'syz.2.216': attribute type 3 has an invalid length. [ 92.948737][ T6606] netlink: 'syz.2.216': attribute type 3 has an invalid length. [ 92.956925][ T6609] netlink: 72 bytes leftover after parsing attributes in process `syz.1.213'. [ 93.165732][ T6622] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.182266][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 93.277640][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.220'. [ 94.004056][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 94.170915][ T6645] macvtap1: entered allmulticast mode [ 94.179082][ T6645] veth0_macvtap: entered allmulticast mode [ 94.355736][ T6649] tipc: Enabled bearer , priority 0 [ 94.373463][ T6649] syzkaller0: entered promiscuous mode [ 94.394399][ T6649] syzkaller0: entered allmulticast mode [ 94.424213][ T6649] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.497684][ T6649] tipc: Resetting bearer [ 94.670670][ T6660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.233'. [ 94.675166][ T6648] tipc: Resetting bearer [ 94.712496][ T6648] tipc: Disabling bearer [ 94.732169][ T6665] netlink: 'syz.3.234': attribute type 9 has an invalid length. [ 94.773234][ T6672] netlink: 'syz.2.236': attribute type 11 has an invalid length. [ 95.203446][ T6704] netlink: 'syz.4.243': attribute type 2 has an invalid length. [ 95.318166][ T6714] netlink: 'syz.2.245': attribute type 2 has an invalid length. [ 96.025032][ T6761] only policy match revision 0 supported [ 96.025051][ T6761] unable to load match [ 96.108749][ T6762] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 96.971731][ T6829] ipvlan2: entered promiscuous mode [ 97.152137][ T6842] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 97.450108][ T6865] openvswitch: netlink: IP tunnel dst address not specified [ 97.640459][ T6854] __nla_validate_parse: 8 callbacks suppressed [ 97.640474][ T6854] netlink: 252 bytes leftover after parsing attributes in process `syz.4.292'. [ 97.747951][ T6884] syz_tun: entered allmulticast mode [ 97.758575][ T6884] syz_tun: left allmulticast mode [ 97.764936][ T6886] xt_TCPMSS: Only works on TCP SYN packets [ 97.771451][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 98.003516][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 98.078579][ T6903] team0: Port device team_slave_1 removed [ 98.205720][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 98.259752][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 98.284193][ T6913] netlink: 'syz.2.313': attribute type 14 has an invalid length. [ 98.302437][ T6913] netlink: 'syz.2.313': attribute type 13 has an invalid length. [ 98.308919][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 98.346764][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'. [ 98.727055][ T6938] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:8 [ 98.803021][ T6937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.320'. [ 99.404719][ T6981] netlink: 'syz.2.330': attribute type 2 has an invalid length. [ 99.426127][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.433929][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.579747][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.601163][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.718566][ T6973] gretap1: left promiscuous mode [ 99.724130][ T6973] gretap1: left allmulticast mode [ 99.730892][ T6973] vlan2: left promiscuous mode [ 99.736309][ T6973] vlan2: left allmulticast mode [ 99.741311][ T6973] hsr_slave_1: left allmulticast mode [ 99.749137][ T6973] erspan1: left allmulticast mode [ 99.791877][ T6987] ip6gre1: entered allmulticast mode [ 99.807720][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.823997][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.876163][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.899380][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.995046][ T4107] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.014092][ T4107] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.099645][ T4107] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.127774][ T4107] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.222136][ T7022] netlink: 'syz.2.345': attribute type 25 has an invalid length. [ 100.231503][ T7027] sctp: [Deprecated]: syz.0.347 (pid 7027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.231503][ T7027] Use struct sctp_sack_info instead [ 100.276071][ T7029] team_slave_0: entered promiscuous mode [ 100.281855][ T7029] team_slave_1: entered promiscuous mode [ 100.293143][ T7029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.307667][ T7022] netlink: 'syz.2.345': attribute type 25 has an invalid length. [ 100.330291][ T7024] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 100.345471][ T7029] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 100.388622][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'. [ 100.391243][ T7036] xt_recent: Unsupported userspace flags (000000b1) [ 100.660801][ T7036] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 100.668696][ T7036] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 100.679779][ T7036] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.786204][ T7049] tipc: Started in network mode [ 100.796521][ T7049] tipc: Node identity ba4ca7ff7e82, cluster identity 4711 [ 100.824094][ T7049] tipc: Enabled bearer , priority 0 [ 100.938542][ T7053] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 100.967981][ T7053] bond2 (unregistering): Released all slaves [ 101.004791][ T7049] syzkaller0: entered promiscuous mode [ 101.010693][ T7049] syzkaller0: entered allmulticast mode [ 101.039322][ T7064] vlan2: entered promiscuous mode [ 101.044444][ T7064] bridge0: entered promiscuous mode [ 101.070646][ T7073] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.102503][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 101.139782][ T7065] tipc: Resetting bearer [ 101.221806][ T7065] tipc: Disabling bearer [ 101.409493][ T7090] netlink: 'syz.4.362': attribute type 3 has an invalid length. [ 101.481193][ T7092] x_tables: duplicate underflow at hook 1 [ 101.645544][ T7101] tipc: Enabled bearer , priority 0 [ 101.676612][ T7101] syzkaller0: entered promiscuous mode [ 101.682102][ T7101] syzkaller0: entered allmulticast mode [ 101.727275][ T7101] openvswitch: netlink: Message has 1 unknown bytes. [ 101.763253][ T7101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.790683][ T7104] syzkaller0: entered promiscuous mode [ 101.797118][ T7104] syzkaller0: entered allmulticast mode [ 101.810342][ T7120] tipc: Started in network mode [ 101.817083][ T7120] tipc: Node identity , cluster identity 4711 [ 101.823387][ T7120] tipc: Failed to obtain node identity [ 101.837514][ T7120] tipc: Enabling of bearer rejected, failed to enable media [ 101.852986][ T7121] tipc: Resetting bearer [ 101.910332][ T7125] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 101.973886][ T7129] xt_TCPMSS: Only works on TCP SYN packets [ 102.715813][ T5878] tipc: Node number set to 3301877759 [ 103.016357][ T7130] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 103.024151][ T7130] __nla_validate_parse: 8 callbacks suppressed [ 103.024166][ T7130] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.374'. [ 103.052811][ T7100] tipc: Resetting bearer [ 103.116269][ T7100] tipc: Disabling bearer [ 103.168506][ T7158] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 103.174511][ T7155] netlink: 64 bytes leftover after parsing attributes in process `syz.1.383'. [ 103.315579][ T7162] syzkaller0: entered promiscuous mode [ 103.325740][ T7162] syzkaller0: entered allmulticast mode [ 103.333153][ T7174] sit0: entered promiscuous mode [ 103.342177][ T7174] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 103.353541][ T7174] netlink: 1 bytes leftover after parsing attributes in process `syz.2.388'. [ 103.544734][ T7189] netlink: 196 bytes leftover after parsing attributes in process `syz.3.392'. [ 103.556189][ T7189] netlink: 196 bytes leftover after parsing attributes in process `syz.3.392'. [ 103.565656][ T7189] netlink: 19 bytes leftover after parsing attributes in process `syz.3.392'. [ 104.117160][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 104.168334][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 104.285970][ T7232] Bluetooth: MGMT ver 1.23 [ 104.287277][ T7227] pim6reg1: entered promiscuous mode [ 104.303801][ T7227] pim6reg1: entered allmulticast mode [ 104.329982][ T7238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.405'. [ 104.332671][ T7240] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 104.343322][ T7229] ip6erspan0: entered promiscuous mode [ 104.352836][ T7229] ip6erspan0: entered allmulticast mode [ 104.354256][ T7241] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 104.414269][ T7240] team0: Port device dummy0 added [ 104.461578][ T7241] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.476778][ T7248] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not syz1 [ 104.490598][ T7241] team0: Failed to send options change via netlink (err -105) [ 104.499217][ T7241] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.508441][ T7241] team0: Port device dummy0 removed [ 104.542001][ T7241] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.592679][ T7255] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 105.519334][ T7300] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 106.185088][ T7347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.649958][ T7389] netlink: 'syz.1.445': attribute type 13 has an invalid length. [ 106.772516][ T7401] xt_socket: unknown flags 0xe4 [ 107.592703][ T7411] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 107.614258][ T7389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.634996][ T927] lo speed is unknown, defaulting to 1000 [ 107.645057][ T7411] dummy0: entered promiscuous mode [ 107.658074][ T7411] bridge0: port 3(dummy0) entered blocking state [ 107.664802][ T7411] bridge0: port 3(dummy0) entered disabled state [ 107.671468][ T7411] dummy0: entered allmulticast mode [ 107.751938][ T2958] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.784318][ T2958] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.793071][ T2958] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.822979][ T2958] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.974203][ T10] IPVS: starting estimator thread 0... [ 108.077630][ T7440] IPVS: using max 30 ests per chain, 72000 per kthread [ 108.106258][ T7447] bridge1: entered promiscuous mode [ 108.111498][ T7447] bridge1: entered allmulticast mode [ 108.172207][ T7451] netlink: 'syz.3.467': attribute type 12 has an invalid length. [ 108.180909][ T7451] netlink: 'syz.3.467': attribute type 29 has an invalid length. [ 108.188888][ T7451] __nla_validate_parse: 13 callbacks suppressed [ 108.188905][ T7451] netlink: 148 bytes leftover after parsing attributes in process `syz.3.467'. [ 108.225104][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 108.308391][ T7453] bond0: (slave dummy0): Releasing backup interface [ 108.405950][ T7475] xt_cgroup: path and classid specified [ 109.089351][ T7491] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 109.110087][ T7491] veth0_virt_wifi: entered allmulticast mode [ 109.119606][ T7491] team0: Port device veth0_virt_wifi added [ 109.220432][ T7500] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 109.449254][ T7520] pim6reg: entered allmulticast mode [ 109.562159][ T7533] syz_tun: entered allmulticast mode [ 109.582210][ T7527] xt_l2tp: invalid flags combination: 0 [ 109.595577][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 109.687424][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 109.731035][ T7543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.486'. [ 109.745287][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 110.183503][ T7532] syz_tun: left allmulticast mode [ 110.321422][ T7562] bridge_slave_0: left allmulticast mode [ 110.338906][ T7562] bridge_slave_0: left promiscuous mode [ 110.366527][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.381672][ T7562] bridge_slave_1: left allmulticast mode [ 110.391770][ T7562] bridge_slave_1: left promiscuous mode [ 110.398734][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.419228][ T7562] bond0: (slave bond_slave_0): Releasing backup interface [ 110.439326][ T7562] bond0: (slave bond_slave_1): Releasing backup interface [ 110.459476][ T7562] team0: Port device team_slave_0 removed [ 110.472472][ T7562] team0: Port device team_slave_1 removed [ 110.480158][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.487718][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.497218][ T7541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.497335][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.512528][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.535656][ T7562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.745716][ T7593] x_tables: duplicate underflow at hook 2 [ 111.506826][ T7640] netlink: 277 bytes leftover after parsing attributes in process `syz.2.511'. [ 111.631900][ T7648] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 111.631900][ T7647] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 111.656079][ T7595] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 111.683396][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 111.716904][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 111.725866][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 111.897525][ T7660] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 112.506428][ T7692] netem: change failed [ 112.623229][ T7697] syz_tun: entered allmulticast mode [ 112.652229][ T7697] syz_tun: left allmulticast mode [ 113.138938][ T7716] ip6_vti0: entered promiscuous mode [ 113.281020][ T7729] __nla_validate_parse: 6 callbacks suppressed [ 113.281038][ T7729] netlink: 256 bytes leftover after parsing attributes in process `syz.2.541'. [ 113.320173][ T7731] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 113.360532][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 113.375891][ T7729] batadv1: left allmulticast mode [ 113.391198][ T7729] batadv1: left promiscuous mode [ 113.400794][ T7729] bridge0: port 3(batadv1) entered disabled state [ 113.418157][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 113.430498][ T7729] bridge_slave_1: left allmulticast mode [ 113.443885][ T7729] bridge_slave_1: left promiscuous mode [ 113.454244][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.482436][ T7729] bridge_slave_0: left allmulticast mode [ 113.489207][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.513016][ T7747] netlink: 'syz.3.549': attribute type 11 has an invalid length. [ 113.539799][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.550'. [ 113.965748][ T7772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.003951][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 114.015153][ T7766] lo speed is unknown, defaulting to 1000 [ 114.015662][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 114.458481][ T7766] vxcan1 speed is unknown, defaulting to 1000 [ 114.506641][ T7804] bond_slave_1: entered allmulticast mode [ 114.507596][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 114.555383][ T7804] bond0: (slave bond_slave_1): Releasing backup interface [ 114.573946][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 114.583012][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 114.592825][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 116.090422][ T7876] lo: entered promiscuous mode [ 116.100652][ T7876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.155139][ T7870] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 116.168427][ T7870] dummy0: entered promiscuous mode [ 116.180920][ T7870] bridge0: port 1(dummy0) entered blocking state [ 116.210410][ T7870] bridge0: port 1(dummy0) entered disabled state [ 116.239000][ T7870] dummy0: entered allmulticast mode [ 116.260960][ T7870] bridge0: port 1(dummy0) entered blocking state [ 116.267511][ T7870] bridge0: port 1(dummy0) entered forwarding state [ 116.484100][ T7895] netlink: 'syz.1.592': attribute type 2 has an invalid length. [ 116.559017][ T7903] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 116.571173][ T7901] Bluetooth: MGMT ver 1.23 [ 116.580362][ T7901] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 116.683944][ T7916] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 116.692305][ T7916] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 116.715757][ T7908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.207853][ T7952] netem: change failed [ 117.520235][ T7978] syzkaller0: entered promiscuous mode [ 117.538590][ T7978] syzkaller0: entered allmulticast mode [ 117.686050][ T7989] netlink: 'syz.0.617': attribute type 39 has an invalid length. [ 117.933895][ T8004] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 117.981074][ T8004] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 118.148223][ T8012] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 118.346555][ T8020] __nla_validate_parse: 10 callbacks suppressed [ 118.346573][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 118.376841][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 118.381443][ T8020] netlink: 'syz.1.626': attribute type 9 has an invalid length. [ 118.478075][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 118.578130][ T8020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.669981][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 118.671025][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 118.679036][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 118.695531][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 118.717437][ T8042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.015173][ T8073] netlink: 168 bytes leftover after parsing attributes in process `syz.3.643'. [ 122.335514][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 122.386516][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 122.454265][ T8105] tipc: Started in network mode [ 122.459171][ T8105] tipc: Node identity 3ecae7775b44, cluster identity 4711 [ 122.474016][ T8105] tipc: Enabled bearer , priority 0 [ 122.485888][ T8105] syzkaller0: entered promiscuous mode [ 122.491468][ T8105] syzkaller0: entered allmulticast mode [ 122.542567][ T8105] tipc: Resetting bearer [ 122.629332][ T8104] tipc: Resetting bearer [ 122.694665][ T8104] tipc: Disabling bearer [ 122.749408][ T8129] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 122.997509][ T8145] dvmrp0: entered allmulticast mode [ 123.135882][ T8157] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.149015][ T8157] SET target dimension over the limit! [ 123.159142][ T8159] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 123.222192][ T8166] sctp: [Deprecated]: syz.0.675 (pid 8166) Use of int in max_burst socket option. [ 123.222192][ T8166] Use struct sctp_assoc_value instead [ 123.241139][ T8159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.255152][ T8168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.278217][ T8161] nbd0: detected capacity change from 0 to 127 [ 123.294494][ T5833] block nbd0: Receive control failed (result -32) [ 123.424700][ T8159] bond2 (unregistering): Released all slaves [ 123.444800][ T8172] netlink: 'syz.0.675': attribute type 4 has an invalid length. [ 123.452873][ T8174] syzkaller1: entered promiscuous mode [ 123.458527][ T8174] syzkaller1: entered allmulticast mode [ 123.922920][ T10] lo speed is unknown, defaulting to 1000 [ 123.940761][ T10] syz0: Port: 1 Link DOWN [ 123.959416][ T5891] lo speed is unknown, defaulting to 1000 [ 124.037736][ T8215] tipc: Enabled bearer , priority 0 [ 124.046571][ T8215] syzkaller0: entered promiscuous mode [ 124.052185][ T8215] syzkaller0: entered allmulticast mode [ 124.057417][ T8220] __nla_validate_parse: 4 callbacks suppressed [ 124.057432][ T8220] netlink: 260 bytes leftover after parsing attributes in process `syz.3.689'. [ 124.094689][ T8215] tipc: Resetting bearer [ 124.107477][ T8214] tipc: Resetting bearer [ 124.140412][ T8214] tipc: Disabling bearer [ 124.167320][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 124.187991][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.691'. [ 124.197733][ T8222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.691'. [ 124.217927][ T8222] gretap1: entered promiscuous mode [ 124.223460][ T8222] gretap1: entered allmulticast mode [ 124.234240][ T8224] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.374912][ T8241] netlink: 'syz.1.695': attribute type 21 has an invalid length. [ 124.493365][ T8246] can: request_module (can-proto-0) failed. [ 124.501584][ T8245] can: request_module (can-proto-0) failed. [ 124.507532][ T8251] ªªªªªª: renamed from lo [ 124.552671][ T8255] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 124.711451][ T8270] openvswitch: netlink: Message has 8 unknown bytes. [ 124.730130][ T8270] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 124.753811][ T8270] netlink: 172 bytes leftover after parsing attributes in process `syz.3.701'. [ 125.236905][ T8309] ip6_vti0: left promiscuous mode [ 125.280607][ T8309] bond_slave_1: left allmulticast mode [ 125.303322][ T8309] veth0_virt_wifi: left allmulticast mode [ 125.373863][ T8318] macvtap1: entered promiscuous mode [ 125.387294][ T8318] macvtap1: entered allmulticast mode [ 125.403419][ T8318] bond0: entered allmulticast mode [ 125.411620][ T8318] bond_slave_0: entered allmulticast mode [ 125.426701][ T8318] bond_slave_1: entered allmulticast mode [ 125.439308][ T8318] bond0: entered promiscuous mode [ 125.447126][ T8325] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 125.449403][ T8318] bond_slave_0: entered promiscuous mode [ 125.479833][ T8318] bond_slave_1: entered promiscuous mode [ 125.504191][ T8329] netlink: 80 bytes leftover after parsing attributes in process `syz.3.718'. [ 125.515324][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.718'. [ 125.525623][ T8318] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 125.533853][ T8329] netlink: 200 bytes leftover after parsing attributes in process `syz.3.718'. [ 125.545501][ T8318] team0: Device macvtap1 failed to register rx_handler [ 125.549149][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 125.564260][ T8318] bond0: left allmulticast mode [ 125.569985][ T8318] bond_slave_0: left allmulticast mode [ 125.576230][ T8318] bond_slave_1: left allmulticast mode [ 125.581764][ T8318] bond0: left promiscuous mode [ 125.586585][ T8318] bond_slave_0: left promiscuous mode [ 125.592237][ T8318] bond_slave_1: left promiscuous mode [ 125.622373][ T8326] syzkaller1: entered promiscuous mode [ 125.627991][ T8326] syzkaller1: entered allmulticast mode [ 125.721889][ T10] IPVS: starting estimator thread 0... [ 125.732944][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 125.758734][ T8336] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 125.780862][ T8343] vxcan1: entered allmulticast mode [ 125.816936][ T8337] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.947912][ T8351] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 125.984690][ T8351] dummy0: entered promiscuous mode [ 125.996556][ T8358] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 126.005619][ T8351] bridge0: port 3(dummy0) entered blocking state [ 126.012204][ T8351] bridge0: port 3(dummy0) entered disabled state [ 126.019669][ T8351] dummy0: entered allmulticast mode [ 126.029748][ T8351] bridge0: port 3(dummy0) entered blocking state [ 126.036234][ T8351] bridge0: port 3(dummy0) entered forwarding state [ 126.169684][ T8370] vlan2: entered promiscuous mode [ 126.174853][ T8370] bridge0: entered promiscuous mode [ 126.306656][ T8380] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 126.347800][ T8385] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 126.504164][ T8390] sctp: [Deprecated]: syz.1.740 (pid 8390) Use of int in maxseg socket option. [ 126.504164][ T8390] Use struct sctp_assoc_value instead [ 126.973066][ T8431] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 127.031713][ T8431] bridge0: port 3(dummy0) entered disabled state [ 127.056940][ T8431] dummy0: left allmulticast mode [ 127.062076][ T8431] dummy0: left promiscuous mode [ 127.067282][ T8431] bridge0: port 3(dummy0) entered disabled state [ 127.086288][ T8431] team0: Port device dummy0 added [ 127.135141][ T8437] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 127.538350][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.594054][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.759328][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.784192][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.956970][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.987655][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.155095][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.183774][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.408247][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.417623][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.426006][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.444941][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.455108][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.598441][ T12] dummy0: left allmulticast mode [ 128.607097][ T12] bridge0: port 1(dummy0) entered disabled state [ 128.741898][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.750903][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.759281][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.769958][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.781046][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.858557][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.867760][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.881467][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.891527][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.902013][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.902076][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.926831][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.926833][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.928543][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.949988][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.205096][ T12] bond0 (unregistering): Released all slaves [ 129.218221][ T12] bond1 (unregistering): Released all slaves [ 129.230457][ T12] bond2 (unregistering): Released all slaves [ 129.243616][ T8459] ªªªªªª speed is unknown, defaulting to 1000 [ 129.383889][ T12] tipc: Left network mode [ 129.512652][ T8465] ªªªªªª speed is unknown, defaulting to 1000 [ 129.512668][ T8459] vxcan1 speed is unknown, defaulting to 1000 [ 129.824595][ T8469] ªªªªªª speed is unknown, defaulting to 1000 [ 129.989989][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 130.049665][ T8467] ªªªªªª speed is unknown, defaulting to 1000 [ 130.112050][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.125422][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.132749][ T8459] bridge_slave_0: entered allmulticast mode [ 130.141454][ T8459] bridge_slave_0: entered promiscuous mode [ 130.152629][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.160578][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.168326][ T8459] bridge_slave_1: entered allmulticast mode [ 130.177731][ T8459] bridge_slave_1: entered promiscuous mode [ 130.231204][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.240602][ T8467] vxcan1 speed is unknown, defaulting to 1000 [ 130.245002][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.302096][ T8459] team0: Port device team_slave_0 added [ 130.311676][ T8459] team0: Port device team_slave_1 added [ 130.356408][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.363447][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.393163][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.410601][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.417961][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.456626][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.476006][ T8476] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 130.493205][ T8469] vxcan1 speed is unknown, defaulting to 1000 [ 130.520236][ T5825] Bluetooth: hci1: command tx timeout [ 130.574959][ T8486] validate_nla: 1 callbacks suppressed [ 130.574975][ T8486] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 130.591642][ T8486] __nla_validate_parse: 13 callbacks suppressed [ 130.591658][ T8486] netlink: 244 bytes leftover after parsing attributes in process `syz.0.775'. [ 130.608252][ T8487] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 130.617306][ T8487] netlink: 244 bytes leftover after parsing attributes in process `syz.0.775'. [ 130.646490][ T8459] hsr_slave_0: entered promiscuous mode [ 130.652981][ T8459] hsr_slave_1: entered promiscuous mode [ 130.660653][ T8459] debugfs: 'hsr0' already exists in 'hsr' [ 130.666647][ T8459] Cannot create hsr debugfs directory [ 130.836573][ T5825] Bluetooth: hci2: command tx timeout [ 130.984419][ T8465] vxcan1 speed is unknown, defaulting to 1000 [ 130.994317][ T5825] Bluetooth: hci3: command tx timeout [ 130.994642][ T5837] Bluetooth: hci4: command tx timeout [ 131.144262][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 131.553138][ T8459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.602385][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.636044][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.643362][ T8467] bridge_slave_0: entered allmulticast mode [ 131.662578][ T8467] bridge_slave_0: entered promiscuous mode [ 131.685539][ T8459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.725295][ T12] hsr_slave_0: left promiscuous mode [ 131.732945][ T12] hsr_slave_1: left promiscuous mode [ 131.765241][ T12] veth1_macvtap: left promiscuous mode [ 131.771051][ T12] veth0_macvtap: left promiscuous mode [ 131.778442][ T12] veth1_vlan: left promiscuous mode [ 131.784408][ T12] veth0_vlan: left promiscuous mode [ 132.370251][ T3857] smc: removing ib device syz0 [ 132.378923][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.386281][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.393614][ T8467] bridge_slave_1: entered allmulticast mode [ 132.412610][ T8467] bridge_slave_1: entered promiscuous mode [ 132.467969][ T8459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.488044][ T8522] tipc: Enabling of bearer rejected, failed to enable media [ 132.579309][ T8459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.593771][ T5837] Bluetooth: hci1: command tx timeout [ 132.747138][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.818642][ T8533] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 132.829277][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.851770][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.863286][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.910603][ T8538] netlink: 184 bytes leftover after parsing attributes in process `syz.0.782'. [ 132.919733][ T5837] Bluetooth: hci2: command tx timeout [ 132.981742][ T8533] bridge0: port 4(team0) entered blocking state [ 132.988853][ T8533] bridge0: port 4(team0) entered disabled state [ 132.995712][ T8533] team0: entered allmulticast mode [ 133.000850][ T8533] team_slave_0: entered allmulticast mode [ 133.007635][ T8533] veth0_virt_wifi: entered allmulticast mode [ 133.026229][ T8533] team0: entered promiscuous mode [ 133.037477][ T8533] team_slave_0: entered promiscuous mode [ 133.043381][ T8533] veth0_virt_wifi: entered promiscuous mode [ 133.074605][ T5837] Bluetooth: hci4: command tx timeout [ 133.074613][ T5825] Bluetooth: hci3: command tx timeout [ 133.271245][ T8467] team0: Port device team_slave_0 added [ 133.356026][ T8467] team0: Port device team_slave_1 added [ 133.362584][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 133.746089][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.753161][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.779236][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.980451][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.989150][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.025916][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.271561][ T8565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.310616][ T8467] hsr_slave_0: entered promiscuous mode [ 134.317115][ T8467] hsr_slave_1: entered promiscuous mode [ 134.338881][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 134.357635][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.367678][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.377516][ T8469] bridge_slave_0: entered allmulticast mode [ 134.384911][ T8469] bridge_slave_0: entered promiscuous mode [ 134.401985][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.409465][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.416680][ T8469] bridge_slave_1: entered allmulticast mode [ 134.424235][ T8469] bridge_slave_1: entered promiscuous mode [ 134.534612][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.547719][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.616166][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.623411][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.631515][ T8465] bridge_slave_0: entered allmulticast mode [ 134.638731][ T8465] bridge_slave_0: entered promiscuous mode [ 134.649477][ T8469] team0: Port device team_slave_0 added [ 134.673809][ T5825] Bluetooth: hci1: command tx timeout [ 134.679491][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.686749][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.693973][ T8465] bridge_slave_1: entered allmulticast mode [ 134.700979][ T8465] bridge_slave_1: entered promiscuous mode [ 134.723170][ T8469] team0: Port device team_slave_1 added [ 134.793474][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.806654][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.822512][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.829691][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.860821][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.909243][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.916666][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.943433][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.969902][ T8571] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 134.996081][ T5825] Bluetooth: hci2: command tx timeout [ 135.002076][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.044671][ T8465] team0: Port device team_slave_0 added [ 135.090112][ T8465] team0: Port device team_slave_1 added [ 135.124920][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.154232][ T5825] Bluetooth: hci4: command tx timeout [ 135.163580][ T8573] bridge: RTM_NEWNEIGH with invalid ether address [ 135.163738][ T5825] Bluetooth: hci3: command tx timeout [ 135.189852][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.237358][ T8469] hsr_slave_0: entered promiscuous mode [ 135.252290][ T8469] hsr_slave_1: entered promiscuous mode [ 135.259413][ T8469] debugfs: 'hsr0' already exists in 'hsr' [ 135.268898][ T8469] Cannot create hsr debugfs directory [ 135.365449][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.398722][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.401173][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 135.406062][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.446223][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.459242][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.466330][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.495122][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.535879][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.652126][ T8467] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 135.664868][ T8467] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 135.683637][ T8465] hsr_slave_0: entered promiscuous mode [ 135.691385][ T8465] hsr_slave_1: entered promiscuous mode [ 135.698137][ T8465] debugfs: 'hsr0' already exists in 'hsr' [ 135.704465][ T8465] Cannot create hsr debugfs directory [ 135.735823][ T8467] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 135.747320][ T8467] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 135.839263][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.903577][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.910764][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.940186][ T12] bridge_slave_1: left allmulticast mode [ 135.946596][ T12] bridge_slave_1: left promiscuous mode [ 135.952437][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.966861][ T12] bridge_slave_0: left allmulticast mode [ 135.972605][ T12] bridge_slave_0: left promiscuous mode [ 135.978468][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.382251][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.393412][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.404678][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 136.419378][ T12] bond0 (unregistering): Released all slaves [ 136.511724][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 136.527329][ T12] bond1 (unregistering): Released all slaves [ 136.586531][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 136.601143][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'. [ 136.614167][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.621322][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.754658][ T5825] Bluetooth: hci1: command tx timeout [ 136.794016][ T8469] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 136.805350][ T8469] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 136.863091][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 136.880025][ T8469] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 136.891113][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 136.909624][ T8612] netlink: 2 bytes leftover after parsing attributes in process `syz.0.796'. [ 136.934985][ T8469] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 137.074008][ T5825] Bluetooth: hci2: command tx timeout [ 137.120490][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 137.137192][ T8621] netlink: 'syz.0.797': attribute type 5 has an invalid length. [ 137.146198][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 137.155355][ T12] hsr_slave_0: left promiscuous mode [ 137.162348][ T12] hsr_slave_1: left promiscuous mode [ 137.183221][ T12] veth1_macvtap: left promiscuous mode [ 137.189051][ T12] veth0_macvtap: left promiscuous mode [ 137.194706][ T12] veth1_vlan: left promiscuous mode [ 137.199974][ T12] veth0_vlan: left promiscuous mode [ 137.233856][ T5825] Bluetooth: hci3: command tx timeout [ 137.233928][ T5837] Bluetooth: hci4: command tx timeout [ 137.509615][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.541987][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.722488][ T8623] smc: removing ib device syz2 [ 137.771640][ T12] team0 (unregistering): Port device dummy0 removed [ 138.013263][ T8621] geneve2: entered promiscuous mode [ 138.019205][ T8621] geneve2: entered allmulticast mode [ 138.029502][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 138.036307][ T10] syz2: Port: 1 Link DOWN [ 138.074919][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 138.098763][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.123492][ T8465] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.153138][ T8465] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.186405][ T8465] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.224761][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 138.271327][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 138.291320][ T8465] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.384231][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 138.431680][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.569397][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.576578][ T4107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.601784][ T8643] tipc: Enabling of bearer rejected, failed to enable media [ 138.648690][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.655867][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.741804][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.842083][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.890396][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.897609][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.911500][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.002581][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.009763][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.228181][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.324352][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.343136][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.350343][ T4107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.432059][ T4107] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.439261][ T4107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.820505][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.840714][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.915099][ T8459] veth0_vlan: entered promiscuous mode [ 139.941381][ T8683] netlink: 100 bytes leftover after parsing attributes in process `syz.0.804'. [ 139.952423][ T8459] veth1_vlan: entered promiscuous mode [ 140.102944][ T8459] veth0_macvtap: entered promiscuous mode [ 140.178844][ T8459] veth1_macvtap: entered promiscuous mode [ 140.301989][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.328898][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.349381][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.387328][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.427051][ T8695] netlink: 108 bytes leftover after parsing attributes in process `syz.0.805'. [ 140.446898][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.468235][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.494897][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.656219][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.671080][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.757810][ T8623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.783759][ T8623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.849130][ T8467] veth0_vlan: entered promiscuous mode [ 140.892396][ T8469] veth0_vlan: entered promiscuous mode [ 140.913116][ T8467] veth1_vlan: entered promiscuous mode [ 140.938950][ T8469] veth1_vlan: entered promiscuous mode [ 141.051799][ T8469] veth0_macvtap: entered promiscuous mode [ 141.076524][ T8467] veth0_macvtap: entered promiscuous mode [ 141.088311][ T8469] veth1_macvtap: entered promiscuous mode [ 141.113287][ T8467] veth1_macvtap: entered promiscuous mode [ 141.150242][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.151984][ T8718] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 141.177803][ T8718] netlink: 224 bytes leftover after parsing attributes in process `syz.0.809'. [ 141.210395][ T8465] veth0_vlan: entered promiscuous mode [ 141.219875][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.246079][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.274973][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.288685][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.302568][ T8465] veth1_vlan: entered promiscuous mode [ 141.312893][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.322392][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.349291][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.377073][ T4107] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.417844][ T4107] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.428181][ T4107] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.455676][ T4107] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.501907][ T8726] veth3: entered allmulticast mode [ 141.606465][ T8465] veth0_macvtap: entered promiscuous mode [ 141.615974][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.633619][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.675288][ T8465] veth1_macvtap: entered promiscuous mode [ 141.694910][ T8731] openvswitch: netlink: IP tunnel dst address not specified [ 141.704390][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.712325][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.802281][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.813523][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.821580][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.844099][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.861722][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.863004][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.934176][ T2958] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.983385][ T2958] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.006209][ T2958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.037980][ T2958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.133228][ T8743] team0: Device vti0 is of different type [ 142.199384][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.243343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.334680][ T8623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.336611][ T8758] __nla_validate_parse: 2 callbacks suppressed [ 142.336627][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.821'. [ 142.346254][ T8623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.369257][ T8758] tipc: Started in network mode [ 142.376342][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 142.396061][ T8758] tipc: Node identity 46209e763d91, cluster identity 4711 [ 142.403521][ T8758] tipc: Enabled bearer , priority 0 [ 142.403752][ T8762] netlink: 36 bytes leftover after parsing attributes in process `syz.5.822'. [ 142.425675][ T8756] vlan2: entered allmulticast mode [ 142.448786][ T8758] syzkaller0: entered promiscuous mode [ 142.454515][ T8758] syzkaller0: entered allmulticast mode [ 142.505446][ T8758] tipc: Resetting bearer [ 142.556859][ T8757] tipc: Resetting bearer [ 142.610610][ T8757] tipc: Disabling bearer [ 142.955822][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.831'. [ 143.013520][ T8795] netlink: 116 bytes leftover after parsing attributes in process `syz.7.831'. [ 143.085318][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.8.832'. [ 143.355161][ T8819] netlink: 'syz.7.837': attribute type 12 has an invalid length. [ 143.384570][ T8819] netlink: 132 bytes leftover after parsing attributes in process `syz.7.837'. [ 143.603154][ T8836] geneve2: left promiscuous mode [ 143.612495][ T2958] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 143.623428][ T2958] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 143.637788][ T2958] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 143.677240][ T2958] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 143.859388][ T8843] Bluetooth: MGMT ver 1.23 [ 144.401699][ T8882] syzkaller0: entered promiscuous mode [ 144.433410][ T8882] syzkaller0: entered allmulticast mode [ 144.541660][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.861'. [ 144.552288][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 144.795726][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 144.807616][ T8857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.320453][ T8941] netlink: 'syz.5.876': attribute type 3 has an invalid length. [ 146.707723][ T8958] hsr_slave_0: left promiscuous mode [ 146.725749][ T8958] hsr_slave_1: left promiscuous mode [ 146.742942][ T8960] netlink: 'syz.6.882': attribute type 2 has an invalid length. [ 147.255896][ T8986] netlink: 'syz.7.889': attribute type 7 has an invalid length. [ 147.386985][ T8992] __nla_validate_parse: 7 callbacks suppressed [ 147.387001][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'. [ 147.519300][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.7.893'. [ 147.531559][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.7.893'. [ 147.541046][ T8998] netlink: 196 bytes leftover after parsing attributes in process `syz.8.892'. [ 147.708687][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 147.727224][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.898'. [ 147.740039][ T9020] netlink: 'syz.5.898': attribute type 20 has an invalid length. [ 147.749835][ T9023] netlink: 168 bytes leftover after parsing attributes in process `syz.7.899'. [ 147.762440][ T2958] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.772557][ T2958] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.792271][ T9023] team0: Device gtp0 is of different type [ 147.810741][ T2958] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.820953][ T2958] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.858211][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 147.868274][ T9031] netlink: 'syz.5.901': attribute type 2 has an invalid length. [ 147.878547][ T9031] netlink: 'syz.5.901': attribute type 2 has an invalid length. [ 147.976506][ T9035] netlink: 'syz.5.902': attribute type 21 has an invalid length. [ 147.984493][ T9035] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.994093][ T9035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.001726][ T9035] IPv6: NLM_F_CREATE should be set when creating new route [ 148.009049][ T9035] IPv6: NLM_F_CREATE should be set when creating new route [ 148.016365][ T9035] IPv6: NLM_F_CREATE should be set when creating new route [ 148.132587][ T9037] syz_tun: entered allmulticast mode [ 148.217433][ T9026] netlink: 'syz.0.900': attribute type 11 has an invalid length. [ 148.228238][ T9026] netlink: 228 bytes leftover after parsing attributes in process `syz.0.900'. [ 148.238777][ T9028] netlink: 'syz.7.899': attribute type 1 has an invalid length. [ 148.522428][ T9048] : entered promiscuous mode [ 148.535931][ T9057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.911'. [ 148.783081][ T9066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.795015][ T9066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.919534][ T9083] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 148.932490][ T9083] bond1 (unregistering): Released all slaves [ 148.980288][ T9066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.991780][ T9066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.079662][ T9066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.091925][ T9066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.170456][ T9066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.180998][ T9066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.300356][ T4107] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.308772][ T4107] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.328304][ T4107] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.336562][ T4107] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.352308][ T4107] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.360878][ T4107] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.376048][ T4107] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.384443][ T4107] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.396346][ T9067] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.406340][ T9067] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.459154][ T9067] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.469033][ T9067] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.531071][ T9067] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.541263][ T9067] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.617023][ T9067] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.626904][ T9067] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.124121][ T2958] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.132329][ T2958] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.146117][ T2958] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.154635][ T2958] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.168965][ T2958] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.177198][ T2958] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.192320][ T4107] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.200639][ T4107] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.585518][ T9106] __nla_validate_parse: 2 callbacks suppressed [ 189.585535][ T9106] netlink: 56 bytes leftover after parsing attributes in process `syz.8.927'. [ 189.687249][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 189.697552][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'. [ 189.724964][ T9112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.929'. [ 189.738728][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.931'. [ 189.766250][ T9112] bond3: option miimon: invalid value (18446744073709551585) [ 189.774503][ T9112] bond3: option miimon: allowed values 0 - 2147483647 [ 189.786044][ T9112] bond3 (unregistering): Released all slaves [ 190.237897][ T9153] netlink: 'syz.7.943': attribute type 1 has an invalid length. [ 190.312757][ T9156] netlink: 56 bytes leftover after parsing attributes in process `syz.8.944'. [ 190.333824][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.944'. [ 190.342925][ T9156] netlink: 31 bytes leftover after parsing attributes in process `syz.8.944'. [ 190.352445][ T9156] netlink: 'syz.8.944': attribute type 2 has an invalid length. [ 190.360509][ T9156] netlink: 31 bytes leftover after parsing attributes in process `syz.8.944'. [ 190.381568][ T9153] bond1: entered promiscuous mode [ 190.404401][ T9153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.493342][ T9172] netlink: 32 bytes leftover after parsing attributes in process `syz.8.948'. [ 190.933151][ T9202] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 190.950998][ T9202] team_slave_0: mtu greater than device maximum [ 191.594101][ T9239] dvmrp0: entered allmulticast mode [ 192.830517][ T9265] Cannot find add_set index 0 as target [ 192.888531][ T9270] º: renamed from veth1_vlan [ 192.944047][ T9265] tipc: Started in network mode [ 192.956557][ T9265] tipc: Node identity ac14140f, cluster identity 4711 [ 192.972119][ T9265] tipc: New replicast peer: 255.255.255.255 [ 192.998313][ T9265] tipc: Enabled bearer , priority 10 [ 193.050307][ T9284] netlink: 'syz.5.977': attribute type 10 has an invalid length. [ 193.072945][ T9287] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 193.179494][ T9293] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 193.247531][ T9287] ifb0: entered promiscuous mode [ 193.269467][ T9292] netlink: 'syz.8.980': attribute type 1 has an invalid length. [ 193.280799][ T9287] ifb0: left promiscuous mode [ 193.388963][ T9300] wireguard0: entered allmulticast mode [ 193.400533][ T9305] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 193.408665][ T9305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.691190][ T9326] netlink: 'syz.6.994': attribute type 9 has an invalid length. [ 193.708581][ T9329] lo: entered allmulticast mode [ 193.729023][ T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.729205][ T9326] netlink: 'syz.6.994': attribute type 9 has an invalid length. [ 193.743949][ T9332] netlink: 'syz.8.996': attribute type 23 has an invalid length. [ 193.763816][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.800066][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.819192][ T9333] lo: left allmulticast mode [ 193.836824][ T9326] netlink: 'syz.6.994': attribute type 1 has an invalid length. [ 193.862057][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.026292][ T9345] dvmrp0: entered allmulticast mode [ 194.035017][ T9349] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003 [ 194.113844][ T5899] tipc: Node number set to 2886997007 [ 194.283144][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289853][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.693158][ T9398] __nla_validate_parse: 84 callbacks suppressed [ 194.693176][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1016'. [ 194.810812][ T9399] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.830277][ T9399] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.951739][ T9414] netlink: 'syz.8.1021': attribute type 1 has an invalid length. [ 194.963140][ T9399] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.983488][ T9399] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.023481][ T9414] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 195.073253][ T9423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1022'. [ 195.168771][ T9399] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.182253][ T9399] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.193066][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'. [ 195.207434][ T9423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1022'. [ 195.276566][ T9399] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.296213][ T9399] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.429738][ T9435] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1029'. [ 195.488300][ T2958] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.498009][ T2958] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.542555][ T8623] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.551119][ T8623] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.598530][ T8623] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.611291][ T8623] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.647499][ T8623] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.663887][ T8623] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.698141][ T9445] netlink: 8900 bytes leftover after parsing attributes in process `syz.7.1033'. [ 195.786553][ T9450] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1034'. [ 196.030385][ T9472] openvswitch: netlink: Duplicate key (type 6). [ 196.123091][ T9482] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1038'. [ 196.137174][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1038'. [ 196.246571][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 196.296925][ T9483] bond3 (unregistering): Released all slaves [ 197.033321][ T9532] netlink: 'syz.7.1053': attribute type 4 has an invalid length. [ 197.210319][ T9543] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 197.236852][ T9543] netlink: 'syz.5.1060': attribute type 1 has an invalid length. [ 197.508768][ T9549] bond1: entered allmulticast mode [ 197.527085][ T9549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.538307][ T9549] bridge0: port 3(bond1) entered blocking state [ 197.544840][ T9549] bridge0: port 3(bond1) entered disabled state [ 197.556390][ T9549] bond1: entered promiscuous mode [ 197.562535][ T9549] bridge0: port 3(bond1) entered blocking state [ 197.569225][ T9549] bridge0: port 3(bond1) entered forwarding state [ 197.677717][ T9567] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 197.968388][ T2958] bridge0: port 3(bond1) entered disabled state [ 198.172888][ T9597] netlink: 'syz.6.1077': attribute type 5 has an invalid length. [ 198.173788][ T9547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.213866][ T9547] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 198.431625][ T9547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.460257][ T9547] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 198.519352][ T9547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.529409][ T9547] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 198.558275][ T9547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.573833][ T9547] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 198.601349][ T9547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.610359][ T9547] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 198.962395][ T9640] macvtap1: entered promiscuous mode [ 198.970837][ T9640] vlan0: entered promiscuous mode [ 199.003002][ T9640] macvtap1: entered allmulticast mode [ 199.012214][ T9640] vlan0: entered allmulticast mode [ 199.017557][ T9640] veth0_vlan: entered allmulticast mode [ 199.055346][ T9652] macvtap2: entered promiscuous mode [ 199.061342][ T9652] macvtap2: entered allmulticast mode [ 199.907695][ T9696] __nla_validate_parse: 9 callbacks suppressed [ 199.907711][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1101'. [ 199.958552][ T9696] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1101'. [ 200.152768][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.161388][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.183374][ T9709] netlink: 'syz.6.1103': attribute type 2 has an invalid length. [ 200.482322][ T9725] veth0_to_bridge: mtu less than device minimum [ 200.498289][ T9730] openvswitch: netlink: IPv4 frag type 56 is out of range max 2 [ 200.836865][ T9754] netlink: 'syz.6.1114': attribute type 1 has an invalid length. [ 201.006046][ T9767] Cannot find add_set index 2 as target [ 201.025540][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1117'. [ 201.034321][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1117'. [ 201.092690][ T9761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.349298][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1123'. [ 201.410705][ T9786] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 201.472887][ T9786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.721266][ T9803] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.774778][ T9803] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.893049][ T9803] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.914532][ T9803] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.967850][ T9815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1130'. [ 202.017147][ T9803] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.031917][ T9803] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.116415][ T9803] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.146456][ T9803] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.399032][ T2958] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.408716][ T2958] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.490011][ T2958] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.511755][ T2958] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.569793][ T2958] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.585082][ T9847] set match dimension is over the limit! [ 202.587011][ T2958] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.688011][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.703971][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.015604][ T9860] vlan2: entered promiscuous mode [ 203.021582][ T9860] vlan2: entered allmulticast mode [ 203.027091][ T9860] hsr_slave_1: entered allmulticast mode [ 203.330361][ T9898] netlink: 'syz.7.1153': attribute type 1 has an invalid length. [ 203.518691][ T9911] vlan2: entered allmulticast mode [ 203.530317][ T9911] bridge0: entered allmulticast mode [ 203.556247][ T9911] bond3: (slave vlan2): Opening slave failed [ 203.769047][ T9921] IPv6: sit1: Disabled Multicast RS [ 203.775739][ T9921] sit1: entered allmulticast mode [ 203.902502][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.071885][ T9941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.087278][ T9945] netlink: 'syz.7.1163': attribute type 1 has an invalid length. [ 204.114050][ T9945] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1163'. [ 204.155366][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1164'. [ 204.158492][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1161'. [ 204.205030][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1161'. [ 204.689676][ T9938] netlink: 'syz.8.1160': attribute type 10 has an invalid length. [ 204.801843][ T9973] netlink: 'syz.6.1170': attribute type 7 has an invalid length. [ 205.006306][ T9974] bond2: option min_links: invalid value (18446744073709551614) [ 205.055841][ T9978] __nla_validate_parse: 1 callbacks suppressed [ 205.055859][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1170'. [ 205.093872][ T9974] bond2: option min_links: allowed values 0 - 2147483647 [ 205.116184][ T9974] bond2 (unregistering): Released all slaves [ 205.154961][ T9978] block nbd1: Unsupported socket: should be TCP or UNIX. [ 205.459775][ T9992] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1175'. [ 205.648867][T10005] netlink: 'syz.7.1181': attribute type 83 has an invalid length. [ 205.676961][T10010] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1183'. [ 205.703607][T10012] sctp: [Deprecated]: syz.5.1184 (pid 10012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.703607][T10012] Use struct sctp_sack_info instead [ 206.162826][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1193'. [ 206.259766][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 206.384078][T10058] netlink: 'syz.5.1196': attribute type 26 has an invalid length. [ 206.461202][T10068] xt_hashlimit: size too large, truncated to 1048576 [ 206.463933][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1197'. [ 206.884181][T10091] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1206'. [ 206.929764][T10094] pimreg3: entered allmulticast mode [ 206.937311][T10095] netlink: 71 bytes leftover after parsing attributes in process `syz.7.1207'. [ 206.952703][T10094] sctp: [Deprecated]: syz.6.1208 (pid 10094) Use of int in max_burst socket option. [ 206.952703][T10094] Use struct sctp_assoc_value instead [ 207.010125][T10094] veth1_to_hsr: entered promiscuous mode [ 207.017582][T10094] veth1_to_hsr: entered allmulticast mode [ 207.198530][T10118] netlink: 'syz.6.1214': attribute type 24 has an invalid length. [ 207.250151][T10122] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1215'. [ 207.374190][T10128] netlink: 'syz.6.1219': attribute type 30 has an invalid length. [ 207.507064][ T927] IPVS: starting estimator thread 0... [ 207.523758][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1222'. [ 207.608234][T10142] macvlan0: entered promiscuous mode [ 207.613772][T10140] IPVS: using max 31 ests per chain, 74400 per kthread [ 207.623569][T10142] batadv0: entered promiscuous mode [ 207.631896][T10142] debugfs: 'hsr0' already exists in 'hsr' [ 207.652271][T10142] Cannot create hsr debugfs directory [ 207.658689][T10142] hsr0: entered allmulticast mode [ 207.664143][T10142] macvlan0: entered allmulticast mode [ 207.683853][T10142] veth1_vlan: entered allmulticast mode [ 207.695641][T10142] batadv0: entered allmulticast mode [ 207.712130][T10142] macvlan0: left promiscuous mode [ 207.728754][T10142] batadv0: left promiscuous mode [ 207.762570][T10148] netlink: 'syz.6.1225': attribute type 1 has an invalid length. [ 207.938121][T10171] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 208.748129][T10234] tipc: Enabled bearer , priority 0 [ 208.767438][T10234] syzkaller0: entered promiscuous mode [ 208.772940][T10234] syzkaller0: entered allmulticast mode [ 208.787689][T10234] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 208.937074][T10245] xt_CONNSECMARK: invalid mode: 0 [ 208.947279][T10246] xt_CONNSECMARK: invalid mode: 0 [ 209.029642][T10252] netlink: 'syz.5.1261': attribute type 83 has an invalid length. [ 209.511175][T10226] tipc: Resetting bearer [ 209.550878][T10226] tipc: Disabling bearer [ 209.834519][T10303] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 209.844982][T10305] netlink: 'syz.0.1279': attribute type 8 has an invalid length. [ 209.954088][ T5837] Bluetooth: hci0: command tx timeout [ 210.075499][T10320] __nla_validate_parse: 16 callbacks suppressed [ 210.075518][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1283'. [ 210.100497][T10322] tipc: Started in network mode [ 210.110950][T10322] tipc: Node identity de3548edc0f6, cluster identity 4711 [ 210.126363][T10322] tipc: Enabled bearer , priority 0 [ 210.134619][T10322] netlink: 'syz.5.1285': attribute type 30 has an invalid length. [ 210.150876][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1288'. [ 210.179916][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.191970][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1288'. [ 210.202019][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.220080][T10322] syzkaller0: entered promiscuous mode [ 210.237363][T10322] syzkaller0: entered allmulticast mode [ 210.406378][T10321] tipc: Resetting bearer [ 210.417329][T10347] netlink: 'syz.8.1292': attribute type 10 has an invalid length. [ 210.492530][T10321] tipc: Disabling bearer [ 210.519996][T10357] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 210.526760][T10347] batman_adv: batadv0: Adding interface: team0 [ 210.533995][T10347] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.560925][T10347] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.618991][T10360] batadv_slave_1: entered promiscuous mode [ 210.662852][T10358] batadv_slave_1: left promiscuous mode [ 210.766763][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1297'. [ 210.936356][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1303'. [ 211.067369][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1307'. [ 211.084118][T10393] veth0: entered promiscuous mode [ 211.424055][T10388] veth0: left promiscuous mode [ 211.557197][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1312'. [ 212.448364][T10485] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1330'. [ 212.480943][T10494] netlink: 'syz.8.1334': attribute type 3 has an invalid length. [ 212.636260][T10508] ªªªªªª: renamed from vlan0 (while UP) [ 212.712926][T10506] ip6t_srh: unknown srh invflags 4000 [ 212.741424][T10522] openvswitch: netlink: IP tunnel dst address not specified [ 213.119656][T10553] netlink: 'syz.8.1349': attribute type 7 has an invalid length. [ 213.134088][T10553] netlink: 'syz.8.1349': attribute type 8 has an invalid length. [ 213.168048][T10553] erspan0: entered promiscuous mode [ 213.180843][T10553] batadv_slave_1: entered promiscuous mode [ 213.193465][T10553] batadv_slave_1: left promiscuous mode [ 213.207214][T10553] erspan0: left promiscuous mode [ 213.227006][T10546] syzkaller1: entered promiscuous mode [ 213.232670][T10559] netlink: 'syz.5.1352': attribute type 6 has an invalid length. [ 213.240841][T10546] syzkaller1: entered allmulticast mode [ 213.450354][T10563] xt_CT: No such helper "snmp" [ 213.854395][T10582] nbd1: detected capacity change from 0 to 127 [ 213.873982][ T5837] block nbd1: Receive control failed (result -32) [ 214.220420][T10613] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 214.268150][T10613] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 214.319640][T10619] netlink: 'syz.5.1373': attribute type 142 has an invalid length. [ 214.372956][T10622] bridge0: port 3(syz_tun) entered blocking state [ 214.390198][T10622] bridge0: port 3(syz_tun) entered disabled state [ 214.423280][T10622] syz_tun: entered allmulticast mode [ 214.450842][T10622] syz_tun: entered promiscuous mode [ 214.461996][T10622] bridge0: port 3(syz_tun) entered blocking state [ 214.469987][T10622] bridge0: port 3(syz_tun) entered forwarding state [ 214.505912][T10635] netlink: 'syz.8.1374': attribute type 10 has an invalid length. [ 214.521325][T10635] bridge0: port 3(syz_tun) entered disabled state [ 214.528023][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.535709][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.560754][T10635] bridge0: port 3(syz_tun) entered blocking state [ 214.567389][T10635] bridge0: port 3(syz_tun) entered forwarding state [ 214.574336][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.581512][T10635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.589054][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.596253][T10635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.610244][T10635] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 214.745469][T10641] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.077892][T10663] bond4 (unregistering): Released all slaves [ 215.107112][T10675] __nla_validate_parse: 79 callbacks suppressed [ 215.107130][T10675] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1390'. [ 215.135127][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1390'. [ 215.146137][T10669] tipc: Enabled bearer , priority 0 [ 215.194723][T10657] tipc: Disabling bearer [ 215.363086][T10687] veth1_to_bond: entered allmulticast mode [ 215.373605][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1396'. [ 215.374916][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1396'. [ 215.393196][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1397'. [ 215.400234][T10693] bond0: entered promiscuous mode [ 215.413623][T10693] bond_slave_0: entered promiscuous mode [ 215.419952][T10693] bond_slave_1: entered promiscuous mode [ 215.431098][T10693] bond0: left promiscuous mode [ 215.440049][T10693] bond_slave_0: left promiscuous mode [ 215.447341][T10693] bond_slave_1: left promiscuous mode [ 215.506531][T10688] bond0: entered promiscuous mode [ 215.511594][T10688] bond_slave_0: entered promiscuous mode [ 215.527060][T10688] bond_slave_1: entered promiscuous mode [ 215.538991][T10688] bond0: left promiscuous mode [ 215.541647][T10703] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 215.552367][T10688] bond_slave_0: left promiscuous mode [ 215.562284][T10688] bond_slave_1: left promiscuous mode [ 215.603273][T10694] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 215.629055][T10694] bond3 (unregistering): Released all slaves [ 215.661124][T10688] veth1_to_bond: left allmulticast mode [ 215.820092][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1405'. [ 215.831971][T10720] openvswitch: netlink: EtherType 548 is less than min 600 [ 215.832054][T10716] netlink: 'syz.5.1403': attribute type 12 has an invalid length. [ 215.862043][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1405'. [ 215.871466][T10722] tipc: Enabling of bearer rejected, failed to enable media [ 215.871482][T10719] netlink: 'syz.8.1405': attribute type 12 has an invalid length. [ 215.889093][T10722] netlink: 'syz.0.1406': attribute type 2 has an invalid length. [ 215.898159][T10719] netlink: 'syz.8.1405': attribute type 11 has an invalid length. [ 215.898540][T10722] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1406'. [ 255.719505][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726024][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.073873][ T5871] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 272.041157][T10731] netlink: 'syz.6.1408': attribute type 11 has an invalid length. [ 272.050976][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1410'. [ 272.061329][T10731] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.1408'. [ 272.071237][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1411'. [ 272.090616][T10731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.140888][T10744] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1409'. [ 272.229373][T10730] hsr_slave_0 (unregistering): left promiscuous mode [ 272.281097][T10750] veth1_to_bond: entered allmulticast mode [ 272.296072][T10752] blkio.reset_stats is deprecated [ 272.302310][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1413'. [ 272.369763][T10750] bond0: (slave bond_slave_1): Releasing backup interface [ 272.398131][T10750] veth1_to_bond (unregistering): left allmulticast mode [ 272.419460][T10755] gtp0: entered promiscuous mode [ 272.424962][T10755] gtp0: entered allmulticast mode [ 272.461316][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1417'. [ 272.643220][T10779] netlink: 'syz.7.1421': attribute type 16 has an invalid length. [ 272.666109][T10779] netlink: 'syz.7.1421': attribute type 17 has an invalid length. [ 272.691614][T10779] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.698869][T10779] bridge0: port 2(bridge_slave_1) entered listening state [ 272.706309][T10779] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.713467][T10779] bridge0: port 1(bridge_slave_0) entered listening state [ 272.732578][T10779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.743983][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1420'. [ 273.010667][T10800] netlink: 'syz.5.1427': attribute type 4 has an invalid length. [ 273.099390][T10810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.252984][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 275.566749][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 276.199944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.901983][T10803] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1426'. [ 278.051105][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1434'. [ 278.055805][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 278.271740][T10847] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 278.315377][T10849] tipc: Enabled bearer , priority 0 [ 278.336962][T10849] syzkaller0: entered promiscuous mode [ 278.342474][T10849] syzkaller0: entered allmulticast mode [ 278.371617][T10849] tipc: Resetting bearer [ 278.378172][T10849] syzkaller0: tun_net_xmit 134 [ 278.387965][T10848] tipc: Resetting bearer [ 278.416442][T10848] tipc: Disabling bearer [ 278.442324][T10854] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 278.458412][T10854] bridge0: port 3(syz_tun) entered disabled state [ 278.465350][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.472869][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.515130][T10862] x_tables: duplicate underflow at hook 1 [ 278.966637][T10898] netlink: 'syz.8.1457': attribute type 1 has an invalid length. [ 278.976275][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1460'. [ 278.978610][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1457'. [ 279.205999][T10918] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1465'. [ 279.242318][T10923] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1466'. [ 279.325765][T10923] netlink: 'syz.5.1466': attribute type 1 has an invalid length. [ 279.385686][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.399440][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.429571][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1469'. [ 279.570469][T10940] netlink: 'syz.6.1472': attribute type 10 has an invalid length. [ 279.596009][T10940] team0: Device veth1_macvtap failed to register rx_handler [ 279.617337][T10939] netlink: 'syz.6.1472': attribute type 1 has an invalid length. [ 279.666831][T10940] veth3: entered promiscuous mode [ 279.768208][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 279.918345][T10963] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1481'. [ 280.166326][T10975] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 280.202388][T10980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.282982][ T8667] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.302301][ T8667] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.356555][ T8667] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.368245][ T8667] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.509077][T11002] netlink: 'syz.8.1493': attribute type 1 has an invalid length. [ 280.522397][T11002] netlink: 'syz.8.1493': attribute type 1 has an invalid length. [ 280.551367][T11008] nbd: must specify at least one socket [ 280.952270][T11026] bridge: RTM_NEWNEIGH with invalid ether address [ 281.154693][T11034] openvswitch: netlink: IP tunnel dst address not specified [ 281.274135][T11039] netlink: 'syz.6.1507': attribute type 1 has an invalid length. [ 281.346711][T11046] netlink: 'syz.0.1508': attribute type 11 has an invalid length. [ 281.363828][T11046] netlink: 'syz.0.1508': attribute type 11 has an invalid length. [ 281.505271][T11039] netlink: 'syz.6.1507': attribute type 1 has an invalid length. [ 281.527605][T11058] netlink: 'syz.8.1510': attribute type 4 has an invalid length. [ 281.550513][T11042] bond3: (slave bridge3): making interface the new active one [ 281.561861][T11042] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 281.635893][T11042] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 281.663483][T11042] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 281.704629][T11042] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 281.763418][T11042] bond3: (slave bridge7): Enslaving as an active interface with a down link [ 281.809969][T11042] bond3: (slave bridge8): Enslaving as an active interface with a down link [ 281.849119][T11042] bond3: (slave bridge9): Enslaving as an active interface with a down link [ 281.877825][T11042] bond3: (slave bridge10): Enslaving as an active interface with a down link [ 281.932891][T11042] bond3: (slave bridge11): Enslaving as an active interface with a down link [ 281.956819][T11042] bond3: (slave bridge12): Enslaving as an active interface with a down link [ 281.980674][T11042] bond3: (slave bridge13): Enslaving as an active interface with a down link [ 282.009881][T11042] bond3: (slave bridge14): Enslaving as an active interface with a down link [ 282.035722][T11042] bond3: (slave bridge15): Enslaving as an active interface with a down link [ 282.058025][T11042] bond3: (slave bridge16): Enslaving as an active interface with a down link [ 282.907865][T11135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.984186][T11141] bond5: (slave ip6erspan0): making interface the new active one [ 282.995769][T11141] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 283.250598][T11161] __nla_validate_parse: 21 callbacks suppressed [ 283.250616][T11161] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1542'. [ 283.328452][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1542'. [ 283.402594][T11169] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1544'. [ 283.425584][T11169] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 283.453845][T11169] openvswitch: netlink: Message has 8454 unknown bytes. [ 283.556826][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1546'. [ 283.594392][T11179] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 283.625807][T11181] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1548'. [ 283.801228][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1551'. [ 284.024332][T11207] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 284.228243][T11220] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1558'. [ 284.275297][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1558'. [ 284.564027][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'. [ 284.620671][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 284.630343][T11248] tipc: Enabled bearer , priority 0 [ 284.640510][T11247] tipc: Enabling of bearer rejected, already enabled [ 284.655018][T11252] syzkaller0: entered promiscuous mode [ 284.675646][T11252] syzkaller0: entered allmulticast mode [ 284.769633][T11247] tipc: Resetting bearer [ 284.838913][T11243] tipc: Resetting bearer [ 284.872319][T11243] tipc: Disabling bearer [ 284.932160][T11271] openvswitch: netlink: Flow key attr not present in new flow. [ 285.221257][T11281] netlink: set zone limit has 4 unknown bytes [ 285.861207][T11322] validate_nla: 68 callbacks suppressed [ 285.861227][T11322] netlink: 'syz.5.1588': attribute type 1 has an invalid length. [ 285.944908][T11322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.967564][T11327] bond2: (slave geneve2): making interface the new active one [ 285.978207][T11327] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 286.575840][ T10] IPVS: starting estimator thread 0... [ 286.674165][T11359] IPVS: using max 32 ests per chain, 76800 per kthread [ 286.709268][T11357] bond6: Removing last ns target with arp_interval on [ 286.807992][T11329] infiniband syz1: set active [ 286.819040][T11329] infiniband syz1: added bridge_slave_0 [ 286.847148][T11329] syz1: rxe_create_cq: returned err = -12 [ 286.859282][T11329] infiniband syz1: Couldn't create ib_mad CQ [ 286.866072][T11329] infiniband syz1: Couldn't open port 1 [ 286.898540][T11329] RDS/IB: syz1: added [ 286.902732][T11329] smc: adding ib device syz1 with port count 1 [ 286.909242][T11329] smc: ib device syz1 port 1 has no pnetid [ 287.065722][T11392] netlink: 'syz.5.1607': attribute type 1 has an invalid length. [ 287.070492][T11389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.174470][T11396] lo: entered allmulticast mode [ 287.198664][T11396] tunl0: entered allmulticast mode [ 287.216253][T11396] gre0: entered allmulticast mode [ 287.246229][T11396] gretap0: entered allmulticast mode [ 287.280681][T11396] erspan0: entered allmulticast mode [ 287.288207][T11398] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 287.305824][T11396] ip_vti0: entered allmulticast mode [ 287.324471][T11396] ip6_vti0: entered allmulticast mode [ 287.333830][T11396] sit0: entered allmulticast mode [ 287.347973][T11396] ip6tnl0: entered allmulticast mode [ 287.371989][T11396] ip6gre0: entered allmulticast mode [ 287.396587][T11396] ip6gretap0: entered allmulticast mode [ 287.406568][T11396] bridge0: entered allmulticast mode [ 287.415909][T11396] vcan0: entered allmulticast mode [ 287.426593][T11396] bond0: entered allmulticast mode [ 287.431865][T11396] bond_slave_0: entered allmulticast mode [ 287.438270][T11396] bond_slave_1: entered allmulticast mode [ 287.449278][T11396] team0: entered allmulticast mode [ 287.456469][T11396] team_slave_0: entered allmulticast mode [ 287.462313][T11396] team_slave_1: entered allmulticast mode [ 287.471754][T11396] dummy0: entered allmulticast mode [ 287.481331][T11396] nlmon0: entered allmulticast mode [ 287.492417][T11396] caif0: entered allmulticast mode [ 287.505881][T11396] vxcan0: entered allmulticast mode [ 287.512820][T11396] vxcan1: entered allmulticast mode [ 287.520769][T11396] veth0: entered allmulticast mode [ 287.531312][T11396] veth1: entered allmulticast mode [ 287.541768][T11396] wg0: entered allmulticast mode [ 287.550839][T11396] wg1: entered allmulticast mode [ 287.560404][T11396] wg2: entered allmulticast mode [ 287.569841][T11396] veth0_to_bridge: entered allmulticast mode [ 287.585461][T11396] veth1_to_bridge: entered allmulticast mode [ 287.635369][T11396] veth0_to_bond: entered allmulticast mode [ 287.660332][T11396] veth1_to_bond: entered allmulticast mode [ 287.674535][T11396] veth0_to_team: entered allmulticast mode [ 287.688326][T11396] veth1_to_team: entered allmulticast mode [ 287.703516][T11396] veth0_to_batadv: entered allmulticast mode [ 287.713489][T11396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.728644][T11396] batadv_slave_0: entered allmulticast mode [ 287.741644][T11396] veth1_to_batadv: entered allmulticast mode [ 287.751624][T11396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.762115][T11396] batadv_slave_1: entered allmulticast mode [ 287.771153][T11396] xfrm0: entered allmulticast mode [ 287.780688][T11396] veth0_to_hsr: entered allmulticast mode [ 287.789813][T11396] hsr_slave_0: entered allmulticast mode [ 287.798185][T11396] veth1_to_hsr: entered allmulticast mode [ 287.806237][T11396] hsr_slave_1: entered allmulticast mode [ 287.814544][T11396] veth1_virt_wifi: entered allmulticast mode [ 287.823163][T11396] veth0_virt_wifi: entered allmulticast mode [ 287.831950][T11396] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 287.842546][T11396] veth0_vlan: entered allmulticast mode [ 287.857204][T11396] vlan0: entered allmulticast mode [ 287.862445][T11396] vlan1: entered allmulticast mode [ 287.871343][T11396] macvlan1: entered allmulticast mode [ 287.879681][T11396] ipvlan0: entered allmulticast mode [ 287.885852][T11396] ipvlan1: entered allmulticast mode [ 287.891937][T11396] veth1_macvtap: entered allmulticast mode [ 287.900706][T11396] veth0_macvtap: entered allmulticast mode [ 287.909338][T11396] macvtap0: entered allmulticast mode [ 287.917387][T11396] macsec0: entered allmulticast mode [ 287.925628][T11396] geneve0: entered allmulticast mode [ 287.933321][T11396] geneve1: entered allmulticast mode [ 287.940693][T11396] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 287.949178][T11396] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 287.956549][T11396] veth2: entered allmulticast mode [ 287.963341][T11396] vxlan0: entered allmulticast mode [ 287.970331][T11396] : entered allmulticast mode [ 287.976880][T11396] veth4: entered allmulticast mode [ 287.982107][T11396] veth5: entered allmulticast mode [ 287.987401][T11396] ip6tnl1: entered allmulticast mode [ 287.992774][T11396] netdevsim netdevsim5 eth0: entered allmulticast mode [ 287.999944][T11396] netdevsim netdevsim5 eth1: entered allmulticast mode [ 288.007129][T11396] netdevsim netdevsim5 eth2: entered allmulticast mode [ 288.015229][T11396] netdevsim netdevsim5 eth3: entered allmulticast mode [ 288.022177][T11396] veth6: entered allmulticast mode [ 288.027464][T11396] veth7: entered allmulticast mode [ 288.032671][T11396] bond1: entered allmulticast mode [ 288.038462][T11396] bridge1: entered allmulticast mode [ 288.048612][T11396] bond2: entered allmulticast mode [ 288.054035][T11396] geneve2: entered allmulticast mode [ 288.104745][ T12] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.123771][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.132299][ T12] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.141667][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.150837][ T12] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.187115][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.222661][ T12] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.249046][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.304185][T11422] __nla_validate_parse: 15 callbacks suppressed [ 288.304204][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 288.350795][T11422] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 288.363804][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'. [ 288.406816][T11426] pimreg: entered allmulticast mode [ 288.666306][T11438] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1619'. [ 289.083480][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1622'. [ 289.129303][T11457] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1624'. [ 289.177773][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 289.347458][T11468] tipc: Enabled bearer , priority 0 [ 289.377895][T11468] syzkaller0: entered promiscuous mode [ 289.393057][T11468] syzkaller0: entered allmulticast mode [ 289.403040][T11468] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 289.430060][T11474] netlink: 'syz.6.1629': attribute type 1 has an invalid length. [ 289.432199][T11468] tipc: Resetting bearer [ 289.458110][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1629'. [ 289.480388][T11467] tipc: Resetting bearer [ 289.517147][T11467] tipc: Disabling bearer [ 289.736867][T11486] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1632'. [ 289.771302][T11490] netlink: 'syz.8.1634': attribute type 15 has an invalid length. [ 289.781486][T11492] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1635'. [ 289.905971][T11503] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1635'. [ 290.345202][T11524] netlink: 'syz.6.1643': attribute type 10 has an invalid length. [ 290.358411][T11524] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.390711][T11524] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.536220][T11537] netlink: 'syz.8.1647': attribute type 39 has an invalid length. [ 290.557253][T11537] veth0_macvtap: left promiscuous mode [ 290.957240][T11557] IPVS: set_ctl: invalid protocol: 1115 172.30.1.6:20004 [ 290.968303][T11542] bond0: (slave netdevsim0): Releasing backup interface [ 291.045255][T11558] vlan2: entered promiscuous mode [ 291.050452][T11558] bond0: entered promiscuous mode [ 291.056081][T11558] bond_slave_0: entered promiscuous mode [ 291.062374][T11558] team0: entered promiscuous mode [ 291.069328][T11558] team_slave_0: entered promiscuous mode [ 291.077319][T11558] team_slave_1: entered promiscuous mode [ 291.512604][T11579] netlink: 'syz.6.1664': attribute type 4 has an invalid length. [ 291.652116][T11589] tipc: Started in network mode [ 291.657110][T11589] tipc: Node identity a6c4dc528b81, cluster identity 4711 [ 291.670808][T11589] tipc: Enabled bearer , priority 0 [ 291.680227][T11589] syzkaller0: entered allmulticast mode [ 291.701425][T11588] tipc: Disabling bearer [ 291.847632][T11598] netlink: 'syz.6.1669': attribute type 1 has an invalid length. [ 291.861582][T11598] netlink: 'syz.6.1669': attribute type 1 has an invalid length. [ 292.209302][T11616] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 292.270160][T11619] netlink: 'syz.7.1673': attribute type 1 has an invalid length. [ 292.355202][T11619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.503519][T11627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.514098][T11627] nbd: must specify a device to reconfigure [ 292.522891][T11631] delete_channel: no stack [ 292.548405][T11631] netlink: 'syz.6.1674': attribute type 1 has an invalid length. [ 292.569851][T11631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.614254][T11631] netlink: 'syz.6.1674': attribute type 1 has an invalid length. [ 292.691334][T11622] bond4 (unregistering): Released all slaves [ 292.792543][T11645] netlink: 'syz.0.1678': attribute type 4 has an invalid length. [ 292.800581][T11644] netlink: 'syz.0.1678': attribute type 4 has an invalid length. [ 292.981824][T11656] gtp0: entered promiscuous mode [ 293.233372][T11668] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 293.248053][T11668] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 293.527741][T11694] netlink: 'syz.8.1690': attribute type 7 has an invalid length. [ 293.951472][T11717] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 293.972729][T11717] bond3 (unregistering): Released all slaves [ 293.982797][T11723] __nla_validate_parse: 10 callbacks suppressed [ 293.982814][T11723] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1698'. [ 294.029708][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1699'. [ 294.137738][T11726] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1699'. [ 294.138411][T11728] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1700'. [ 294.175228][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1700'. [ 294.458399][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1707'. [ 294.468446][T11747] erspan0: entered promiscuous mode [ 294.470688][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1707'. [ 294.478782][T11747] erspan0: entered allmulticast mode [ 294.967549][T11780] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1715'. [ 295.246192][T11801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.301358][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1722'. [ 295.330945][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1722'. [ 295.842117][T11838] unsupported nla_type 58 [ 296.150856][T11854] vlan0: entered allmulticast mode [ 296.222010][T11858] xt_connbytes: Forcing CT accounting to be enabled [ 296.812596][T11882] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20004 [ 296.864430][T11884] bond1: left promiscuous mode [ 296.874253][T11884] bridge0: port 3(bond1) entered disabled state [ 296.893629][T11884] bridge_slave_1: left allmulticast mode [ 296.911259][T11884] bridge_slave_1: left promiscuous mode [ 296.926621][T11884] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.966860][T11884] bridge_slave_0: left allmulticast mode [ 296.982746][T11884] bridge_slave_0: left promiscuous mode [ 297.013582][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.491948][T11903] tipc: Enabled bearer , priority 0 [ 297.514384][T11903] tipc: Resetting bearer [ 297.820395][T11925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.238295][T11949] bridge_slave_0: default FDB implementation only supports local addresses [ 298.344159][T11950] syzkaller0: entered promiscuous mode [ 298.350907][T11950] syzkaller0: entered allmulticast mode [ 298.479408][T11968] validate_nla: 8 callbacks suppressed [ 298.479426][T11968] netlink: 'syz.7.1774': attribute type 12 has an invalid length. [ 298.494016][ T5933] tipc: Node number set to 2075238006 [ 299.720987][T11968] bond5: option primary_reselect: invalid value (255) [ 299.732584][T11968] bond5 (unregistering): Released all slaves [ 299.888949][T11978] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 300.147054][T11993] 8021q: VLANs not supported on syzkaller1 [ 300.170629][T11990] netlink: 'syz.0.1782': attribute type 4 has an invalid length. [ 300.184298][T11996] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 300.236008][T12000] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 300.246052][T11998] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 301.180594][T12043] __nla_validate_parse: 11 callbacks suppressed [ 301.180613][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1797'. [ 301.444350][T12050] netlink: 'syz.5.1799': attribute type 3 has an invalid length. [ 301.654427][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'. [ 301.677385][T12063] bridge_slave_1: left promiscuous mode [ 301.683199][T12063] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.725566][T12063] bridge_slave_0: left promiscuous mode [ 301.731505][T12063] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.821754][T12072] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 301.878219][T12072] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 302.177836][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'. [ 302.220046][T12098] Bluetooth: MGMT ver 1.23 [ 302.299086][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1814'. [ 302.357280][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1816'. [ 302.363977][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1814'. [ 302.424144][T12108] dvmrp1: entered allmulticast mode [ 302.559453][T12120] netlink: 'syz.6.1820': attribute type 11 has an invalid length. [ 302.570994][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1819'. [ 302.577384][T12120] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1820'. [ 302.580024][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1819'. [ 302.609008][T12117] geneve2: entered promiscuous mode [ 302.644174][T12122] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1822'. [ 302.666074][T12117] geneve2: entered allmulticast mode [ 302.734886][T12131] netlink: 'syz.0.1825': attribute type 7 has an invalid length. [ 302.781502][T12132] netlink: 'syz.0.1825': attribute type 7 has an invalid length. [ 302.905384][T12141] dvmrp0: entered allmulticast mode [ 302.915876][T12140] dvmrp0: left allmulticast mode [ 302.998066][T12145] macvtap0: entered promiscuous mode [ 303.003398][T12145] vlan0: entered promiscuous mode [ 303.014965][T12145] macvtap0: entered allmulticast mode [ 303.039968][T12145] vlan0: entered allmulticast mode [ 303.053539][T12145] veth0_vlan: entered allmulticast mode [ 303.074960][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 303.083171][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 303.101596][T12147] macvtap1: entered promiscuous mode [ 303.107389][T12147] macvtap1: entered allmulticast mode [ 303.231958][T12154] openvswitch: netlink: Flow actions attr not present in new flow. [ 303.251144][T12156] netlink: 'syz.0.1833': attribute type 8 has an invalid length. [ 303.345445][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.356401][T12163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.371109][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.389359][T12163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.417350][T12167] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 303.425570][T12167] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 303.433307][T12167] netlink: 'syz.0.1837': attribute type 2 has an invalid length. [ 303.442512][T12167] nftables ruleset with unbound set [ 303.499030][T12172] netlink: 'syz.5.1840': attribute type 21 has an invalid length. [ 303.665513][T12186] syzkaller1: entered promiscuous mode [ 303.669321][T12188] x_tables: duplicate underflow at hook 1 [ 303.671483][T12186] syzkaller1: entered allmulticast mode [ 303.914925][T12201] can: request_module (can-proto-5) failed. [ 304.435105][T12246] sctp: [Deprecated]: syz.0.1858 (pid 12246) Use of int in max_burst socket option. [ 304.435105][T12246] Use struct sctp_assoc_value instead [ 304.683043][T12265] macvtap0: entered promiscuous mode [ 304.688700][T12265] macvtap0: entered allmulticast mode [ 304.875537][T12277] macsec0: entered promiscuous mode [ 304.901879][T12277] macsec0: entered allmulticast mode [ 304.919004][T12279] veth1_macvtap: entered allmulticast mode [ 304.928070][T12279] macsec0: left promiscuous mode [ 304.936672][T12279] macsec0: left allmulticast mode [ 304.941725][T12279] veth1_macvtap: left allmulticast mode [ 305.038193][T12289] netlink: 'syz.5.1873': attribute type 2 has an invalid length. [ 305.061428][T12289] netlink: 'syz.5.1873': attribute type 1 has an invalid length. [ 305.541644][T12322] netlink: zone id is out of range [ 305.602746][T12330] netlink: 'syz.5.1883': attribute type 2 has an invalid length. [ 305.644748][T12322] netlink: set zone limit has 4 unknown bytes [ 305.923409][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.985755][T12352] netlink: 'syz.7.1893': attribute type 11 has an invalid length. [ 306.046124][T12350] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 306.206946][T12369] netlink: 'syz.8.1898': attribute type 1 has an invalid length. [ 306.217939][T12371] sock: sock_timestamping_bind_phc: sock not bind to device [ 306.223770][T12369] __nla_validate_parse: 27 callbacks suppressed [ 306.223787][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1898'. [ 306.257221][T12372] netlink: 'syz.5.1899': attribute type 2 has an invalid length. [ 306.265453][T12372] netlink: 'syz.5.1899': attribute type 1 has an invalid length. [ 306.273184][T12372] netlink: 'syz.5.1899': attribute type 1 has an invalid length. [ 306.354158][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1898'. [ 306.444347][T12387] netlink: 'syz.5.1902': attribute type 1 has an invalid length. [ 306.468724][T12389] xt_connbytes: Forcing CT accounting to be enabled [ 306.595707][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1904'. [ 306.688149][T12387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.784932][T12403] lo: entered allmulticast mode [ 306.790241][T12397] lo: left allmulticast mode [ 306.799524][T12397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1905'. [ 306.825802][T12397] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1905'. [ 306.837372][T12397] netlink: 'syz.0.1905': attribute type 6 has an invalid length. [ 306.849098][T12397] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1905'. [ 306.861805][T12387] veth9: entered promiscuous mode [ 306.958707][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1908'. [ 307.184798][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1914'. [ 307.262856][T12437] vlan0: entered promiscuous mode [ 307.268699][T12437] bond9: entered promiscuous mode [ 307.275314][T12437] vlan0: entered allmulticast mode [ 307.280561][T12437] bond9: entered allmulticast mode [ 307.318923][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1915'. [ 307.386139][T12448] hsr_slave_1 (unregistering): left promiscuous mode [ 307.400987][T12437] bond9: (slave geneve3): refused to change device type [ 307.635457][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1923'. [ 309.006229][T12524] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000 [ 317.156825][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.153831][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.161044][ C0] bridge0: topology change detected, propagating [ 333.167744][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.174997][ C0] bridge0: topology change detected, propagating [ 378.597476][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 425.123472][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.134161][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.143374][ T12] bond0 (unregistering): Released all slaves [ 425.156807][ T12] bond1 (unregistering): Released all slaves [ 425.204348][ T12] tipc: Left network mode [ 425.224923][ T12] IPVS: stopping backup sync thread 7903 ... [ 440.037035][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.753940][ T31] INFO: task kworker/1:2:927 blocked for more than 143 seconds. [ 454.761611][ T31] Not tainted syzkaller #0 [ 454.766761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.775893][ T31] task:kworker/1:2 state:D stack:20664 pid:927 tgid:927 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 454.788053][ T31] Workqueue: events rfkill_sync_work [ 454.793381][ T31] Call Trace: [ 454.796692][ T31] [ 454.799631][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 454.804910][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 454.810480][ T31] ? __pfx___schedule+0x10/0x10 [ 454.815446][ T31] ? schedule+0x91/0x360 [ 454.819997][ T31] schedule+0x165/0x360 [ 454.824328][ T31] schedule_preempt_disabled+0x13/0x30 [ 454.829808][ T31] __mutex_lock+0x7e6/0x1350 [ 454.864269][ T31] ? __mutex_lock+0x5bb/0x1350 [ 454.869130][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 454.886818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 454.891906][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.897182][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 454.903099][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.909581][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 454.916059][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 454.921192][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 454.926994][ T31] rfkill_set_block+0x1d2/0x440 [ 454.931837][ T31] rfkill_sync_work+0x114/0x200 [ 454.936717][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 454.942484][ T31] process_scheduled_works+0xade/0x17b0 [ 454.948072][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.954122][ T31] worker_thread+0x8a0/0xda0 [ 454.958731][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.965080][ T31] ? __kthread_parkme+0x7b/0x200 [ 454.970007][ T31] kthread+0x711/0x8a0 [ 454.974269][ T31] ? __pfx_worker_thread+0x10/0x10 [ 454.979375][ T31] ? __pfx_kthread+0x10/0x10 [ 454.984031][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.989237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.994668][ T31] ? __pfx_kthread+0x10/0x10 [ 454.999260][ T31] ret_from_fork+0x4b9/0x870 [ 455.003877][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.008977][ T31] ? __switch_to_asm+0x39/0x70 [ 455.013757][ T31] ? __switch_to_asm+0x33/0x70 [ 455.018517][ T31] ? __pfx_kthread+0x10/0x10 [ 455.023091][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.027940][ T31] [ 455.031037][ T31] INFO: task kworker/1:5:5899 blocked for more than 143 seconds. [ 455.039875][ T31] Not tainted syzkaller #0 [ 455.045009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.053709][ T31] task:kworker/1:5 state:D stack:23016 pid:5899 tgid:5899 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 455.065751][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 455.072415][ T31] Call Trace: [ 455.075709][ T31] [ 455.078632][ T31] __schedule+0x1798/0x4cc0 [ 455.083132][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 455.088778][ T31] ? __pfx___schedule+0x10/0x10 [ 455.093626][ T31] ? schedule+0x91/0x360 [ 455.097909][ T31] schedule+0x165/0x360 [ 455.102079][ T31] schedule_preempt_disabled+0x13/0x30 [ 455.107660][ T31] __mutex_lock+0x7e6/0x1350 [ 455.112241][ T31] ? __mutex_lock+0x5bb/0x1350 [ 455.117026][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 455.123272][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 455.128339][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.134133][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.139864][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 455.146078][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.151806][ T31] process_scheduled_works+0xade/0x17b0 [ 455.157509][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.163517][ T31] worker_thread+0x8a0/0xda0 [ 455.168221][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 455.174585][ T31] ? __kthread_parkme+0x7b/0x200 [ 455.179513][ T31] kthread+0x711/0x8a0 [ 455.183598][ T31] ? __pfx_worker_thread+0x10/0x10 [ 455.188745][ T31] ? __pfx_kthread+0x10/0x10 [ 455.193337][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.198722][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.203972][ T31] ? __pfx_kthread+0x10/0x10 [ 455.208570][ T31] ret_from_fork+0x4b9/0x870 [ 455.213164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.218314][ T31] ? __switch_to_asm+0x39/0x70 [ 455.223061][ T31] ? __switch_to_asm+0x33/0x70 [ 455.228275][ T31] ? __pfx_kthread+0x10/0x10 [ 455.232881][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.237681][ T31] [ 455.240744][ T31] INFO: task syz.6.1909:12415 blocked for more than 143 seconds. [ 455.250318][ T31] Not tainted syzkaller #0 [ 455.255358][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.264058][ T31] task:syz.6.1909 state:D stack:25096 pid:12415 tgid:12415 ppid:8465 task_flags:0x400040 flags:0x00080002 [ 455.276134][ T31] Call Trace: [ 455.279419][ T31] [ 455.282339][ T31] __schedule+0x1798/0x4cc0 [ 455.286880][ T31] ? validate_chain+0x897/0x2140 [ 455.291808][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.296681][ T31] ? __pfx___schedule+0x10/0x10 [ 455.301545][ T31] ? schedule+0x91/0x360 [ 455.305981][ T31] schedule+0x165/0x360 [ 455.310129][ T31] schedule_timeout+0x9a/0x270 [ 455.314982][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 455.320364][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.325585][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.330772][ T31] ? wait_for_completion+0x267/0x5d0 [ 455.336081][ T31] wait_for_completion+0x2bf/0x5d0 [ 455.341185][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 455.346846][ T31] ? __flush_work+0xd2/0xbc0 [ 455.351428][ T31] ? __flush_work+0xd2/0xbc0 [ 455.356081][ T31] __flush_work+0x9b9/0xbc0 [ 455.360587][ T31] ? __flush_work+0xd2/0xbc0 [ 455.365287][ T31] ? __pfx___flush_work+0x10/0x10 [ 455.370294][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 455.375702][ T31] ? __pfx___cancel_work+0x10/0x10 [ 455.380821][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 455.386471][ T31] __cancel_work_sync+0xbe/0x110 [ 455.391392][ T31] rfkill_unregister+0x92/0x220 [ 455.397508][ T31] nfc_unregister_device+0x96/0x2a0 [ 455.402721][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 455.408803][ T31] virtual_ncidev_close+0x56/0x90 [ 455.413945][ T31] __fput+0x44c/0xa70 [ 455.418026][ T31] task_work_run+0x1d1/0x260 [ 455.422605][ T31] ? __pfx_task_work_run+0x10/0x10 [ 455.427788][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 455.433266][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 455.439124][ T31] do_syscall_64+0x2bd/0xfa0 [ 455.443805][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.449007][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.455116][ T31] ? clear_bhb_loop+0x60/0xb0 [ 455.459914][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.465855][ T31] RIP: 0033:0x7f56db78eec9 [ 455.470268][ T31] RSP: 002b:00007ffd79e7e8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 455.478970][ T31] RAX: 0000000000000000 RBX: 000000000004aeed RCX: 00007f56db78eec9 [ 455.487072][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 455.495059][ T31] RBP: 00007f56db9e7da0 R08: 0000000000000001 R09: 0000000879e7ebdf [ 455.503018][ T31] R10: 0000001b2c520000 R11: 0000000000000246 R12: 00007f56db9e5fac [ 455.511070][ T31] R13: 00007f56db9e5fa0 R14: ffffffffffffffff R15: 00007ffd79e7ea00 [ 455.519119][ T31] [ 455.522152][ T31] INFO: task syz.7.1922:12459 blocked for more than 144 seconds. [ 455.533004][ T31] Not tainted syzkaller #0 [ 455.537985][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.546883][ T31] task:syz.7.1922 state:D stack:25976 pid:12459 tgid:12457 ppid:8467 task_flags:0x400040 flags:0x00080002 [ 455.558896][ T31] Call Trace: [ 455.562180][ T31] [ 455.565188][ T31] __schedule+0x1798/0x4cc0 [ 455.569721][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.574708][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.579604][ T31] ? __pfx___schedule+0x10/0x10 [ 455.584504][ T31] ? schedule+0x91/0x360 [ 455.588764][ T31] schedule+0x165/0x360 [ 455.592907][ T31] schedule_preempt_disabled+0x13/0x30 [ 455.598431][ T31] __mutex_lock+0x7e6/0x1350 [ 455.603017][ T31] ? __mutex_lock+0x5bb/0x1350 [ 455.607840][ T31] ? rfkill_register+0x37/0x8e0 [ 455.612684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 455.617744][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 455.623117][ T31] ? device_initialize+0x24b/0x440 [ 455.628257][ T31] rfkill_register+0x37/0x8e0 [ 455.632948][ T31] nfc_register_device+0x14a/0x320 [ 455.638549][ T31] nci_register_device+0x87f/0x9d0 [ 455.643765][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 455.649432][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 455.654815][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 455.660182][ T31] virtual_ncidev_open+0x129/0x1a0 [ 455.665329][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 455.670950][ T31] misc_open+0x2b9/0x330 [ 455.675222][ T31] chrdev_open+0x4c9/0x5e0 [ 455.679649][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 455.684635][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 455.691023][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 455.696046][ T31] do_dentry_open+0x950/0x13f0 [ 455.700833][ T31] vfs_open+0x3b/0x340 [ 455.705204][ T31] ? path_openat+0x2ecd/0x3830 [ 455.709982][ T31] path_openat+0x2ee5/0x3830 [ 455.714722][ T31] ? arch_stack_walk+0xfc/0x150 [ 455.719578][ T31] ? stack_depot_save_flags+0x40/0x860 [ 455.725059][ T31] ? __pfx_path_openat+0x10/0x10 [ 455.729976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.736142][ T31] do_filp_open+0x1fa/0x410 [ 455.740627][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.745660][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 455.750681][ T31] ? _raw_spin_unlock+0x28/0x50 [ 455.755552][ T31] ? alloc_fd+0x64c/0x6c0 [ 455.759873][ T31] do_sys_openat2+0x121/0x1c0 [ 455.764591][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.769784][ T31] ? exc_page_fault+0x82/0x100 [ 455.774567][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 455.779843][ T31] __x64_sys_openat+0x138/0x170 [ 455.784788][ T31] do_syscall_64+0xfa/0xfa0 [ 455.789294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.794783][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.800857][ T31] ? clear_bhb_loop+0x60/0xb0 [ 455.805606][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.811499][ T31] RIP: 0033:0x7f112718eec9 [ 455.816026][ T31] RSP: 002b:00007f1127fe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.824472][ T31] RAX: ffffffffffffffda RBX: 00007f11273e5fa0 RCX: 00007f112718eec9 [ 455.832428][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 455.840417][ T31] RBP: 00007f1127211f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.848406][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.856550][ T31] R13: 00007f11273e6038 R14: 00007f11273e5fa0 R15: 00007ffce1e72d38 [ 455.864562][ T31] [ 455.867608][ T31] INFO: task syz.8.1924:12465 blocked for more than 144 seconds. [ 455.875502][ T31] Not tainted syzkaller #0 [ 455.880457][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.889666][ T31] task:syz.8.1924 state:D stack:27016 pid:12465 tgid:12464 ppid:8469 task_flags:0x400040 flags:0x00080002 [ 455.901701][ T31] Call Trace: [ 455.905125][ T31] [ 455.908065][ T31] __schedule+0x1798/0x4cc0 [ 455.912558][ T31] ? kasan_save_free_info+0x46/0x50 [ 455.918071][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.922932][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.928275][ T31] ? __pfx___schedule+0x10/0x10 [ 455.933152][ T31] ? schedule+0x91/0x360 [ 455.937549][ T31] schedule+0x165/0x360 [ 455.941743][ T31] schedule_preempt_disabled+0x13/0x30 [ 455.947564][ T31] __mutex_lock+0x7e6/0x1350 [ 455.952144][ T31] ? __mutex_lock+0x5bb/0x1350 [ 455.957130][ T31] ? misc_open+0x51/0x330 [ 455.961482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 455.966659][ T31] misc_open+0x51/0x330 [ 455.970821][ T31] chrdev_open+0x4c9/0x5e0 [ 455.975377][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 455.980309][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 455.986858][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 455.991789][ T31] do_dentry_open+0x950/0x13f0 [ 455.996614][ T31] vfs_open+0x3b/0x340 [ 456.000708][ T31] ? path_openat+0x2ecd/0x3830 [ 456.005541][ T31] path_openat+0x2ee5/0x3830 [ 456.010130][ T31] ? arch_stack_walk+0xfc/0x150 [ 456.015059][ T31] ? stack_depot_save_flags+0x40/0x860 [ 456.020536][ T31] ? __pfx_path_openat+0x10/0x10 [ 456.025496][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.031561][ T31] do_filp_open+0x1fa/0x410 [ 456.036237][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.041115][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 456.046757][ T31] ? _raw_spin_unlock+0x28/0x50 [ 456.051639][ T31] ? alloc_fd+0x64c/0x6c0 [ 456.056045][ T31] do_sys_openat2+0x121/0x1c0 [ 456.060717][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.065940][ T31] ? exc_page_fault+0x82/0x100 [ 456.070712][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 456.076045][ T31] __x64_sys_openat+0x138/0x170 [ 456.080909][ T31] do_syscall_64+0xfa/0xfa0 [ 456.085470][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.090682][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.096925][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.101593][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.107501][ T31] RIP: 0033:0x7f8d1738eec9 [ 456.111897][ T31] RSP: 002b:00007f8d1819c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.120386][ T31] RAX: ffffffffffffffda RBX: 00007f8d175e5fa0 RCX: 00007f8d1738eec9 [ 456.128400][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 456.136442][ T31] RBP: 00007f8d17411f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.144439][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.152406][ T31] R13: 00007f8d175e6038 R14: 00007f8d175e5fa0 R15: 00007ffc2e7b32e8 [ 456.160524][ T31] [ 456.163557][ T31] INFO: task syz.0.1931:12488 blocked for more than 144 seconds. [ 456.171410][ T31] Not tainted syzkaller #0 [ 456.176411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.185113][ T31] task:syz.0.1931 state:D stack:28296 pid:12488 tgid:12487 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 456.197137][ T31] Call Trace: [ 456.200402][ T31] [ 456.203396][ T31] __schedule+0x1798/0x4cc0 [ 456.209255][ T31] ? kasan_save_free_info+0x46/0x50 [ 456.214498][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.219346][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.224219][ T31] ? __pfx___schedule+0x10/0x10 [ 456.229094][ T31] ? schedule+0x91/0x360 [ 456.233327][ T31] schedule+0x165/0x360 [ 456.237523][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.242970][ T31] __mutex_lock+0x7e6/0x1350 [ 456.247587][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.252338][ T31] ? misc_open+0x51/0x330 [ 456.256681][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.261708][ T31] misc_open+0x51/0x330 [ 456.265940][ T31] chrdev_open+0x4c9/0x5e0 [ 456.270345][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 456.275312][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 456.281658][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 456.286622][ T31] do_dentry_open+0x950/0x13f0 [ 456.291381][ T31] vfs_open+0x3b/0x340 [ 456.295544][ T31] ? path_openat+0x2ecd/0x3830 [ 456.300324][ T31] path_openat+0x2ee5/0x3830 [ 456.304971][ T31] ? arch_stack_walk+0xfc/0x150 [ 456.309832][ T31] ? stack_depot_save_flags+0x40/0x860 [ 456.315488][ T31] ? __pfx_path_openat+0x10/0x10 [ 456.320410][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.326526][ T31] do_filp_open+0x1fa/0x410 [ 456.331013][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.335885][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 456.340905][ T31] ? _raw_spin_unlock+0x28/0x50 [ 456.345771][ T31] ? alloc_fd+0x64c/0x6c0 [ 456.350099][ T31] do_sys_openat2+0x121/0x1c0 [ 456.354803][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.360008][ T31] ? exc_page_fault+0x82/0x100 [ 456.364837][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 456.370141][ T31] __x64_sys_openat+0x138/0x170 [ 456.375078][ T31] do_syscall_64+0xfa/0xfa0 [ 456.379574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.384796][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.390847][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.395644][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.401538][ T31] RIP: 0033:0x7f4ef878eec9 [ 456.405969][ T31] RSP: 002b:00007f4ef95d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.414424][ T31] RAX: ffffffffffffffda RBX: 00007f4ef89e5fa0 RCX: 00007f4ef878eec9 [ 456.422398][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 456.430574][ T31] RBP: 00007f4ef8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.438593][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.446637][ T31] R13: 00007f4ef89e6038 R14: 00007f4ef89e5fa0 R15: 00007ffdcf2055b8 [ 456.454696][ T31] [ 456.457733][ T31] INFO: task syz.0.1931:12489 blocked for more than 145 seconds. [ 456.465951][ T31] Not tainted syzkaller #0 [ 456.470873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.479572][ T31] task:syz.0.1931 state:D stack:26472 pid:12489 tgid:12487 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 456.491665][ T31] Call Trace: [ 456.494977][ T31] [ 456.497908][ T31] __schedule+0x1798/0x4cc0 [ 456.502415][ T31] ? kasan_save_free_info+0x46/0x50 [ 456.507642][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.512498][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.517665][ T31] ? __pfx___schedule+0x10/0x10 [ 456.522527][ T31] ? schedule+0x91/0x360 [ 456.526825][ T31] schedule+0x165/0x360 [ 456.531024][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.536668][ T31] __mutex_lock+0x7e6/0x1350 [ 456.541257][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.546040][ T31] ? misc_open+0x51/0x330 [ 456.550363][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.555453][ T31] misc_open+0x51/0x330 [ 456.559626][ T31] chrdev_open+0x4c9/0x5e0 [ 456.564090][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 456.569028][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 456.575503][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 456.580424][ T31] do_dentry_open+0x950/0x13f0 [ 456.585196][ T31] vfs_open+0x3b/0x340 [ 456.589267][ T31] ? path_openat+0x2ecd/0x3830 [ 456.594165][ T31] path_openat+0x2ee5/0x3830 [ 456.598755][ T31] ? arch_stack_walk+0xfc/0x150 [ 456.603594][ T31] ? stack_depot_save_flags+0x40/0x860 [ 456.609080][ T31] ? __pfx_path_openat+0x10/0x10 [ 456.614064][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.620123][ T31] do_filp_open+0x1fa/0x410 [ 456.624653][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.629520][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 456.634573][ T31] ? _raw_spin_unlock+0x28/0x50 [ 456.639404][ T31] ? alloc_fd+0x64c/0x6c0 [ 456.644032][ T31] do_sys_openat2+0x121/0x1c0 [ 456.648712][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.653931][ T31] ? __fget_files+0x3a0/0x420 [ 456.658601][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 456.663859][ T31] __x64_sys_openat+0x138/0x170 [ 456.668726][ T31] do_syscall_64+0xfa/0xfa0 [ 456.673314][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.678705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.684826][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.689526][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.695458][ T31] RIP: 0033:0x7f4ef878eec9 [ 456.699874][ T31] RSP: 002b:00007f4ef95b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.708503][ T31] RAX: ffffffffffffffda RBX: 00007f4ef89e6090 RCX: 00007f4ef878eec9 [ 456.716509][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 456.724493][ T31] RBP: 00007f4ef8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.732471][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.740480][ T31] R13: 00007f4ef89e6128 R14: 00007f4ef89e6090 R15: 00007ffdcf2055b8 [ 456.748488][ T31] [ 456.751527][ T31] INFO: task syz.5.1943:12524 blocked for more than 145 seconds. [ 456.759453][ T31] Not tainted syzkaller #0 [ 456.764421][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.773067][ T31] task:syz.5.1943 state:D stack:27144 pid:12524 tgid:12523 ppid:8459 task_flags:0x400140 flags:0x00080002 [ 456.785089][ T31] Call Trace: [ 456.788365][ T31] [ 456.791288][ T31] __schedule+0x1798/0x4cc0 [ 456.795831][ T31] ? kasan_save_free_info+0x46/0x50 [ 456.801028][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.805999][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.810846][ T31] ? __pfx___schedule+0x10/0x10 [ 456.815763][ T31] ? schedule+0x91/0x360 [ 456.820001][ T31] schedule+0x165/0x360 [ 456.824188][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.829634][ T31] __mutex_lock+0x7e6/0x1350 [ 456.834254][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.839027][ T31] ? misc_open+0x51/0x330 [ 456.843366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.848544][ T31] misc_open+0x51/0x330 [ 456.852693][ T31] chrdev_open+0x4c9/0x5e0 [ 456.857116][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 456.862040][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 456.868534][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 456.873457][ T31] do_dentry_open+0x950/0x13f0 [ 456.878274][ T31] vfs_open+0x3b/0x340 [ 456.882330][ T31] ? path_openat+0x2ecd/0x3830 [ 456.887125][ T31] path_openat+0x2ee5/0x3830 [ 456.891715][ T31] ? arch_stack_walk+0xfc/0x150 [ 456.896593][ T31] ? stack_depot_save_flags+0x40/0x860 [ 456.902388][ T31] ? __pfx_path_openat+0x10/0x10 [ 456.907401][ T31] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 456.913674][ T31] do_filp_open+0x1fa/0x410 [ 456.918225][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 456.923249][ T31] ? _raw_spin_unlock+0x28/0x50 [ 456.928413][ T31] ? alloc_fd+0x64c/0x6c0 [ 456.932737][ T31] do_sys_openat2+0x121/0x1c0 [ 456.937431][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.942621][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.947426][ T31] __x64_sys_openat+0x138/0x170 [ 456.952287][ T31] do_syscall_64+0xfa/0xfa0 [ 456.957238][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.962445][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.968539][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.973231][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.979288][ T31] RIP: 0033:0x7fb07418eec9 [ 456.983745][ T31] RSP: 002b:00007fb074fec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.992171][ T31] RAX: ffffffffffffffda RBX: 00007fb0743e5fa0 RCX: 00007fb07418eec9 [ 457.000468][ T31] RDX: 0000000000000040 RSI: 0000200000000c80 RDI: ffffffffffffff9c [ 457.008491][ T31] RBP: 00007fb074211f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.016479][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.024521][ T31] R13: 00007fb0743e6038 R14: 00007fb0743e5fa0 R15: 00007ffe48573758 [ 457.032507][ T31] [ 457.035593][ T31] INFO: task syz.5.1943:12525 blocked for more than 145 seconds. [ 457.043299][ T31] Not tainted syzkaller #0 [ 457.048447][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.057119][ T31] task:syz.5.1943 state:D stack:27112 pid:12525 tgid:12523 ppid:8459 task_flags:0x400040 flags:0x00080002 [ 457.069037][ T31] Call Trace: [ 457.072297][ T31] [ 457.075256][ T31] __schedule+0x1798/0x4cc0 [ 457.079750][ T31] ? kasan_save_free_info+0x46/0x50 [ 457.085131][ T31] ? __lock_acquire+0xab9/0xd20 [ 457.089981][ T31] ? __lock_acquire+0xab9/0xd20 [ 457.094843][ T31] ? __pfx___schedule+0x10/0x10 [ 457.099689][ T31] ? schedule+0x91/0x360 [ 457.103985][ T31] schedule+0x165/0x360 [ 457.108152][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.113620][ T31] __mutex_lock+0x7e6/0x1350 [ 457.118238][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.122985][ T31] ? misc_open+0x51/0x330 [ 457.127351][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.132371][ T31] misc_open+0x51/0x330 [ 457.136555][ T31] chrdev_open+0x4c9/0x5e0 [ 457.140963][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 457.145984][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 457.152305][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 457.157262][ T31] do_dentry_open+0x950/0x13f0 [ 457.162027][ T31] vfs_open+0x3b/0x340 [ 457.166119][ T31] ? path_openat+0x2ecd/0x3830 [ 457.170868][ T31] path_openat+0x2ee5/0x3830 [ 457.175470][ T31] ? arch_stack_walk+0xfc/0x150 [ 457.180316][ T31] ? stack_depot_save_flags+0x40/0x860 [ 457.185799][ T31] ? __pfx_path_openat+0x10/0x10 [ 457.190719][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.196961][ T31] do_filp_open+0x1fa/0x410 [ 457.201447][ T31] ? __lock_acquire+0xab9/0xd20 [ 457.206330][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 457.211352][ T31] ? _raw_spin_unlock+0x28/0x50 [ 457.216244][ T31] ? alloc_fd+0x64c/0x6c0 [ 457.220595][ T31] do_sys_openat2+0x121/0x1c0 [ 457.225321][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.230526][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.235321][ T31] __x64_sys_openat+0x138/0x170 [ 457.240182][ T31] do_syscall_64+0xfa/0xfa0 [ 457.244750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.249949][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.256118][ T31] ? clear_bhb_loop+0x60/0xb0 [ 457.260787][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.266696][ T31] RIP: 0033:0x7fb07418eec9 [ 457.271093][ T31] RSP: 002b:00007fb074fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.279526][ T31] RAX: ffffffffffffffda RBX: 00007fb0743e6090 RCX: 00007fb07418eec9 [ 457.287510][ T31] RDX: 0000000000000040 RSI: 0000200000000c80 RDI: ffffffffffffff9c [ 457.295499][ T31] RBP: 00007fb074211f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.303454][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.311610][ T31] R13: 00007fb0743e6128 R14: 00007fb0743e6090 R15: 00007ffe48573758 [ 457.319712][ T31] [ 457.322771][ T31] [ 457.322771][ T31] Showing all locks held in the system: [ 457.330546][ T31] 4 locks held by kworker/u8:0/12: [ 457.335672][ T31] #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 457.346665][ T31] #1: ffffc90000117ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 457.357245][ T31] #2: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 457.366648][ T31] #3: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 457.376745][ T31] 1 lock held by khungtaskd/31: [ 457.381574][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 457.391433][ T31] 4 locks held by kworker/1:2/927: [ 457.396562][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 457.407542][ T31] #1: ffffc900032b7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 457.420074][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 457.430099][ T31] #3: ffff888028e77100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 457.439791][ T31] 2 locks held by getty/5582: [ 457.444495][ T31] #0: ffff88814dab70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 457.454267][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 457.464461][ T31] 3 locks held by kworker/1:5/5899: [ 457.469659][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 457.480830][ T31] #1: ffffc9000b387ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 457.494365][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 457.505720][ T31] 1 lock held by syz.6.1909/12415: [ 457.510813][ T31] #0: ffff888028e77100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 457.520596][ T31] 3 locks held by syz.7.1922/12459: [ 457.525976][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.534570][ T31] #1: ffff88802f735100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 457.544200][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 457.554740][ T31] 1 lock held by syz.8.1924/12465: [ 457.559863][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.568359][ T31] 1 lock held by syz.0.1931/12488: [ 457.573453][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.581935][ T31] 1 lock held by syz.0.1931/12489: [ 457.587139][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.595644][ T31] 1 lock held by syz.5.1943/12524: [ 457.600733][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.609170][ T31] 1 lock held by syz.5.1943/12525: [ 457.614294][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.622721][ T31] 1 lock held by syz-executor/12529: [ 457.628029][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.636816][ T31] 1 lock held by syz-executor/12533: [ 457.642111][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.650592][ T31] 1 lock held by syz-executor/12534: [ 457.655943][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.664399][ T31] 1 lock held by syz-executor/12535: [ 457.669662][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.678121][ T31] 1 lock held by syz-executor/12537: [ 457.683384][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.691868][ T31] 1 lock held by syz-executor/12543: [ 457.697254][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.705862][ T31] 1 lock held by syz-executor/12547: [ 457.711149][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.719738][ T31] 1 lock held by syz-executor/12548: [ 457.725049][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.733473][ T31] 1 lock held by syz-executor/12549: [ 457.738853][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.747554][ T31] 1 lock held by syz-executor/12551: [ 457.752833][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.761322][ T31] 1 lock held by syz-executor/12557: [ 457.766641][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.775113][ T31] 1 lock held by syz-executor/12560: [ 457.780380][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.788861][ T31] 1 lock held by syz-executor/12561: [ 457.794349][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.802818][ T31] 1 lock held by syz-executor/12564: [ 457.808255][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.816737][ T31] 1 lock held by syz-executor/12565: [ 457.822027][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 457.830575][ T31] [ 457.832900][ T31] ============================================= [ 457.832900][ T31] [ 457.841348][ T31] NMI backtrace for cpu 0 [ 457.841367][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 457.841379][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.841385][ T31] Call Trace: [ 457.841390][ T31] [ 457.841396][ T31] dump_stack_lvl+0x189/0x250 [ 457.841412][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.841422][ T31] ? __pfx__printk+0x10/0x10 [ 457.841439][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 457.841452][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 457.841464][ T31] ? __pfx__printk+0x10/0x10 [ 457.841476][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.841491][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 457.841504][ T31] watchdog+0xf93/0xfe0 [ 457.841520][ T31] ? watchdog+0x1de/0xfe0 [ 457.841536][ T31] kthread+0x711/0x8a0 [ 457.841548][ T31] ? __pfx_watchdog+0x10/0x10 [ 457.841561][ T31] ? __pfx_kthread+0x10/0x10 [ 457.841572][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.841585][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.841597][ T31] ? __pfx_kthread+0x10/0x10 [ 457.841608][ T31] ret_from_fork+0x4b9/0x870 [ 457.841623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.841640][ T31] ? __switch_to_asm+0x39/0x70 [ 457.841650][ T31] ? __switch_to_asm+0x33/0x70 [ 457.841659][ T31] ? __pfx_kthread+0x10/0x10 [ 457.841670][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.841689][ T31] [ 457.841693][ T31] Sending NMI from CPU 0 to CPUs 1: [ 457.986852][ C1] NMI backtrace for cpu 1 [ 457.986873][ C1] CPU: 1 UID: 0 PID: 4107 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 457.986892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.986902][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 457.986927][ C1] RIP: 0010:kasan_byte_accessible+0x16/0x30 [ 457.986947][ C1] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 e9 50 f6 23 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 [ 457.986962][ C1] RSP: 0018:ffffc9000d7b7280 EFLAGS: 00000802 [ 457.986976][ C1] RAX: 0000000000000000 RBX: ffffffff851ad3ba RCX: e621192d95dc2700 [ 457.986988][ C1] RDX: 0000000000000000 RSI: ffffffff851ad3ba RDI: 1ffff110170e6c26 [ 457.986999][ C1] RBP: ffffffff851ad3a2 R08: 0000000000000001 R09: 0000000000000000 [ 457.987009][ C1] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: 0000000000000000 [ 457.987020][ C1] R13: ffff8880b8736130 R14: ffff8880b8736130 R15: 0000000000000001 [ 457.987031][ C1] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 457.987045][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.987056][ C1] CR2: 00005608b1017000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 457.987071][ C1] Call Trace: [ 457.987078][ C1] [ 457.987084][ C1] __kasan_check_byte+0x12/0x40 [ 457.987109][ C1] lock_acquire+0x8d/0x360 [ 457.987133][ C1] ? get_random_u8+0x152/0x940 [ 457.987150][ C1] get_random_u8+0x16a/0x940 [ 457.987165][ C1] ? get_random_u8+0x152/0x940 [ 457.987183][ C1] ? __pfx_get_random_u8+0x10/0x10 [ 457.987200][ C1] ? unwind_next_frame+0xa5/0x2390 [ 457.987215][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 457.987235][ C1] ? __pi_startup_64_load_idt+0x60/0x70 [ 457.987258][ C1] kfence_guarded_alloc+0x9d/0xc70 [ 457.987279][ C1] ? __pfx_kfence_guarded_alloc+0x10/0x10 [ 457.987294][ C1] ? stack_trace_save+0x9c/0xe0 [ 457.987310][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 457.987329][ C1] ? get_alloc_stack_hash+0x39a/0x770 [ 457.987345][ C1] __kfence_alloc+0x385/0x3b0 [ 457.987361][ C1] ? __pfx___kfence_alloc+0x10/0x10 [ 457.987375][ C1] ? __kfence_alloc+0x2b2/0x3b0 [ 457.987388][ C1] ? kmem_cache_alloc_node_noprof+0x315/0x3c0 [ 457.987404][ C1] ? __alloc_skb+0x112/0x2d0 [ 457.987422][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 457.987438][ C1] ? process_scheduled_works+0xade/0x17b0 [ 457.987458][ C1] ? worker_thread+0x8a0/0xda0 [ 457.987478][ C1] ? kthread+0x711/0x8a0 [ 457.987492][ C1] ? ret_from_fork+0x4b9/0x870 [ 457.987512][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 457.987550][ C1] ? __lock_acquire+0xab9/0xd20 [ 457.987575][ C1] kmem_cache_alloc_node_noprof+0x315/0x3c0 [ 457.987606][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.987622][ C1] ? __alloc_skb+0x112/0x2d0 [ 457.987640][ C1] __alloc_skb+0x112/0x2d0 [ 457.987660][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 457.987680][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 457.987704][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.987724][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 457.987744][ C1] process_scheduled_works+0xade/0x17b0 [ 457.987779][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.987808][ C1] worker_thread+0x8a0/0xda0 [ 457.987829][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.987852][ C1] ? __kthread_parkme+0x7b/0x200 [ 457.987872][ C1] kthread+0x711/0x8a0 [ 457.987889][ C1] ? __pfx_worker_thread+0x10/0x10 [ 457.987909][ C1] ? __pfx_kthread+0x10/0x10 [ 457.987925][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.987943][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.987961][ C1] ? __pfx_kthread+0x10/0x10 [ 457.987977][ C1] ret_from_fork+0x4b9/0x870 [ 457.988007][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 457.988031][ C1] ? __switch_to_asm+0x39/0x70 [ 457.988046][ C1] ? __switch_to_asm+0x33/0x70 [ 457.988061][ C1] ? __pfx_kthread+0x10/0x10 [ 457.988078][ C1] ret_from_fork_asm+0x1a/0x30 [ 457.988109][ C1] [ 457.989215][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 458.387139][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 458.396235][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 458.406277][ T31] Call Trace: [ 458.409545][ T31] [ 458.412465][ T31] dump_stack_lvl+0x99/0x250 [ 458.417049][ T31] ? __asan_memcpy+0x40/0x70 [ 458.421629][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.426812][ T31] ? __pfx__printk+0x10/0x10 [ 458.431397][ T31] vpanic+0x281/0x750 [ 458.435373][ T31] ? __pfx_vpanic+0x10/0x10 [ 458.439868][ T31] ? preempt_schedule+0xae/0xc0 [ 458.444713][ T31] ? preempt_schedule_common+0x83/0xd0 [ 458.450168][ T31] panic+0xb9/0xc0 [ 458.453880][ T31] ? __pfx_panic+0x10/0x10 [ 458.458288][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 458.463658][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 458.469814][ T31] watchdog+0xfd2/0xfe0 [ 458.473972][ T31] ? watchdog+0x1de/0xfe0 [ 458.478298][ T31] kthread+0x711/0x8a0 [ 458.482359][ T31] ? __pfx_watchdog+0x10/0x10 [ 458.487029][ T31] ? __pfx_kthread+0x10/0x10 [ 458.491606][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.496800][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.501990][ T31] ? __pfx_kthread+0x10/0x10 [ 458.506574][ T31] ret_from_fork+0x4b9/0x870 [ 458.511162][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 458.516268][ T31] ? __switch_to_asm+0x39/0x70 [ 458.521023][ T31] ? __switch_to_asm+0x33/0x70 [ 458.525774][ T31] ? __pfx_kthread+0x10/0x10 [ 458.530357][ T31] ret_from_fork_asm+0x1a/0x30 [ 458.535124][ T31] [ 458.538273][ T31] Kernel Offset: disabled [ 458.542582][ T31] Rebooting in 86400 seconds..