last executing test programs: 3m55.12517286s ago: executing program 3 (id=2150): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8cd87191a2790c962b36f8000000543a922ea51bca33fb09850f91", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010100000000000000000000fffc05000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012000000ffff12000300686173683a6e65742c706f7274"], 0x58}}, 0x20000000) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x7, 0xd, 0x10001, 0x32, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, 0x10, 0x10, 0x5, 0x3}}) (async) r5 = socket(0x9, 0x800, 0x3) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {0x2, 0xfff3}, {0x5, 0x9}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x503, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x22eff39661925f3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 3m55.064249679s ago: executing program 1 (id=2151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000c100000000000000070000009500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018200000", @ANYRES32, @ANYBLOB="0000000003000000d5fd3ee8b108c76e47158d47ffb7f93580eb29637656fbfab623000000950000bd2e281a00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000009c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x7}]}, &(0x7f0000000180)=0x10) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x8}, 0x90) connect$pppoe(0xffffffffffffffff, &(0x7f0000000980)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) write$cgroup_int(r1, 0x0, 0xfffffffffffffe0b) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffeffe) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r7, @ANYRES8=r2], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x2c000010) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x8, 0x70bd2c, 0x25dfdbfc, {@in=@multicast1, 0x4d6, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r10, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efea", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a", 0x2}], 0x1}}], 0x2, 0x4000000) sendto$inet(r10, &(0x7f00000000c0)="ec3e170c", 0x4, 0x8000, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ffffffff00000000000000000000000000000000000000000a00900087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000000000000000070000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000cc9c8a25b183ebf100000000000000000000000000000000000000000000000000b56b6e000000000000000000b53df2862f61f63dade6197c2e7bfc6b759f0d446fad32beefdc0128a0cd"], 0xb8}}, 0x0) 3m54.640477582s ago: executing program 3 (id=2155): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x2e, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000240)="d65e76214f", 0x5}], 0x3}, 0x81) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) 3m54.57300555s ago: executing program 3 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x119, 0xfffffffe, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x200, 0x1, 0x2, 0x200, r1, 0x0, '\x00', 0x0, r2, 0x3, 0x1, 0x5}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x2}, &(0x7f0000000180)=0x28) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e0009002700000000040000000800180004ac0f0004001e00000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3m54.493848593s ago: executing program 3 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="850000006f00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockopt$sock_int(r3, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@exit, @ringbuf_query, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x10000, 0x1b, &(0x7f0000000380)=""/27, 0x1e00, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x100, 0x2}, 0x10, 0x0, r4, 0x0, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000020e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c050005e2012200000500010006000000b2f3f052c5487004e887f5a064a3732818f16ae04de03625865a48a656f3791ff4762391dccaf34e4e2c556a20f7ebe7"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 3m54.332697375s ago: executing program 3 (id=2160): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x31, 0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000001040000000000009f37d8d5a1b3f8a2696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702080008000000b703000083bfffff8500000017000000850000007d0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$key(0xf, 0x3, 0x2) recvmmsg(r11, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000004c0)=0xfd87, 0x4) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x4, 0x1, 0x1009, 0x7f}, {0x12, 0x0, 0x0, 0x401, 0x8001}, 0x80000008, 0x6, 0x10000000}}, @TCA_TBF_RATE64={0xc, 0x4, 0xacb233218fb59890}]}}]}, 0x64}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r13, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 3m54.096696651s ago: executing program 1 (id=2162): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xa1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x94) 3m53.95409474s ago: executing program 3 (id=2163): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 32) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x48004) (async, rerun: 32) recvmmsg$unix(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/62, 0x3e}, {0x0}], 0x2}}], 0x1, 0x40000123, 0x0) (rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m53.953563866s ago: executing program 1 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r4, @ANYBLOB="000000000000000008000d00000000000500210000"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 3m53.649646063s ago: executing program 1 (id=2166): syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r7, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x80000000, 0xfffffff9, 0x1, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) close(r3) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000000)={0x1d, r12, 0x1, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) bind$can_j1939(r11, &(0x7f0000000040)={0x1d, r12, 0x1, {0x2, 0x1, 0x1ba7529ff88293c3}, 0xfe}, 0x18) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xfff8, @loopback}}, 0xffffffffffffffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYBLOB="7eda570759c4a16df69bc6a3339679e04ee0c8d6a28e94eeb106000000177f680dd672db0ea37618ded130141c99e49b080e5393647787f3d33870d21f1be5c914", @ANYRESOCT=r2], 0x0, 0x52, 0x0, 0x0, 0xfffffffe}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r13}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m49.180842436s ago: executing program 1 (id=2171): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket(0x1d, 0x2, 0x6) epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x2945, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x7c, r6, 0x120, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x26}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) 3m42.021124414s ago: executing program 1 (id=2175): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000008000006117d800000000000600f900000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x25e, @mcast1, 0x6}, 0x1c) unshare(0x6a040000) recvmsg(0xffffffffffffffff, 0x0, 0x102) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$inet(0x2, 0x80001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 3m38.400489861s ago: executing program 32 (id=2163): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 32) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x48004) (async, rerun: 32) recvmmsg$unix(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/62, 0x3e}, {0x0}], 0x2}}], 0x1, 0x40000123, 0x0) (rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m26.572336281s ago: executing program 33 (id=2175): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000008000006117d800000000000600f900000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x25e, @mcast1, 0x6}, 0x1c) unshare(0x6a040000) recvmsg(0xffffffffffffffff, 0x0, 0x102) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$inet(0x2, 0x80001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 11.040165295s ago: executing program 0 (id=3617): r0 = socket$inet6(0xa, 0x2, 0x3) getsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000a200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400bccd39d55baf8712800b00010062617461647600007729def3f3648f94b1a2d81400028010"], 0xfd12}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x5, 0xb68, 0x0, &(0x7f0000000380)="711500ff070000000022f1d7a305a7a89ca59ce9af7cbbb21b79951e6586df80a3596230bb9318c5761ed9c83b483ecc3a2ae97c635cf2741d2a9a7e598f06c4742acd889a317aac3e85bfa3feb2e1eb", 0x0, 0xd01, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000006a52aee14207ac1ef30e7f87e4456c0000082dbd7000fedbdf250200000030f899fa5ed538", @ANYRES32=r2, @ANYBLOB="04000b00080001000200000008000a000100000008000a00000000000400090008000a0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 10.728037737s ago: executing program 0 (id=3620): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd678af00400000001fc000000000000000000000000000001fc8000000000000000006ea68bf200122b0200000000c204ff"], 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0xfffffff9}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c05}, 0x4000851) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000002c0), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x48004) recvmmsg$unix(r7, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000123, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 10.497660311s ago: executing program 0 (id=3621): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000100)={{0xbde, 0x9}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r1, 0x10, 0x40, 0x1aa, 0x0, {{0x37, 0x4, 0x2, 0x33, 0xdc, 0x66, 0x0, 0xbb, 0x29, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0x15, 0x0, 0xb, [0xfff, 0x0, 0xa, 0xfffffff7, 0x8]}, @end, @lsrr={0x83, 0x7, 0x1b, [@remote]}, @noop, @timestamp={0x44, 0x28, 0x19, 0x0, 0xe, [0x10001, 0x9, 0xfffffffe, 0x4, 0x6, 0x7, 0xa8, 0x0, 0x6]}, @cipso={0x86, 0x76, 0x3, [{0x7, 0x4, "3194"}, {0x1, 0x12, "4349fdec060f0c5b831399dc19bf0909"}, {0x0, 0x10, "5eb5400b927a6316101320dcd5d9"}, {0x0, 0x10, "7026a8e8896eac820aa8ebd5de20"}, {0x1, 0x8, "c9f16e4ca08c"}, {0x1, 0x12, "fda300747b051a3984ecadf44437ed6e"}, {0x6, 0x11, "26003653f10bc0975db58980f79aba"}, {0x1, 0xf, "9fc2a098a33f40edf394725e4f"}]}, @noop, @cipso={0x86, 0x6}]}}}}}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x61f0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x50, r0, 0x50610000) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000895}, 0x880) socket(0x2d, 0x2, 0x0) close(0x4) 8.375953449s ago: executing program 4 (id=3643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0x58273004, 0x4, 0x6}, 0x10) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept(r1, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r6}, 0x8) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001100)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000001200)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x28c, 0x21, 0x400, 0x70bd29, 0x25dfdbfb, {0x16}, [@nested={0xd5, 0x96, 0x0, 0x1, [@typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x42}, @nested={0x4, 0x68}, @generic="f3ba95d05fdca521ead8c324eeaffdd275551843bdec56a29fc1ec5f1bae1cf1bedd41248c0aa5725a47bf4702041f98e744c98a52fddea2b0abe9f65a46aa6147df5d493a7696f0e8c55bf262715d3b4294ecceef42", @nested={0x4, 0x10e}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0x7fb}, @generic="708f3186d6abacab04c8f217e5dddc81ee2b5106c58e0aeca28082a3c657bec517f7829cc5b84e09919c458d56eaa64cfd5292f455ec1cefa47bbebcb0beb368dc7729e8f44ec917bb83d8", @nested={0x4, 0x117}, @nested={0x4, 0x116}]}, @nested={0xd0, 0x83, 0x0, 0x1, [@nested={0x4, 0x18}, @generic="3ba84d8d7acdb2b943e0c38b3ac73de377d200bfdc4e136f7ff0395c9d98d1c4b54847ba67481bef88dd802c2c68cea12d1df41168bd4f1e206e5757e723dfa5e88ef9bb6bf88f8bf3e8a9e8f67a2f84ee4393b01d27a38887316d7c04c15e26f7c48d57d5c13121f6056ad8473bdd494abb032feeeb854a6df4b14fea8dea60e4daf7d4bb8a2c45873cae46517792ac0fefca14b3d9aa5a37d4a499e68deacc0e9602f73793e6ab8652424b5f1d42d90cbeb378506bcc728e8edd36c49ecbe5", @typed={0x8, 0xc3, 0x0, 0x0, @fd=r7}]}, @typed={0x8, 0x33, 0x0, 0x0, @uid=r9}, @nested={0xc6, 0xdb, 0x0, 0x1, [@generic="992587b444640941aa361d21e98c25a0b7997d297ec81741c80cb3b3ff8b23c877300da575a62da1965fc0a37ce9a2f50c2c6b64bacf4bf6cd79599593519be41dadb95dcc0de1c4c09a9e51ab7ebcb1ab76ff81be", @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@broadcast}, @generic="1d31f9d2f87bf4f657a13378c099f445e5b567aabc91f68c07a85ad18eac71a988a3cd40a86b2b8570e59c4716d2ec8d8940cdde39bb5c3762eda9b663859351911a4efa2e6d4715490c98e81f58419de9c49f87a2b22fa8fb016c714a1e31c398", @nested={0x4, 0x2d}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000015c0)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001b80)={'syztnl2\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r8, 0x2f, 0x4, 0xc3, 0x7ff, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x1, 0x7800, 0x2, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={r7, 0xe0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000001d00)=[{}], 0x8, 0x10, &(0x7f0000001d40), &(0x7f0000001d80), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000001dc0)}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x4, '\x00', 0x0, r7, 0x0, 0x4, 0x4}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="030000004000000000000000000000d292000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="04000000020000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x13, 0x1c, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @alu={0x0, 0x1, 0x4, 0x6, 0x6, 0xfffffffffffffff8, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000001a00)='syzkaller\x00', 0x2, 0xad, &(0x7f0000001a40)=""/173, 0x40f00, 0x44, '\x00', r10, @fallback=0x24, r7, 0x8, &(0x7f0000001bc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x5, 0x7, 0x7}, 0x10, r11, r7, 0x3, &(0x7f0000002040)=[r12, r13, r7, r7], &(0x7f0000002080)=[{0x5, 0x5, 0x0, 0x3}, {0x5, 0x4, 0x9, 0x3}, {0x4, 0x1, 0x10, 0x6}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xb, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_fd], &(0x7f0000000200)='GPL\x00', 0x2, 0x54, &(0x7f0000000540)=""/84, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x6, 0x5, 0xfffffff5}, 0x10, r11, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x4, 0x1, 0x10, 0x5}], 0x10, 0x5}, 0x94) shutdown(r1, 0x2) close(r0) 8.363247466s ago: executing program 0 (id=3644): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004a00030000000000000000000a0080", @ANYRES32=0x0, @ANYBLOB="0080"], 0x24}}, 0x0) unshare(0x68040200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 7.432144888s ago: executing program 4 (id=3647): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000001200)={0x2, 0x4e22, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7280010902"], 0x5) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) 4.475385271s ago: executing program 4 (id=3650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r1 = socket(0x8, 0x3, 0x200) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) socket(0x8, 0x3, 0x200) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x48000) (async) 4.207081668s ago: executing program 4 (id=3652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffd12}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23"}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7"}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af"}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5"}, {&(0x7f00000017c0)="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"}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611572000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040), 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 3.303494909s ago: executing program 0 (id=3657): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x9, 0x6b, 0x0, 0xfe4}, {0x4, 0x5, 0x3, 0x8}, {0x4, 0xc, 0x1, 0x6}, {0x8, 0xae, 0x1, 0x10000}, {0x1, 0x0, 0xff, 0x800}]}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/226, 0xe2}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fdd3df25090000083c000380080001000000000014000200"], 0x50}}, 0x48040) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{}], "aafada"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0049f2"}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x58, 0x70, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x12, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x1}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x20040800) 3.300552672s ago: executing program 4 (id=3658): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @local}], 0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.125926943s ago: executing program 4 (id=3660): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$unix(0x1, 0x1, 0x0) (async) unshare(0x22020600) unshare(0x2a020400) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000300)=""/152, &(0x7f0000000100)=0x98) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket(0x11, 0x3, 0xffe) (async) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa010101, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x44) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.835672628s ago: executing program 0 (id=3661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00010000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$cgroup_int(r6, &(0x7f0000000280)='memory.min\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x20000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000080), &(0x7f00000000c0)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) accept(r0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000180)={@multicast1, @local, 0x0, "03889ffbb9111d0f51efc18b209190008fb8c91b8340258c3bf932063094c916", 0x3, 0xfffffff2, 0xfff, 0x40}, 0x3c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x1fff, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.520373523s ago: executing program 5 (id=3664): socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet_sctp(r3, &(0x7f0000002040)=[{&(0x7f0000000040)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="238307d08a0f1b538ff1f645fd848db0e39b89db", 0x14}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4040004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, r2, 0xffffffffffffffff, 0x4, 0x53, 0x7, "07cbdd3199047dc26d311f0f244b25ba35ea8f61cd07e107dab26da8d164f15b35c0b7669366c634dd2326e7f6dccdec8306910919e39811abd472ad0eab81", 0xd}, 0x60) accept4$nfc_llcp(r0, 0x0, 0x0, 0x80000) close(0x4) 2.313866475s ago: executing program 6 (id=3667): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x2, 0x2, 0x2, 0x800, 0x4e, 0x8, 0x38}, &(0x7f00000000c0)=0x9c) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000100)=0x7, 0x4) pselect6(0x40, &(0x7f0000000140)={0x629, 0x40, 0x3, 0x3ff, 0x7, 0x5, 0x5, 0x1}, &(0x7f0000000180)={0xe, 0x5, 0x1, 0x7, 0x81, 0x3, 0x401, 0xff}, &(0x7f00000001c0)={0x6, 0x9, 0x8, 0xfffffffffffff217, 0x695b, 0x60000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000]}, 0x8}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x5}}, 0x9, 0xb29}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x2, {{0x19, 0x4, 0x0, 0x35, 0x64, 0x64, 0x0, 0xf, 0x4, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0xb, 0xcb, [@rand_addr=0x64010101, @remote]}, @cipso={0x86, 0x43, 0xfffffffffffffffd, [{0x5, 0x6, 'i9#='}, {0x6, 0xd, "39450edcb2c4f0cc212862"}, {0xc, 0x4, "ca8e"}, {0x7, 0xf, "26b31754dbc0c9b71820216d48"}, {0x7, 0xf, "2ea20cac571781f05a4ded5e05"}, {0x7, 0x8, "b59b397521c8"}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xc1b, 0x1, 0x8, 0x6600, r3, 0x3063b2f, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x58, &(0x7f0000000580)}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000640)=""/165, &(0x7f0000000700)=0xa5) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'pim6reg\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000800)=0x1, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000840)={r1, 0x40}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000008c0)={r8, 0x1, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000900)={r8, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f00000009c0)=0x84) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000a00)={0x0, 0x101, 0x800, 0x2, 0x1, 0x3b6e, 0x1000, 0x7b0}, &(0x7f0000000a40)={0x3, 0x3f, 0xd, 0x5a3, 0x2, 0x3, 0x3a2f, 0xf}, &(0x7f0000000a80)={0xc1c, 0x5, 0x2, 0x0, 0x6, 0x3, 0x8, 0xffff}, &(0x7f0000000b00)={r9, r10+60000000}, &(0x7f0000000b80)={&(0x7f0000000b40)={[0x40]}, 0x8}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000bc0)={r8, @in={{0x2, 0x4e22, @loopback}}}, 0x84) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000d00)={r8, 0x81, 0x7, 0xfffffffc, 0x4, 0x5}, &(0x7f0000000d40)=0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000d80)={r8, 0x3, 0x8, 0xe, 0x6, 0x3}, &(0x7f0000000dc0)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r11) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000fc0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0x20, &(0x7f0000001180)={&(0x7f0000001080)=""/37, 0x25, 0x0, &(0x7f00000010c0)=""/186, 0xba}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x13, 0x27, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x2, 0x1, 0x1, 0xa, 0x5, 0x40, 0x12}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x101}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000f80)='GPL\x00', 0x9, 0x0, 0x0, 0x1f00, 0x0, '\x00', r4, @fallback=0x1b, r12, 0x8, &(0x7f0000001000)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0xe, 0x0, 0x1a1}, 0x10, r13, 0xffffffffffffffff, 0x7, &(0x7f0000002540)=[r3, 0xffffffffffffffff, r5, r3, r3], &(0x7f0000002580)=[{0x5, 0x3, 0x0, 0x5}, {0x4, 0x3, 0xa, 0x7}, {0x3, 0x2, 0x0, 0x9}, {0x4, 0x1, 0x7, 0x9}, {0x3, 0x3, 0xe, 0x5}, {0x5, 0x5, 0x5, 0x9}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x8}, 0x94) 2.18171822s ago: executing program 5 (id=3669): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x10, 0x0, 0x0, 0x336c}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003000000"], 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x8a, 0x5}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000640)="2ca4b9b71957e902cdc9b176a8075d57d4c59aaf39178e74df7034cee6141f581c2783a2856e646f8e90f37042512278db5eafcd2122de3728e3116d120aac1cd76629726cc7f2d64b6a718ba3aca914f6c567de6d766215a5ddfe8fc22c8bbb4c6e9ca0a6563c67c058540bbb55b29eecf836ac37d3dc5080421abb9f7fdc2c2346c9265004a7d450f7d2050e30647b0cc52d841199811eb1a13d984450722e496df3fd53aa8840a64527cc438ebc4085a21f301b77babe89b5b62881ba1a000000000000", 0xc5, 0x4040000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x101}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xfffffe7a, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3fffffff, 0x7}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) bind$nfc_llcp(r5, &(0x7f00000002c0)={0x27, r6, 0x1, 0x6, 0xf, 0xd, "be78cfa57e817ea319a62ec0bfdfcf2de9bba5893733ed95ed05b89b8618af60960e188af786544c1cc5e790a46d2c2e0b1ac76e243acc4de423b4c3c794af", 0x31}, 0x60) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffcd3, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048885}, 0x8814) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) shutdown(r3, 0x2) 2.038249814s ago: executing program 6 (id=3671): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x1, 0xa, 0x7, 0x20000, r2, 0x9, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003ac0)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_udplite(0x2, 0x2, 0x88) 1.903121499s ago: executing program 6 (id=3672): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000003200e73a837b00000071000000a1", 0x12, 0x0, 0x0, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, &(0x7f0000000080)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$nl_generic(0x11, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@delqdisc={0x11c, 0x25, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {0x5, 0xa}, {0xfff3, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x90000000}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xdb, 0x7f, 0x80, 0x2, 0x3, 0x9, 0xffffffff, 0x9}}, {0x16, 0x2, [0x7, 0x5, 0x7, 0x9, 0x8, 0x67, 0x3ff, 0xfffb, 0x2]}}, {{0x1c, 0x1, {0x8f, 0x9, 0x0, 0x9603, 0x1, 0x800, 0x359, 0x2}}, {0x8, 0x2, [0x7, 0x4a0]}}, {{0x1c, 0x1, {0x0, 0x9, 0x0, 0x7, 0x0, 0xdc5, 0xff, 0x6}}, {0x10, 0x2, [0x40, 0x5, 0xb67, 0x3, 0x2, 0x8]}}, {{0x1c, 0x1, {0x7, 0x9, 0x8, 0x5, 0x1, 0x0, 0xfffffff9, 0x4}}, {0xc, 0x2, [0xf, 0x3ff, 0x5, 0x7f]}}, {{0x1c, 0x1, {0x1, 0x22, 0x2315, 0x1, 0x0, 0x8, 0x3, 0x7}}, {0x12, 0x2, [0x6, 0xe940, 0x1, 0x0, 0xf, 0x7, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9aa}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x11c}}, 0x1) (async, rerun: 64) r4 = epoll_create1(0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000040001901feffffff00000000017c00000c004280081b36fbc097f7b04b00018006000600800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000280)={0x60002000}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x2b, 0x4004}, 0x20) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x448, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x8c28, 0x10, 0x5, 0x7f, 0x2, 0x93, 0x9, 0xb4d, 0xfffffff7, 0x1, 0x4, 0x4, 0xfffffffa, 0x0, 0xf29, 0x3, 0x40, 0x4, 0x7, 0x5, 0x0, 0x0, 0x1, 0x1, 0x8001, 0x7, 0xb, 0x0, 0x2, 0x7, 0xfe7, 0x1, 0x1808d6ff, 0x2, 0x9fa, 0x80, 0x8001, 0x280, 0xfffff5d1, 0xb61e, 0xd, 0x1ff, 0xb0, 0x84, 0x6, 0x1, 0x7, 0x2, 0x4, 0xa8, 0xfffffffd, 0x5, 0x5, 0x8, 0x1f, 0x2, 0x0, 0xff, 0x4, 0x4, 0x4, 0xf0e, 0xfffff001, 0x10005, 0x7, 0x7, 0x1, 0x8, 0xd, 0x9, 0x8001, 0x10, 0x3, 0x80000000, 0x0, 0x0, 0xf0c4, 0x4, 0x2, 0x8, 0x9, 0x4, 0xb, 0x5, 0x20, 0x5, 0xffffffff, 0x1ff, 0x3, 0x4, 0x1, 0xe5, 0x3, 0x1, 0x1, 0x3, 0x8, 0xffffffcf, 0x101, 0xf, 0x1e, 0x9, 0xffffffff, 0x2, 0x1, 0x9, 0xed19, 0x4, 0xc22d, 0x2, 0x3a9c, 0x1, 0x3ff, 0x1, 0x4, 0xc, 0x9, 0xfbc0, 0xffffffff, 0x80000000, 0xb6, 0x800002, 0x0, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7ff, 0x2, 0x7, 0x0, 0x9, 0x8, 0x0, 0x8, 0xd699, 0x8, 0xed, 0x5, 0x7, 0xfffffffb, 0x7, 0x5, 0x6, 0x0, 0xd6, 0x23, 0x1, 0x9, 0xe, 0x100, 0xb2, 0x3, 0x2, 0x4, 0x5, 0x7527, 0x7f, 0x4, 0x9a6b, 0x9, 0xfff, 0x4, 0x8faa, 0xf, 0x4, 0x8, 0xfb5, 0x4, 0x9, 0xc350, 0x1, 0x3, 0xcd6, 0x2, 0xf, 0xb, 0xfc, 0x0, 0x7, 0x3, 0x4a1, 0x8, 0x1, 0x6, 0x9, 0x1000, 0x85aa, 0x3f61, 0x280, 0x3d0e, 0x8000, 0x7, 0x1, 0x4, 0xffffffff, 0xfbee, 0xf, 0x8, 0x4, 0x1, 0x7f, 0x40, 0x3, 0x40, 0x7, 0x1, 0x3, 0x401, 0xfffffffe, 0xfffffff7, 0x80000001, 0x2, 0x0, 0x8, 0xaefd, 0x3, 0xfffffff7, 0x3, 0x463, 0x0, 0x5, 0x7, 0x9b, 0x6, 0x2, 0x3, 0x8c000000, 0x7, 0x7, 0xfff, 0xc0b2, 0x1, 0x8, 0x3, 0x7, 0x8, 0x8, 0x7fff, 0x8, 0x3, 0x7, 0x6, 0x4, 0x3, 0x267, 0x1ff, 0x7, 0x2, 0x10, 0x2, 0x5, 0x3, 0x6b0]}, @TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0xd4ff6e3348d9c09d}]}}]}, 0x448}}, 0x4000010) (async) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9, 0x10}, {0xa, 0x3}, {0x3, 0xfffa}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000000) 1.647681629s ago: executing program 5 (id=3674): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4623, @rand_addr=0x64010100}], 0x10) r2 = socket(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r3, 0x2) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4040880) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x0, 'SYNPROXY\x00', 0x0, {0x14, 0x7, 0x2}}}, {{@ipv6={@remote, @empty, [0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'ip6gretap0\x00', 'pim6reg1\x00', {}, {0xff}, 0x89, 0x8, 0x2, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x0, 'SYNPROXY\x00', 0x0, {0x4, 0x6c, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff18) r5 = socket(0x23, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x113, 0x40, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6370757365742006726c694d697420"], 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x3, 0x4) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.536324626s ago: executing program 6 (id=3675): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x6d, 0x0, 0x0, @pid}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x84) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x005'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x29, 0x4, 0x1, 0xd, 0xb8, 0x67, 0x0, 0x7, 0x1, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x14, 0x41, 0x1, 0x2, [{@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010100, 0x6}]}, @lsrr={0x83, 0x7, 0x9c, [@rand_addr=0x64010102]}, @noop, @rr={0x7, 0x17, 0xbf, [@multicast1, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x22, 0x1, 0x5, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x3}, {@rand_addr=0x64010100, 0x833}, {@rand_addr=0x64010100, 0x40}]}, @rr={0x7, 0x1b, 0xaf, [@rand_addr=0x64010102, @broadcast, @remote, @local, @private=0xa010101, @multicast2]}, @ssrr={0x89, 0x13, 0x54, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x1dd, 0x5, 0xc, 0xffff, 0x5ab6}}}, 0xc6) 1.291687604s ago: executing program 2 (id=3677): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0xc8, r0, 0x1, 0xffdffffd, 0xfffffffe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfc}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 1.156273319s ago: executing program 2 (id=3678): socket(0x11, 0xa, 0xffffff36) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 1.050519744s ago: executing program 2 (id=3679): socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000000000090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000140)=0x403a7, 0x4) 1.04373196s ago: executing program 6 (id=3680): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x80}]}}}]}, 0x54}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/226, 0xe2}, {0x0}], 0x2}, 0x6}, {{&(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000bc0)=""/188, 0xbc}, {&(0x7f0000000c80)=""/255, 0xff}, {&(0x7f0000000940)=""/34, 0x22}], 0x3, &(0x7f0000000ec0)=""/154, 0x9a}, 0x8}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x6, 0x4, 0x4, 0xa, 0x2004, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffe000) writev(r0, &(0x7f0000000540)=[{&(0x7f00000006c0)="3ca09559ce1b8e34d4e397aa1d8357639989c0ceb1d9a3a4d70dcd52b0e92edf9004aaa5d9a2ef269cacbbf8c9d358a2d98e5495e10ede367ecb1f23e8e2db158738cd7c1c08fa2811276077f79b3d8957443f247e9e7391eb2bb5871445220d33ef540ba6e5e743973452d79a921e8a76f898d694cbd4e5e5988b37456907c106904d3424e84d82668127e65bc807a285980684af1fd1c6a6fe83213b9afee2d1444a47c04f26607ad19557b42fa3f3ae04092b496cb03e30c6b422417af2da30", 0xc1}, {&(0x7f0000000100)="e6c4e9a42cf0de0aa17787876fe7581e00b06919a6d7bf8619a42be4fa88df0432a69b0f640c3c3c4aa8ab184174f1a3ef85579d2e321d76b7988c066ac67a", 0x3f}, {&(0x7f0000000200)="bc918564395e2cf044dc826b4f9da71d4e9954bf55266f9d2403dbd479b69b332a348654928b4c39b470ac1b6e02d948bde065fd6cb4233603bcf304dddcb5f2e8c6c100dbf69a6c1438d3d1cfbe4489e7ca87a03cc6760062351c062bf696d7046e95a97cdc6cbeea85fc83319d91905592723c9792256ef410bd8c2f9bf41d536d0065521e1525eac38464b955456d3a605662a6e0e91ea721e11d03169802a4f3fbf6b76ab9752900"/182, 0xb6}, {&(0x7f00000007c0)="786c968e24c54b60f2c03b11a7f9da8f72b839e382296e89bc58cc8766112dfeae0917fa30d59a257a52125fd92e0f18eb07bebd1ad2a671c44e1658e1f9ee2358b1cd3ca5964f1574d0f8b545fe3f83090ef73c59dc3aebdc0b1e7b93e39d4ebc8463bc1bc4fc0954535e27455b98ee48416e068f5584abdbf9186560c438e83fd68d3d96b741a0e334fe5d9cd8c440b3cd224eaeb4407d710fc10455f6d5be8e44899890366a587f133ac06d2c774a94c9b14b64fb942ca03cb0a75ebb4529976487bdde9e", 0xc6}, {&(0x7f0000000ac0)="27726475a8bb63b24857d7ecd314686971395c672876797f8d1d85000dbbfe6e658699cbe4ebe7886d698b8f489446b6b286ce05eab8156fdab12a212e69f38f8efe854a0f487c51b0b20095e5cbdbad27e4245f2a5f5cb6581401ea25ae06904108ec582cb72b81cf44b1f913a7df70c21361853aa9e0ae42bbee600d80ab7bf0978308202ab5d87bf2482f80c6a0d4b3b6bc9ee92b306113af6fc3e04b2143fa0ccee5ad89750d429e08e700be85e9598505c354bfa52a848c16b1a896f99d7fe99ebdfdf26a06b68d25ca9d22081b9100be1a2e5e297a110f627db6584d11a77b4333316d01aed2210b03e0d41275cdac", 0xf2}, {&(0x7f00000009c0)="52e6e7b9cc8c20deb22f5fca7137fcf04791624cd434d94ca13608af08d761e15cde9ab5054adbc9b0c95b5137fb5d431f11e593c5f057d0cbff87552f0e3a07aa61e8eaa3858fb73f2b1ebb201b7882c724d45a60adae52ccfb84e42570c1e2a26deb46c1708dc581c0f80194e489b1487582a01b9866a454ee0e8b995beb14ff9e81c73d7f1250764dbf59e0ba826757acf7464560e15c0438153465c1e5ece6a2216e0a170d7ae0b96010c45eb679789de89bf732983169087a108272e013ab387f", 0xc3}], 0x6) 655.242862ms ago: executing program 5 (id=3681): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x0, 0x2}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x6, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, '\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) pwrite64(r2, 0x0, 0x0, 0x40008001) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000007000000220000009538ceea3cd4621b58edfc2806c83ffb63d4a4fb68649d64e6183b1b6620236ce16cafbb854b1d624c5e9b627c1950cb1a6729f92f865522c055f710769eb0564bdc7c1d9f17669f2c7b0a59690babceae543c229d02ef05aa325f0a24"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x29, 0x44, 0x8, 0xffffff84, 0x10, @mcast1, @mcast2, 0x7800, 0x0, 0xfb71, 0x2}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x24000804, &(0x7f0000000200)={0x11, 0xf6, r8, 0x1, 0xff}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r5, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2f, 0x25dfdc01, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x32a, 0xffffffffffffffff, 0x8, 0x3}, 0x4, r12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44891}, 0x2400c800) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x88200080}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x200, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3d0bbca572d04321}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x408c4}, 0x8000) r13 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r13, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_buf(r13, 0x29, 0x39, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x27762807ea17ea17, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xe}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r15, {0xd}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0xffffffff, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) 600.484528ms ago: executing program 2 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) sendmsg$nl_generic(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xfffffff0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20008084) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x3e0, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffd38c}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7ec5de65a4b019b2301d5cd0f71a77e1f959053aa40da835af"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "211aff472ff531d9ffe4e4b3f45c8f81d02eca0cb9430b411b2fa7270da6e1695c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x15, 0x3, "d3917ef16d7491f4b2606cdda7b15ad3ba"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "ad239a6b1aff6065061c4d28b47366666ae1a8ac699b2a72e10854395455a3feba9149466731199467f8ef23471a9f8679219ff6e69f0ef4671e3093d717d57e4dd8ea3f544997e92e27f1384a03e0e3f606a67d45ba47cbf338fd9299b6e10bcbb06f59709593bca027e952ac6d511f5c4664cde0253e0425005804c307d750607c8412d666267d7e562a91cb7b52c430ec20afd5bc7db5d474aaf994250eb3ea2c1ec250fd80439c91fb775280c5a68d6299f8c6221917666ea36925e6153ecad0a23f2bde3e99b49a0ca0a78c98736cd6b4b9fdb506981805d98768bd020e2d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fbd3aa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x140000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5a9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea4}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4001}, 0x4) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}], 0x3, 0x2002, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000280)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x110}, 0x20008004) 455.233827ms ago: executing program 2 (id=3683): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="ac010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/104, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x1ac}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x40000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f38773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xfffffd00) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000104"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 320.318712ms ago: executing program 2 (id=3684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c1000000a08040228bd7000fbdbdf25000000010800e2", @ANYRES32, @ANYBLOB], 0x101c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r4, 0x0, 0x9}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448df, &(0x7f0000000b40)) preadv(r5, &(0x7f0000000040), 0x0, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd70003c02000002000000", @ANYBLOB], 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd70bcfcdbdf253000000015003500e69732c1fd919f20305674ac36cb353d01000000050600000300000005003300030000000500360000000000a0e2ab5ddda610196e43b81dea54b134b68be6193a9fbc49415ce669bd74ee89a94c1e28f5b61784924a5e9d2dfcf1b3464ce38a83593f3162c5e520e4b678ed92419b16"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c084) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'virt_wifi0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}}) 284.326458ms ago: executing program 5 (id=3685): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) 81.046716ms ago: executing program 6 (id=3686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a001000080000000000000008001f0000000000"], 0xd4}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r2, 0x0, r0}, 0x10) 0s ago: executing program 5 (id=3687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711872000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) sendmsg$sock(r1, &(0x7f0000001480)={&(0x7f0000000200)=@can={0x1d, r2, 0xf0}, 0x80, 0x0}, 0x811) socket(0x1d, 0x2, 0x6) (async) r3 = socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) (async) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) (async) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1820000000000000001108648176d29222000000000000003d7c43080a181100003cb82b9e97eaa1062eae1cf549c97b2cc4b14e81478bd066e6d68cfdc5408de971452d37bdf7d076bf3ddfda3249c9351d9eb8d5", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r8, 0x0, 0x0, 0x80000) socket$inet_sctp(0x2, 0x1, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x0, 0x2302, 0x0) (async) recvmmsg(r4, &(0x7f00000055c0), 0x0, 0x2302, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x1, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x0, @void}, 0x10) kernel console output (not intermixed with test programs): netdevsim5 netdevsim0: renamed from eth0 [ 574.088842][T14447] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.141267][T14447] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.161790][T14504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.170593][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.198267][T14504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.219366][T14447] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.231898][T14504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.241190][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.270351][T14504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.393846][T14504] hsr_slave_0: entered promiscuous mode [ 574.401230][T14504] hsr_slave_1: entered promiscuous mode [ 574.409214][T14504] debugfs: 'hsr0' already exists in 'hsr' [ 574.415869][T14504] Cannot create hsr debugfs directory [ 574.583904][ T6252] bond9: (slave macvlan2): failed to get link speed/duplex [ 574.904045][ T1113] bond9: (slave macvlan2): failed to get link speed/duplex [ 575.159266][T14447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.277161][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 575.303589][T14504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.356224][T14504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.389561][T14447] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.400858][T14504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 575.423430][T14504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.443229][ T1113] bond9: (slave macvlan2): failed to get link speed/duplex [ 575.488302][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.496049][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.541102][T14668] sctp: [Deprecated]: syz.4.2234 (pid 14668) Use of int in max_burst socket option. [ 575.541102][T14668] Use struct sctp_assoc_value instead [ 575.571368][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.579165][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.791287][T14684] syzkaller0: entered promiscuous mode [ 575.799001][T14684] syzkaller0: entered allmulticast mode [ 575.813591][ T3470] bond9: (slave macvlan2): failed to get link speed/duplex [ 576.013213][ T3470] bond9: (slave macvlan2): failed to get link speed/duplex [ 576.038056][T14504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.126266][T14504] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.185586][ T2063] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.192873][ T2063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.207979][ T2063] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.215393][ T2063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.511230][T14447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.676295][ T3470] bond9: (slave macvlan2): failed to get link speed/duplex [ 576.708101][T14689] wg1 speed is unknown, defaulting to 1000 [ 577.134417][T14208] bond9: (slave macvlan2): failed to get link speed/duplex [ 577.148446][T14704] tipc: Enabling of bearer rejected, failed to enable media [ 577.424225][ T6260] bond9: (slave macvlan2): failed to get link speed/duplex [ 577.774238][ T500] bond9: (slave macvlan2): failed to get link speed/duplex [ 577.806388][T14447] veth0_vlan: entered promiscuous mode [ 577.849331][T14504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.866399][T14732] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 577.889746][T14447] veth1_vlan: entered promiscuous mode [ 578.033011][T14732] 8021q: adding VLAN 0 to HW filter on device bond10 [ 578.077504][T14447] veth0_macvtap: entered promiscuous mode [ 578.168251][T14735] bond10: (slave gretap1): making interface the new active one [ 578.181500][T14735] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 578.196634][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 578.205251][T14447] veth1_macvtap: entered promiscuous mode [ 578.349067][T14447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.366387][ T500] bond9: (slave macvlan2): failed to get link speed/duplex [ 578.396859][T14447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.446384][ T3470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.459124][ T3470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.475480][ T3470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.511207][ T3470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.572973][ T6252] bond9: (slave macvlan2): failed to get link speed/duplex [ 578.572998][ T5837] Bluetooth: hci6: command 0x0405 tx timeout [ 578.694145][ T6252] bond9: (slave macvlan2): failed to get link speed/duplex [ 578.833384][ T6252] bond9: (slave macvlan2): failed to get link speed/duplex [ 578.936744][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.966442][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.990216][T14756] syzkaller1: entered promiscuous mode [ 579.003893][T14756] syzkaller1: entered allmulticast mode [ 579.199370][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.223148][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.242718][ T500] bond9: (slave macvlan2): failed to get link speed/duplex [ 579.255504][T14760] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 579.269478][T14737] wg1 speed is unknown, defaulting to 1000 [ 579.380831][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 579.764695][T14504] veth0_vlan: entered promiscuous mode [ 579.809672][T14504] veth1_vlan: entered promiscuous mode [ 579.898977][T14504] veth0_macvtap: entered promiscuous mode [ 579.912654][T14504] veth1_macvtap: entered promiscuous mode [ 579.947282][T14504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.974993][T14753] wg1 speed is unknown, defaulting to 1000 [ 579.987705][T14504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.110932][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.170578][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.230215][T14773] tipc: Enabling of bearer rejected, failed to enable media [ 580.237225][T14771] x_tables: duplicate underflow at hook 2 [ 580.256279][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.265690][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.485716][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.523818][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.690784][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.720005][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.427818][T14816] syzkaller0: entered promiscuous mode [ 581.455512][T14816] syzkaller0: entered allmulticast mode [ 581.504300][T14816] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2260'. [ 581.517510][T14822] can: request_module (can-proto-4) failed. [ 581.766469][ T30] audit: type=1800 audit(1765831532.235:5): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2268" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2369 res=0 errno=0 [ 581.791102][ T2063] net_ratelimit: 10 callbacks suppressed [ 581.791124][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 581.922924][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 581.964172][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2273'. [ 581.995677][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2273'. [ 582.042875][ T1113] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.153094][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.276122][ T500] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.412658][ T500] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.577445][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.658266][T14886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2283'. [ 582.752844][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.872837][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 582.992740][ T1113] bond9: (slave macvlan2): failed to get link speed/duplex [ 583.117988][T14899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2288'. [ 583.222783][T14877] wg1 speed is unknown, defaulting to 1000 [ 583.339978][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2289'. [ 583.735569][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 583.792349][T14920] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2296'. [ 583.848089][T14922] xt_connbytes: Forcing CT accounting to be enabled [ 583.934877][T14926] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 583.972503][T14926] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2298'. [ 584.503551][T14939] sctp: [Deprecated]: syz.2.2301 (pid 14939) Use of int in max_burst socket option deprecated. [ 584.503551][T14939] Use struct sctp_assoc_value instead [ 585.307556][T14978] netlink: 'syz.2.2312': attribute type 62 has an invalid length. [ 587.319524][T14981] ipvlan2: entered promiscuous mode [ 587.442596][ T1149] net_ratelimit: 13 callbacks suppressed [ 587.442620][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 587.520702][T15005] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2318'. [ 587.562664][T15005] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2318'. [ 587.623418][ T6258] bond9: (slave macvlan2): failed to get link speed/duplex [ 587.645151][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 587.693146][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'. [ 587.785527][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 587.900334][T15028] IPVS: length: 157 != 389961661656 [ 587.902732][ T3470] bond9: (slave macvlan2): failed to get link speed/duplex [ 588.022556][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 588.133155][ T6251] bond9: (slave macvlan2): failed to get link speed/duplex [ 588.243007][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 588.372857][ T6251] bond9: (slave macvlan2): failed to get link speed/duplex [ 588.397714][T15022] wg1 speed is unknown, defaulting to 1000 [ 588.563746][T15051] delete_channel: no stack [ 588.945707][T15049] team0 (unregistering): Port device team_slave_0 removed [ 588.981575][T15049] team0 (unregistering): Port device team_slave_1 removed [ 589.061241][T15033] wg1 speed is unknown, defaulting to 1000 [ 589.092641][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 589.144648][T15065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 589.263379][T15068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2336'. [ 589.509620][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2335'. [ 589.611217][T15071] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 589.630570][T15071] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 589.666305][T15071] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 589.902697][ T1149] bond9: (slave macvlan2): failed to get link speed/duplex [ 590.911569][T15105] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2345'. [ 590.967339][T15105] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2345'. [ 591.283665][T15121] syzkaller0: entered promiscuous mode [ 591.300262][T15121] syzkaller0: entered allmulticast mode [ 591.391821][T15126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2351'. [ 592.300094][T15089] wg1 speed is unknown, defaulting to 1000 [ 592.319234][T15150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2356'. [ 592.536373][ T2063] net_ratelimit: 10 callbacks suppressed [ 592.536394][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 592.586579][T15160] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2360'. [ 592.703579][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 592.852824][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 592.911506][T15180] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 593.074342][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 593.208165][T15180] 8021q: adding VLAN 0 to HW filter on device bond10 [ 593.243307][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 593.350476][T15185] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 593.395198][T15185] bond10: (slave batadv1): making interface the new active one [ 593.434024][T15185] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 593.751351][T15190] bond10 (unregistering): (slave batadv1): Releasing active interface [ 593.766431][T15190] bond10 (unregistering): Released all slaves [ 593.801942][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 593.923041][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 594.045432][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 594.073899][T15216] syzkaller0: entered promiscuous mode [ 594.090145][T15216] syzkaller0: entered allmulticast mode [ 594.178361][T15216] tipc: Enabled bearer , priority 0 [ 594.233095][T15215] tipc: Resetting bearer [ 594.288815][T15215] tipc: Disabling bearer [ 594.323401][ T3072] bond9: (slave macvlan2): failed to get link speed/duplex [ 594.462881][ T6261] bond9: (slave macvlan2): failed to get link speed/duplex [ 594.525885][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2379'. [ 594.593078][ T6260] bond9: (slave macvlan2): failed to get link speed/duplex [ 594.792632][ T1113] bond9: (slave macvlan2): failed to get link speed/duplex [ 595.067766][T15262] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2384'. [ 595.184783][T15258] Cannot find add_set index 2 as target [ 595.334498][T15233] wg1 speed is unknown, defaulting to 1000 [ 595.343815][T15271] tipc: Enabled bearer , priority 0 [ 595.373344][T15271] syzkaller0: entered promiscuous mode [ 595.392918][T15271] syzkaller0: entered allmulticast mode [ 595.590858][T15278] netlink: 'syz.0.2391': attribute type 1 has an invalid length. [ 595.671009][T15279] tipc: Resetting bearer [ 595.726338][T15270] tipc: Resetting bearer [ 595.777855][T15270] tipc: Disabling bearer [ 595.919789][T15236] wg1 speed is unknown, defaulting to 1000 [ 595.921048][T15288] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2395'. [ 595.969795][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'. [ 595.987010][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'. [ 596.015455][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2395'. [ 596.239232][T15299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.247305][T15299] IPv6: NLM_F_CREATE should be set when creating new route [ 596.255286][T15299] IPv6: NLM_F_CREATE should be set when creating new route [ 596.562123][T15302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2398'. [ 596.572736][T15302] block nbd0: reconnected socket [ 596.581374][ T5837] block nbd0: Receive control failed (result -32) [ 596.599950][T15273] wg1 speed is unknown, defaulting to 1000 [ 596.849841][T15311] : entered promiscuous mode [ 599.843269][ T6257] net_ratelimit: 9 callbacks suppressed [ 599.843291][ T6257] bond9: (slave macvlan2): failed to get link speed/duplex [ 599.983178][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 600.132418][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 600.223501][T15321] wg1 speed is unknown, defaulting to 1000 [ 600.388534][T15339] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2407'. [ 600.469764][T15342] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 600.681392][T15343] pim6reg1: entered allmulticast mode [ 600.698402][T15349] vlan3: entered promiscuous mode [ 600.706829][T15349] vlan3: entered allmulticast mode [ 600.712092][T15349] geneve1: entered allmulticast mode [ 600.803498][ T3072] bond9: (slave macvlan2): failed to get link speed/duplex [ 600.930827][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 601.216812][ T3470] bond9: (slave macvlan2): failed to get link speed/duplex [ 601.260421][T15372] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2418'. [ 601.342099][T15372] netlink: 'syz.2.2418': attribute type 12 has an invalid length. [ 601.388174][ T6260] bond9: (slave macvlan2): failed to get link speed/duplex [ 601.505376][T11312] bond9: (slave macvlan2): failed to get link speed/duplex [ 601.556263][T15380] macsec1: entered promiscuous mode [ 601.562154][T15380] macsec1: entered allmulticast mode [ 601.600303][T15387] netlink: 'syz.0.2424': attribute type 12 has an invalid length. [ 601.642859][ T6260] bond9: (slave macvlan2): failed to get link speed/duplex [ 601.802715][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 601.949198][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 602.089478][T15397] veth7: entered promiscuous mode [ 602.134231][T15400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2429'. [ 602.298864][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 602.313491][T15414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'. [ 602.341344][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2429'. [ 602.776052][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 602.829212][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 602.836153][T15434] team1: entered promiscuous mode [ 602.845464][T15434] team1: entered allmulticast mode [ 602.851974][T15434] 8021q: adding VLAN 0 to HW filter on device team1 [ 602.909368][T15439] team2: entered promiscuous mode [ 602.915632][T15439] team2: entered allmulticast mode [ 602.928398][T15439] 8021q: adding VLAN 0 to HW filter on device team2 [ 603.241128][T15456] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2445'. [ 604.123027][T15461] wg1 speed is unknown, defaulting to 1000 [ 604.309441][T15502] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 604.737088][T15496] wg1 speed is unknown, defaulting to 1000 [ 605.183886][T15519] bond10: option lp_interval: invalid value (0) [ 605.191106][T15519] bond10: option lp_interval: allowed values 1 - 2147483647 [ 605.202147][T15519] bond10 (unregistering): Released all slaves [ 605.342848][T11312] net_ratelimit: 22 callbacks suppressed [ 605.342873][T11312] bond9: (slave macvlan2): failed to get link speed/duplex [ 605.466875][T14208] bond9: (slave macvlan2): failed to get link speed/duplex [ 605.490449][T15540] __nla_validate_parse: 4 callbacks suppressed [ 605.490470][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 605.592459][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 605.677862][T15540] netlink: 'syz.4.2467': attribute type 3 has an invalid length. [ 605.688442][T15540] netlink: 'syz.4.2467': attribute type 1 has an invalid length. [ 605.736556][T14208] bond9: (slave macvlan2): failed to get link speed/duplex [ 605.932932][T14208] bond9: (slave macvlan2): failed to get link speed/duplex [ 605.996043][T15559] x_tables: duplicate underflow at hook 1 [ 606.063488][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 606.187602][T15228] bond9: (slave macvlan2): failed to get link speed/duplex [ 606.299250][T15569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'. [ 606.315542][T15228] bond9: (slave macvlan2): failed to get link speed/duplex [ 606.326291][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2472'. [ 606.457049][T15571] vlan2: entered promiscuous mode [ 606.463385][T15571] team0: entered promiscuous mode [ 606.468642][T15571] team_slave_0: entered promiscuous mode [ 606.483920][T15571] team_slave_1: entered promiscuous mode [ 606.515799][ T6257] bond9: (slave macvlan2): failed to get link speed/duplex [ 606.655134][ T6257] bond9: (slave macvlan2): failed to get link speed/duplex [ 606.667781][T15581] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2476'. [ 606.986799][T15590] macsec1: left promiscuous mode [ 607.126341][T15607] netlink: 'syz.5.2483': attribute type 23 has an invalid length. [ 607.448331][T15613] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 607.713251][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2488'. [ 607.993309][T15633] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2493'. [ 608.023618][T15633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2493'. [ 608.546022][T15668] tipc: Enabling of bearer rejected, failed to enable media [ 608.733435][T15679] netlink: 'syz.6.2503': attribute type 1 has an invalid length. [ 608.915404][T15689] bond1: entered promiscuous mode [ 608.953116][T15689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.139278][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2508'. [ 609.169486][T15677] wg1 speed is unknown, defaulting to 1000 [ 609.652631][T15720] netlink: 'syz.6.2513': attribute type 1 has an invalid length. [ 609.674187][T15720] netlink: 'syz.6.2513': attribute type 3 has an invalid length. [ 609.714713][T15720] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2513'. [ 610.406464][T11312] net_ratelimit: 26 callbacks suppressed [ 610.406489][T11312] bond9: (slave macvlan2): failed to get link speed/duplex [ 610.517058][T15724] wg1 speed is unknown, defaulting to 1000 [ 610.538258][T15748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2520'. [ 610.714190][T15755] batman_adv: batadv0: Adding interface: ipvlan2 [ 610.721527][T15755] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.751986][T15755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.766081][T15755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.779097][T15755] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 610.786706][T15764] nbd: couldn't find device at index 536870912 [ 610.964489][ T6261] bond9: (slave macvlan2): failed to get link speed/duplex [ 610.969210][T15770] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 611.068778][T15772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 611.085287][ T6261] bond9: (slave macvlan2): failed to get link speed/duplex [ 611.202822][ T6251] bond9: (slave macvlan2): failed to get link speed/duplex [ 611.279013][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2530'. [ 611.307123][T15782] x_tables: duplicate underflow at hook 3 [ 611.331837][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2531'. [ 611.342079][ T6251] bond9: (slave macvlan2): failed to get link speed/duplex [ 611.462842][ T6261] bond9: (slave macvlan2): failed to get link speed/duplex [ 611.572778][ T6261] bond9: (slave macvlan2): failed to get link speed/duplex [ 611.610560][T15797] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2534'. [ 611.666775][T15799] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 611.682353][ T6257] bond9: (slave macvlan2): failed to get link speed/duplex [ 611.728334][T15802] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2536'. [ 611.851484][T15805] tipc: Started in network mode [ 611.886176][T15805] tipc: Node identity 666132694fd8, cluster identity 4711 [ 611.984954][T15805] tipc: Enabled bearer , priority 0 [ 612.011036][T15806] tipc: Enabling of bearer rejected, already enabled [ 612.195738][T15827] netlink: 'syz.2.2538': attribute type 13 has an invalid length. [ 612.291146][T15805] syzkaller0: entered promiscuous mode [ 612.300066][T15805] syzkaller0: entered allmulticast mode [ 612.352824][ T6250] bond9: (slave macvlan2): failed to get link speed/duplex [ 612.436458][T15806] tipc: Resetting bearer [ 612.496684][T15806] tipc: Disabling bearer [ 612.860990][T15851] netlink: 'syz.0.2547': attribute type 3 has an invalid length. [ 612.871299][T15852] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2548'. [ 612.881853][T15852] 0ªîf„X¹¦: renamed from gretap0 (while UP) [ 612.911027][T15852] 0ªîf„X¹¦: entered allmulticast mode [ 612.925377][T15854] netlink: 'syz.0.2547': attribute type 3 has an invalid length. [ 612.934502][T15819] wg1 speed is unknown, defaulting to 1000 [ 612.964243][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 612.986721][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 613.028199][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 613.101818][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2549'. [ 613.355366][T15863] netlink: 'syz.0.2551': attribute type 1 has an invalid length. [ 613.578534][T15872] : renamed from veth0_vlan (while UP) [ 613.795600][T15816] wg1 speed is unknown, defaulting to 1000 [ 614.299830][T15866] wg1 speed is unknown, defaulting to 1000 [ 614.911431][T15900] sock: sock_timestamping_bind_phc: sock not bind to device [ 615.432824][T11312] net_ratelimit: 17 callbacks suppressed [ 615.432849][T11312] bond9: (slave macvlan2): failed to get link speed/duplex [ 615.572815][T11312] bond9: (slave macvlan2): failed to get link speed/duplex [ 615.661231][T15927] bridge0: entered promiscuous mode [ 615.669792][T15927] bridge0: port 3(macvtap1) entered blocking state [ 615.677203][T15927] bridge0: port 3(macvtap1) entered disabled state [ 615.687912][T15927] macvtap1: entered allmulticast mode [ 615.695549][T15927] bridge0: entered allmulticast mode [ 615.706407][T15927] macvtap1: left allmulticast mode [ 615.712884][T15927] bridge0: left allmulticast mode [ 615.744000][T15927] bridge0: left promiscuous mode [ 615.835590][T11312] bond9: (slave macvlan2): failed to get link speed/duplex [ 615.983989][ T6251] bond9: (slave macvlan2): failed to get link speed/duplex [ 616.097308][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 616.113192][T15953] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 616.264625][ T6251] bond9: (slave macvlan2): failed to get link speed/duplex [ 616.368273][T15957] __nla_validate_parse: 2 callbacks suppressed [ 616.368295][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2573'. [ 616.522929][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 616.674237][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 616.717849][T15970] netlink: 'syz.5.2578': attribute type 9 has an invalid length. [ 616.881166][T15978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2577'. [ 616.974095][ T2063] bond9: (slave macvlan2): failed to get link speed/duplex [ 617.103488][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 618.566069][T16046] netlink: 'syz.5.2594': attribute type 11 has an invalid length. [ 618.588984][T16046] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2594'. [ 618.840959][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2597'. [ 619.051002][T16074] batadv_slave_1: entered promiscuous mode [ 619.395113][T16086] netlink: 'syz.5.2603': attribute type 10 has an invalid length. [ 619.440367][T16086] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 619.465623][T16086] team0: Port device netdevsim0 added [ 619.591351][T16097] wireguard0: entered promiscuous mode [ 619.641030][T16097] wireguard0: entered allmulticast mode [ 619.739666][T16069] wg1 speed is unknown, defaulting to 1000 [ 619.816779][T16068] batadv_slave_1: left promiscuous mode [ 620.544597][T16115] netlink: 'syz.6.2609': attribute type 1 has an invalid length. [ 620.705745][T16115] bond1 (unregistering): Released all slaves [ 620.734187][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2609'. [ 620.883290][T16130] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2609'. [ 621.133101][T11311] net_ratelimit: 25 callbacks suppressed [ 621.133126][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 621.373492][T16041] bond9: (slave macvlan2): failed to get link speed/duplex [ 621.503180][ T3072] bond9: (slave macvlan2): failed to get link speed/duplex [ 621.525929][T16101] wg1 speed is unknown, defaulting to 1000 [ 621.529434][T16164] netlink: 'syz.4.2619': attribute type 12 has an invalid length. [ 621.744037][T16045] bond9: (slave macvlan2): failed to get link speed/duplex [ 621.873482][T16045] bond9: (slave macvlan2): failed to get link speed/duplex [ 622.007334][T11311] bond9: (slave macvlan2): failed to get link speed/duplex [ 622.182778][ T3072] bond9: (slave macvlan2): failed to get link speed/duplex [ 622.297963][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 622.400131][T16102] wg1 speed is unknown, defaulting to 1000 [ 622.510601][ T3072] bond9: (slave macvlan2): failed to get link speed/duplex [ 622.533578][T16199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2628'. [ 622.560103][T16199] nbd: must specify at least one socket [ 622.567010][T16198] tap0: tun_chr_ioctl cmd 1074025677 [ 622.573510][T16198] tap0: linktype set to 0 [ 622.608932][T16212] netlink: 'syz.4.2631': attribute type 3 has an invalid length. [ 622.653333][T16208] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2631'. [ 622.945076][T16218] netlink: 'syz.4.2632': attribute type 9 has an invalid length. [ 623.143580][T16225] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2633'. [ 623.171492][T16225] xt_hashlimit: max too large, truncated to 1048576 [ 623.182792][ T6252] bond9: (slave macvlan2): failed to get link speed/duplex [ 623.202907][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2636'. [ 623.298222][T16224] syzkaller0: entered promiscuous mode [ 623.328497][T16224] syzkaller0: entered allmulticast mode [ 623.439632][T16238] ksmbd: Unknown IPC event: 3, ignore. [ 623.728174][T16241] netlink: 'syz.6.2639': attribute type 4 has an invalid length. [ 624.578834][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 626.417556][T16259] vxcan4: entered allmulticast mode [ 626.675295][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 627.048892][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2656'. [ 627.075094][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2656'. [ 627.553066][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 627.598151][T16321] netlink: 'syz.2.2663': attribute type 142 has an invalid length. [ 627.804758][T16329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2665'. [ 627.894175][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 630.114324][T16329] mac80211_hwsim hwsim4 wlan1: Device is already in use. [ 630.136442][T16334] : entered promiscuous mode [ 630.166539][T16336] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 630.791193][T16381] dvmrp0: entered allmulticast mode [ 631.086059][T16396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.101411][T16325] wg1 speed is unknown, defaulting to 1000 [ 631.124318][T16396] netlink: 'syz.5.2680': attribute type 13 has an invalid length. [ 631.459592][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.467781][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.786346][T16396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.816157][T16396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.124843][T16415] syzkaller1: entered promiscuous mode [ 632.130526][T16415] syzkaller1: entered allmulticast mode [ 632.138873][T11311] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.159511][T11311] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.210291][T11311] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.229714][T11311] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.350467][T16431] batman_adv: batadv0: Adding interface: dummy0 [ 632.358394][T16431] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.386993][T16431] batman_adv: batadv0: Interface activated: dummy0 [ 632.450372][T16434] batadv0: mtu less than device minimum [ 632.474591][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.487971][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.500344][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.512585][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.524862][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.537312][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.549632][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.562096][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 633.069100][T16454] sctp: [Deprecated]: syz.6.2691 (pid 16454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.069100][T16454] Use struct sctp_sack_info instead [ 633.127261][T16454] sctp: [Deprecated]: syz.6.2691 (pid 16454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.127261][T16454] Use struct sctp_sack_info instead [ 633.201764][T16433] wg1 speed is unknown, defaulting to 1000 [ 633.480027][T16470] netlink: 'syz.6.2696': attribute type 1 has an invalid length. [ 633.574680][T16470] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 633.755227][T16483] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2700'. [ 633.784255][T16483] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2700'. [ 634.063767][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 635.001860][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2710'. [ 635.502811][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 636.164578][T16559] netlink: 'syz.6.2719': attribute type 39 has an invalid length. [ 636.231383][T16563] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 636.286605][T16559] hsr_slave_1 (unregistering): left promiscuous mode [ 636.354102][T16565] tipc: Enabled bearer , priority 0 [ 636.397683][T16565] tipc: Disabling bearer [ 636.584935][T16579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 636.639834][T16583] tipc: Enabled bearer , priority 0 [ 636.669514][T16583] syzkaller0: entered promiscuous mode [ 636.692034][T16583] syzkaller0: entered allmulticast mode [ 636.786275][T16583] tipc: Resetting bearer [ 636.806440][T16583] net_ratelimit: 14 callbacks suppressed [ 636.806462][T16583] netlink: zone id is out of range [ 636.826290][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 636.838227][T16592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.857359][T16582] tipc: Resetting bearer [ 636.904391][T16582] tipc: Disabling bearer [ 636.946107][T16590] syzkaller0: entered promiscuous mode [ 636.953328][T16590] syzkaller0: entered allmulticast mode [ 637.495900][T16614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'. [ 637.544447][T16616] netlink: 'syz.6.2733': attribute type 1 has an invalid length. [ 637.617328][T16616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.626965][T16622] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 637.783302][T16616] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 637.833121][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 637.853533][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 637.855783][ T6257] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 637.887279][T16628] 8021q: VLANs not supported on ip6_vti0 [ 637.944932][T16631] 8021q: VLANs not supported on ip6_vti0 [ 637.992946][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.042783][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.109070][ T2063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.152722][T16045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.167518][T16648] netlink: 'syz.6.2738': attribute type 10 has an invalid length. [ 638.195444][T16045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.217581][T16651] pim6reg: entered allmulticast mode [ 638.232286][ T1113] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.272693][ T1113] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 638.383570][T16656] pim6reg: left allmulticast mode [ 638.607322][T16639] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 638.622568][T16639] team0: Port device netdevsim0 removed [ 638.804716][T16638] wg1 speed is unknown, defaulting to 1000 [ 639.244765][T16684] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2747'. [ 639.287737][T16690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2747'. [ 639.344170][T16631] wg1 speed is unknown, defaulting to 1000 [ 639.359188][T16687] syzkaller0: entered promiscuous mode [ 639.365448][T16687] syzkaller0: entered allmulticast mode [ 639.605850][T16696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 640.068970][ T5837] Bluetooth: hci6: link tx timeout [ 640.080639][ T5837] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 640.247705][T16710] netlink: 'syz.2.2753': attribute type 58 has an invalid length. [ 640.277592][T16710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2753'. [ 640.289572][T16712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2751'. [ 640.759467][T16671] wg1 speed is unknown, defaulting to 1000 [ 641.473726][T16667] wg1 speed is unknown, defaulting to 1000 [ 641.558413][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'. [ 641.581132][T16695] wg1 speed is unknown, defaulting to 1000 [ 641.776861][T16732] macvtap2: entered promiscuous mode [ 641.783536][T16732] macvtap2: entered allmulticast mode [ 641.788963][T16732] team0: entered allmulticast mode [ 641.795651][T16732] team_slave_0: entered allmulticast mode [ 641.801507][T16732] team_slave_1: entered allmulticast mode [ 641.808119][T16732] geneve0: entered allmulticast mode [ 641.814752][T16732] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 641.816448][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 641.834678][ T6257] net_ratelimit: 102 callbacks suppressed [ 641.834701][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 641.854649][ T6257] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.866533][T16733] macvtap2: left promiscuous mode [ 641.871827][T16733] macvtap2: left allmulticast mode [ 641.888974][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2758'. [ 641.942275][T16733] team0: left allmulticast mode [ 641.947455][T16733] team_slave_0: left allmulticast mode [ 641.976763][T16733] team_slave_1: left allmulticast mode [ 641.983177][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 641.998563][T16733] geneve0: left allmulticast mode [ 642.022783][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.053365][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.072756][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.112881][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.135305][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.162775][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.172894][ T5837] Bluetooth: hci6: command 0x0405 tx timeout [ 642.213999][ T2063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 642.578683][T16745] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 642.820956][T16748] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 644.667021][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2773'. [ 644.813110][T16807] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 644.820130][T16807] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 644.943532][T16809] syzkaller0: entered promiscuous mode [ 644.993095][T16809] syzkaller0: entered allmulticast mode [ 645.123247][T16822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2782'. [ 645.559296][T16844] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 645.588686][T16848] batman_adv: batadv0: Adding interface: macsec1 [ 645.595879][T16848] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.625355][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.637328][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.643203][T16853] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2792'. [ 645.648844][T16848] batman_adv: batadv0: Interface activated: macsec1 [ 645.809935][T16860] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2794'. [ 646.163161][ T30] audit: type=1800 audit(1765831596.635:6): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2802" name="blkio.bfq.time_recursive" dev="tmpfs" ino=519 res=0 errno=0 [ 646.285799][T16885] netlink: 'syz.0.2798': attribute type 33 has an invalid length. [ 646.294544][T16885] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2798'. [ 646.621657][T16902] syzkaller0: entered promiscuous mode [ 646.638233][T16902] syzkaller0: entered allmulticast mode [ 646.687838][T16911] ip6gre1: entered allmulticast mode [ 646.844525][T16921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2812'. [ 646.853834][T16041] net_ratelimit: 137 callbacks suppressed [ 646.853853][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 646.875278][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 646.922454][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 646.943959][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 646.975023][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 646.996395][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2813'. [ 647.002853][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 647.032666][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 647.059171][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 647.084753][T16048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 647.112717][T16048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.750393][T16923] tipc: Enabled bearer , priority 0 [ 648.757703][T16877] wg1 speed is unknown, defaulting to 1000 [ 648.882010][T16923] tipc: Disabling bearer [ 648.996501][T16933] bond_slave_0: entered promiscuous mode [ 649.002795][T16933] bond_slave_1: entered promiscuous mode [ 649.009072][T16933] macvlan2: entered promiscuous mode [ 649.015661][T16933] bond0: entered promiscuous mode [ 649.041666][T16933] macvlan2: entered allmulticast mode [ 649.068366][T16933] bond0: entered allmulticast mode [ 649.077929][T16933] bond_slave_0: entered allmulticast mode [ 649.084365][T16933] bond_slave_1: entered allmulticast mode [ 649.094313][T16933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.105877][T16933] bond0: left allmulticast mode [ 649.110897][T16933] bond_slave_0: left allmulticast mode [ 649.117943][T16933] bond_slave_1: left allmulticast mode [ 649.126908][T16933] bond0: left promiscuous mode [ 649.134139][T16933] bond_slave_0: left promiscuous mode [ 649.139654][T16933] bond_slave_1: left promiscuous mode [ 649.448790][T16958] netlink: 'syz.2.2823': attribute type 1 has an invalid length. [ 649.492838][T16958] netlink: 'syz.2.2823': attribute type 3 has an invalid length. [ 649.525449][T16958] netlink: 'syz.2.2823': attribute type 2 has an invalid length. [ 649.586381][T16958] netlink: 'syz.2.2823': attribute type 3 has an invalid length. [ 649.616759][T16958] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2823'. [ 650.360237][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2829'. [ 650.503764][T16993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2832'. [ 650.583226][T16993] nbd: socks must be embedded in a SOCK_ITEM attr [ 650.624092][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2832'. [ 650.643340][T16994] nbd: device at index 64 is going down [ 650.649893][T17001] netlink: 'syz.4.2833': attribute type 8 has an invalid length. [ 650.659951][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'. [ 650.745011][T17002] netlink: 'syz.4.2833': attribute type 8 has an invalid length. [ 650.788727][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'. [ 650.849739][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 651.424449][T17032] netlink: 'syz.5.2837': attribute type 33 has an invalid length. [ 651.442579][T17032] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2837'. [ 651.862368][T16041] net_ratelimit: 158 callbacks suppressed [ 651.862390][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 651.915299][T16041] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.052991][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 652.060778][ T6257] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.134187][T17036] block nbd2: shutting down sockets [ 652.206771][T17008] wg1 speed is unknown, defaulting to 1000 [ 652.212492][T15228] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 652.220670][T15228] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.380671][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 652.442513][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 652.463687][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 652.512758][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 652.866340][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'. [ 653.017408][T17074] netlink: 'syz.6.2848': attribute type 9 has an invalid length. [ 653.226564][T17083] geneve5: entered promiscuous mode [ 653.237634][T16045] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.256453][T16045] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.286036][T17083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 653.329666][T16045] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.398168][T17088] netlink: 'syz.2.2852': attribute type 3 has an invalid length. [ 653.423592][T17095] netlink: 'syz.2.2852': attribute type 3 has an invalid length. [ 653.481224][T17032] wg1 speed is unknown, defaulting to 1000 [ 654.048459][T17110] netlink: 'syz.6.2856': attribute type 30 has an invalid length. [ 654.805139][T17106] wg1 speed is unknown, defaulting to 1000 [ 654.866696][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 654.877802][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 654.888574][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 654.897376][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 654.905480][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 655.101990][T17083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 655.112724][T17083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 655.239608][T17083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 655.261906][T17083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 655.334822][T17083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 655.346638][T17083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 655.600727][T15228] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.621015][T15228] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 655.703682][T15228] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.723855][T15228] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 655.791059][ T6258] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.810619][ T6258] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 655.922632][T16041] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.930925][T16041] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 655.954406][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2863'. [ 656.019682][T17142] netlink: 'syz.6.2865': attribute type 4 has an invalid length. [ 656.038082][T17141] netlink: 'syz.6.2865': attribute type 4 has an invalid length. [ 656.106992][T17148] netlink: 'syz.6.2865': attribute type 4 has an invalid length. [ 656.130348][T17121] wg1 speed is unknown, defaulting to 1000 [ 656.829588][T17121] chnl_net:caif_netlink_parms(): no params data found [ 656.900990][T16045] net_ratelimit: 127 callbacks suppressed [ 656.901013][T16045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 656.943863][T11311] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 656.974314][ T7897] Bluetooth: hci2: command tx timeout [ 657.003100][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.032820][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.073038][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.123921][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.172319][ T6258] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.276219][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 657.302631][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.322786][ T6252] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.337276][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'. [ 657.363038][T16045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 657.403256][T17204] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 657.411046][T17204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2881'. [ 657.464445][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.471788][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.493530][T17121] bridge_slave_0: entered allmulticast mode [ 657.511752][T17121] bridge_slave_0: entered promiscuous mode [ 657.523866][T17209] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2881'. [ 657.530504][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.534295][T17209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2881'. [ 657.551174][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.560630][T17121] bridge_slave_1: entered allmulticast mode [ 657.569650][T17121] bridge_slave_1: entered promiscuous mode [ 657.577963][T17138] wg1 speed is unknown, defaulting to 1000 [ 657.857403][T17121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.898282][T17214] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2883'. [ 657.941107][T17121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.051831][T17199] wg1 speed is unknown, defaulting to 1000 [ 658.100170][T17216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 658.111437][T17121] team0: Port device team_slave_0 added [ 658.145327][T17121] team0: Port device team_slave_1 added [ 658.271279][T17121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.278760][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.305690][T17121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.400675][T17222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2886'. [ 658.411688][T17121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.438458][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.486172][T17228] netlink: 'syz.4.2888': attribute type 10 has an invalid length. [ 658.488476][T17121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.509258][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 659.056153][ T7897] Bluetooth: hci2: command tx timeout [ 659.320116][T17237] bond10: entered allmulticast mode [ 659.356311][T17237] 8021q: adding VLAN 0 to HW filter on device bond10 [ 659.953139][T17121] hsr_slave_0: entered promiscuous mode [ 659.960113][T17121] hsr_slave_1: entered promiscuous mode [ 659.978638][T17121] debugfs: 'hsr0' already exists in 'hsr' [ 659.986317][T17121] Cannot create hsr debugfs directory [ 660.204634][T17259] syzkaller0: entered promiscuous mode [ 660.210265][T17259] syzkaller0: entered allmulticast mode [ 661.133948][ T7897] Bluetooth: hci2: command tx timeout [ 661.140151][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 661.266163][T17278] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 661.288125][T16041] team0: left allmulticast mode [ 661.294631][T16041] team_slave_0: left allmulticast mode [ 661.300166][T16041] team_slave_1: left allmulticast mode [ 661.319931][T16041] bridge4: left allmulticast mode [ 661.334458][T16041] team0: left promiscuous mode [ 661.339274][T16041] team_slave_0: left promiscuous mode [ 661.361042][T16041] team_slave_1: left promiscuous mode [ 661.373143][T16041] bridge4: left promiscuous mode [ 661.380091][T16041] bridge0: port 3(team0) entered disabled state [ 661.405371][T16041] bridge_slave_1: left allmulticast mode [ 661.411070][T16041] bridge_slave_1: left promiscuous mode [ 661.453451][T16041] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.467131][T16041] bridge_slave_0: left allmulticast mode [ 661.482792][T16041] bridge_slave_0: left promiscuous mode [ 661.488610][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.504251][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 661.581645][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'. [ 661.908942][ T6258] net_ratelimit: 182 callbacks suppressed [ 661.908967][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 661.942370][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 661.953652][T16041] dvmrp0 (unregistering): left allmulticast mode [ 661.962513][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 661.987705][T16041] bond3 (unregistering): (slave geneve2): Releasing active interface [ 662.003298][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.032434][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.053592][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.063477][T16041] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 662.072490][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.093024][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.112763][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.132580][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 662.221219][T16041] bond5 (unregistering): (slave bridge3): Releasing active interface [ 662.274535][T16041] team0: Port device bridge4 removed [ 662.436628][T16041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.447086][T16041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.459618][T16041] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 662.469226][T16041] bond0 (unregistering): Released all slaves [ 662.581516][T16041] bond1 (unregistering): Released all slaves [ 662.595696][T16041] bond2 (unregistering): Released all slaves [ 662.608768][T16041] bond3 (unregistering): Released all slaves [ 662.627114][T16041] bond4 (unregistering): Released all slaves [ 662.643365][T16041] bond5 (unregistering): Released all slaves [ 662.762691][T16041] bond6 (unregistering): Released all slaves [ 662.775867][T17280] tipc: Enabled bearer , priority 0 [ 662.790590][T17121] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 662.831946][T17303] syzkaller0: entered promiscuous mode [ 662.849756][T17303] syzkaller0: entered allmulticast mode [ 662.879364][T17121] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 662.975913][T17280] tipc: Disabling bearer [ 663.007802][T16041] @„;: left promiscuous mode [ 663.031167][T17121] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 663.147204][T17121] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 663.172736][T16041] tipc: Left network mode [ 663.213180][ T7897] Bluetooth: hci2: command tx timeout [ 663.231700][T16041] IPVS: stopping backup sync thread 12277 ... [ 663.275974][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2911'. [ 663.548844][T17342] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 663.568924][T17342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2916'. [ 663.623900][T17342] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 663.643952][T17342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2916'. [ 663.687889][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2913'. [ 663.770669][T17121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.843059][T17356] netlink: 'syz.6.2919': attribute type 4 has an invalid length. [ 663.937848][T17354] tipc: Enabled bearer , priority 0 [ 663.963705][T17354] syzkaller0: entered promiscuous mode [ 663.971150][T17354] syzkaller0: entered allmulticast mode [ 664.016784][T17121] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.054209][T17354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 664.087969][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.095218][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.147144][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.154358][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.193787][T17354] tipc: Resetting bearer [ 664.283597][T17353] tipc: Resetting bearer [ 664.335638][T17353] tipc: Disabling bearer [ 664.668058][T17378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2924'. [ 664.761190][T17378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2924'. [ 664.794621][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 665.032260][T16041] hsr_slave_0: left promiscuous mode [ 665.041037][T16041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.070446][T17391] xt_hashlimit: size too large, truncated to 1048576 [ 665.081227][T16041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.100072][T17391] xt_hashlimit: max too large, truncated to 1048576 [ 666.366989][T16041] team0 (unregistering): Port device team_slave_1 removed [ 666.414777][T16041] team0 (unregistering): Port device team_slave_0 removed [ 666.828843][T17372] wg1 speed is unknown, defaulting to 1000 [ 666.924408][T15228] net_ratelimit: 185 callbacks suppressed [ 666.924430][T15228] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 666.990375][T15228] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 667.085628][T17121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.132532][ T6252] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.157507][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2939'. [ 667.173961][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2937'. [ 667.194337][ T6258] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.234064][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.264039][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.289053][T17453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2937'. [ 667.303370][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.311250][ T3072] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 667.397896][T17121] veth0_vlan: entered promiscuous mode [ 667.458994][T16045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.480863][T17121] veth1_vlan: entered promiscuous mode [ 667.512445][T16045] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 667.525767][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 667.622399][ T7897] Bluetooth: hci5: command 0x0406 tx timeout [ 667.641876][T17464] xfrm1: entered promiscuous mode [ 667.658977][T17464] xfrm1: entered allmulticast mode [ 667.718116][T17121] veth0_macvtap: entered promiscuous mode [ 667.755961][T17121] veth1_macvtap: entered promiscuous mode [ 667.804677][T16041] IPVS: stop unused estimator thread 0... [ 667.908212][T17121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.947222][T17121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.069467][ T3072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.085636][ T3072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.112560][ T3072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.135386][ T3072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.306263][T16041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.327734][T16041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.361316][T17467] wg1 speed is unknown, defaulting to 1000 [ 668.363617][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 668.444700][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.467785][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.479506][T17482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2944'. [ 668.509105][T17482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2944'. [ 668.614311][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2946'. [ 668.644990][T17482] bond11 (unregistering): Released all slaves [ 669.198622][T17508] tipc: Enabling of bearer rejected, failed to enable media [ 669.735386][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2959'. [ 669.763044][T17540] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 669.825806][T17543] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 670.113476][T17558] tipc: Can't bind to reserved service type 2 [ 670.145190][T17556] netlink: 'syz.6.2964': attribute type 1 has an invalid length. [ 670.238887][T17559] netlink: 'syz.5.2965': attribute type 1 has an invalid length. [ 670.253712][T17559] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2965'. [ 670.545438][T17546] wg1 speed is unknown, defaulting to 1000 [ 670.649252][T17558] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 671.483981][ T7897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 671.514112][ T7897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 671.538127][ T7897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 671.561353][ T7897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 671.595067][ T7897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 671.942792][ T3072] net_ratelimit: 121 callbacks suppressed [ 671.942815][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 671.972712][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.018104][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.052460][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.072476][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.122781][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.152396][ T6251] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.173036][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.192570][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.192688][T17597] __nla_validate_parse: 2 callbacks suppressed [ 672.192705][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 672.232400][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 672.361542][T17596] macsec1: entered promiscuous mode [ 672.385107][T17596] macsec1: entered allmulticast mode [ 672.435822][T17605] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 673.678732][T17634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2985'. [ 673.695279][ T5837] Bluetooth: hci3: command tx timeout [ 673.716533][T17582] wg1 speed is unknown, defaulting to 1000 [ 674.065424][T17647] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2988'. [ 674.140126][T17651] netlink: 'syz.2.2991': attribute type 3 has an invalid length. [ 674.320523][T17647] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.333903][T17665] netlink: 'syz.0.2993': attribute type 21 has an invalid length. [ 674.341806][T17665] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2993'. [ 674.351888][T17664] netlink: 'syz.0.2993': attribute type 21 has an invalid length. [ 674.369958][T17664] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2993'. [ 674.379628][T17665] netlink: 'syz.0.2993': attribute type 5 has an invalid length. [ 674.388205][T17665] netlink: 'syz.0.2993': attribute type 6 has an invalid length. [ 674.398104][T17665] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2993'. [ 674.408536][T17664] netlink: 'syz.0.2993': attribute type 5 has an invalid length. [ 674.417639][T17664] netlink: 'syz.0.2993': attribute type 6 has an invalid length. [ 674.427787][T17664] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2993'. [ 674.497689][T17647] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.549441][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'. [ 675.093540][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'. [ 675.102872][T17683] block nbd2: Unsupported socket: should be TCP or UNIX. [ 675.110393][T17582] chnl_net:caif_netlink_parms(): no params data found [ 675.208450][T17685] syzkaller0: entered promiscuous mode [ 675.217868][T17685] syzkaller0: entered allmulticast mode [ 675.267289][T17647] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.466493][T17693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2999'. [ 675.528928][T17647] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.755307][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.767525][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.777302][ T7897] Bluetooth: hci3: command tx timeout [ 675.778213][T17582] bridge_slave_0: entered allmulticast mode [ 675.790733][T17582] bridge_slave_0: entered promiscuous mode [ 675.810418][T17712] netlink: 'syz.0.3002': attribute type 29 has an invalid length. [ 675.818975][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.841932][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.860634][T17582] bridge_slave_1: entered allmulticast mode [ 675.870644][T17582] bridge_slave_1: entered promiscuous mode [ 675.909208][T17722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.920586][ T2063] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.019974][T17582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.041522][T16048] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.070414][T17582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.198246][ T2063] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.225493][T17582] team0: Port device team_slave_0 added [ 676.278847][ T2063] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.305991][T17582] team0: Port device team_slave_1 added [ 676.499063][T17582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.524053][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.551557][T17582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.589673][T17582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.596886][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.624373][T17582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.898936][T17582] hsr_slave_0: entered promiscuous mode [ 676.919002][T17582] hsr_slave_1: entered promiscuous mode [ 676.933808][T17582] debugfs: 'hsr0' already exists in 'hsr' [ 676.947842][T17582] Cannot create hsr debugfs directory [ 676.962775][T11311] net_ratelimit: 171 callbacks suppressed [ 676.962798][T11311] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.012425][T11311] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.059761][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.084999][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.128886][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.154389][T17772] tipc: Started in network mode [ 677.159333][T17772] tipc: Node identity 464e5c92d1b8, cluster identity 4711 [ 677.172938][T17772] tipc: Enabled bearer , priority 0 [ 677.179845][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.195281][T17774] syzkaller0: entered promiscuous mode [ 677.198614][T17775] netlink: 'syz.0.3020': attribute type 2 has an invalid length. [ 677.209258][T17774] syzkaller0: entered allmulticast mode [ 677.222565][ T6252] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.245731][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.256444][T17775] __nla_validate_parse: 3 callbacks suppressed [ 677.256463][T17775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3020'. [ 677.283976][ T6252] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.297702][T17774] tipc: Resetting bearer [ 677.322415][ T6252] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 677.331936][T17774] tipc: Disabling bearer [ 677.505350][ T5920] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4 [ 677.524748][ T5920] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 677.625668][T17582] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.648666][T17582] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 677.852842][ T7897] Bluetooth: hci3: command tx timeout [ 677.985030][T17804] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3026'. [ 678.130222][T17582] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.148043][T17582] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 678.241011][T17582] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.265404][T17582] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 678.370644][T17582] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.409831][T17582] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 678.449154][T17829] netlink: 'syz.2.3034': attribute type 1 has an invalid length. [ 678.511880][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 678.607988][T17833] rdma_rxe: rxe_newlink: failed to add bond0 [ 678.723405][T17836] bridge_slave_1: left allmulticast mode [ 678.735238][T17836] bridge_slave_1: left promiscuous mode [ 678.741703][T17836] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.818053][T17582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.853858][T17582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.898840][T17582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 678.929975][T17582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.249091][T17582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.320732][T17582] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.363481][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.370751][T16048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.415976][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.423275][T16048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.538860][T17858] pim6reg1: entered promiscuous mode [ 679.544777][T17858] pim6reg1: entered allmulticast mode [ 679.751095][T17851] delete_channel: no stack [ 679.932806][ T7897] Bluetooth: hci3: command tx timeout [ 680.077257][T17582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.267360][T17886] batadv_slave_1: entered promiscuous mode [ 680.425666][T17880] batadv_slave_1: left promiscuous mode [ 680.759544][T17901] 0ªîf„X¹¦: left allmulticast mode [ 680.997716][T17582] veth0_vlan: entered promiscuous mode [ 681.035647][T17582] veth1_vlan: entered promiscuous mode [ 681.141291][T17582] veth0_macvtap: entered promiscuous mode [ 681.165729][T17582] veth1_macvtap: entered promiscuous mode [ 681.229486][T17582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.266837][T17582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.271771][T17893] wg1 speed is unknown, defaulting to 1000 [ 681.299698][T15228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.331569][T15228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.362509][T15228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.383457][T15228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.608634][T17908] pim6reg: entered allmulticast mode [ 681.703508][T17908] pim6reg: left allmulticast mode [ 681.771192][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.802823][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.886282][T16041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.903500][T16041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.014241][T16048] net_ratelimit: 146 callbacks suppressed [ 682.014264][T16048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.057711][T16048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.137574][T17904] wg1 speed is unknown, defaulting to 1000 [ 682.167095][T17902] wg1 speed is unknown, defaulting to 1000 [ 682.182639][T16048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.190629][T16048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.312565][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.326725][T17922] syzkaller0: entered promiscuous mode [ 682.340589][T17922] syzkaller0: entered allmulticast mode [ 682.350826][T17927] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3053'. [ 682.360000][T11311] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.373300][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.402655][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.433178][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.488675][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 682.674277][T17929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3055'. [ 682.946651][T17934] netlink: 'syz.4.3057': attribute type 4 has an invalid length. [ 683.030468][T17934] netlink: 'syz.4.3057': attribute type 4 has an invalid length. [ 683.429294][T17935] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.437231][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.673211][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.681319][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.690486][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.705579][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.717086][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.726432][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.749125][T17946] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3060'. [ 683.765306][T17935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.931563][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 683.948064][T17946] 8021q: VLANs not supported on ip6tnl0 [ 683.956089][T16041] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.989588][T16041] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.004552][T16041] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.029971][T16041] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.629010][ C0] Unknown status report in ack skb [ 684.661942][T17943] wg1 speed is unknown, defaulting to 1000 [ 685.259339][T17943] chnl_net:caif_netlink_parms(): no params data found [ 685.425270][T18001] netlink: 'syz.4.3071': attribute type 3 has an invalid length. [ 685.616463][T17943] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.623812][T17943] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.631105][T17943] bridge_slave_0: entered allmulticast mode [ 685.639913][T17943] bridge_slave_0: entered promiscuous mode [ 685.653455][T17943] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.661004][T17943] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.669080][T17943] bridge_slave_1: entered allmulticast mode [ 685.678303][T17943] bridge_slave_1: entered promiscuous mode [ 685.772548][ T7897] Bluetooth: hci0: command tx timeout [ 685.817226][T17943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.836746][T17943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.870490][T18017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 685.924351][T18017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.931669][T18017] IPv6: NLM_F_CREATE should be set when creating new route [ 685.939015][T18017] IPv6: NLM_F_CREATE should be set when creating new route [ 685.984646][T18017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 686.013496][T18017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.034007][T17943] team0: Port device team_slave_0 added [ 686.083536][T17943] team0: Port device team_slave_1 added [ 686.207251][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 686.441017][T17943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.451928][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.482691][T17943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.521202][T18047] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3082'. [ 686.543231][T17943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.550239][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.580041][T17943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.594590][T18050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.693884][T18055] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 686.711850][T18056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 686.728079][T17943] hsr_slave_0: entered promiscuous mode [ 686.739855][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 686.750822][T17943] hsr_slave_1: entered promiscuous mode [ 686.764317][T17943] debugfs: 'hsr0' already exists in 'hsr' [ 686.774078][T17943] Cannot create hsr debugfs directory [ 686.930593][T18064] netlink: 'syz.6.3087': attribute type 13 has an invalid length. [ 687.023480][T15228] net_ratelimit: 156 callbacks suppressed [ 687.023503][T15228] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.062780][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.083729][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.113640][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.144214][T16041] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.173971][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.202759][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.223242][ T3072] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.237215][T18064] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.245117][T18064] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.253002][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.272867][ T6257] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 687.291327][T18064] batman_adv: batadv0: Interface deactivated: dummy0 [ 687.583883][T18064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.620070][T18064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.852289][ T7897] Bluetooth: hci0: command tx timeout [ 688.093847][T16048] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.103888][T16048] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.133122][T16048] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.195186][T16048] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.215339][T18082] netlink: 'syz.6.3091': attribute type 13 has an invalid length. [ 688.395767][T18091] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 688.497076][T18091] __nla_validate_parse: 1 callbacks suppressed [ 688.497095][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3093'. [ 688.907258][T18110] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 688.921995][T18110] bond1 (unregistering): Released all slaves [ 689.223471][T18088] wg1 speed is unknown, defaulting to 1000 [ 689.299293][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 689.627419][T18140] tipc: Started in network mode [ 689.634523][T18140] tipc: Node identity 027f4a645e6e, cluster identity 4711 [ 689.641986][T18140] tipc: Enabled bearer , priority 0 [ 689.679695][T18139] syzkaller0: entered promiscuous mode [ 689.706710][T18139] syzkaller0: entered allmulticast mode [ 689.749506][T18144] vxcan2: entered allmulticast mode [ 689.861548][T18140] tipc: Resetting bearer [ 689.881132][T17943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 689.914155][T18138] tipc: Resetting bearer [ 689.931591][T18138] tipc: Disabling bearer [ 689.938963][ T7897] Bluetooth: hci0: command tx timeout [ 689.977094][T17943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 689.996485][T18147] xt_CT: No such helper "netbios-ns" [ 690.014769][T17943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 690.053962][T17943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 690.123225][T18151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3106'. [ 690.156506][T18151] lo: Caught tx_queue_len zero misconfig [ 690.306572][T18163] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.3107'. [ 690.330061][T17943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.353170][T18146] wg1 speed is unknown, defaulting to 1000 [ 690.460685][T17943] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.651838][T15228] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.659070][T15228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.356670][T15228] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.363937][T15228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.012592][ T7897] Bluetooth: hci0: command tx timeout [ 694.302057][T18208] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3121'. [ 694.343786][T17943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.370621][T18216] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3119'. [ 694.526133][T17943] veth0_vlan: entered promiscuous mode [ 694.549339][T17943] veth1_vlan: entered promiscuous mode [ 694.717994][T17943] veth0_macvtap: entered promiscuous mode [ 694.738729][T17943] veth1_macvtap: entered promiscuous mode [ 694.870551][T17943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.903117][T18238] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 694.915399][T18238] bridge1: entered allmulticast mode [ 694.981888][T17943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.016561][T16048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.041083][ T6251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.067767][ T6251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.092565][ T6251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.118382][T18244] tipc: Started in network mode [ 695.123544][T18244] tipc: Node identity d64a79623531, cluster identity 4711 [ 695.130788][T18244] tipc: Enabled bearer , priority 0 [ 695.166558][T18244] syzkaller0: entered promiscuous mode [ 695.182797][T18244] syzkaller0: entered allmulticast mode [ 695.247011][T18243] tipc: Resetting bearer [ 695.267600][T18243] tipc: Disabling bearer [ 695.463879][T15228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.484220][T15228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.546520][T18250] netlink: 'syz.5.3131': attribute type 27 has an invalid length. [ 695.553690][T18247] vlan2: entered promiscuous mode [ 695.572657][T18247] geneve1: entered promiscuous mode [ 695.578118][T18247] vlan2: entered allmulticast mode [ 695.591043][T18247] geneve1: entered allmulticast mode [ 695.670805][ T6251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.682790][ T6251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.838030][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 696.081721][T18280] netlink: 'syz.6.3136': attribute type 10 has an invalid length. [ 696.090852][T18281] netlink: 'syz.6.3136': attribute type 10 has an invalid length. [ 696.105545][T18280] batman_adv: batadv0: Removing interface: dummy0 [ 696.134524][T18280] netlink: 'syz.6.3136': attribute type 10 has an invalid length. [ 696.153693][T18281] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 696.278383][T18292] net_ratelimit: 35 callbacks suppressed [ 696.278405][T18292] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 696.359262][T18294] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 696.408712][T18295] bond3: Unable to set down delay as MII monitoring is disabled [ 696.423241][T18295] bond3 (unregistering): Released all slaves [ 696.468902][T18298] openvswitch: : Dropping previously announced user features [ 696.511898][T18299] openvswitch: : Dropping previously announced user features [ 696.591339][T18295] tunl0: Caught tx_queue_len zero misconfig [ 696.761746][T18312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.773023][T18314] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3142'. [ 696.802243][T18314] team0: No ports can be present during mode change [ 696.820735][T18312] tap0: tun_chr_ioctl cmd 1074025676 [ 696.826378][T18312] tap0: owner set to 0 [ 697.009626][T18319] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 697.039513][T18319] bond1 (unregistering): Released all slaves [ 697.128198][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3146'. [ 697.152015][T18325] netlink: 'syz.6.3146': attribute type 30 has an invalid length. [ 697.202048][T16041] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.202116][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3146'. [ 697.211012][T16041] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.248877][T18325] netlink: 'syz.6.3146': attribute type 30 has an invalid length. [ 697.269801][T16041] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.314911][T16041] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.587090][T18338] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3151'. [ 697.607481][T18338] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3151'. [ 697.758202][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 697.881372][T18349] tipc: Enabling of bearer rejected, failed to enable media [ 698.019841][T18352] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 698.076574][ T5920] IPVS: starting estimator thread 0... [ 698.096697][T18357] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 698.173625][T18355] IPVS: using max 27 ests per chain, 64800 per kthread [ 698.302446][T18364] netlink: 'syz.0.3158': attribute type 10 has an invalid length. [ 698.326469][T18364] batadv0: entered allmulticast mode [ 698.353565][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.374300][T18364] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 698.547609][T18380] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3160'. [ 699.437233][T18412] netlink: 'syz.0.3171': attribute type 2 has an invalid length. [ 699.438344][T18419] __nla_validate_parse: 1 callbacks suppressed [ 699.438359][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3174'. [ 699.495409][T18421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3171'. [ 699.550896][T18412] : entered promiscuous mode [ 699.712018][T18430] Bluetooth: MGMT ver 1.23 [ 699.826340][T18438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3180'. [ 699.973298][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 700.541357][T18466] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.745612][T18466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.778900][T18466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.946668][T18466] bridge1: left allmulticast mode [ 700.971926][T16048] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.008684][T16048] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.084205][T16048] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.111209][T16048] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.271684][T18500] pim6reg: entered allmulticast mode [ 701.306270][T18505] Cannot find set identified by id 0 to match [ 701.399039][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3198'. [ 701.428680][T18508] netlink: 'syz.6.3198': attribute type 2 has an invalid length. [ 701.454700][T18508] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3198'. [ 701.482993][T18512] tipc: Enabling of bearer rejected, failed to enable media [ 701.603866][T18520] bridge: RTM_NEWNEIGH with invalid ether address [ 701.978281][T18545] netlink: 'syz.2.3207': attribute type 11 has an invalid length. [ 702.260363][T18557] openvswitch: netlink: IP tunnel dst address not specified [ 702.307562][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3210'. [ 702.332016][T18562] openvswitch: netlink: Message has 572 unknown bytes. [ 702.333771][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3210'. [ 702.350662][T18562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.366628][T18564] netlink: 'syz.4.3212': attribute type 2 has an invalid length. [ 702.499997][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3210'. [ 702.969154][T18598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3221'. [ 703.646841][T18623] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 703.694319][T18623] bond1 (unregistering): Released all slaves [ 703.949219][T18634] : entered promiscuous mode [ 704.574836][T18657] batman_adv: batadv0: Adding interface: ip6gretap1 [ 704.581511][T18657] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.609317][T18657] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 704.795296][T18596] wg1 speed is unknown, defaulting to 1000 [ 704.826367][T18664] __nla_validate_parse: 9 callbacks suppressed [ 704.826388][T18664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 705.013451][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 705.085495][T18672] xt_socket: unknown flags 0xfc [ 705.413873][T18691] netlink: 296 bytes leftover after parsing attributes in process `syz.6.3244'. [ 705.643875][T18704] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 705.651882][T18704] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3249'. [ 705.685687][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'. [ 705.736167][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3251'. [ 705.763710][T18709] netlink: 'syz.4.3250': attribute type 12 has an invalid length. [ 705.787305][T18709] netlink: 'syz.4.3250': attribute type 29 has an invalid length. [ 705.802440][T18709] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3250'. [ 705.811755][T18709] netlink: 'syz.4.3250': attribute type 2 has an invalid length. [ 705.837584][T18709] netlink: 'syz.4.3250': attribute type 3 has an invalid length. [ 705.855385][T18709] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3250'. [ 705.935517][T18713] syz_tun: entered promiscuous mode [ 706.005957][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 706.035512][T18716] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 706.067237][T18716] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 706.527189][T18739] xt_hashlimit: max too large, truncated to 1048576 [ 706.544092][T18741] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3261'. [ 706.791874][T18749] netlink: 'syz.4.3265': attribute type 1 has an invalid length. [ 706.813168][T18749] netlink: 'syz.4.3265': attribute type 3 has an invalid length. [ 706.823304][T18749] netlink: 'syz.4.3265': attribute type 2 has an invalid length. [ 706.832794][T18749] netlink: 'syz.4.3265': attribute type 3 has an invalid length. [ 707.195614][T18771] netlink: 'syz.6.3272': attribute type 1 has an invalid length. [ 707.574524][T18753] wg1 speed is unknown, defaulting to 1000 [ 707.730922][T18787] vlan3: entered promiscuous mode [ 707.741312][T18787] vlan3: entered allmulticast mode [ 707.747039][T18787] hsr_slave_1: entered allmulticast mode [ 707.984330][T18794] netlink: 'syz.2.3278': attribute type 1 has an invalid length. [ 708.086309][T18794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.124750][T18794] bond1: (slave ip6erspan0): making interface the new active one [ 708.137038][T18794] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 708.445297][T18787] wg1 speed is unknown, defaulting to 1000 [ 708.453493][T18811] syzkaller0: entered promiscuous mode [ 708.459125][T18811] syzkaller0: entered allmulticast mode [ 709.287760][T18821] bridge0: port 3(syz_tun) entered blocking state [ 709.305622][T18821] bridge0: port 3(syz_tun) entered disabled state [ 709.324949][T18821] syz_tun: entered allmulticast mode [ 709.339002][T18821] syz_tun: entered promiscuous mode [ 709.554015][T18820] wg1 speed is unknown, defaulting to 1000 [ 709.688505][T18854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.698043][T18851] bond1: option resend_igmp: invalid value (2878) [ 709.706186][T18851] bond1: option resend_igmp: allowed values 0 - 255 [ 709.724860][T18851] bond1 (unregistering): Released all slaves [ 710.021688][T18862] netlink: 'syz.0.3300': attribute type 9 has an invalid length. [ 710.040235][T18862] netlink: 'syz.0.3300': attribute type 11 has an invalid length. [ 710.057831][T18862] netlink: 'syz.0.3300': attribute type 12 has an invalid length. [ 710.078097][T18862] __nla_validate_parse: 11 callbacks suppressed [ 710.078115][T18862] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3300'. [ 710.096016][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'. [ 710.215751][T18870] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 710.244804][T18870] x_tables: duplicate underflow at hook 2 [ 710.285095][T18859] wg1 speed is unknown, defaulting to 1000 [ 710.294768][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3303'. [ 710.313769][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3303'. [ 710.797634][T18886] gretap1: entered promiscuous mode [ 710.819917][T18886] batman_adv: batadv0: Adding interface: gretap1 [ 710.847242][T18886] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 710.889257][T18886] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 711.076135][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 711.266078][T18895] netlink: 'syz.0.3310': attribute type 63 has an invalid length. [ 711.566592][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3311'. [ 711.673144][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3312'. [ 711.708752][T18908] netlink: 6784 bytes leftover after parsing attributes in process `syz.6.3311'. [ 711.721957][T18903] ipvlan3: entered promiscuous mode [ 711.731476][T18903] ipvlan3: entered allmulticast mode [ 711.745766][T18903] 0ªîf„X¹¦: entered allmulticast mode [ 711.780563][T18904] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 712.192928][T18916] netem: change failed [ 712.257760][T18922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3315'. [ 712.269828][T18900] wg1 speed is unknown, defaulting to 1000 [ 712.511454][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 713.277359][T18961] syz_tun: left allmulticast mode [ 713.285014][T18961] syz_tun: left promiscuous mode [ 713.290246][T18961] bridge0: port 3(syz_tun) entered disabled state [ 713.345099][T18961] bridge_slave_0: left allmulticast mode [ 713.350807][T18961] bridge_slave_0: left promiscuous mode [ 713.373499][T18961] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.398716][T18961] bridge_slave_1: left allmulticast mode [ 713.415054][T18961] bridge_slave_1: left promiscuous mode [ 713.420895][T18961] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.449030][T18961] bond0: (slave bond_slave_0): Releasing backup interface [ 713.474424][T18961] bond0: (slave bond_slave_1): Releasing backup interface [ 713.490424][T18961] team0: Port device team_slave_0 removed [ 713.500008][T18961] team0: Port device team_slave_1 removed [ 713.507892][T18961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.516751][T18961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.525986][T18961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 713.556929][T18975] tipc: New replicast peer: 255.255.255.255 [ 713.565869][T18975] tipc: Enabled bearer , priority 26 [ 713.584399][T18971] netlink: 'syz.6.3329': attribute type 11 has an invalid length. [ 713.605170][T18971] netlink: 'syz.6.3329': attribute type 11 has an invalid length. [ 713.962872][T18992] x_tables: duplicate underflow at hook 2 [ 714.089578][T18995] validate_nla: 1 callbacks suppressed [ 714.089601][T18995] netlink: 'syz.5.3335': attribute type 1 has an invalid length. [ 714.158694][T19001] netlink: 'syz.2.3337': attribute type 13 has an invalid length. [ 714.216464][T18995] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 714.217957][T19006] netlink: 'syz.6.3336': attribute type 3 has an invalid length. [ 714.238024][T19006] netlink: 'syz.6.3336': attribute type 3 has an invalid length. [ 714.246908][T19001] macvtap0: entered promiscuous mode [ 714.255046][T19001] macvtap0: refused to change device tx_queue_len [ 714.404373][T19012] syzkaller0: entered promiscuous mode [ 714.418319][T19012] syzkaller0: entered allmulticast mode [ 714.458600][T19012] netem: change failed [ 714.609110][T19019] xt_ecn: cannot match TCP bits for non-tcp packets [ 714.682775][T14778] tipc: Node number set to 700002921 [ 714.956244][T19030] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 715.020024][T19030] bond1 (unregistering): Released all slaves [ 715.160251][T19025] wg1 speed is unknown, defaulting to 1000 [ 715.238796][T19034] syzkaller0: entered promiscuous mode [ 715.245047][T19034] syzkaller0: entered allmulticast mode [ 715.677176][T19041] __nla_validate_parse: 4 callbacks suppressed [ 715.677196][T19041] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3347'. [ 717.348698][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3352'. [ 717.496234][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3350'. [ 717.611866][T19058] bond2: entered promiscuous mode [ 717.618939][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3353'. [ 717.639594][T19058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.852051][T19079] netlink: 'syz.5.3355': attribute type 13 has an invalid length. [ 718.073464][T19089] sctp: [Deprecated]: syz.0.3358 (pid 19089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.073464][T19089] Use struct sctp_sack_info instead [ 718.206887][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3361'. [ 718.229553][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3361'. [ 718.460892][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3367'. [ 718.577674][T19115] macvtap1: entered promiscuous mode [ 718.602695][T19115] erspan0: entered promiscuous mode [ 718.612980][T19115] macvtap1: entered allmulticast mode [ 718.623231][T19115] erspan0: entered allmulticast mode [ 718.680963][T19123] tipc: Enabled bearer , priority 0 [ 718.717817][T19123] syzkaller0: entered promiscuous mode [ 718.737798][T19123] syzkaller0: entered allmulticast mode [ 718.805756][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3372'. [ 718.909344][T19134] bond0: (slave bond_slave_1): Releasing backup interface [ 718.975040][T19134] smc: removing net device veth1_to_bond with user defined pnetid SYZ0 [ 719.011721][T19142] tipc: Resetting bearer [ 719.111031][T19142] tipc: Resetting bearer [ 719.179203][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3374'. [ 719.190346][T19142] tipc: Disabling bearer [ 719.268405][T19160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3377'. [ 719.675130][T19183] netlink: del zone limit has 4 unknown bytes [ 720.233876][T19206] bridge_slave_1 (unregistering): left allmulticast mode [ 720.243422][T19206] bridge_slave_1 (unregistering): left promiscuous mode [ 720.262785][T19206] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.370328][T19196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.429741][T19192] wg1 speed is unknown, defaulting to 1000 [ 721.041418][T19236] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 721.106133][T19236] bond2 (unregistering): Released all slaves [ 721.180051][T19246] ip6tnl0: Caught tx_queue_len zero misconfig [ 721.413256][T19256] netlink: 'syz.6.3399': attribute type 6 has an invalid length. [ 721.480439][T19257] syzkaller0: entered promiscuous mode [ 721.486568][T19257] syzkaller0: entered allmulticast mode [ 721.845590][T19278] __nla_validate_parse: 2 callbacks suppressed [ 721.845614][T19278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3405'. [ 721.893010][T19278] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3405'. [ 721.912985][T19278] netlink: 'syz.0.3405': attribute type 5 has an invalid length. [ 721.920810][T19278] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3405'. [ 722.038072][T19285] Bluetooth: MGMT ver 1.23 [ 722.106935][T19287] netlink: 'syz.5.3407': attribute type 1 has an invalid length. [ 722.193049][T19287] bond3: entered promiscuous mode [ 722.211527][T19287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 722.578498][T19315] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 722.935122][T19285] wg1 speed is unknown, defaulting to 1000 [ 723.032256][T19334] tipc: Enabling of bearer rejected, failed to enable media [ 723.181063][T19348] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3421'. [ 723.247062][T19352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3422'. [ 723.318074][T19352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3422'. [ 723.762963][T19290] wg1 speed is unknown, defaulting to 1000 [ 724.093131][ T7897] Bluetooth: hci0: command tx timeout [ 724.377024][T19334] wg1 speed is unknown, defaulting to 1000 [ 724.446341][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 724.741714][T19399] netlink: 'syz.5.3435': attribute type 1 has an invalid length. [ 725.226700][T19414] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 725.279885][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3438'. [ 725.333547][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3438'. [ 725.587940][T19433] syzkaller0: entered promiscuous mode [ 725.594358][T19430] netlink: 'syz.5.3443': attribute type 10 has an invalid length. [ 725.600099][T19433] syzkaller0: entered allmulticast mode [ 725.620260][T19430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3443'. [ 725.647753][T19430] openvswitch: netlink: Flow key attr not present in new flow. [ 727.167477][T19501] team0: Device gtp0 is up. Set it down before adding it as a team port [ 727.322845][T19507] __nla_validate_parse: 2 callbacks suppressed [ 727.322865][T19507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3462'. [ 727.340906][T19505] netlink: 'syz.4.3461': attribute type 22 has an invalid length. [ 727.349811][T19505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3461'. [ 727.406253][T19508] netlink: 'syz.4.3461': attribute type 22 has an invalid length. [ 727.420029][T19507] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3462'. [ 727.427407][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3461'. [ 727.666786][T19521] syzkaller0: entered promiscuous mode [ 727.691946][T19521] syzkaller0: entered allmulticast mode [ 727.734797][T19520] tipc: Enabled bearer , priority 0 [ 727.941366][T19544] netlink: 'syz.6.3471': attribute type 1 has an invalid length. [ 727.975538][T19548] batadv0: mtu less than device minimum [ 727.990327][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3475'. [ 728.031455][T19550] openvswitch: netlink: Flow actions attr not present in new flow. [ 728.041327][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 728.155828][T19552] bridge_slave_1: left allmulticast mode [ 728.199932][T19552] bridge_slave_1: left promiscuous mode [ 728.214453][T19552] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.248483][T19552] bridge_slave_0: left allmulticast mode [ 728.270593][T19552] bridge_slave_0: left promiscuous mode [ 728.290507][T19552] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.743316][ T5948] tipc: Node number set to 2549505170 [ 728.886525][T19563] wg1 speed is unknown, defaulting to 1000 [ 729.298289][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 729.451839][T19596] tipc: Resetting bearer [ 729.752990][T19597] tipc: Resetting bearer [ 729.966688][T19568] wg1 speed is unknown, defaulting to 1000 [ 729.989248][ T6257] tipc: Resetting bearer [ 730.535228][T19627] macsec3: entered promiscuous mode [ 730.541279][T19627] bridge0: entered promiscuous mode [ 730.861546][ T7147] IPVS: starting estimator thread 0... [ 730.903637][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3494'. [ 730.972379][T19643] IPVS: using max 26 ests per chain, 62400 per kthread [ 731.086565][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 731.349745][T19654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.654419][T19674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3500'. [ 732.345312][T19694] netlink: 'syz.5.3510': attribute type 2 has an invalid length. [ 732.364487][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 732.396005][T19694] : entered promiscuous mode [ 732.854254][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3516'. [ 732.872659][T19719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3516'. [ 732.919667][T19719] ip6gretap2: entered allmulticast mode [ 732.945400][T19719] tipc: Resetting bearer [ 732.964804][T19718] tipc: Resetting bearer [ 733.023167][ T2063] tipc: Resetting bearer [ 733.229413][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3519'. [ 733.456175][T19741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 733.867241][T19752] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 733.896408][T19755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3526'. [ 734.358434][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3530'. [ 734.769163][T19765] wg1 speed is unknown, defaulting to 1000 [ 735.809774][T19771] wg1 speed is unknown, defaulting to 1000 [ 737.173732][T19824] : left promiscuous mode [ 737.196139][T19825] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3546'. [ 737.237634][T19825] openvswitch: netlink: Flow actions attr not present in new flow. [ 737.567835][T19833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.585168][T19833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3548'. [ 737.843056][T19846] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 737.861338][T19845] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 737.954800][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'. [ 738.011940][T19846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.349108][T19886] netlink: 'syz.6.3562': attribute type 1 has an invalid length. [ 738.384664][T19886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3562'. [ 738.398429][T19886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 738.633457][T19895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3564'. [ 738.775780][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3565'. [ 738.981014][T19911] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3569'. [ 739.198604][T19919] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 739.284979][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 739.757108][T19930] netlink: 'syz.4.3571': attribute type 30 has an invalid length. [ 739.821847][T19930] bond2: option arp_missed_max: invalid value (0) [ 739.829023][T19930] bond2: option arp_missed_max: allowed values 1 - 255 [ 739.847059][T19930] bond2 (unregistering): Released all slaves [ 740.164361][T19949] syzkaller0: entered promiscuous mode [ 740.196752][T19949] syzkaller0: entered allmulticast mode [ 740.333288][T19949] netlink: 'syz.6.3578': attribute type 29 has an invalid length. [ 740.472944][T19928] wg1 speed is unknown, defaulting to 1000 [ 740.473193][T19957] netlink: 'syz.0.3581': attribute type 27 has an invalid length. [ 740.604839][T19965] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3583'. [ 740.914956][T19979] sctp: [Deprecated]: syz.5.3586 (pid 19979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.914956][T19979] Use struct sctp_sack_info instead [ 741.223942][T19987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3587'. [ 741.244001][T19989] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3591'. [ 741.770535][T20005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.033954][T20011] netlink: 'syz.2.3595': attribute type 4 has an invalid length. [ 742.409067][T20026] netlink: 'syz.4.3598': attribute type 6 has an invalid length. [ 742.717926][T20039] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 743.668730][T20062] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 743.788059][T20068] validate_nla: 1 callbacks suppressed [ 743.788081][T20068] netlink: 'syz.6.3607': attribute type 12 has an invalid length. [ 744.031494][T20079] __nla_validate_parse: 3 callbacks suppressed [ 744.031515][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3608'. [ 744.174263][T20079] openvswitch: netlink: Flow actions attr not present in new flow. [ 744.738352][T20075] wg1 speed is unknown, defaulting to 1000 [ 744.866784][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 744.943643][T20123] batman_adv: batadv0: Removing interface: ipvlan2 [ 744.955355][T20123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.711030][T20144] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 745.808526][T20144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.849234][T20144] vlan1: entered allmulticast mode [ 745.871242][T20144] veth1: entered allmulticast mode [ 745.891193][T20144] bond2: (slave vlan1): Opening slave failed [ 746.247841][T20132] wg1 speed is unknown, defaulting to 1000 [ 746.466209][T20181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3635'. [ 746.596518][T20186] tipc: Resetting bearer [ 746.859086][T20187] tipc: Resetting bearer [ 747.107553][T20202] can: request_module (can-proto-5) failed. [ 747.158237][T20206] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3641'. [ 747.326917][T20214] wg1 speed is unknown, defaulting to 1000 [ 747.338895][T20214] wg1 speed is unknown, defaulting to 1000 [ 747.350536][T20214] wg1 speed is unknown, defaulting to 1000 [ 747.366266][T20216] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3644'. [ 747.402583][T20216] ip6gretap0: entered promiscuous mode [ 747.428864][T20217] xt_TCPMSS: Only works on TCP SYN packets [ 747.437284][T20216] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3644'. [ 747.463272][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.583956][T20221] tipc: Enabled bearer , priority 0 [ 747.656492][T20221] syzkaller0: entered promiscuous mode [ 747.663168][T20221] syzkaller0: entered allmulticast mode [ 747.669754][T20221] tipc: Resetting bearer [ 747.677734][ T6257] tipc: Resetting bearer [ 747.770047][ T6257] tipc: Resetting bearer [ 747.777866][T20213] wg1 speed is unknown, defaulting to 1000 [ 747.784815][T20220] tipc: Resetting bearer [ 751.026390][T20220] tipc: Disabling bearer [ 751.063164][ T7147] tipc: Node number set to 1544637028 [ 751.070042][T20214] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 751.155983][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.204929][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.228326][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.245230][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.283746][T20249] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 751.437339][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.465579][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.478869][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.493945][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.510666][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.512712][T20256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3652'. [ 751.524807][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.545203][T20214] wg1 speed is unknown, defaulting to 1000 [ 751.627714][T20241] wg1 speed is unknown, defaulting to 1000 [ 752.091306][T20264] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3655'. [ 752.099767][T20263] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3655'. [ 752.626962][T20272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3657'. [ 752.749457][T20275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 752.869973][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 752.942507][T20285] dvmrp0: entered allmulticast mode [ 752.953430][T20288] syzkaller0: entered promiscuous mode [ 752.962740][T20288] syzkaller0: entered allmulticast mode [ 753.154711][T20278] wg1 speed is unknown, defaulting to 1000 [ 753.178300][T20278] wg1 speed is unknown, defaulting to 1000 [ 753.208831][T20298] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3665'. [ 753.223749][T20285] smc: removing ib device !yz! [ 753.226050][T20298] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3665'. [ 753.590387][T20314] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3669'. [ 753.617288][T20314] netlink: 'syz.5.3669': attribute type 13 has an invalid length. [ 753.649629][T20314] netlink: 'syz.5.3669': attribute type 5 has an invalid length. [ 753.820831][T20314] tipc: Resetting bearer [ 753.850691][T20308] tipc: Resetting bearer [ 754.237720][T16041] tipc: Resetting bearer [ 754.375094][T20338] syzkaller1: entered promiscuous mode [ 754.389904][T20338] syzkaller1: entered allmulticast mode [ 754.773620][T20346] vlan1: entered promiscuous mode [ 754.787131][T20346] bond0: entered promiscuous mode [ 754.801219][T20346] bond_slave_0: entered promiscuous mode [ 754.822801][T20346] bond_slave_1: entered promiscuous mode [ 754.838439][T20346] bridge0: entered promiscuous mode [ 755.134985][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3682'. [ 755.219435][T20358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3683'. [ 755.318630][T20360] netlink: 'syz.2.3684': attribute type 1 has an invalid length. [ 755.726990][T20366] ------------[ cut here ]------------ [ 755.734101][T20366] refcount_t: underflow; use-after-free. [ 755.740949][T20366] WARNING: lib/refcount.c:28 at 0x0, CPU#1: syz.2.3684/20366 [ 755.749682][T20366] Modules linked in: [ 755.755336][T20366] CPU: 1 UID: 0 PID: 20366 Comm: syz.2.3684 Not tainted syzkaller #0 PREEMPT(full) [ 755.765931][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.779709][T20366] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 755.787663][T20366] Code: 74 26 00 0b 67 48 0f b9 3a eb 4a e8 d8 d2 36 fd 48 8d 3d 71 26 00 0b 67 48 0f b9 3a eb 37 e8 c5 d2 36 fd 48 8d 3d 6e 26 00 0b <67> 48 0f b9 3a eb 24 e8 b2 d2 36 fd 48 8d 3d 6b 26 00 0b 67 48 0f [ 755.809042][T20366] RSP: 0018:ffffc90003bdf8d8 EFLAGS: 00010283 [ 755.816264][T20366] RAX: ffffffff848a779b RBX: 0000000000000003 RCX: 0000000000080000 [ 755.825544][T20366] RDX: ffffc90012c5f000 RSI: 000000000000b014 RDI: ffffffff8f8a9e10 [ 755.834714][T20366] RBP: 0000000000000000 R08: ffff888025655b80 R09: 0000000000000005 [ 755.843939][T20366] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888048065c00 [ 755.853097][T20366] R13: ffff8880573d5c60 R14: ffff8880573d5c78 R15: dffffc0000000000 [ 755.861867][T20366] FS: 00007f34f77746c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 755.871514][T20366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.879743][T20366] CR2: 00007f34f47f3f98 CR3: 0000000069f76000 CR4: 00000000003526f0 [ 755.888285][T20366] Call Trace: [ 755.892051][T20366] [ 755.896018][T20366] klist_dec_and_del+0x3c7/0x3d0 [ 755.901355][T20366] klist_remove+0x1bd/0x340 [ 755.906557][T20366] ? __pfx_klist_children_put+0x10/0x10 [ 755.912773][T20366] ? __pfx_klist_remove+0x10/0x10 [ 755.917945][T20366] ? kobject_move+0x5a6/0x6e0 [ 755.923281][T20366] ? __pfx_kobject_move+0x10/0x10 [ 755.928545][T20366] ? do_raw_spin_unlock+0x122/0x240 [ 755.934875][T20366] ? get_device_parent+0x366/0x3a0 [ 755.940132][T20366] device_move+0x193/0x700 [ 755.945584][T20366] hci_conn_del_sysfs+0xb8/0x170 [ 755.950563][T20366] hci_conn_del+0xc36/0x11b0 [ 755.955940][T20366] hci_conn_hash_flush+0x191/0x230 [ 755.961497][T20366] hci_dev_close_sync+0x821/0xff0 [ 755.967338][T20366] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 755.973580][T20366] ? __cancel_work_sync+0x5c/0x110 [ 755.978955][T20366] hci_dev_close+0x108/0x200 [ 755.983667][T20366] sock_do_ioctl+0xdc/0x300 [ 755.988532][T20366] ? __pfx_sock_do_ioctl+0x10/0x10 [ 755.994109][T20366] ? do_futex+0x395/0x420 [ 755.998515][T20366] sock_ioctl+0x576/0x790 [ 756.003128][T20366] ? __pfx_sock_ioctl+0x10/0x10 [ 756.008449][T20366] ? __fget_files+0x3a0/0x420 [ 756.013303][T20366] ? __fget_files+0x2a/0x420 [ 756.017937][T20366] ? bpf_lsm_file_ioctl+0x9/0x20 [ 756.023108][T20366] ? __pfx_sock_ioctl+0x10/0x10 [ 756.028193][T20366] __se_sys_ioctl+0xfc/0x170 [ 756.032994][T20366] do_syscall_64+0xfa/0xf80 [ 756.037566][T20366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.044127][T20366] ? clear_bhb_loop+0x60/0xb0 [ 756.049167][T20366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.055803][T20366] RIP: 0033:0x7f34f698f749 [ 756.060263][T20366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.080278][T20366] RSP: 002b:00007f34f7774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.089070][T20366] RAX: ffffffffffffffda RBX: 00007f34f6be6090 RCX: 00007f34f698f749 [ 756.097430][T20366] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000b [ 756.106139][T20366] RBP: 00007f34f6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 756.114437][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.123130][T20366] R13: 00007f34f6be6128 R14: 00007f34f6be6090 R15: 00007fff4cca5928 [ 756.131643][T20366] [ 756.134896][T20366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 756.142218][T20366] CPU: 1 UID: 0 PID: 20366 Comm: syz.2.3684 Not tainted syzkaller #0 PREEMPT(full) [ 756.151735][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.162609][T20366] Call Trace: [ 756.165935][T20366] [ 756.168893][T20366] dump_stack_lvl+0x99/0x250 [ 756.174068][T20366] ? __asan_memcpy+0x40/0x70 [ 756.179323][T20366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.184816][T20366] ? __pfx__printk+0x10/0x10 [ 756.189635][T20366] vpanic+0x237/0x6d0 [ 756.194970][T20366] ? __pfx_vpanic+0x10/0x10 [ 756.199766][T20366] ? is_bpf_text_address+0x292/0x2b0 [ 756.205172][T20366] ? is_bpf_text_address+0x26/0x2b0 [ 756.210456][T20366] panic+0xb9/0xc0 [ 756.214195][T20366] ? __pfx_panic+0x10/0x10 [ 756.218666][T20366] __warn+0x317/0x4b0 [ 756.222806][T20366] __report_bug+0x288/0x500 [ 756.227342][T20366] ? __pfx_stack_trace_save+0x10/0x10 [ 756.232753][T20366] ? __pfx___report_bug+0x10/0x10 [ 756.237801][T20366] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 756.244149][T20366] ? __lock_acquire+0x146f/0x2cf0 [ 756.249218][T20366] report_bug_entry+0x16a/0x220 [ 756.254093][T20366] ? refcount_warn_saturate+0xb2/0x110 [ 756.259654][T20366] ? refcount_warn_saturate+0xb7/0x110 [ 756.266353][T20366] handle_bug+0xca/0x200 [ 756.271864][T20366] exc_invalid_op+0x1a/0x50 [ 756.277374][T20366] asm_exc_invalid_op+0x1a/0x20 [ 756.282420][T20366] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 756.288694][T20366] Code: 74 26 00 0b 67 48 0f b9 3a eb 4a e8 d8 d2 36 fd 48 8d 3d 71 26 00 0b 67 48 0f b9 3a eb 37 e8 c5 d2 36 fd 48 8d 3d 6e 26 00 0b <67> 48 0f b9 3a eb 24 e8 b2 d2 36 fd 48 8d 3d 6b 26 00 0b 67 48 0f [ 756.308611][T20366] RSP: 0018:ffffc90003bdf8d8 EFLAGS: 00010283 [ 756.314703][T20366] RAX: ffffffff848a779b RBX: 0000000000000003 RCX: 0000000000080000 [ 756.322885][T20366] RDX: ffffc90012c5f000 RSI: 000000000000b014 RDI: ffffffff8f8a9e10 [ 756.330878][T20366] RBP: 0000000000000000 R08: ffff888025655b80 R09: 0000000000000005 [ 756.338853][T20366] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888048065c00 [ 756.346999][T20366] R13: ffff8880573d5c60 R14: ffff8880573d5c78 R15: dffffc0000000000 [ 756.355384][T20366] ? refcount_warn_saturate+0xab/0x110 [ 756.360955][T20366] ? refcount_warn_saturate+0xab/0x110 [ 756.366421][T20366] klist_dec_and_del+0x3c7/0x3d0 [ 756.371374][T20366] klist_remove+0x1bd/0x340 [ 756.376061][T20366] ? __pfx_klist_children_put+0x10/0x10 [ 756.381630][T20366] ? __pfx_klist_remove+0x10/0x10 [ 756.386668][T20366] ? kobject_move+0x5a6/0x6e0 [ 756.391354][T20366] ? __pfx_kobject_move+0x10/0x10 [ 756.396382][T20366] ? do_raw_spin_unlock+0x122/0x240 [ 756.401605][T20366] ? get_device_parent+0x366/0x3a0 [ 756.407084][T20366] device_move+0x193/0x700 [ 756.411525][T20366] hci_conn_del_sysfs+0xb8/0x170 [ 756.416473][T20366] hci_conn_del+0xc36/0x11b0 [ 756.421079][T20366] hci_conn_hash_flush+0x191/0x230 [ 756.426195][T20366] hci_dev_close_sync+0x821/0xff0 [ 756.431318][T20366] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 756.436961][T20366] ? __cancel_work_sync+0x5c/0x110 [ 756.442182][T20366] hci_dev_close+0x108/0x200 [ 756.446808][T20366] sock_do_ioctl+0xdc/0x300 [ 756.451351][T20366] ? __pfx_sock_do_ioctl+0x10/0x10 [ 756.456473][T20366] ? do_futex+0x395/0x420 [ 756.461174][T20366] sock_ioctl+0x576/0x790 [ 756.465797][T20366] ? __pfx_sock_ioctl+0x10/0x10 [ 756.470686][T20366] ? __fget_files+0x3a0/0x420 [ 756.475504][T20366] ? __fget_files+0x2a/0x420 [ 756.480112][T20366] ? bpf_lsm_file_ioctl+0x9/0x20 [ 756.485052][T20366] ? __pfx_sock_ioctl+0x10/0x10 [ 756.489930][T20366] __se_sys_ioctl+0xfc/0x170 [ 756.494591][T20366] do_syscall_64+0xfa/0xf80 [ 756.499134][T20366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.505228][T20366] ? clear_bhb_loop+0x60/0xb0 [ 756.509959][T20366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.515855][T20366] RIP: 0033:0x7f34f698f749 [ 756.520309][T20366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.539917][T20366] RSP: 002b:00007f34f7774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.548342][T20366] RAX: ffffffffffffffda RBX: 00007f34f6be6090 RCX: 00007f34f698f749 [ 756.556322][T20366] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000b [ 756.564479][T20366] RBP: 00007f34f6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 756.572536][T20366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.580687][T20366] R13: 00007f34f6be6128 R14: 00007f34f6be6090 R15: 00007fff4cca5928 [ 756.588721][T20366] [ 756.592002][T20366] Kernel Offset: disabled [ 756.596423][T20366] Rebooting in 86400 seconds..