last executing test programs: 1m53.856046984s ago: executing program 2 (id=2005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000004f2355346947b1c24c73bd4834e4b13cc615d34f"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r4], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0xcc, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x404c020) (async) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) (async) r11 = socket$packet(0x11, 0x3, 0x300) bind$netlink(r7, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=@newtfilter={0x1914, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1834, 0x2, [@TCA_BASIC_EMATCHES={0x220, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfcf0, 0x2, 0x2}, {0x9, 0x3, 0x0, "5bde2d"}}}]}, @TCA_EMATCH_TREE_LIST={0x1dc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x28}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x60, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x9}, "46be282a8f07e8ddde299fb2d4c1971dd867e1644996a3bc468a31cf119eaab1d6f6ffc57ed3ad8099f2700298cc7e77f0266e2b120380cbcfa16f601d424ebaf3564bc929fe032a37f7794573cb6b9854"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffb, 0x1, 0x77dc}, {0xd, 0x2, 0x7f2, 0x2, 0xe, 0x2, 0x1}}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0xfffe, 0x4, 0xfffe}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9}, {0x1000, 0x85}}}]}}, @TCF_EM_META={0xa4, 0x3, 0x0, 0x0, {{0xff, 0x4, 0x10}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="942da9d7649ac679", @TCF_META_TYPE_VAR="87ef6945ff8a8ed3"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="efef92d8220577f63e", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x3a, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="969c6497", @TCF_META_TYPE_VAR="ef5b43aba96349", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="799321a11b53e879", @TCF_META_TYPE_VAR="d4be3604ac", @TCF_META_TYPE_VAR="fe11431b57eb", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="994d866318556a3c"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="48b1975893", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x11, 0x2, 0x2}, {0x8, 0x4}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0x0, 0x80, 0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x7}, {0xff, 0x8000, 0x1000, 0x1, 0x5, 0xee1f2e7775a130cf, 0x2}}}, @TCF_EM_CONTAINER={0x48, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x400}, "ffd88cf6e193188a35db325aa3bb675f6eec03a4804f41128691a4b41f66f143abbd98e6c1b6d07c2337170d415ffe0fad372b7e0acb42fb269a6bf6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x1}, {0x7f, 0x7, 0x6, 0x3}}}]}]}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000000, 0xe0, 0x42, 0x1, 0xb4, 0x2, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7fff, 0x3, 0x19, 0xb67, 0x401, 0x3, 0x3, 0x3, 0x400, 0xa, 0x0, 0x6, 0x4f, 0x100, 0x1ff, 0x800, 0x7, 0x9, 0x6, 0x7, 0x2, 0xc, 0x8, 0xffffffff, 0x1, 0x10000, 0x6, 0x2, 0xf, 0x10, 0x4d, 0x4, 0x100, 0x9, 0xff, 0xfffffffe, 0x2, 0x30e, 0x3, 0x8, 0x81, 0x2852, 0x3, 0x7, 0x8, 0xfc, 0x5, 0xe, 0x80, 0x5, 0x9, 0x80, 0x7, 0x4, 0x168e, 0xf85, 0x7ff, 0x1ff, 0xfffffff8, 0x5, 0x5, 0x8, 0x8, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4a63947a, 0x1, 0x4, 0x7, 0x6, 0x2, 0x62, 0x2, 0x7, 0x6, 0x7f8, 0x73d0, 0x3, 0x77, 0x0, 0x2, 0x1, 0x5, 0x3, 0x2, 0xe12, 0xff, 0x71b, 0xfffffff7, 0x2, 0x6eb, 0xd, 0x0, 0x59, 0x3, 0x5, 0x7fff, 0xffff0001, 0x0, 0x0, 0xb, 0x2dd9, 0x5, 0x1, 0xc, 0x7, 0x93, 0x3, 0x500000, 0xfffffff0, 0x7fff, 0x5, 0x7fff, 0x9, 0x2, 0x0, 0xff, 0x7, 0x7ff, 0x7, 0x310, 0x9, 0x5, 0x9, 0xb47, 0x9, 0x7, 0x6, 0x3c1, 0x8, 0x2, 0x7, 0xd1, 0x5, 0x42f5fb38, 0x6, 0xfffffff9, 0xe000, 0x1000, 0x5, 0x1, 0xb799, 0x5, 0x1, 0x8, 0xd, 0x8001, 0x0, 0x4, 0x6, 0x5, 0x6, 0x101, 0x1, 0x7, 0x3d5, 0x4, 0x4, 0x7, 0x1a, 0x5, 0x6, 0x2, 0x2, 0x3, 0x7, 0xe, 0x4, 0x4, 0x6, 0x0, 0x2576, 0x0, 0x7, 0x0, 0x1, 0x9, 0x4, 0x1, 0xff, 0xc0000, 0x7, 0x0, 0x1, 0x1, 0x8000, 0x8, 0x9, 0x311, 0x6, 0x4, 0x7fff, 0x200, 0x80000001, 0x1, 0x6, 0x9, 0x8000, 0x3, 0x0, 0x7fffffff, 0x8001, 0x3ddd, 0x5, 0x0, 0xb7a, 0x2, 0x4, 0x3, 0x7, 0x103, 0x8000, 0xae, 0x3, 0x6, 0x0, 0x8, 0x6, 0xc0, 0x5, 0x3, 0xffff8000, 0x7, 0x401, 0xfffffff8, 0x9, 0x4, 0xbe8, 0x7, 0xff, 0x7, 0x10000, 0x9, 0x8, 0x7, 0x1, 0x8, 0x2, 0x3]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_BASIC_ACT={0x11f0, 0x3, [@m_mpls={0x14c, 0x18, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x93102}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfe0e5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0xed, 0x6, "bd3923cb025368d274fafdfd2d75801661903b88fcef071ee54378fba4d96b637b8184371dd4bda7fce97b0ccd78bbdad9c649ce6cd6e4808cff26e4a76b86c2e6e51c126197dd9b3d5b82ee5eccae5c1fb85f547f9e0a0f07613088fadb5bd4697d42e1a68f1c60b50ad4f19251739ee584a7b75c362d87078c49f9af25561875480370ff8d41319b0215f94db89dc8b5fe875eba10a942939292f316dd4ee863e4bf9c6ebb89eaf866c24b5be4c21531bc6574fc1600c8af5e37683906e2d446f631af75dc5a806c099e0c209f5f082c7af675a83beadfb1402593a0abc56bbdaf728c73bdd97524"}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_xt={0x140, 0x7, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd0, 0x6, {0x3, 'mangle\x00', 0x3, 0x5, "4fe84eaf6c7c5127bcdbf0f374956c2032996b5542ffd9655cfe821b2772e3a6aa43e173c9b49323a9043c327d94456f373169bfadc3e16f88d98448d7c6e8a60c324cda58d7851c39a61f595ba2151c45b48ce2045c65208e1dbaa35ee36513a88814f094229c5c7f61829304f717e20b568db2abc76f368c074c5168582838302030630f1e0ebdc7f7d57678b4b6ece24b0b4c2c59dc6f4d791fa605847f8d11d92cf0c249"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x2f, 0x6, "ded5c3272150d189a89ea38c78358617f61d33925ac741671d3df2824ff0b1913f089b8bffa4d5ea6ee10b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xa8, 0xf, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x61, 0x6, "aadb50100125efb7b711728a993c33a7c0df9dfe5a9baa670171a3fc396abf9c5081c1131282d4dd264c391a7234deeed871ee07d9957d252d347f7f6c957d93498103ebe7447ae9132943a23429f0064a5e9559b5a87020b87db8cf2a"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_police={0x170, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x4, 0x0, 0xc, {0x2, 0x2, 0x1, 0x3, 0xfffb, 0xffffffff}, {0x17, 0x1, 0xfe00, 0x14, 0x100, 0x1}, 0x0, 0x5, 0x100}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd66}]]}, {0xe2, 0x6, "b056a51399800e1192b298d21b58660e505af2aca5e611c30d5cb107861841fd59e5a46fb534b85334707022010760cbd77761f3354a10b7f3863f1d64d8bf584a5aad62e1ecd176d23719a28d6f59c7c4af04a98317f08d883dd7fcaf4cf5123d4c1f556cc96757bdebbd424ca1f29cd5bffe399bd694aa128672295498a776a29450b1ebc6e8c3794b5908161ee0e6a0387e72e9cadafcc7fd17329c6141f2f2b903b054e8624f464b9182e5cd43a53f8f9024ff045dee981354603603a0b947822b28c662ee6e36b98c0b2fa86b4437f64771a68e5f61790a2c5ac5ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x130, 0x11, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x7, 0x4, 0x6}, 0x904a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x1, 0x101, 0x1}, 0x5}}]}, {0xc5, 0x6, "e96e691f67714e9c4f59d08d73424c57be54345ba1d846c4c452bf71ce261b542c93b62e2016adfd6eb6a33dacd0b945c879a2f2104758d200027937d65d9e6f63bedd5a1971b46a51c1139258d885652270b28b162f51e5394f0f6ef97a8e8796441c4e9782de2e63f6f0ca9adf7d46c22aa1534f337ced6752c3dc17839346d0f43ce58e66a2352ed9e5ccdaf4540ba519eefb10a1d13944279812eeec616e2e7b12b66d9cf8a7ab579ed6d327938a590e09aad0b4f257b956243408936d15ba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10, 0xa120, 0x3, 0x3}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x7, 0x9, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x20000000, 0xa16, 0xba}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}]}, {0xb4, 0x6, "f8aa095058b78e98403d74cef8aef08a17c97ed5f67e70a3c2b7bc11b8babe16e25664ba68ca3a26becdad58bbf901504a56ed63bb29f5dcb72d7cf1922e8070a505af4c08e25a3f901aaabfb22071f819066d7e62e8fe90793f89b4866047ee9e22626b27db07c7244c0a4b73dbc02d941b75afb4bdab5eb54ae0605aa94459bf301ddca0d9bd57ac4a68fb60b96fddf1c7486068d3e4aff8d600c0b2f19c8d7934b1243b9854b88b31ddec725ae51e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x140, 0x19, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xae, 0x10000000, 0x2, 0xfffffc00}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x8, 0x6, 0x3f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x6, 0x3ff, 0x9f92}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xeb7, 0x9, 0x1, 0x5, 0x3ff}, 0x4, r6}}]}, {0x92, 0x6, "98f5698c2e02741f4a5fd39b11ad63f22286befa6364545c3fe4c8c432eb2eb77ecc72981b7d6be500e870b4afbb458c7712ef79d0ffef28e88a4b31053cf8c5dfbdbab772e4c187f8c03a39751751bc98b6a86fe10b6aeb990100e8eed4898db9dc3f811583dc54537766ddedbceef249feb32be92f90894fbb54b567da9a6dd8e86b56cc315effae8416689173"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x9a0, 0x1c, 0x0, 0x0, {{0xb}, {0x96c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x8, 0x7, 0x3, {0x90, 0x2, 0xff, 0xe6c0, 0x5, 0x8f4b}, {0x2, 0x2, 0x9, 0xff01, 0x3, 0x3ff}, 0x7, 0x9, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffc01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x1, 0x3, 0x4, 0x7, 0xfffff823, 0x7, 0xe6, 0x7f, 0xfffffff8, 0x0, 0x9, 0x8, 0x0, 0x80000000, 0x2, 0x4, 0xab7c, 0x80, 0x9, 0x10001, 0x1fffe00, 0x7, 0xc, 0xffffff3c, 0x8, 0x32, 0x6, 0x86, 0x3, 0xcc, 0x7, 0x3, 0x81, 0x10001, 0x0, 0x7fffffff, 0x8, 0x8, 0x10, 0xea, 0x9, 0xa, 0x1, 0x4, 0x6, 0xb2, 0x7, 0xa, 0xffffffff, 0xd2, 0x7, 0x3, 0x3, 0xfffffff0, 0xe6d, 0x10, 0x3, 0x4a52, 0x9, 0x4, 0x1000, 0x1, 0x8, 0x8, 0x8, 0x12a86fcc, 0x4, 0x80000000, 0x9, 0x8, 0x51b59235, 0xaa, 0x9, 0x3, 0x3bc7, 0x8, 0x2, 0x3, 0x8, 0x6, 0xe0a, 0x0, 0x9, 0x8, 0x800, 0x6, 0x1, 0x2, 0x80000001, 0x3, 0x74f, 0x2, 0x7, 0x8000000, 0x7, 0x4, 0x200, 0x401, 0xe, 0xd9, 0x3, 0x869c, 0x2, 0x9, 0xf, 0x10001, 0x47, 0x1, 0x0, 0x7, 0x3, 0x9742, 0xb6d4, 0xd65, 0x792, 0x8, 0x80, 0xc, 0x1000, 0x4, 0x7, 0x1, 0x6, 0xed2, 0x3, 0x8000, 0x2f00000, 0x6, 0xe, 0x1, 0x7f9c, 0x80000000, 0xb682, 0x5, 0xffffffff, 0xe, 0x8000, 0x7c37, 0xe, 0x2, 0x0, 0x1, 0x101, 0x2, 0x6, 0x4, 0x2, 0x4, 0x400, 0x0, 0xd, 0x3ff, 0x4, 0x35, 0x80000000, 0x2, 0x8, 0xbd98, 0x8a1, 0x0, 0x3, 0x8c, 0x4, 0x2, 0xe548, 0x1, 0xb, 0x0, 0x56e6, 0x80000000, 0x2, 0x0, 0xacde, 0x2, 0xfffffffb, 0x9, 0x6, 0x8, 0x1, 0xffffffff, 0xe, 0x1, 0x6d2, 0x1, 0xffff158d, 0x401, 0x3561, 0xe, 0x3, 0x531, 0x0, 0x3, 0xfffffff9, 0xfffffffe, 0xb34, 0x4, 0x9, 0xf78f, 0xfffffffe, 0xfffffff1, 0x4, 0x6, 0x38000000, 0x5, 0xf1, 0xfffff001, 0x6, 0xffffffff, 0x0, 0x40, 0x2, 0x7, 0x7f, 0x800, 0x2d7c, 0x1, 0x12, 0x10000, 0x6d4, 0x8, 0x4, 0x7f, 0x1, 0x40, 0x6, 0x0, 0x8, 0x4, 0x352, 0x6, 0x9932, 0x6, 0xd, 0x6e43, 0xffffffff, 0x80, 0x4, 0x4, 0xc8, 0x9, 0x7fff, 0x7, 0x4, 0x80000001, 0x4, 0x1ff, 0x10000, 0x4, 0x4, 0xe, 0x40, 0x1, 0x8, 0x0, 0x194]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x5, 0xcc7, 0x6, {0x8, 0x1, 0x200, 0x6bf9, 0x800, 0x6a}, {0x0, 0x2, 0x8, 0x5, 0x401, 0xe}, 0x100, 0x8, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xfff, 0x8, 0x4, 0x9, 0x332, 0x3, 0x8, 0x6, 0x2, 0x1ff, 0xace, 0x5, 0x3, 0xe0b, 0x3, 0x1, 0x10000, 0x400, 0x5, 0x7fff, 0x5, 0xfff, 0x3c, 0x4, 0xffffda3c, 0x0, 0xdc, 0xa68, 0xd7, 0x0, 0x8, 0x1, 0x3, 0x600000, 0x4, 0x8000, 0x1, 0xfffffff5, 0x2, 0x5, 0x5, 0x1, 0xffff, 0x3, 0x7, 0x2, 0x59ff, 0x9, 0x2, 0x80, 0x6, 0x4, 0x15f, 0x3c, 0x3e, 0x8000, 0x4d3edeac, 0xefa8, 0x8000, 0xe907, 0x8, 0xfffffffe, 0x7, 0xfffffffc, 0xfffffffe, 0xc, 0xfffffffb, 0x7, 0x3, 0x75e8a7f8, 0x12c3f743, 0x39d8, 0x10, 0x7, 0x4, 0x2, 0xfff, 0x3, 0x9, 0x7, 0xffff, 0x6, 0x0, 0xaa, 0x5, 0x80000000, 0x3, 0x101, 0x8, 0x9, 0xc, 0x0, 0xd5d, 0x2, 0x710, 0x8, 0x60, 0x2, 0xffff, 0x3, 0xff, 0xc25, 0x3, 0x3e, 0x4, 0x1, 0x5, 0x800000, 0x2, 0x40, 0x8, 0x3, 0xc, 0x4, 0x7, 0x6, 0x8, 0x5968, 0xfffffff9, 0x1, 0x5, 0x5, 0x0, 0x2, 0x10, 0x1, 0x2, 0xfffffbff, 0xff, 0xfffffffc, 0xfffffff9, 0x917, 0x0, 0x101, 0x0, 0x0, 0xa5, 0xfffffeb5, 0xf, 0x0, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x2, 0x3, 0x6, 0xc, 0x0, 0xc, 0x4, 0x8001, 0x1, 0xffffff9b, 0x5, 0x8, 0x7ff, 0x81, 0x4, 0x3, 0x7, 0xfa10, 0x0, 0xb5a, 0x9, 0x81, 0x5, 0x683, 0x0, 0xe8e, 0x0, 0x5, 0xfffffff5, 0x5, 0xfff, 0x0, 0x8, 0x4, 0xa, 0x4, 0x9, 0x1, 0x1, 0x81, 0x200, 0xffff0001, 0x3, 0xfffffffc, 0x8, 0x9, 0x3ff, 0x7, 0x5, 0x6, 0x4, 0xd, 0xe4d4, 0x6772ab3e, 0x4, 0x0, 0xfffffffc, 0x8, 0x1, 0x4, 0xfff, 0xcb, 0x8bb8, 0x38ca, 0x8, 0x4, 0x2, 0x7f, 0xd33, 0x3, 0x9, 0xb, 0x7fff, 0x5, 0x9, 0x7, 0x2, 0x8, 0x3, 0x0, 0x7fff, 0x1000, 0xfffffffb, 0x6, 0x6, 0x8e, 0x80000001, 0x0, 0x5, 0x81, 0xfff, 0xb, 0x2, 0x3, 0x6, 0x7800000, 0x18a000, 0x314, 0x4, 0x8, 0xfffffe00, 0x4, 0x800, 0x0, 0x6, 0x0, 0xfa66, 0x10000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x0, 0xffff7fff, 0x7, {0xad, 0x2, 0x2, 0x1, 0x1, 0x100}, {0xc, 0x2, 0x7, 0x8, 0x4, 0xfff}, 0x6, 0x7fffffff, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x401, 0x9, 0x804, {0x3, 0x0, 0xffff, 0x2, 0x5, 0x60}, {0x4, 0x2, 0xc4, 0x100, 0x7, 0xfffffff9}, 0x6, 0xf57, 0xb2b}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff00000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x2, 0x5, 0x80000001, {0x8, 0x0, 0xcf78, 0xf0b4, 0xffff, 0x8}, {0x4, 0x0, 0x3, 0x2f15, 0xb, 0x1}, 0xc, 0x4, 0x2}}]]}, {0xc, 0x6, "26a9dab98f335301"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xd481202f4754eb3c, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e23}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xd}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xe1}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2e}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0xa6f1}]}}]}, 0x1914}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m53.774112323s ago: executing program 2 (id=2006): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x5, 0x0, @void}, 0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2, 0x49}, &(0x7f0000000580)=0x8) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 1m53.688049821s ago: executing program 3 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x118, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xa98, 0x59}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40011) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xfc, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd91}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8000, @local, 0x68}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20044000}, 0x8880) 1m53.626985186s ago: executing program 0 (id=2010): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x800) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x800) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) (async) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) socket$inet6(0xa, 0x3, 0x84) (async) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1m53.500567642s ago: executing program 3 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local}, 0x2, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="058c9dee29d088110f11d53ca132f65976b46698725af2db8d6a8b5815b975d8adefebcc97fb630e3284176b737031b69234b6819693821d8b537d7942361b11ce65ab4ca5e6532c000e5ed73459ed1fcdbf72477d1842f47bfe851775684f2710e51a99f195050d2a0fdde1b8e7474aee75669cc48d86d0e7a2855692626493af5b49ce7f6e01a7ee5748eb30d798089fb6fe581cf40c05fa1008b4d1615d1da315e00b81abc8d2a8a5d928ee1564a8f0e462cdf63668f0d06a356ab287c2abf8b6b204d74b42526c0f8ee06ad841a321335471061b934d3ba2da6aab1e10da30e15f07ec652dda", 0xe8}, {&(0x7f0000000000)="2829d7deae1fd70beeee09cc6d423b35ad40bef4", 0x14}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x280}, 0x40) 1m53.429441645s ago: executing program 0 (id=2013): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000040), 0x4) 1m53.260480197s ago: executing program 2 (id=2015): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 1m53.184828167s ago: executing program 3 (id=2018): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m53.04939554s ago: executing program 3 (id=2020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcff2000000000000034e580850000007a7ea0000000850000009e0000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1014, &(0x7f0000000a40)=""/4116}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000f20000000000000004cdda2214614676b54c000000000000afa748d2562a53714d616c46e5264a9c534c774024f840f16824c004cf09dd44885b53cc973648f2e9c1db27e56a72a06756a160b919030e921121dbd37b92ac616174504d6ca2c11640513c8291dccd0cddf9eaa7304f9749059b245078f6ae94939b4d3bcc26a2430c1ea567e32adf687675981a95cc"], 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r1, 0x5, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="000000000000006cb70200001451c2d374b556e4010000008500000083000000bf09000091e064b60000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b7000033f2fb3340eedaa8827060d8224d25d400005b9fdbe1493397fb1082f086d4750341f811a8368e1b002a0439399e1490ba27ebb56311a3165c416f91489e8d8fd8137296e26b5b70a5cb1251b0f44aabb3cc"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x400}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000f2c30d9916c34e67a4ab538baf3634cf04f74982426c9b2da9adfd989ecff9a327d302333191144bd832671d37435bf99627d2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100)=r9, 0x4) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000026000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'wlan0\x00', 0x200}) 1m52.763556501s ago: executing program 1 (id=2025): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@remote, @default, @default, @remote, @bcast, @remote, @default, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto(r2, 0x0, 0x0, 0x40040, &(0x7f0000000480)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x26, 0x81, "986df5ac9b126f11d43e9ab0906efa027b19a58626d7225a6b85438a9a31167bd8787d898c861cfb3ddf710100805ee8c4aa1ff5523d6cb89440e156b45c41", 0x1d}, 0xffffffcd) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000180)=0xf3, &(0x7f0000000200)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0xb) 1m52.682077572s ago: executing program 1 (id=2027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x6, 0x0, 0x0, 0x0, 0x0, 0xf, 0x20, 0x0, 0x0, 0x0, 0x1, 0x2c, 0x9, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x3c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}}]}, 0x8c}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001a000708ab09250009a3330081ab0700a90100001d6051930800018000000000090000000000ffff00039815fa2c1ec28656aaa79bb94b46fe000000bc000300050000006c884000d09165d52495115ef5a46bd1ad140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f702e2f4aa656d0448c22b7c59159ddef2fe082038f4f8b29d3ef3d92c83170c5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f05731d05b0310b0041f2", 0xfc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1m52.564379529s ago: executing program 1 (id=2028): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r2, 0x34da2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r7, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) poll(0x0, 0x0, 0x2) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x6, 0x75, @loopback, @empty, 0x7, 0x7800, 0x5, 0x9}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c80000001300000228bd7000fddbdf250a01010000000000000000000000000000000000000000000000000000000001000900084e21fff1020020002e000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="efff0000000000000100000000000000090000000000000006000000000000000500000000000000ff7f0000000000000000000000000000360e0000000000000700000000000000040000000000000007000000000000000d0000000000000006000000bd6b6e00010002000000000008000b008500000008000c00fcffffff"], 0xc8}}, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000180)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) 1m52.441468093s ago: executing program 0 (id=2031): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet6(0xa, 0x80803, 0x87) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 1m52.356550338s ago: executing program 1 (id=2032): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m52.286358275s ago: executing program 2 (id=2033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x14c, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x74, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7246fdbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b8ffc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a0275c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12304733}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40611211}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6075b56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77aa53d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a5c095b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29fd28b3}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17249723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x733e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b7efb1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8a7a10d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31dfca47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54f04212}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ea3182a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769d7026}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1087}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49689e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9267}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10391bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc5414}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1459}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7024b24e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7117}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c7e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x8041) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) 1m52.280619765s ago: executing program 0 (id=2034): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x7, 0x57, &(0x7f0000000140)=""/87, 0x41000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x0, 0x2060, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="cd7b9d51cdb5c5acf3d2a98748d1599b329e71dd7c8baf80c50e51318eef1589a08b79b20022a67a9a8f39219a744dadea989839e17729ffd86a20820489f71d61b157a2cefab31bbfc9271fb5c1b24a86f4aa00000000", 0x57}, {&(0x7f0000002700)="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", 0xf8e}], 0x2}, 0x4008001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) 1m52.01897476s ago: executing program 3 (id=2037): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) 1m51.952414081s ago: executing program 0 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="040000002000018300000000c5dc0ed679cc6fb4ff74c2d70e0000000002000000000000"], 0x24}}, 0x44004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000751000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}}, 0x0) 1m51.936493532s ago: executing program 1 (id=2039): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r0, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 1m51.922062957s ago: executing program 2 (id=2040): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x24040091}, 0x8045) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000007200000429bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="000001000000000000000100000000000000010000000000000001000100000000000100ab0100000087ff0100000000000000010841000000000001000000000000000100010000000000010001000000000001000000000000000100000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x58}}, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x184, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x154, 0x2, [@TCA_BASIC_EMATCHES={0x150, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9e5}}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x7}, {{0x4}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0xb2d3}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0xfc}, {0x2, 0x0, 0x1, 0x2, 0x7, 0x2}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0xfff7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="70f646f6", @TCF_META_TYPE_VAR="6b7f7b23", @TCF_META_TYPE_VAR="4fd0e1cd73a11a8eda", @TCF_META_TYPE_VAR="d43d2dec", @TCF_META_TYPE_VAR="63b13240f0f836", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x9, 0x1}, {0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xff}, {0x4, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="1b4ce35e5b5b19e205"]}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x4}, {0x1, 0x5, 0x1, "394974bb40"}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xd, 0x2, 0x4}, {0x4a18}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc5a, 0x8, 0x1}, {0x9f4}}}]}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0xbf8, 0x4, 0xfffa}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="71743ef828aea5", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="a77f6619838b", @TCF_META_TYPE_INT=0x80000001, @TCF_META_TYPE_VAR="874092d71455f4", @TCF_META_TYPE_VAR]}]}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3d, 0x8, 0x1}, {0x4, 0x0, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xf8, 0x8, 0x6}, {0x3, 0x1, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) (async, rerun: 64) socket(0x2, 0x5, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 1m51.668496226s ago: executing program 1 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) 1m51.198564263s ago: executing program 32 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) 1m51.15962779s ago: executing program 0 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='H', 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5ec04d48}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x796905d9}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7404d299}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0x9, 0x9, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x27}, {[@noop, @ra={0x94, 0x4}]}}}}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x40, 0x14ad749699e1550, 0x8, 0x1c0000, {{0x1b, 0x4, 0x1, 0x2, 0x6c, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@cipso={0x86, 0x55, 0x3, [{0x5, 0x9, "4adace34c9a3b6"}, {0x6, 0xb, "f3d4ca6352eeb23094"}, {0x5, 0x12, "a61cd511ae784761022417ccbeba8dce"}, {0x0, 0xd, "bb37f2f167d271bb77bca2"}, {0x7, 0x4, "f4b3"}, {0x6, 0x7, "1a989acdf5"}, {0x7, 0x4, '[K'}, {0x1, 0xd, "a9f6d2ed9d246f5e2b006c"}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x184, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r15, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020010}, 0x800) 1m51.146462004s ago: executing program 33 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='H', 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5ec04d48}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x796905d9}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7404d299}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0x9, 0x9, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x27}, {[@noop, @ra={0x94, 0x4}]}}}}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x40, 0x14ad749699e1550, 0x8, 0x1c0000, {{0x1b, 0x4, 0x1, 0x2, 0x6c, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@cipso={0x86, 0x55, 0x3, [{0x5, 0x9, "4adace34c9a3b6"}, {0x6, 0xb, "f3d4ca6352eeb23094"}, {0x5, 0x12, "a61cd511ae784761022417ccbeba8dce"}, {0x0, 0xd, "bb37f2f167d271bb77bca2"}, {0x7, 0x4, "f4b3"}, {0x6, 0x7, "1a989acdf5"}, {0x7, 0x4, '[K'}, {0x1, 0xd, "a9f6d2ed9d246f5e2b006c"}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x184, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r15, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020010}, 0x800) 1m51.123162777s ago: executing program 2 (id=2044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getaddr={0x14, 0x16, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1m51.122790613s ago: executing program 34 (id=2044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getaddr={0x14, 0x16, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1m51.076265474s ago: executing program 3 (id=2045): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001000)={r1, r2, 0x7c, 0x1000, &(0x7f0000000000)="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", 0x3, 0xca, 0x3ff, 0xcc, 0x4, 0x0, 0x2, 'syz1\x00'}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)=@newtclass={0x88, 0x28, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0xe, 0x7}, {0xc, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xcd17}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}]}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x61, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004084}, 0x40091) (async) sendto$phonet(r1, &(0x7f0000001280)="d77e4e60407efeadc42679171d0e76835b5151cdcf98cb4f94a52e6f8475c9d9c2dc47", 0x23, 0x4018, &(0x7f00000012c0)={0x23, 0xfc, 0x7, 0xc}, 0x10) (async) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001300), 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000001340)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x3ff, 0x7, 0x7fff, 0x8001, "d0bbe6773715dc202cce533c71e3a2187db2e03ff8c38493f6539eb1898559765b314889a62ebf9cbc59bf6c4d890cc252322beafe30f5d68807a25c22e4c6d4c0aa91d9f325fc7cb0997abd1b2fcf395e310a8fce0842a4a38e9a0ee856f4eb98b44ceac86c826b4d11ad9c0604b124d7238ebc9ba2f57f8e0f7f23985d1cc5"}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f00000027c0)={&(0x7f0000001400)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f0000001480)=""/243, 0xf3}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/82, 0x52}, {&(0x7f0000002600)=""/118, 0x76}], 0x4, &(0x7f00000026c0)=""/215, 0xd7}, 0x121) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'batadv_slave_1\x00'}) (async) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002880)=0x14, 0x80800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000028c0)=0x0, &(0x7f0000002900)=0x4) bind$packet(r6, &(0x7f0000002940)={0x11, 0x8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000002980)=0x6280, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000029c0), r6) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) (async) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000002b40)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000002b80)=0x2c) (async) syz_emit_ethernet(0x138, &(0x7f0000002bc0)={@dev, @broadcast, @void, {@ipv4={0x800, @dccp={{0x19, 0x4, 0x2, 0x30, 0x12a, 0x68, 0x0, 0x6, 0x21, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0xc, [{@broadcast, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x447}, {@empty, 0x45}, {@multicast1, 0xc205}, {@empty, 0xd44}]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x1, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, {@private=0xa010102, 0x4}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, "9cc4f5", 0x7f, "e5444b"}, "aa6d69c1182922bf18506c00b769e6ccee5a007547fa362cb6f18107284f6bb04d863b1ee3941f368c1caba90962d8d26b5e94a1053c52deabaa14da68bff5c38c27967278eed1349c27e9bfb1624499f66f8b0db57f1d76c9a2747c8a0c60b63b1db133628e6422bd3746eb4463f1f310c96d4709326200394a5db2a18489117d3f509a10193a2246a17bea7b2da1905d9676064f9667daf5baa8aadc2a1f63ffa5e76ebf2cd6be6ec4ca76ca69ce651989fbbcf276"}}}}}, &(0x7f0000002d00)={0x0, 0x4, [0x25e, 0x2b8, 0xbf, 0x259]}) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000002d40)={{0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, {0xa, 0x4e24, 0x61b, @local, 0x9}, 0x1, {[0x4, 0x5, 0x4, 0xd516, 0x8000, 0xfff, 0x7fff, 0xfffff505]}}, 0x5c) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002dc0), 0x10400, 0x0) write$tun(r11, &(0x7f0000002e00)={@val, @void, @eth={@random="32f90e07f4ea", @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0xc, 0x6, "660ab9", 0x1f7, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[@routing={0x73, 0xe, 0x2, 0xc6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local, @private0, @loopback]}, @dstopts={0x89, 0x2, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x326}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0x2a, 0x48, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, @hopopts={0x0, 0x19, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x18, 0xa97, [0x4, 0x33]}}, @jumbo={0xc2, 0x4, 0x6}, @generic={0xaa, 0x95, "e58a8a442f4629512492389adf9ab903cb81129b09679f67d6dd9e035f23f4772ba3b91438c4b4fdbe44b8cfb20c1967f6564c5163371b60e4234100b11878e450767dd93c1f6dc2e791522b2cd65abb5e7e1121f34b88d287d267b3ba8e4f39e99e5f092b295beadc5871acf60e20f882e49f0bc8de637f3724fa47e82dfe51c4f0bf06c3dcb09d0297af86baa2ee3ddd8326832e"}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}, @dstopts={0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}], @payload_direct={{{{0x27, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x2, 0x2b6, 0x0, 0x2, 0xb, 0x3, 0x3, 0xef, 0xfc, 0x3, 0x4e21, 0x4e23}, 0x1, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x235) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$can_j1939(r5, &(0x7f0000003040)={0x1d, r4, 0x3, {0x1, 0x1, 0x1}}, 0x18) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000030c0)=0x6, 0x4) 1m51.029530332s ago: executing program 35 (id=2045): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001000)={r1, r2, 0x7c, 0x1000, &(0x7f0000000000)="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", 0x3, 0xca, 0x3ff, 0xcc, 0x4, 0x0, 0x2, 'syz1\x00'}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)=@newtclass={0x88, 0x28, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0xe, 0x7}, {0xc, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xcd17}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}]}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x61, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004084}, 0x40091) (async) sendto$phonet(r1, &(0x7f0000001280)="d77e4e60407efeadc42679171d0e76835b5151cdcf98cb4f94a52e6f8475c9d9c2dc47", 0x23, 0x4018, &(0x7f00000012c0)={0x23, 0xfc, 0x7, 0xc}, 0x10) (async) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001300), 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000001340)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x3ff, 0x7, 0x7fff, 0x8001, "d0bbe6773715dc202cce533c71e3a2187db2e03ff8c38493f6539eb1898559765b314889a62ebf9cbc59bf6c4d890cc252322beafe30f5d68807a25c22e4c6d4c0aa91d9f325fc7cb0997abd1b2fcf395e310a8fce0842a4a38e9a0ee856f4eb98b44ceac86c826b4d11ad9c0604b124d7238ebc9ba2f57f8e0f7f23985d1cc5"}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f00000027c0)={&(0x7f0000001400)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f0000001480)=""/243, 0xf3}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/82, 0x52}, {&(0x7f0000002600)=""/118, 0x76}], 0x4, &(0x7f00000026c0)=""/215, 0xd7}, 0x121) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'batadv_slave_1\x00'}) (async) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002880)=0x14, 0x80800) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000028c0)=0x0, &(0x7f0000002900)=0x4) bind$packet(r6, &(0x7f0000002940)={0x11, 0x8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000002980)=0x6280, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000029c0), r6) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) (async) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000002b40)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000002b80)=0x2c) (async) syz_emit_ethernet(0x138, &(0x7f0000002bc0)={@dev, @broadcast, @void, {@ipv4={0x800, @dccp={{0x19, 0x4, 0x2, 0x30, 0x12a, 0x68, 0x0, 0x6, 0x21, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0xc, [{@broadcast, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x447}, {@empty, 0x45}, {@multicast1, 0xc205}, {@empty, 0xd44}]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x1, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, {@private=0xa010102, 0x4}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, "9cc4f5", 0x7f, "e5444b"}, "aa6d69c1182922bf18506c00b769e6ccee5a007547fa362cb6f18107284f6bb04d863b1ee3941f368c1caba90962d8d26b5e94a1053c52deabaa14da68bff5c38c27967278eed1349c27e9bfb1624499f66f8b0db57f1d76c9a2747c8a0c60b63b1db133628e6422bd3746eb4463f1f310c96d4709326200394a5db2a18489117d3f509a10193a2246a17bea7b2da1905d9676064f9667daf5baa8aadc2a1f63ffa5e76ebf2cd6be6ec4ca76ca69ce651989fbbcf276"}}}}}, &(0x7f0000002d00)={0x0, 0x4, [0x25e, 0x2b8, 0xbf, 0x259]}) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000002d40)={{0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, {0xa, 0x4e24, 0x61b, @local, 0x9}, 0x1, {[0x4, 0x5, 0x4, 0xd516, 0x8000, 0xfff, 0x7fff, 0xfffff505]}}, 0x5c) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002dc0), 0x10400, 0x0) write$tun(r11, &(0x7f0000002e00)={@val, @void, @eth={@random="32f90e07f4ea", @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0xc, 0x6, "660ab9", 0x1f7, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[@routing={0x73, 0xe, 0x2, 0xc6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local, @private0, @loopback]}, @dstopts={0x89, 0x2, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x326}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0x2a, 0x48, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, @hopopts={0x0, 0x19, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x18, 0xa97, [0x4, 0x33]}}, @jumbo={0xc2, 0x4, 0x6}, @generic={0xaa, 0x95, "e58a8a442f4629512492389adf9ab903cb81129b09679f67d6dd9e035f23f4772ba3b91438c4b4fdbe44b8cfb20c1967f6564c5163371b60e4234100b11878e450767dd93c1f6dc2e791522b2cd65abb5e7e1121f34b88d287d267b3ba8e4f39e99e5f092b295beadc5871acf60e20f882e49f0bc8de637f3724fa47e82dfe51c4f0bf06c3dcb09d0297af86baa2ee3ddd8326832e"}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}, @dstopts={0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}], @payload_direct={{{{0x27, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x2, 0x2b6, 0x0, 0x2, 0xb, 0x3, 0x3, 0xef, 0xfc, 0x3, 0x4e21, 0x4e23}, 0x1, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x235) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$can_j1939(r5, &(0x7f0000003040)={0x1d, r4, 0x3, {0x1, 0x1, 0x1}}, 0x18) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000030c0)=0x6, 0x4) 19.264703472s ago: executing program 5 (id=3384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES16=r1], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES16=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="147900001000010000000000000000000000000a4c000000060a0904000000005000590000000002000003200004801c000180090001006c617374000000000c000280080001407fffffff090001007379f061a222bbe96a7b62ea7a30000000000900020073000000110001007defde043c4c988c0000000ab9dc5ea88cb82e20120104000000000000435e0000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="147900001000010000000000000000000000000a4c000000060a0904000000005000590000000002000003200004801c000180090001006c617374000000000c000280080001407fffffff090001007379f061a222bbe96a7b62ea7a30000000000900020073000000110001007defde043c4c988c0000000ab9dc5ea88cb82e20120104000000000000435e0000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 19.174733626s ago: executing program 5 (id=3385): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 19.103315333s ago: executing program 5 (id=3388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x50}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) close(r1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x240004c1}, 0x24040014) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r9, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10, @ANYBLOB="140003007600"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x8, 0x20, 0xfffffffa, 0x80, {{0x42, 0x4, 0x1, 0x6, 0x108, 0x64, 0x0, 0xdf, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, {[@cipso={0x86, 0x52, 0x3, [{0x1, 0x8, "e468ab69cdbe"}, {0x1, 0x12, "ccbf5e26752a2fbb17c97bc8d51df767"}, {0x6, 0xd, "623ac0d1ff0c73f3c8256d"}, {0x0, 0xb, "99e2036520faa0ad70"}, {0x1, 0x10, "366b2fde012a357112700e68c57d"}, {0x7, 0xa, "7ff19ff1f2ad0e8c"}]}, @cipso={0x86, 0x64, 0x0, [{0x1, 0x12, "8602201c50827abef5bb87ff7376aba7"}, {0x2, 0x11, "90386915d97b129de744aed61261b1"}, {0x0, 0xb, "3f3120b42bf6140e86"}, {0x6, 0x7, "4e515162db"}, {0x7, 0x3, "9f"}, {0x5, 0x12, "e2136fcada3943d033ed59b23250afc7"}, {0x0, 0x7, "f0737f1a2f"}, {0x0, 0xd, "ddf4e1423badfc88343ccd"}]}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x8, [{@empty, 0x1}, {@rand_addr=0x64010101, 0x1ef}, {@multicast2, 0x1ff}]}, @ssrr={0x89, 0x1f, 0x95, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @remote, @empty, @private=0xa010100, @multicast2, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x230, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x4, 0xdb, 0x10000}, {0x92, 0xff, 0x0, 0x3}, {0x0, 0xc0, 0x5, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x801}, 0x44850) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000200)=0x5, 0x4) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @local}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 18.864459656s ago: executing program 5 (id=3394): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000100)="68ebde716f481e4674f21d319bdedaa3d04aaa57d37e6dfbf12925cb012ca8a54d914d661b846c0b5b7da5063800585d17b5c33965a8250d8695a3cb3a4833944f97a8901d907639e7dc9e7d05b969daed23c0608420beafb729fde2533ea1de0bcc4cc3f684b6391716184dc836407a9c6197e6cb72e98559653971a6080860e7bafe151e0f1ec535d197463ca69e2c64df5ea6ff6cf653edc94bb8fe502d8bad6b1590ff24a1c52d602bc330d66715700d7ae377681049c2b66a2b0e80aa0187cdf234c7e6ba031248c9fd200826a41705364cb8c540cdc7931052468883f50b0381722ad4748e13d09c01", 0xec) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast2}, 0x8) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) 18.655877219s ago: executing program 5 (id=3399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) 18.481988999s ago: executing program 5 (id=3404): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x20, r11, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x7}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4184) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r12, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x6, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x22040040}, 0x10000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0xa840) r15 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r15, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x7, 0x0, 0x0, 0xf, 0x81, 0xc45, 0x1012, 0xc1, 0x2, 0x7, 'syz1\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"7cc7b8d5f1295dd28a2280c10b9434fd", 0x0, 0x0, {0x7, 0x5}, {0x7f, 0x1}, 0x8, [0x52e, 0x100000000, 0x180000000, 0x69, 0xffffffffffffffff, 0x5, 0x81, 0x1, 0x6, 0x0, 0x3, 0x8, 0xbd2d, 0xc8c1, 0x4, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)=r16) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r15, 0x800448d3, 0x0) 17.53246221s ago: executing program 8 (id=3425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 17.529271847s ago: executing program 4 (id=3427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x74, r0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 17.478333354s ago: executing program 4 (id=3429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) 17.400365198s ago: executing program 8 (id=3430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0000000201010800000000000000000300000514000f80080002400000000f080003400000009e4c0002800c00050001003a00000006000340000400000c000280050001008800000014000180080001006401010108000200ac1414aa060003400004000028001640000000050000000a000000050000000700000080000000047fffffff000000040000082000"/156], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) (async) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 17.398806898s ago: executing program 4 (id=3432): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e000738000006002a"], 0x3c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, 'a'}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r10}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400b8dc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1}, 0x20040051) 17.297938235s ago: executing program 4 (id=3434): listen(0xffffffffffffffff, 0xfffffffc) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 17.240478348s ago: executing program 6 (id=3435): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001780)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, 0x0, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000880)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18090000000000000000000000000000c60001002500000085100000010000009500000000000000000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r9) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)={0x178, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xa, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8800}, 0x40041) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r11}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r12}, 0x10) close(r13) setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000180)=""/151, &(0x7f0000000240)=0x97) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1f, 0x10, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f00000003c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) 17.239388972s ago: executing program 8 (id=3436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "1c773377a7fc3a63d6138b103c686c3e"}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r4, &(0x7f00000003c0)=""/132, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) 16.997666643s ago: executing program 6 (id=3437): unshare(0x20000400) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) read(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) shutdown(r2, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa}, 0x20) setsockopt$packet_int(r3, 0x107, 0x11, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x4, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x8ba4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x3ff}]}, {0x4}, {0xc, 0xa}, {0x3d, 0x9, {0x60}}}}]}]}, 0x48}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0xa8, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) 16.963761282s ago: executing program 4 (id=3438): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffe0}, {0xfff1, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) 16.846167747s ago: executing program 4 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x11e, 0x60, 0x0, &(0x7f0000007cc0)) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000100039042bbd7000f8dbdf250000000009ea4b0a058d54ef338259f7d459f769ff965403c18c11cc274d91b1e43dd8a42a879bbafa6beed467b8a396d81e1d68af8b0a22648bf9703074a658a3008e7f37425b976d2c3eaad4c2fcd6917f501b0c7e9477ddda840000ea026cc55c6de059d06f3be3f68c45dcde0deea3af4b13557b9c372a9fe9152177b04c0af7f541ea7bd28a7a1d88374f025abac3b9c6060ccbcaf171edbcbe258857eb9b0000000000000000", @ANYRES32=0x0, @ANYBLOB="8bafea1f000000001800128008000100677265000c00028008000700e0000001"], 0x38}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt(r4, 0x8, 0x3, &(0x7f0000000480)=""/108, &(0x7f0000000400)=0x6c) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000010000000000000100df9da07f1f60744500000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) ioctl(r2, 0x8b32, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="03ad670f182b1f458330a465a4d49fdea08b30953b5c160b8372f26acbe12624b1c594d5a15caf37e9fc760dc63aec340fb4a6b43dd193eb8e17e47a2ebac679455358b5407edc7cef9b01e846775f3a29316f3cb4382578e45ce493af59ec7d5d9909c4df978b0c8422078597dec34acee0d89071667c299a133eb423ade102ea4d10e38fa64de1b4f071509547581f26bb057d7c761850368293ea3013a1ef88eef77a48ea3faf018ff87e8971481f07a0f0bf445043c213dd4a487344a3eaa9acac6dd7413807866f7d4f08c62f9883b37fa33734c9b24769df", @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r12}, 0x94) 16.845753981s ago: executing program 8 (id=3440): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xcc, 0x0, 0x300, 0x70bdad, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8bb0}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff8001}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0x3}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x422c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4055, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 16.733683566s ago: executing program 8 (id=3442): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='batadv_slave_0\x00') (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xbe4c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x83}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa8ee}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x393}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4466}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x19}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000480)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000004c0)=0xffffffff, 0x4) (async) getsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000600)=r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000006c0)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x6}, 0x90) (async, rerun: 32) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}}, 0xc) (async, rerun: 32) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x114, r8, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000040}, 0x85) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @multicast1}, 0x1, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000a40)='veth0_virt_wifi\x00', 0x8, 0xfffffffffffffffc, 0x1}) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000002680)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002640)={&(0x7f0000000b40)=@newtaction={0x1b00, 0x30, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{0xc8, 0x1, [@m_skbmod={0xc4, 0x7, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x4, 0x7, 0x8, 0xa}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, {0x65, 0x6, "f3846040ed6e16d6af724d574f91b694ce886a39eba6c77074fd3e3b8099fd1398223bbbd6d093bd897d51364e1c5771f2bb4a271d350986432106d81cf9906d9565ddabe211ba3d6ddedec40e659f3c6865e10fd4f9402d20670b22a92f58ead8"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1968, 0x1, [@m_simple={0xd8, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, 'mptcp_pm\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x400, 0x2, 0x20000000, 0x7, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x2, 0x5, 0x7, 0x7}}]}, {0x6b, 0x6, "d8ff0db5a5908f37ee0948a530c1167ed04c857a3d61b9356ac020183f224802a60f7b4b8cfba76923b0eec91fac8087a86d4fedcc591798174bd9167aa4526c7c7741c359d9c6e0ed357cccc67599227f7f4fd84a20fa20ecc3b7f8cb8b64d184effa1219248f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x114, 0x8, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x1, 0x1, 0x6, 0x1}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x2, 0x3, 0x1000, 0x1}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0xa8, 0x6, "cf853c2682595c6f21fb1237aeff2c4d35bab7b9e62824d45ad836ac0eb51fd02e3c1d5e8747efd4416e88115d209314cac53bc35b2d8c49dd9ef1c09e3fa602c7570de298996039a9ba5189c229301acc2b1fe2681d78fc84fe443d8c4f2531e622828336189a0d9a0e6837105a71e74339991806c36af8638f35ae06ef3fb9e31eb18e5f99f854c19857e5e932e6d393d1c6dff140d5d21de9b6ec40f600a9d5b8ad51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x155c, 0x1c, 0x0, 0x0, {{0xb}, {0x147c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x3, 0x0, 0x9, {0x0, 0x0, 0x6e, 0x1, 0x0, 0x6}, {0x3, 0x1, 0x80, 0x4, 0x7, 0x3}, 0x0, 0x7, 0x200}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8000, 0x1, 0x481c, 0x4, 0x8, 0x7f, 0x3, 0x6, 0xc, 0x2, 0x91b1, 0x3, 0x101, 0x6, 0x400, 0x2, 0x0, 0x0, 0xc, 0x1, 0xe, 0x6, 0x9, 0x38, 0x10000, 0x6, 0x6, 0x7, 0x9, 0x7, 0x7, 0x7739, 0x4, 0x3, 0x7fff, 0x7, 0x2, 0x1000, 0x9, 0x7, 0x47b5, 0x9, 0x5965, 0xfffff17b, 0x8, 0x6, 0x1, 0x0, 0x2, 0x4, 0x8, 0x6, 0x6, 0x0, 0x7ff, 0x6, 0x6, 0x325, 0x96, 0xab58, 0x2, 0x7f, 0x3, 0x400, 0x5, 0xff, 0x7fffffff, 0x250, 0xb57, 0x7, 0x8, 0x2, 0x7d, 0xb0f, 0x0, 0x5, 0x145d03f7, 0x1164, 0x2, 0x6, 0xffffffff, 0x8, 0x2, 0x0, 0x4, 0xd, 0x7, 0xff, 0xdecd, 0x9, 0x101, 0x0, 0xfe, 0xb, 0xa, 0x1, 0x0, 0x1c90, 0x0, 0x1, 0x0, 0xf8, 0x4, 0x4b39f317, 0x4, 0x5, 0x4, 0x7fffffff, 0x8, 0x9, 0x101, 0x3, 0x50, 0x1, 0x7ff, 0x7, 0x7, 0xea37, 0xf1, 0x1, 0x1, 0x8, 0x9, 0x9, 0xfffffff9, 0x4, 0x5, 0x5, 0x1b0, 0xffffff81, 0x100, 0xa66, 0x0, 0x8c4, 0x1, 0x0, 0x5, 0x25d, 0x1, 0x3, 0x4, 0x3, 0x6, 0x1, 0xd90, 0x0, 0x3, 0x5, 0xfffffffd, 0x8400, 0x379, 0x0, 0x4, 0x5, 0x7, 0xf1c5, 0xfffffff7, 0x10000, 0xffffffff, 0x9, 0x7, 0x8, 0x401, 0x9, 0x4, 0xa82, 0x401, 0x1000, 0x3, 0xffffffff, 0xb, 0x5, 0x7, 0x81, 0x9, 0x118400, 0x1, 0x6, 0x0, 0x1, 0x9, 0x2, 0x7573, 0x2, 0x8, 0x3188, 0x1, 0x6, 0x3, 0xffff, 0x1000, 0x8, 0xfffffff9, 0x0, 0x8, 0x4, 0x7fffffff, 0xfffff8e7, 0x556, 0x8, 0x4, 0x80000001, 0x4, 0xce7b, 0x7, 0xd3f8, 0x4, 0x81, 0xff, 0x401, 0x1, 0xfffffffa, 0xffffffff, 0x0, 0x9, 0x2, 0x0, 0x2, 0x4, 0x0, 0x2, 0x0, 0x6, 0x4, 0xfffffffc, 0xffffffff, 0x1ff, 0x6, 0x8, 0x9, 0x10000, 0x6, 0x0, 0xd3c2, 0xfffeffff, 0x7, 0xb, 0x1, 0x5, 0x1, 0x6, 0x8, 0x6, 0x0, 0x7, 0xfff, 0xfa1a, 0x7, 0x1ff, 0x9, 0x3, 0x7, 0x7f, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5f4f, 0x7, 0x1, 0x40, 0x2, 0x0, 0x3, 0x7, 0x6, 0x9, 0x3, 0x40, 0x6, 0x7, 0x7fffffff, 0x7, 0x16bb, 0x6, 0x3, 0xff, 0x1, 0x4622, 0x0, 0x5, 0xfff, 0x8, 0x4a1b, 0x1, 0x4, 0xffffffff, 0x6, 0x2, 0x7, 0xd56, 0x2, 0x401, 0x0, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x1ff, 0x1, 0x1ff, 0x2, 0x2669902c, 0x7, 0x1, 0x401, 0x8, 0x3220, 0x10001, 0x5, 0x7fffffff, 0x6, 0x8, 0x1, 0x5f9a, 0x708, 0x15, 0xb, 0x7, 0x3, 0x74, 0x20000000, 0xf, 0x1, 0x207, 0x7fff, 0x3, 0xa, 0xffff, 0x7e, 0xf8000000, 0xe4e, 0xc8d, 0x1, 0xf, 0xfff, 0x40, 0x5, 0x70000000, 0x9, 0x3, 0x8, 0x1, 0x9, 0x7, 0x850, 0x64, 0x101, 0x5, 0x3ff, 0xfffffffb, 0x4de5, 0x5, 0x2, 0x7, 0x40c, 0xff, 0x8, 0x3, 0x7fffffff, 0xff, 0x8, 0xf4, 0x8c6, 0xd, 0x400, 0x80, 0x6, 0x7, 0xe4a52ab, 0xf4, 0x4, 0x0, 0x7138, 0x9, 0x8000, 0x9c2b, 0x0, 0x6, 0x2, 0x80000001, 0x1, 0xfffffff8, 0x6df26db3, 0x9, 0x10, 0x6000, 0x8001, 0x1, 0x6, 0x5, 0x5, 0xb, 0x9, 0xfffffffc, 0x0, 0x8, 0x7, 0x5, 0x46b7, 0x3, 0x6, 0x0, 0x10001, 0x8, 0xfffffffc, 0x5, 0x2, 0x7, 0x53, 0x10, 0x80000000, 0xe9, 0x1, 0xd3, 0x9, 0x7, 0x8, 0x0, 0xd1f, 0x80, 0x7fff, 0x9, 0x6, 0x44, 0xb2, 0x7, 0x5f, 0x2, 0x81, 0x7fff, 0x6, 0x2, 0x7fffffff, 0x948, 0x2, 0x1ff, 0x0, 0xc, 0x5, 0x7fffffff, 0x1ff, 0x4, 0x400, 0x4, 0x1000000, 0x800, 0xfffffff8, 0x4, 0x1, 0xd8de, 0x4, 0x2, 0x200, 0x2, 0x81, 0x9, 0x8d, 0x1, 0x6, 0x9957, 0x3ff, 0x1, 0xce, 0x1, 0x10000, 0x81, 0x3, 0x8, 0x0, 0x2, 0x1, 0x81, 0xfffffffc, 0xbe8b, 0x7f, 0x9, 0x7, 0x208, 0x9, 0x1, 0x9, 0x4c300, 0x9, 0x8001, 0x1, 0x4, 0x3db, 0x6, 0x2, 0x400, 0x4, 0x1, 0x4, 0x200, 0x5, 0xfff, 0x4, 0xc0f, 0xcfb, 0x0, 0x10, 0xff, 0x100, 0x7, 0x7, 0x200, 0x6, 0x9, 0x1, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff1}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x7, 0x3, 0x45, 0x4, 0x1a3, 0xff, 0x14000, 0x2, 0xe, 0x0, 0x7f, 0x7f, 0x1, 0x2, 0x200, 0x8, 0x6, 0x7ff, 0xe, 0xc93, 0x84, 0xe, 0x5, 0xfffff362, 0x437c4044, 0x1, 0x9, 0x15fed24e, 0x5, 0x7, 0x1, 0xd70f, 0x572162b2, 0xf0b, 0xdfb, 0x8, 0x7, 0x4fba, 0x4, 0xb, 0x9, 0x7e, 0x80, 0x3, 0x9, 0x80000001, 0x0, 0x400, 0x100, 0x80, 0x7fffffff, 0xffffaae6, 0x6, 0x7, 0x4, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x8, 0x7f, 0x9, 0x200, 0x5, 0x1, 0x0, 0x2, 0x80, 0x92, 0x30, 0xa86, 0xa, 0x800, 0x7, 0x3b, 0x2, 0x401, 0x80, 0x6, 0x8, 0x3, 0x7, 0x8, 0xfffffbf8, 0x101, 0x5, 0x3, 0xe0d2, 0x7, 0x1, 0x4, 0x2, 0xa, 0x7, 0x100, 0x6, 0x8, 0x1, 0xf, 0x8, 0x1, 0x4, 0xb, 0x2c9, 0x3, 0x5, 0xd, 0x80000000, 0x9, 0x10001, 0x100, 0x6, 0x0, 0x1, 0x4, 0x0, 0x86ef, 0x7, 0x3, 0x2, 0x80000000, 0x7f, 0x432, 0x0, 0x7, 0x7, 0x7, 0x1ff, 0x8a400000, 0x10000000, 0x46, 0x6, 0x5, 0xfffffffb, 0x5, 0x81, 0x81, 0x3, 0x400, 0x2b6, 0x169afc0c, 0xc, 0x5, 0xe9, 0x9, 0xee61, 0xffff1611, 0xf, 0x8c7, 0x3, 0x6, 0x80000000, 0x4, 0x6, 0xfe43, 0x7a6b, 0x6, 0xb4c8, 0x4, 0x5, 0x3, 0x9, 0x0, 0x2, 0x2, 0x7ff, 0x4, 0x3, 0x4, 0xffffffff, 0xffff645b, 0x3, 0x6, 0x6, 0x2, 0x4, 0x6, 0x0, 0xfff, 0x0, 0x10001, 0x7ff, 0x7ff, 0x81, 0x2, 0x7, 0x0, 0x9, 0x81, 0xfffffffe, 0x7fffffff, 0x1, 0x2d2d, 0xffff, 0x5, 0x35b, 0x3, 0x5, 0x0, 0x1, 0x2, 0x0, 0x1, 0xa, 0xffff1cd1, 0xffffff36, 0x5, 0x0, 0xf, 0x7, 0xfff, 0x1ff, 0x3, 0x5, 0x5, 0x3, 0x400, 0x4, 0x800, 0x6, 0x8, 0x8693, 0x3ff, 0xd6, 0xc99, 0x7, 0x8, 0x28d4ab32, 0x80000000, 0xf13, 0xfffffff8, 0x786, 0x5, 0x7, 0x7, 0x1db7, 0xfffffff8, 0x0, 0x4, 0x4, 0x4ed53e69, 0x83b7, 0x1ff, 0x6, 0x7, 0x6, 0x2, 0x1, 0xff, 0x7, 0x288a7a35, 0x80000001, 0x200, 0x2]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x40, 0x4, 0xfffffff8, 0x11ec357c, 0xe, 0x7, 0x9, 0x8, 0x9ae1, 0x5, 0x8, 0x6, 0x5, 0xfffeffff, 0x8, 0x80000000, 0x3, 0x0, 0x8, 0xd7, 0x86a2, 0x36ff, 0x5c052be5, 0x7, 0x1, 0x5, 0xe90a, 0x3f15, 0x5, 0x1000, 0x9, 0x4, 0x2, 0x820, 0x688a, 0x27, 0x80000000, 0x8001, 0x5, 0x68be, 0x3, 0xe, 0x2, 0x3, 0x3ff, 0xfffffffc, 0x7, 0x8001, 0x2, 0x2d, 0x5, 0x85e9, 0x68e, 0x5a4, 0x5, 0x401, 0x0, 0x87, 0x3, 0x481, 0x2, 0x8, 0x9, 0x5, 0x35, 0x1, 0x6, 0x3, 0x4, 0x9, 0x9, 0xf1a, 0x8, 0xdf, 0xffff, 0x7, 0x9, 0xed02, 0x2, 0x80000001, 0xe3c, 0xfffffff9, 0x395, 0x1, 0x1000, 0x7, 0xfffffeff, 0xe, 0x7, 0x0, 0x2, 0x0, 0x3, 0x5, 0x6, 0x7, 0x0, 0x5, 0x0, 0x4, 0x5, 0x7, 0x5, 0xfffffff8, 0x81, 0x5, 0x5, 0x7, 0x1, 0x8001, 0x6, 0x4, 0x426, 0xc682, 0x5, 0x4, 0x7, 0x1, 0x7, 0x5, 0x6, 0x0, 0x401, 0x2f9e, 0x680, 0x2, 0x6, 0xc, 0x5, 0x5, 0x1ff, 0x10000, 0x1, 0x100, 0x8, 0x7, 0x7fff, 0x0, 0x7f, 0x401, 0x8001, 0x25, 0x6, 0x6, 0xc28e, 0x0, 0x1, 0x6, 0x1, 0x2, 0x81, 0x2000, 0x5, 0x2, 0x8, 0x98, 0xe, 0x6, 0xffff0001, 0x4, 0x5, 0x4, 0x3, 0xfffffc00, 0xd992, 0x6, 0x4, 0x0, 0x3ff, 0xfffffffa, 0x3, 0x8000, 0x6ba, 0x10001, 0xffff, 0x0, 0x4, 0xe23d, 0x1, 0x40, 0x0, 0x7, 0x43, 0x1, 0x8001, 0x23, 0x6, 0x4, 0x9, 0x2, 0xfa, 0xfff00000, 0x4, 0x3b3, 0x8, 0xe8, 0xac, 0x0, 0x200, 0x0, 0x1ff, 0x973a, 0xb74, 0x2, 0x1ff, 0x5, 0x1, 0x6, 0x0, 0x7fff, 0x5, 0x5, 0x7, 0xfbf, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x7, 0x101, 0x7, 0x7ff, 0x9, 0x3, 0x1, 0x8, 0x0, 0x400, 0x200, 0x42355e5b, 0x200, 0xc, 0x4, 0x47, 0x3, 0x22db, 0xe92d, 0x1, 0x9, 0x2, 0x7, 0xfff, 0x6, 0x81, 0x3, 0x1, 0x7, 0x2, 0xe, 0x100, 0x101, 0x100, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xc3, 0x779, 0x2, 0x6, 0x9, 0x7, 0x3586, 0x3, 0x5, 0x9, 0x10, 0x7, 0x6f, 0x4, 0x4, 0x4, 0x1d, 0x80000001, 0x7, 0x3, 0x7, 0x8, 0x501, 0x2, 0xfffffff7, 0x9, 0x4, 0xff, 0x1000, 0x3, 0x4, 0xd, 0xfffffd44, 0x1, 0xe, 0x7, 0x2, 0x80000000, 0xfffffffe, 0x7, 0x756, 0x2, 0x3, 0xff, 0x8, 0x1ff, 0x40, 0xffffff80, 0xd5b3, 0x5, 0x3f882ea4, 0x34b8, 0x3, 0x5, 0x1, 0x7, 0x8, 0x8, 0x3, 0x0, 0x7, 0x8, 0x0, 0x3, 0x6, 0x2, 0xffffffff, 0x2, 0x3d, 0x7f, 0xa, 0x8, 0xbec, 0x3, 0x0, 0x2, 0x7, 0x5725, 0x2, 0x1ff, 0x8000, 0x4, 0x4, 0x3ff, 0x2, 0x1ff, 0x200, 0x7, 0x10, 0x0, 0x10000, 0x6, 0x22990e13, 0x514, 0x5, 0x7, 0x0, 0x2, 0xfffffff8, 0x7fffffff, 0x8, 0x4, 0x8, 0x0, 0xe, 0x2, 0x8001, 0x3, 0x5, 0xe70b, 0xe3, 0x81, 0x0, 0x200, 0x0, 0x5, 0x4, 0x6, 0x2, 0x8, 0x40, 0x5, 0x2, 0x9, 0x2, 0x8, 0x10001, 0x4, 0xc, 0xd, 0x4, 0x5, 0x3ff, 0xc, 0x7e, 0x0, 0x9, 0xfffffffc, 0x8, 0x70ea071c, 0x0, 0x5, 0x35, 0x2, 0x40, 0x0, 0x9b, 0x7, 0x6, 0x6, 0x0, 0x0, 0x7, 0x80, 0x3, 0x3, 0x4, 0x1, 0x16d3, 0x6, 0x9, 0x9, 0x80000001, 0x5, 0xff, 0x0, 0x3ff, 0x6, 0x7, 0x2b6, 0x0, 0xf00, 0x4, 0x7ff, 0xffffd36c, 0x10001, 0x4, 0x101, 0x800, 0x9, 0xe3, 0x9, 0x4, 0x1, 0x0, 0xfffffff7, 0x2, 0x1ff, 0x8, 0x0, 0x50000, 0x0, 0x9, 0x8000, 0x2, 0x5, 0x0, 0x1, 0xbb2, 0x40, 0x6, 0x4, 0xfffffc01, 0x81, 0x9, 0xafd, 0x3, 0x40, 0x200, 0x200, 0x8000, 0x8, 0x5, 0x7, 0xef5, 0xfffffff8, 0xed73, 0x2, 0x3ff, 0x6, 0x3, 0x1, 0xbc21, 0x1, 0x4, 0x0, 0x4, 0x9a, 0x4, 0x5, 0x800, 0x0, 0x1, 0x0, 0x10001, 0xff, 0x1, 0x7, 0x9, 0xffff0000, 0x8, 0x6, 0x5, 0xc, 0x10000, 0x8e, 0x100010, 0x972, 0x0, 0x34000000, 0x4b6f, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0xb5, 0x6, "25d6faaf66a7672b76cd92ec1a4911fb9566dd289b678cbe8e0ca30820b1ce2e08a50d42ed0809030def354225e490819b8f987c5ea7f978bcc2bc317510f56bf915b55ddbeab287783ee53cda70c090a6e41e33627ff804564a88c8cefad3bbc6249acd747be53304df85bcc1bc578febc0cf741a2b3b6d8089622bc8170a9efb970c7685e534c2fd33c8cbbdfaec787912cb954e2fc366f677aa9bc14b6ff936f467ab5e310a37bac3d19bfaea4489fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x114, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x7, 0x3, 0x2, 0x5}}]}, {0xd0, 0x6, "2bed3459ca458999b1b22dd56a8fd23a3f87432973da9e795ac4283aa7968642978eefcee7600fa29ff57fa7411ff155fc1cfb22ca210967bc92b1e20bfbd56cc65298f5ab886014fcc8d9dfb45a63958b601a4631b2e4c458047625d0fb176c0c86ba201a5c891ae68eb28612109e9d1dd6ccd8d4a9115bd75738efdf473f39988339557816ec4872968a66cd2163a96329e594a8004693d5fbec53d760f9b7da921f79ff016bb2093aed01fa13dba56bcf666351f121c93466fb73094b18f62b27c7f4af556e881e08055c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x108, 0x1f, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x9, 0x3, 0x2, 0x598f30c8}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0xad, 0x6, "faf1abd2ffa7d812936083001144de69ba056044b79ab0c51eda8f7ec165803a8f3ac7c1ad5d28b256451ec037cb917d49342122acd8ea96beeeaf6355401944aa60c3d5e2d7b60090197c1d8060e2ced115e1e14ef0d3af04a40b9b5c391b785ec104d0472f78847912d55c136806ded60ef59e720358b63bd208e8d5b5da00403844e24985f5014ef128b8ca9836d9c5a041f32f1cd6f7eb4ad01d67c3a82b87342f3d7e2bfb866f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xbc, 0x1, [@m_ife={0xb8, 0x1f, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_DMAC={0xa, 0x3, @random="128a304b4a48"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x70, 0x6, "c7e585e1b8b90afe96df771c11c403a277b5765faa84711e9263d357f4d35663c0100a56ee5e2a89413462784bb0f90e949fc0c1d3643a9c4cd682777f80c656bd0e280c38030983bb7b8a8b3e96f08346951560a6828ef7ec3f739342fc871855cca9216a0b8d6aaf04cf77"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1b00}, 0x1, 0x0, 0x0, 0x4011}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002780)={'syztnl0\x00', &(0x7f00000026c0)={'syztnl1\x00', r9, 0x80, 0x0, 0xfffffffb, 0xa6, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@noop, @generic={0x7, 0x11, "ef88e1b2cb899c3513907f7e6ff93c"}, @timestamp={0x44, 0x14, 0x89, 0x0, 0xa, [0x6, 0x3, 0x7ff, 0x2]}, @cipso={0x86, 0x1b, 0x3, [{0x0, 0x11, "35cffed2d316420dcbf7bf87ae81af"}, {0x2, 0x4, ']D'}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x26, 0x3, 0x9, [{@remote, 0x4}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010101, 0x1}, {@multicast1, 0x5}]}, @ssrr={0x89, 0x7, 0xdc, [@rand_addr=0x64010101]}, @end]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000027c0)={@initdev}, &(0x7f0000002800)=0x14) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000002840)={'vxcan1\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002880)) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000028c0)={'vxcan0\x00'}) (async, rerun: 64) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x8c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) 16.632202141s ago: executing program 6 (id=3443): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x11, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc4, &(0x7f0000000240)=""/196, 0xd6de6fcf5ff540dd, 0x31, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r3, r3, r3, r3, r3, r3], &(0x7f00000003c0)=[{0x0, 0x1, 0x8, 0x3}, {0x0, 0x1, 0x2, 0xc}], 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000550001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010203007f"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000580)={'syztnl1\x00', r8, 0x80, 0x20, 0x2, 0x32, {{0x29, 0x4, 0x3, 0x0, 0xa4, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x3a, 0x3, [{0x7, 0xe, "70859d48ed4a7eaec52a6fc9"}, {0x1, 0x9, "9a8a8cab1e23c0"}, {0x1, 0x10, "cde3baf9228906cef9be49f067d9"}, {0x7, 0x3, 's'}, {0x2, 0xa, "bdd98760346675da"}]}, @lsrr={0x83, 0xb, 0x16, [@broadcast, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x24, 0x8b, 0x3, 0x8, [{@remote, 0x3}, {@private=0xa010102, 0x7fff}, {@local, 0x7584}, {@local, 0x9}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1f, 0x3, [{0x1, 0x7, "417ba92fc9"}, {0x7, 0x12, "6b5e563dacdfeddf4e9f605cdfa9f32e"}]}]}}}}}) 16.602591761s ago: executing program 8 (id=3444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000400)={{0x7fff}, 0x100, './file0\x00'}) 16.528269391s ago: executing program 6 (id=3445): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@setlink={0xf0, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_VF_PORTS={0xc4, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "404175d6013b0b952a03892abaeba50f"}, @IFLA_PORT_VF={0x8, 0x1, 0x666}, @IFLA_PORT_PROFILE={0xb, 0x2, 'dummy0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xc0000000}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aba5040219702ccd96b5e03bff89a9d1"}, @IFLA_PORT_PROFILE={0xc, 0x2, '}\'\\+[.+\xfe'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "452a4b86636803dc684a9c90701fa801"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "891a7862c449929a9acaf7b064cc21d1"}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x7, [@private=0xa010101, @empty, @multicast1, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, 0x2c) 16.432493866s ago: executing program 6 (id=3446): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000006580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44) 16.416525304s ago: executing program 6 (id=3447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x3c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x8, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:scsi_generic_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 15.264448936s ago: executing program 7 (id=3463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r1, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 15.238652417s ago: executing program 7 (id=3464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000000)=0x81, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000040071000000001400009502000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 15.160437348s ago: executing program 7 (id=3465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x4, 0xe, 0x3, 0x2, 0x81, 0x4, 0xff, 0x8}}) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x3a, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="3200002da9fc17ad2f81c969715cdf16111854bceb18c928f14ac7364c09559ffd2b62c22c7f875485c0898b1fca01a50c0a10cd25153ba60f64ba21adc5d56874cd82ef7387a9c971818ad16942d458a4be2ca6ac696bfc6870234ebb491f37bf28bc7021bb610d65a08705de0140", @ANYRES16=r4, @ANYBLOB="010000080000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900009000002d0000001400040070696d3672656730000000000000000008000500060000000800050007000000"], 0x4c}}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x200}) 15.159307214s ago: executing program 7 (id=3466): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) read(r0, &(0x7f0000000200)=""/187, 0xbb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x11, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r0, r1, 0x18, 0x202c, 0x0, @void, @void, @value, @void, r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.895778773s ago: executing program 7 (id=3467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) recvfrom$ax25(r3, &(0x7f0000000000)=""/8, 0x8, 0x40000040, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r4, 0x180000000) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x0) 14.8950718s ago: executing program 7 (id=3468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)=ANY=[@ANYBLOB="2c00040002030103000000000000000000000000080004403a7b92ceb43f19a35fbee481fc000000006bb801"], 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580)=0xfffffffb, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5460, 0x96b5376b91506d81) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x2, &(0x7f0000000100)="8d83", 0x9, 0x8, 0xb57, 0x1001, 0xc338, 0x0, 0x7, 'syz0\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r2, &(0x7f0000001e00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0, 0x0, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff}}], 0x18}}, {{&(0x7f0000000740)=@phonet={0x23, 0xfd, 0x2, 0x3}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)="8c618eb4246182a5bb65cffa7a418d5fc14d3e7be8d1b6aef3c19ef718323c0c", 0x20}, {&(0x7f0000000800)="32ec507a734492f2525c5da9f8bffd5b3fe8a789bc7969ec0e16dc99f911aacdb9201f666aeae12236", 0x29}, {&(0x7f0000000840)="c8a8f38cfc17ac872fa21acecd1449edadce9c6a98ac70f33dcf4bd2bff61ec82f56be958faf911543799bf0", 0x2c}, {&(0x7f0000000880)="647601f7d1c74c688837cfafe8f8a1fa3a06d9d0611719a5b333cf6fa0f82e55404c2572827899f7267cb6b8bf0dba49dcf1c242fb798e2914359b9f66cef99a6011ca2e24d333109f829158c732017827aef24d20a673c6d5e9bf60db76d34c8476e16bdd142056c7efe252403e0f19877ef42c819c49d5e540a74b9b3db8598809d0415db08bf0a1adcfec3e3583588e5385b1c8330cc56fa10bab0c2e2702f30057ff713d4d592ab7730e67e5fa4de1321f58ca4646ede342e04b30ba5f68d7bb7ed91d", 0xc5}, {&(0x7f0000000980)="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", 0xff}], 0x5, &(0x7f0000000b00)}}, {{&(0x7f0000000c00)=@nfc={0x27, r7, 0x1, 0x2}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="567ae97a0d9a89b99cf74f319ce3e847614d9b652a2c2f99d7032ae63b906a0dca88c9d1cc82bdba5a3db89893a9f0581143a9c23f618c78d4bdbb32bf806017e156c960f142fa726273fd6cd4b9ce18e22b981d88790e3e50ded60b471b7c6fa977dc60da13732bbece4ab90967ef03065bb5e26e2fa18ffbb8ff9404abcf8d50bdfbbe1533f3e64f4c4a6a2be57731b2f3c07589b39a28717397e24fe27377bf34a14093d566bd87a0bc7c8fe6f047dd5ed32654de53bc544773b7e63bf72c53d94feadc45b23cd85bd43da0632b85cd000000", 0xd4}], 0x2, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x3f10}}, @mark={{0x14, 0x1, 0x24, 0xb991}}], 0x30}}], 0x3, 0x8840) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030101030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) r9 = socket(0x9, 0xa, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x78, @private0={0xfc, 0x0, '\x00', 0x1}, 0xabc}}, 0x4, 0x6, 0x10001, 0x7, 0xcc, 0x7, 0x4}, &(0x7f0000000400)=0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000440)={r10, 0x800, 0x7fff, 0x9, 0x7, 0xfe}, &(0x7f0000000480)=0x14) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112be000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r9) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="668b4e880e7863315a92bf2b30ef6f6da91ea5a494e4e14c61693b1e1518a7a1f1412d461fba12db615ff4489d2bee48d6523d28e909d5b07c15c0d9d3a25d95580dc1a863e2fe21fb133e0e16b09a84113ed48b11d2f2ac05a2de38cc", @ANYRES16=r11, @ANYBLOB="020028bd7000fbdbdf25110000000600280003000000050030000000000008003b0006000000050030000100000008000b000700000008003c003600000005002d000000000008003b000400000008000b000300000005002e0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.095040092s ago: executing program 36 (id=3404): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x20, r11, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x7}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4184) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r12, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x6, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x22040040}, 0x10000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0xa840) r15 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r15, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x7, 0x0, 0x0, 0xf, 0x81, 0xc45, 0x1012, 0xc1, 0x2, 0x7, 'syz1\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"7cc7b8d5f1295dd28a2280c10b9434fd", 0x0, 0x0, {0x7, 0x5}, {0x7f, 0x1}, 0x8, [0x52e, 0x100000000, 0x180000000, 0x69, 0xffffffffffffffff, 0x5, 0x81, 0x1, 0x6, 0x0, 0x3, 0x8, 0xbd2d, 0xc8c1, 0x4, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)=r16) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r15, 0x800448d3, 0x0) 1.095649028s ago: executing program 37 (id=3447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x3c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x8, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:scsi_generic_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 1.067271528s ago: executing program 38 (id=3444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000400)={{0x7fff}, 0x100, './file0\x00'}) 1.03469533s ago: executing program 39 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x11e, 0x60, 0x0, &(0x7f0000007cc0)) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000100039042bbd7000f8dbdf250000000009ea4b0a058d54ef338259f7d459f769ff965403c18c11cc274d91b1e43dd8a42a879bbafa6beed467b8a396d81e1d68af8b0a22648bf9703074a658a3008e7f37425b976d2c3eaad4c2fcd6917f501b0c7e9477ddda840000ea026cc55c6de059d06f3be3f68c45dcde0deea3af4b13557b9c372a9fe9152177b04c0af7f541ea7bd28a7a1d88374f025abac3b9c6060ccbcaf171edbcbe258857eb9b0000000000000000", @ANYRES32=0x0, @ANYBLOB="8bafea1f000000001800128008000100677265000c00028008000700e0000001"], 0x38}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt(r4, 0x8, 0x3, &(0x7f0000000480)=""/108, &(0x7f0000000400)=0x6c) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000010000000000000100df9da07f1f60744500000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) ioctl(r2, 0x8b32, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="03ad670f182b1f458330a465a4d49fdea08b30953b5c160b8372f26acbe12624b1c594d5a15caf37e9fc760dc63aec340fb4a6b43dd193eb8e17e47a2ebac679455358b5407edc7cef9b01e846775f3a29316f3cb4382578e45ce493af59ec7d5d9909c4df978b0c8422078597dec34acee0d89071667c299a133eb423ade102ea4d10e38fa64de1b4f071509547581f26bb057d7c761850368293ea3013a1ef88eef77a48ea3faf018ff87e8971481f07a0f0bf445043c213dd4a487344a3eaa9acac6dd7413807866f7d4f08c62f9883b37fa33734c9b24769df", @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r12}, 0x94) 0s ago: executing program 40 (id=3468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)=ANY=[@ANYBLOB="2c00040002030103000000000000000000000000080004403a7b92ceb43f19a35fbee481fc000000006bb801"], 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000580)=0xfffffffb, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5460, 0x96b5376b91506d81) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x2, &(0x7f0000000100)="8d83", 0x9, 0x8, 0xb57, 0x1001, 0xc338, 0x0, 0x7, 'syz0\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r2, &(0x7f0000001e00)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0, 0x0, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff}}], 0x18}}, {{&(0x7f0000000740)=@phonet={0x23, 0xfd, 0x2, 0x3}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)="8c618eb4246182a5bb65cffa7a418d5fc14d3e7be8d1b6aef3c19ef718323c0c", 0x20}, {&(0x7f0000000800)="32ec507a734492f2525c5da9f8bffd5b3fe8a789bc7969ec0e16dc99f911aacdb9201f666aeae12236", 0x29}, {&(0x7f0000000840)="c8a8f38cfc17ac872fa21acecd1449edadce9c6a98ac70f33dcf4bd2bff61ec82f56be958faf911543799bf0", 0x2c}, {&(0x7f0000000880)="647601f7d1c74c688837cfafe8f8a1fa3a06d9d0611719a5b333cf6fa0f82e55404c2572827899f7267cb6b8bf0dba49dcf1c242fb798e2914359b9f66cef99a6011ca2e24d333109f829158c732017827aef24d20a673c6d5e9bf60db76d34c8476e16bdd142056c7efe252403e0f19877ef42c819c49d5e540a74b9b3db8598809d0415db08bf0a1adcfec3e3583588e5385b1c8330cc56fa10bab0c2e2702f30057ff713d4d592ab7730e67e5fa4de1321f58ca4646ede342e04b30ba5f68d7bb7ed91d", 0xc5}, {&(0x7f0000000980)="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", 0xff}], 0x5, &(0x7f0000000b00)}}, {{&(0x7f0000000c00)=@nfc={0x27, r7, 0x1, 0x2}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="567ae97a0d9a89b99cf74f319ce3e847614d9b652a2c2f99d7032ae63b906a0dca88c9d1cc82bdba5a3db89893a9f0581143a9c23f618c78d4bdbb32bf806017e156c960f142fa726273fd6cd4b9ce18e22b981d88790e3e50ded60b471b7c6fa977dc60da13732bbece4ab90967ef03065bb5e26e2fa18ffbb8ff9404abcf8d50bdfbbe1533f3e64f4c4a6a2be57731b2f3c07589b39a28717397e24fe27377bf34a14093d566bd87a0bc7c8fe6f047dd5ed32654de53bc544773b7e63bf72c53d94feadc45b23cd85bd43da0632b85cd000000", 0xd4}], 0x2, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x3f10}}, @mark={{0x14, 0x1, 0x24, 0xb991}}], 0x30}}], 0x3, 0x8840) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030101030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) r9 = socket(0x9, 0xa, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x78, @private0={0xfc, 0x0, '\x00', 0x1}, 0xabc}}, 0x4, 0x6, 0x10001, 0x7, 0xcc, 0x7, 0x4}, &(0x7f0000000400)=0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000440)={r10, 0x800, 0x7fff, 0x9, 0x7, 0xfe}, &(0x7f0000000480)=0x14) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112be000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r9) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="668b4e880e7863315a92bf2b30ef6f6da91ea5a494e4e14c61693b1e1518a7a1f1412d461fba12db615ff4489d2bee48d6523d28e909d5b07c15c0d9d3a25d95580dc1a863e2fe21fb133e0e16b09a84113ed48b11d2f2ac05a2de38cc", @ANYRES16=r11, @ANYBLOB="020028bd7000fbdbdf25110000000600280003000000050030000000000008003b0006000000050030000100000008000b000700000008003c003600000005002d000000000008003b000400000008000b000300000005002e0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) kernel console output (not intermixed with test programs): attribute type 2 has an invalid length. [ 191.453358][T11939] netlink: 'syz.1.1711': attribute type 6 has an invalid length. [ 191.481597][T11939] netlink: 'syz.1.1711': attribute type 5 has an invalid length. [ 191.887170][T11965] syzkaller1: entered promiscuous mode [ 191.892670][T11965] syzkaller1: entered allmulticast mode [ 192.099064][T11980] tipc: Enabling of bearer rejected, already enabled [ 192.137116][T11980] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 192.173819][T11980] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 192.206613][T11980] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 192.489351][T11998] macvtap2: entered promiscuous mode [ 192.495619][T11998] macvtap2: entered allmulticast mode [ 192.525100][T12002] macvtap3: entered promiscuous mode [ 192.530741][T12002] macvtap3: entered allmulticast mode [ 192.559539][T12000] bridge0: entered promiscuous mode [ 192.565515][T12000] bridge0: entered allmulticast mode [ 192.616079][T12006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.667340][T12006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.859889][T12014] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 193.013871][T12027] team0: Device ip6gre2 is of different type [ 193.086165][T12029] team0: Device ip6gre2 is of different type [ 193.128605][T12032] vlan2: entered promiscuous mode [ 193.134081][T12032] bridge0: entered promiscuous mode [ 193.187071][T12037] __nla_validate_parse: 28 callbacks suppressed [ 193.187088][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 193.203522][T12039] sctp: [Deprecated]: syz.1.1744 (pid 12039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.203522][T12039] Use struct sctp_sack_info instead [ 193.376094][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 193.429472][T12048] bridge0: port 2(batadv0) entered blocking state [ 193.447247][T12048] bridge0: port 2(batadv0) entered disabled state [ 193.458064][T12048] batadv0: entered allmulticast mode [ 193.466309][T12048] batadv0: entered promiscuous mode [ 193.482549][T12054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.486930][T12048] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 193.493749][T12054] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 193.506822][T12054] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 193.533777][T12048] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1747'. [ 193.590052][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'. [ 193.661873][T12059] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.684930][T12068] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1754'. [ 193.736589][T12070] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 193.825945][T12077] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 193.834610][T12077] netlink: 'syz.0.1758': attribute type 2 has an invalid length. [ 193.887197][T12079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.909031][T12081] netlink: 'syz.0.1760': attribute type 9 has an invalid length. [ 193.926118][ T1109] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 193.936675][ T1109] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 194.068475][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 194.078193][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 194.181051][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.191500][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.192610][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 194.248564][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 194.250178][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 194.285670][T12105] tipc: Resetting bearer [ 194.370370][T12099] tipc: Resetting bearer [ 194.391834][T12109] gtp0: entered promiscuous mode [ 194.410918][T12109] gtp0: entered allmulticast mode [ 194.840468][T12132] tipc: Resetting bearer [ 194.964875][T12138] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 194.986292][T12138] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 195.000184][T12140] netlink: 'syz.3.1776': attribute type 21 has an invalid length. [ 195.164462][T12132] tipc: Resetting bearer [ 195.443931][T12167] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 195.469555][T12171] "syz.0.1787" (12171) uses obsolete ecb(arc4) skcipher [ 195.480983][T12176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.592364][T12183] NCSI netlink: No device for ifindex 131092 [ 196.074757][ T12] tipc: Resetting bearer [ 196.487031][T12239] xt_socket: unknown flags 0x50 [ 196.859135][T12262] "syz.2.1813" (12262) uses obsolete ecb(arc4) skcipher [ 197.088336][T12279] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 197.101842][T12279] bond8 (unregistering): Released all slaves [ 197.300059][T12292] bridge5: entered promiscuous mode [ 197.306214][T12292] bridge5: entered allmulticast mode [ 197.469974][T12301] openvswitch: netlink: Flow actions attr not present in new flow. [ 197.738676][T12310] xt_CT: No such helper "snmp_trap" [ 197.770695][T12319] bridge8: entered promiscuous mode [ 197.782020][T12319] bridge8: entered allmulticast mode [ 198.319969][T12363] validate_nla: 4 callbacks suppressed [ 198.319987][T12363] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 198.441972][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.637988][T12381] lo: left promiscuous mode [ 198.665212][T12381] tunl0: left promiscuous mode [ 198.670197][T12381] gre0: left promiscuous mode [ 198.675903][T12381] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.726404][T12386] __nla_validate_parse: 26 callbacks suppressed [ 198.726421][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 198.753806][T12386] netlink: 'syz.3.1851': attribute type 30 has an invalid length. [ 198.769456][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1851'. [ 198.776373][T12390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.840520][T12396] tipc: Resetting bearer [ 198.898481][T12396] syzkaller0: left promiscuous mode [ 198.903957][T12396] syzkaller0: left allmulticast mode [ 198.934852][T12399] tipc: Resetting bearer [ 199.007538][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'. [ 199.090142][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1858'. [ 199.141395][T12418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1858'. [ 199.163908][T12414] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.195518][ T3470] tipc: Resetting bearer [ 199.374505][T12429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.381788][T12429] IPv6: NLM_F_CREATE should be set when creating new route [ 199.435671][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 199.458749][T12435] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1863'. [ 199.561814][T12439] IPVS: set_ctl: invalid protocol: 8 172.20.20.60:20003 [ 199.608073][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 199.650698][T12448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 199.678713][T12448] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 199.689411][T12448] gretap1: entered promiscuous mode [ 199.696323][T12448] gretap1: entered allmulticast mode [ 199.702469][T12454] nbd: socks must be embedded in a SOCK_ITEM attr [ 199.812039][T12463] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 199.820410][T12463] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 199.821232][T12464] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 199.830106][T12463] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1872'. [ 199.884887][T12463] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 199.913872][T12463] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 199.951019][T12464] gretap2: entered promiscuous mode [ 199.960886][T12464] bond6: (slave gretap2): making interface the new active one [ 199.970220][T12464] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 199.998925][T12464] netlink: 'syz.4.1871': attribute type 21 has an invalid length. [ 200.013484][T12464] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1871'. [ 200.107757][T12477] lo: left promiscuous mode [ 200.118287][T12477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.197123][T12484] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 200.207605][T12481] netlink: 'syz.4.1878': attribute type 4 has an invalid length. [ 200.358224][T12491] block nbd2: NBD_DISCONNECT [ 200.551627][T12491] bond9: (slave gretap2): making interface the new active one [ 200.560836][ T5834] udevd[5834]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 200.561095][T12491] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 200.810128][T12518] tunl0: left promiscuous mode [ 200.836035][T12518] gre0: left promiscuous mode [ 200.898064][T12526] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.906369][ T5913] IPVS: starting estimator thread 0... [ 200.929209][T12518] gretap0: left promiscuous mode [ 200.949978][T12518] erspan0: left promiscuous mode [ 200.970315][T12518] ip_vti0: left promiscuous mode [ 201.004428][T12529] IPVS: using max 37 ests per chain, 88800 per kthread [ 201.029677][T12518] bridge0: port 3(dummy0) entered disabled state [ 201.036251][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.143543][T12518] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 201.981854][T12617] tipc: Enabled bearer , priority 0 [ 202.010787][T12617] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 202.025191][T12617] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 202.121772][T12617] tipc: Resetting bearer [ 202.178114][T12633] ip6tnl0: Caught tx_queue_len zero misconfig [ 203.293495][ T5900] tipc: Node number set to 3119559279 [ 203.720500][T12696] validate_nla: 52 callbacks suppressed [ 203.720519][T12696] netlink: 'syz.0.1932': attribute type 4 has an invalid length. [ 203.778989][T12696] netlink: 'syz.0.1932': attribute type 11 has an invalid length. [ 203.786926][T12696] __nla_validate_parse: 13 callbacks suppressed [ 203.786940][T12696] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1932'. [ 204.079294][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1940'. [ 204.315895][T12747] delete_channel: no stack [ 204.328511][T12741] bond7: option all_slaves_active: invalid value (222) [ 204.338505][T12741] bond7 (unregistering): Released all slaves [ 204.542658][T12753] IPVS: length: 8 != 1152 [ 204.563230][T12757] sctp: [Deprecated]: syz.4.1951 (pid 12757) Use of int in maxseg socket option. [ 204.563230][T12757] Use struct sctp_assoc_value instead [ 204.578961][T12756] netlink: 'syz.1.1952': attribute type 1 has an invalid length. [ 204.689750][T12762] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.744050][T12762] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 204.758089][T12762] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 204.775957][T12756] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 204.803393][T12772] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 204.826448][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 204.868801][T12774] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1955'. [ 205.314143][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1968'. [ 205.430046][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 205.456487][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'. [ 205.476451][T12805] syzkaller0: entered promiscuous mode [ 205.501598][T12805] syzkaller0: entered allmulticast mode [ 205.520647][T12805] tipc: Resetting bearer [ 205.790705][T12833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 206.227166][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 206.289264][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 206.319596][T12846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.540881][T12845] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 206.560950][T12845] bond8 (unregistering): Released all slaves [ 206.607612][ T1109] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 206.619492][ T1109] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.629776][ T1109] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 206.639059][ T1109] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.656495][T12855] netlink: 'syz.3.1983': attribute type 2 has an invalid length. [ 206.666962][T12858] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 206.697137][ T1109] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 206.711005][ T1109] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.729189][ T1109] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 206.740262][ T1109] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.278530][T12903] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 207.318243][T12905] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 207.518401][T12916] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 207.530953][T12916] dummy0: left promiscuous mode [ 207.550615][T12916] team0: Port device dummy0 added [ 207.606258][T12916] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 207.645652][T12916] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 207.697364][T12916] team0: Failed to send options change via netlink (err -105) [ 207.707337][T12916] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 207.721522][T12924] netlink: 'syz.0.2000': attribute type 4 has an invalid length. [ 207.723345][T12916] team0: Port device dummy0 removed [ 207.756231][T12916] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 207.975677][T12939] : entered promiscuous mode [ 208.780480][T12998] delete_channel: no stack [ 209.053328][ T30] audit: type=1804 audit(1763030850.235:3): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2028" name="/newroot/419/cgroup.controllers" dev="tmpfs" ino=2143 res=1 errno=0 [ 209.078716][ T30] audit: type=1800 audit(1763030850.245:4): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2028" name="cgroup.controllers" dev="tmpfs" ino=2143 res=0 errno=0 [ 209.124202][T13017] tipc: Resetting bearer [ 209.151614][T13016] tipc: Resetting bearer [ 209.428570][T13037] validate_nla: 1 callbacks suppressed [ 209.428587][T13037] netlink: 'syz.2.2033': attribute type 21 has an invalid length. [ 209.484881][T13037] netlink: 'syz.2.2033': attribute type 1 has an invalid length. [ 209.798072][ T36] tipc: Resetting bearer [ 209.996599][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.172002][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.331607][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.490989][ T3521] bond0: (slave netdevsim0): Releasing backup interface [ 210.503592][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 210.526262][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.813217][T13059] __nla_validate_parse: 13 callbacks suppressed [ 210.813235][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 210.907994][T13059] bond0: (slave bond_slave_1): Releasing backup interface [ 211.010434][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.019379][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.028022][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.038753][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.047026][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.079060][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.086750][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.094987][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.104838][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.115163][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.146109][ T3521] dummy0: left allmulticast mode [ 211.151244][ T3521] dummy0: left promiscuous mode [ 211.204520][ T3521] bridge0: port 3(dummy0) entered disabled state [ 211.227006][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.232376][ T3521] bridge_slave_1: left promiscuous mode [ 211.242717][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.251316][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.264232][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.272005][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.273020][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.325952][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.335257][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.344269][ T3521] bridge_slave_0: left allmulticast mode [ 211.350959][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.351424][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.359651][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.374668][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.375776][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.383077][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.392947][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.397288][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.413502][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.575861][ T3521] bond9 (unregistering): (slave gretap2): Releasing active interface [ 211.604397][ T3521] bond4 (unregistering): (slave gre2): Releasing backup interface [ 211.612389][ T3521] gre2 (unregistering): left promiscuous mode [ 211.942526][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.951662][ T3521] bond_slave_0: left promiscuous mode [ 211.958728][ T3521] bond0 (unregistering): Released all slaves [ 212.031592][ T3521] bond1 (unregistering): Released all slaves [ 212.043972][ T3521] bond2 (unregistering): Released all slaves [ 212.056317][ T3521] bond3 (unregistering): Released all slaves [ 212.129551][ T3521] bond4 (unregistering): Released all slaves [ 212.141612][ T3521] bond5 (unregistering): Released all slaves [ 212.154756][ T3521] bond6 (unregistering): Released all slaves [ 212.227907][ T3521] bond7 (unregistering): Released all slaves [ 212.296870][ T3521] bond8 (unregistering): Released all slaves [ 212.309094][ T3521] bond9 (unregistering): Released all slaves [ 212.367913][T13060] lo speed is unknown, defaulting to 1000 [ 212.459334][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 212.461861][ T3521] tipc: Disabling bearer [ 212.493782][ T3521] tipc: Left network mode [ 212.494622][T13071] veth0_to_bridge: entered promiscuous mode [ 212.506660][T13070] veth0_to_bridge: left promiscuous mode [ 212.745075][T13079] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2054'. [ 212.748454][T13060] wlan0 speed is unknown, defaulting to 1000 [ 212.767907][T13068] lo speed is unknown, defaulting to 1000 [ 212.825161][T13080] netlink: 'syz.4.2054': attribute type 23 has an invalid length. [ 213.095170][T13066] lo speed is unknown, defaulting to 1000 [ 213.193016][ T5844] Bluetooth: hci1: command tx timeout [ 213.259176][T13060] chnl_net:caif_netlink_parms(): no params data found [ 213.312534][T13064] lo speed is unknown, defaulting to 1000 [ 213.362878][ T5844] Bluetooth: hci2: command tx timeout [ 213.376476][T13060] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.384137][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.391409][T13060] bridge_slave_0: entered allmulticast mode [ 213.400229][T13060] bridge_slave_0: entered promiscuous mode [ 213.409872][T13060] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.417600][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.425085][T13060] bridge_slave_1: entered allmulticast mode [ 213.433015][ T5844] Bluetooth: hci4: command tx timeout [ 213.433675][T13060] bridge_slave_1: entered promiscuous mode [ 213.439096][ T5844] Bluetooth: hci3: command tx timeout [ 213.482151][T13060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.495732][T13060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.543467][T13060] team0: Port device team_slave_0 added [ 213.549385][T13064] wlan0 speed is unknown, defaulting to 1000 [ 213.551986][T13060] team0: Port device team_slave_1 added [ 213.619394][T13068] wlan0 speed is unknown, defaulting to 1000 [ 213.729500][T13066] wlan0 speed is unknown, defaulting to 1000 [ 213.735009][T13060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.742430][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.773029][T13060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.813783][T13060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.820752][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.877146][T13060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.989035][T13060] hsr_slave_0: entered promiscuous mode [ 213.996056][T13060] hsr_slave_1: entered promiscuous mode [ 214.002370][T13060] debugfs: 'hsr0' already exists in 'hsr' [ 214.008354][T13060] Cannot create hsr debugfs directory [ 214.480352][T13064] chnl_net:caif_netlink_parms(): no params data found [ 214.602894][T13060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.680361][T13060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.773961][T13060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.787128][T13060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.815992][ T3521] hsr_slave_0: left promiscuous mode [ 214.821770][ T3521] hsr_slave_1: left promiscuous mode [ 214.834353][ T3521] veth1_macvtap: left promiscuous mode [ 214.840776][ T3521] veth0_macvtap: left promiscuous mode [ 214.847023][ T3521] veth1_vlan: left promiscuous mode [ 214.852492][ T3521] veth0_vlan: left promiscuous mode [ 215.042227][ T3521] vlan1 (unregistering): left allmulticast mode [ 215.048938][ T3521] veth0_vlan (unregistering): left allmulticast mode [ 215.235441][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 215.268385][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 215.284190][ T5844] Bluetooth: hci1: command tx timeout [ 215.434173][ T5844] Bluetooth: hci2: command tx timeout [ 215.495571][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.502672][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.510064][T13064] bridge_slave_0: entered allmulticast mode [ 215.516100][ T5844] Bluetooth: hci3: command tx timeout [ 215.516136][ T5844] Bluetooth: hci4: command tx timeout [ 215.529311][T13064] bridge_slave_0: entered promiscuous mode [ 215.571315][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.580507][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.589000][T13064] bridge_slave_1: entered allmulticast mode [ 215.597313][T13064] bridge_slave_1: entered promiscuous mode [ 215.695496][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2060'. [ 215.714639][T13064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.759023][T13064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.903645][T13064] team0: Port device team_slave_0 added [ 215.912489][T13064] team0: Port device team_slave_1 added [ 215.991343][T13068] chnl_net:caif_netlink_parms(): no params data found [ 216.007102][ T3521] IPVS: stop unused estimator thread 0... [ 216.052660][T13064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.059711][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.086605][T13064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.099133][T13064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.107401][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.134089][T13064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.146430][T13066] chnl_net:caif_netlink_parms(): no params data found [ 216.270108][T13068] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.277581][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.285367][T13068] bridge_slave_0: entered allmulticast mode [ 216.292412][T13068] bridge_slave_0: entered promiscuous mode [ 216.320188][T13064] hsr_slave_0: entered promiscuous mode [ 216.326688][T13064] hsr_slave_1: entered promiscuous mode [ 216.354023][ T3521] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.370613][T13068] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.378436][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.386451][T13068] bridge_slave_1: entered allmulticast mode [ 216.393690][T13068] bridge_slave_1: entered promiscuous mode [ 216.436934][T13066] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.444309][T13066] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.451478][T13066] bridge_slave_0: entered allmulticast mode [ 216.458603][T13066] bridge_slave_0: entered promiscuous mode [ 216.506565][ T3521] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.521269][T13066] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.529498][T13066] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.537716][T13066] bridge_slave_1: entered allmulticast mode [ 216.545458][T13066] bridge_slave_1: entered promiscuous mode [ 216.573801][T13068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.626414][T13068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.657380][ T3521] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.683901][T13066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.729539][T13068] team0: Port device team_slave_0 added [ 216.754848][T13066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.790769][T13068] team0: Port device team_slave_1 added [ 216.824521][T13066] team0: Port device team_slave_0 added [ 216.889389][ T3521] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.906424][T13066] team0: Port device team_slave_1 added [ 216.915918][T13060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.925074][T13068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.932431][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.959963][T13068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.010611][T13066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.017903][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.044872][T13066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.057622][T13068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.066189][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.093007][T13068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.118868][T13066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.126047][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.152306][T13066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.226447][T13068] hsr_slave_0: entered promiscuous mode [ 217.234351][T13068] hsr_slave_1: entered promiscuous mode [ 217.240456][T13068] debugfs: 'hsr0' already exists in 'hsr' [ 217.246428][T13068] Cannot create hsr debugfs directory [ 217.285353][T13066] hsr_slave_0: entered promiscuous mode [ 217.291821][T13066] hsr_slave_1: entered promiscuous mode [ 217.298117][T13066] debugfs: 'hsr0' already exists in 'hsr' [ 217.304003][T13066] Cannot create hsr debugfs directory [ 217.362852][ T5844] Bluetooth: hci1: command tx timeout [ 217.406379][T13060] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.472032][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.479188][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.514716][ T5844] Bluetooth: hci2: command tx timeout [ 217.563741][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.570865][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.579108][ T3521] bridge_slave_0: left allmulticast mode [ 217.585181][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.593029][ T5844] Bluetooth: hci4: command tx timeout [ 217.598432][ T5844] Bluetooth: hci3: command tx timeout [ 217.743745][ T3521] bond3 (unregistering): (slave gretap2): Releasing active interface [ 218.247698][ T3521] bond1 (unregistering): Released all slaves [ 218.323304][ T3521] bond0 (unregistering): Released all slaves [ 218.336154][ T3521] bond2 (unregistering): Released all slaves [ 218.348311][ T3521] bond3 (unregistering): Released all slaves [ 218.360414][ T3521] bond4 (unregistering): Released all slaves [ 218.416654][T13064] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.492293][ T3521] tipc: Left network mode [ 218.508954][T13064] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.512713][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2068'. [ 218.561421][T13064] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.572394][T12532] hid-generic 0005:0007:5507.0001: item fetching failed at offset 0/2 [ 218.582933][T12532] hid-generic 0005:0007:5507.0001: probe with driver hid-generic failed with error -22 [ 218.593976][T13064] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.689628][T13060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.767978][T13066] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.779980][T13066] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.825627][T13066] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.894008][T13066] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.068513][T13068] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 219.079593][T13068] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 219.125549][T13068] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.138080][T13068] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 219.258534][T13064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.272286][T13060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.407481][T13064] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.433359][ T5844] Bluetooth: hci1: command tx timeout [ 219.441716][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.448881][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.492168][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.499401][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.570833][T13066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.583651][T13209] bridge0: port 1(veth0_to_bridge) entered blocking state [ 219.597625][T13209] bridge0: port 1(veth0_to_bridge) entered disabled state [ 219.603899][ T5844] Bluetooth: hci2: command tx timeout [ 219.614581][T13209] veth0_to_bridge: entered allmulticast mode [ 219.631068][T13209] veth0_to_bridge: entered promiscuous mode [ 219.673533][ T5844] Bluetooth: hci3: command tx timeout [ 219.678956][ T5844] Bluetooth: hci4: command 0x0419 tx timeout [ 219.770683][T13066] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.821237][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.828442][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.895668][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.902853][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.940804][ T3521] hsr_slave_0: left promiscuous mode [ 219.949611][ T3521] hsr_slave_1: left promiscuous mode [ 219.956857][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.965197][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.973762][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.981265][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.002208][ T3521] veth1_macvtap: left promiscuous mode [ 220.007943][ T3521] veth0_macvtap: left promiscuous mode [ 220.014064][ T3521] veth1_vlan: left promiscuous mode [ 220.019335][ T3521] veth0_vlan: left promiscuous mode [ 220.217124][ T3521] team0 (unregistering): Port device veth0_virt_wifi removed [ 220.351782][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 220.384898][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 220.669532][T13068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.741586][T13060] veth0_vlan: entered promiscuous mode [ 220.780429][T13068] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.872395][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.879571][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.915871][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.923069][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.987327][T13060] veth1_vlan: entered promiscuous mode [ 221.111981][T13060] veth0_macvtap: entered promiscuous mode [ 221.148661][T13060] veth1_macvtap: entered promiscuous mode [ 221.179013][T13064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.239075][ T3521] IPVS: stop unused estimator thread 0... [ 221.256594][T13060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.282259][T13243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.331014][T13066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.358018][T13060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.424766][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.444835][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.471077][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.508413][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.607590][T13068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.732849][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.740682][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.757499][ T5152] Bluetooth: hci4: command 0x0419 tx timeout [ 221.838528][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.848023][T13265] netlink: 'syz.4.2082': attribute type 10 has an invalid length. [ 221.866491][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.952492][T13064] veth0_vlan: entered promiscuous mode [ 222.008826][T13064] veth1_vlan: entered promiscuous mode [ 222.136594][T13276] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 222.140551][T13066] veth0_vlan: entered promiscuous mode [ 222.185310][T13066] veth1_vlan: entered promiscuous mode [ 222.221936][T13279] netlink: 'syz.5.2084': attribute type 8 has an invalid length. [ 222.239812][T13064] veth0_macvtap: entered promiscuous mode [ 222.251397][T13064] veth1_macvtap: entered promiscuous mode [ 222.276062][T13068] veth0_vlan: entered promiscuous mode [ 222.301372][T13068] veth1_vlan: entered promiscuous mode [ 222.364338][T13064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.400081][T13064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.485925][T13066] veth0_macvtap: entered promiscuous mode [ 222.506153][T13066] veth1_macvtap: entered promiscuous mode [ 222.533999][ T3634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.557282][T13068] veth0_macvtap: entered promiscuous mode [ 222.569351][ T3634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.580328][ T3634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.602335][T13068] veth1_macvtap: entered promiscuous mode [ 222.610982][ T3634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.677010][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 222.691911][T13066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.714740][T13301] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 222.722478][T13301] netlink: 'syz.4.2089': attribute type 2 has an invalid length. [ 222.746668][T13066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.778471][T13068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.851419][ T181] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.873898][T13068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.882479][ T181] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.896727][ T181] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.931931][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2090'. [ 222.940944][ T181] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.941034][ T181] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.941114][ T181] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.941190][ T181] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.941247][ T181] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.991235][T13307] bridge_slave_1: left allmulticast mode [ 222.997563][T13307] bridge_slave_1: left promiscuous mode [ 223.008668][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.021099][T13307] bridge_slave_0: left allmulticast mode [ 223.028175][T13307] bridge_slave_0: left promiscuous mode [ 223.036039][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.118388][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.129578][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.148111][T13315] bridge3: entered promiscuous mode [ 223.153663][T13315] bridge3: entered allmulticast mode [ 223.235389][T13317] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 223.284986][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.308141][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.424630][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.450462][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.565034][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.602592][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.634758][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.658682][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.732664][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.756048][T13337] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2097'. [ 223.782315][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.087200][T13353] syzkaller0: entered promiscuous mode [ 224.092709][T13353] syzkaller0: entered allmulticast mode [ 224.109668][T13353] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 224.520921][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2110'. [ 224.542338][T13376] netlink: 'syz.4.2111': attribute type 10 has an invalid length. [ 224.561354][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2110'. [ 224.568804][T13378] netlink: 'syz.6.2112': attribute type 9 has an invalid length. [ 224.575559][T13376] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 224.756558][T13384] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2114'. [ 225.045019][T13403] IPVS: length: 8 != 2920 [ 225.074550][T13409] IPVS: length: 8 != 2920 [ 225.281565][ T1166] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.306351][T13427] sctp: [Deprecated]: syz.4.2128 (pid 13427) Use of int in max_burst socket option deprecated. [ 225.306351][T13427] Use struct sctp_assoc_value instead [ 225.306611][ T1166] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.428152][T13429] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 225.440375][ T1166] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.449236][ T1166] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.662635][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2135'. [ 225.710484][T13444] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2135'. [ 225.957358][T13459] delete_channel: no stack [ 226.141512][T13466] lo speed is unknown, defaulting to 1000 [ 226.149308][T13473] netlink: 'syz.6.2145': attribute type 29 has an invalid length. [ 226.201454][T13474] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2145'. [ 226.211257][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2145'. [ 226.268862][T13475] syzkaller0: entered promiscuous mode [ 226.285844][T13475] syzkaller0: entered allmulticast mode [ 226.328377][T13468] netlink: 'syz.7.2143': attribute type 21 has an invalid length. [ 226.335760][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 226.348579][T13468] netlink: 'syz.7.2143': attribute type 22 has an invalid length. [ 226.368561][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 226.382978][T13468] netlink: 'syz.7.2143': attribute type 23 has an invalid length. [ 226.437324][T13483] geneve2: entered promiscuous mode [ 226.544421][T13490] openvswitch: netlink: Actions may not be safe on all matching packets [ 226.831245][T13498] syzkaller0: entered promiscuous mode [ 226.856051][T13498] syzkaller0: entered allmulticast mode [ 226.960578][T13508] Cannot find add_set index 1 as target [ 226.972978][T13504] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 226.992049][T13508] ip6t_REJECT: ECHOREPLY is not supported [ 226.999753][T13508] syz_tun: entered allmulticast mode [ 227.005967][T13498] tipc: Started in network mode [ 227.033895][T13498] tipc: Node identity 121703f20e93, cluster identity 4711 [ 227.041888][T13498] tipc: Enabled bearer , priority 0 [ 227.091546][T13508] syz_tun: left allmulticast mode [ 227.140000][T13497] tipc: Resetting bearer [ 227.157123][T13497] tipc: Disabling bearer [ 227.194626][T13466] wlan0 speed is unknown, defaulting to 1000 [ 227.201281][T13511] wg2: entered promiscuous mode [ 227.208176][T13511] wg2: entered allmulticast mode [ 227.491046][T13528] tc_dump_action: action bad kind [ 227.881680][T13553] x_tables: duplicate underflow at hook 3 [ 228.136550][T13562] validate_nla: 1 callbacks suppressed [ 228.136567][T13562] netlink: 'syz.6.2173': attribute type 3 has an invalid length. [ 228.484713][T13572] syzkaller0: entered promiscuous mode [ 228.493873][T13572] syzkaller0: entered allmulticast mode [ 228.869864][T13587] __nla_validate_parse: 8 callbacks suppressed [ 228.869881][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'. [ 228.955888][ T855] IPVS: starting estimator thread 0... [ 228.974491][T13592] tipc: Enabled bearer , priority 10 [ 228.988027][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2184'. [ 229.006165][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2184'. [ 229.083109][T13594] IPVS: using max 26 ests per chain, 62400 per kthread [ 229.241097][T13605] netlink: 'syz.5.2188': attribute type 11 has an invalid length. [ 229.249262][T13605] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2188'. [ 229.278419][T13605] tipc: Started in network mode [ 229.283477][T13605] tipc: Node identity 4, cluster identity 4711 [ 229.298921][T13605] tipc: Node number set to 4 [ 229.384564][T13609] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2190'. [ 229.867527][T13641] netlink: 'syz.5.2199': attribute type 33 has an invalid length. [ 229.949157][T13641] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 229.968330][T13641] bond1 (unregistering): Released all slaves [ 230.035499][T13655] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2203'. [ 230.093213][ T24] tipc: Node number set to 478413810 [ 230.430174][T13677] netlink: 294 bytes leftover after parsing attributes in process `syz.6.2211'. [ 230.454575][T13679] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2209'. [ 230.455329][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2209'. [ 230.472922][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2209'. [ 230.482133][T13677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.781897][T13700] netlink: 'syz.7.2215': attribute type 63 has an invalid length. [ 230.834751][T13700] netlink: 'syz.7.2215': attribute type 8 has an invalid length. [ 231.083968][T13718] netlink: 'syz.5.2222': attribute type 5 has an invalid length. [ 231.099187][T13718] geneve2: entered promiscuous mode [ 231.104650][T13718] geneve2: entered allmulticast mode [ 231.111570][ T3634] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 231.121787][ T3634] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 231.147213][ T3634] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 231.160516][ T3634] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 231.179593][T13723] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 232.004038][T13768] xt_ecn: cannot match TCP bits for non-tcp packets [ 232.236107][T13777] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 232.363167][T13781] bond0: entered promiscuous mode [ 232.368235][T13781] bond_slave_0: entered promiscuous mode [ 232.386241][T13781] bond_slave_1: entered promiscuous mode [ 232.404366][T13781] batadv0: entered promiscuous mode [ 232.415074][T13781] debugfs: 'hsr1' already exists in 'hsr' [ 232.420820][T13781] Cannot create hsr debugfs directory [ 232.438003][T13795] sock: sock_set_timeout: `syz.4.2245' (pid 13795) tries to set negative timeout [ 232.454684][T13781] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 232.471639][T13783] bridge_slave_0: left allmulticast mode [ 232.486297][T13783] bridge_slave_0: left promiscuous mode [ 232.492198][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.511654][T13783] bridge_slave_1: left allmulticast mode [ 232.518926][T13783] bridge_slave_1: left promiscuous mode [ 232.524926][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.538134][T13783] bond0: (slave bond_slave_0): Releasing backup interface [ 232.547992][T13783] bond0: (slave bond_slave_1): Releasing backup interface [ 232.579394][T13783] team0: Port device team_slave_0 removed [ 232.590649][T13783] team0: Port device team_slave_1 removed [ 232.600053][T13783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.608309][T13783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.618835][T13783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.629691][T13783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.640457][T13783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.733052][T13781] bond1: option all_slaves_active: invalid value (222) [ 232.763562][T13781] bond1 (unregistering): Released all slaves [ 232.987043][T13811] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 233.240954][T13831] x_tables: duplicate underflow at hook 2 [ 233.305131][T13832] lo speed is unknown, defaulting to 1000 [ 233.363039][ T3634] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.400156][ T3634] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.427928][ T3634] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.458157][ T3634] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.898848][T13861] xt_l2tp: v2 tid > 0xffff: 1114244 [ 233.899607][T13857] bond1: option resend_igmp: invalid value (32767) [ 233.910881][T13857] bond1: option resend_igmp: allowed values 0 - 255 [ 233.946188][T13857] bond1 (unregistering): Released all slaves [ 234.109679][T13832] wlan0 speed is unknown, defaulting to 1000 [ 234.215337][T13876] __nla_validate_parse: 24 callbacks suppressed [ 234.215354][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2271'. [ 234.269652][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2271'. [ 234.429715][T13886] lo speed is unknown, defaulting to 1000 [ 234.445857][T13888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2275'. [ 234.499267][T13890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2275'. [ 234.557819][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 234.884097][T13907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2279'. [ 235.034917][ T5152] Bluetooth: hci0: command tx timeout [ 235.894576][T13948] netlink: 'syz.7.2293': attribute type 13 has an invalid length. [ 235.903922][T13948] veth0_macvtap: left promiscuous mode [ 235.953142][T13948] macvtap0: entered allmulticast mode [ 235.965689][T13948] macvtap0: refused to change device tx_queue_len [ 236.356030][T13976] syzkaller0: entered promiscuous mode [ 236.384775][T13976] syzkaller0: entered allmulticast mode [ 236.425359][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2304'. [ 236.502376][T13982] syzkaller0: entered promiscuous mode [ 236.515416][T13982] syzkaller0: entered allmulticast mode [ 236.557024][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 236.783269][T13986] bridge0: port 1(batadv1) entered blocking state [ 236.790220][T13986] bridge0: port 1(batadv1) entered disabled state [ 236.809433][T13986] batadv1: entered allmulticast mode [ 236.822688][T13986] batadv1: entered promiscuous mode [ 236.838244][T14001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.851056][T13986] tipc: Started in network mode [ 236.858307][T13986] tipc: Node identity 967a762d3a27, cluster identity 4711 [ 236.867345][T13986] tipc: Enabled bearer , priority 0 [ 236.883855][T13986] syzkaller0: entered promiscuous mode [ 236.902871][T13986] syzkaller0: entered allmulticast mode [ 236.993846][T14013] netlink: 'syz.5.2313': attribute type 1 has an invalid length. [ 236.999852][T13985] tipc: Resetting bearer [ 237.032328][T13985] tipc: Disabling bearer [ 237.187444][T14013] bond1: entered promiscuous mode [ 237.192514][T14013] bond1: entered allmulticast mode [ 237.206030][T14013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.260326][T14016] macvlan2: entered promiscuous mode [ 237.268379][T14016] macvlan2: entered allmulticast mode [ 237.277520][T14016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.285203][ T181] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 237.294551][ T181] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 237.306856][T14030] netlink: 'syz.7.2317': attribute type 1 has an invalid length. [ 237.334055][T14026] macvlan2: entered promiscuous mode [ 237.339481][T14026] macvlan2: entered allmulticast mode [ 237.345987][T14026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.371799][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2317'. [ 237.443054][T14033] netlink: 'syz.4.2318': attribute type 3 has an invalid length. [ 237.464134][T14030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.291757][T14083] netlink: 'syz.7.2332': attribute type 16 has an invalid length. [ 238.331425][T14083] netlink: 'syz.7.2332': attribute type 17 has an invalid length. [ 238.368033][T14085] sctp: [Deprecated]: syz.8.2333 (pid 14085) Use of int in maxseg socket option. [ 238.368033][T14085] Use struct sctp_assoc_value instead [ 238.407890][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2335'. [ 238.440338][T14083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.697607][T14099] x_tables: duplicate underflow at hook 1 [ 238.818678][T14103] Cannot find del_set index 0 as target [ 238.827164][ T5152] block nbd1: Receive control failed (result -32) [ 238.902054][T14117] openvswitch: netlink: Message has 8 unknown bytes. [ 238.911578][T14117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.443940][T14145] netlink: 'syz.5.2350': attribute type 1 has an invalid length. [ 239.643671][T14154] x_tables: duplicate underflow at hook 1 [ 240.209015][T14182] openvswitch: netlink: IP tunnel dst address not specified [ 240.225350][T14183] __nla_validate_parse: 4 callbacks suppressed [ 240.225366][T14183] netlink: 18 bytes leftover after parsing attributes in process `syz.6.2364'. [ 240.270576][T14185] pim6reg527: entered allmulticast mode [ 240.717693][T14211] "syz.7.2374" (14211) uses obsolete ecb(arc4) skcipher [ 240.905920][T14215] vlan2: entered allmulticast mode [ 240.924256][T14215] bridge_slave_0: entered allmulticast mode [ 241.386932][T14244] tipc: Enabled bearer , priority 0 [ 241.405282][T14244] tunl0: entered promiscuous mode [ 241.410350][T14244] tunl0: entered allmulticast mode [ 241.422125][T14247] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 241.451273][T14244] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 241.482312][T14244] tipc: Resetting bearer [ 241.537837][T14240] tipc: Disabling bearer [ 241.587390][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.594851][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.737295][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.757577][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.938897][T14256] geneve2: entered promiscuous mode [ 241.944377][T14256] geneve2: entered allmulticast mode [ 241.951551][T14260] tipc: Enabled bearer , priority 0 [ 241.980844][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.012447][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.032148][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.046003][ T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.080403][T14260] tipc: Disabling bearer [ 242.098965][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.108176][ T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.117500][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.126631][ T12] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.206665][T14291] netlink: 'syz.7.2392': attribute type 4 has an invalid length. [ 242.227512][T14291] netlink: 'syz.7.2392': attribute type 4 has an invalid length. [ 242.256242][T14292] syzkaller0: entered promiscuous mode [ 242.261739][T14292] syzkaller0: entered allmulticast mode [ 242.382001][T14304] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.536671][ T50] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.548904][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.568000][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.587492][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.667349][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2397'. [ 242.752598][T14315] syzkaller0: entered promiscuous mode [ 242.758660][T14315] syzkaller0: entered allmulticast mode [ 242.777426][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2397'. [ 242.826445][T14321] netlink: 'syz.8.2401': attribute type 10 has an invalid length. [ 242.847965][T14321] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.865248][T14321] team0: entered promiscuous mode [ 242.877212][T14321] team_slave_0: entered promiscuous mode [ 242.891750][T14321] team_slave_1: entered promiscuous mode [ 242.900188][T14321] bond0: (slave team0): Enslaving as an active interface with an up link [ 243.082648][T14333] ipvlan2: entered promiscuous mode [ 243.313494][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2409'. [ 243.421303][T14346] syzkaller0: entered promiscuous mode [ 243.426906][T14346] syzkaller0: entered allmulticast mode [ 244.310849][T14360] netlink: 212352 bytes leftover after parsing attributes in process `syz.4.2415'. [ 244.764300][T14366] x_tables: duplicate underflow at hook 2 [ 244.776474][T14366] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2418'. [ 244.945116][T14381] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2422'. [ 245.054554][T14385] netlink: 'syz.6.2423': attribute type 6 has an invalid length. [ 245.155457][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2425'. [ 245.171665][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2425'. [ 245.200543][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2426'. [ 245.389213][T14403] IPVS: length: 8 != 1152 [ 245.402611][T14404] IPVS: length: 8 != 1152 [ 245.421088][T14403] __nla_validate_parse: 1 callbacks suppressed [ 245.421101][T14403] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2428'. [ 245.550442][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2430'. [ 245.817110][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2434'. [ 245.822504][T14426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2436'. [ 245.832707][T14422] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.854229][T14427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.904575][T14429] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 246.217205][T14445] tipc: Started in network mode [ 246.222108][T14445] tipc: Node identity 080211, cluster identity 4711 [ 246.232374][T14445] tipc: Enabled bearer , priority 0 [ 246.283727][T14445] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 246.291225][T14445] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 246.311149][T14439] syzkaller1: entered promiscuous mode [ 246.317685][T14439] syzkaller1: entered allmulticast mode [ 246.329518][T14445] tipc: Resetting bearer [ 246.353294][T14440] team0: Caught tx_queue_len zero misconfig [ 246.477785][T14454] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2444'. [ 246.623975][T14467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2448'. [ 246.714688][T14472] netlink: 'syz.6.2450': attribute type 1 has an invalid length. [ 246.754602][T14472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.783178][T14472] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 246.849535][T14472] bond1: (slave veth3): Enslaving as an active interface with a down link [ 247.046761][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 247.056837][T14488] bridge_slave_1: left allmulticast mode [ 247.069591][T14488] bridge_slave_1: left promiscuous mode [ 247.076386][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.086928][T14488] bridge_slave_0: left allmulticast mode [ 247.092651][T14488] bridge_slave_0: left promiscuous mode [ 247.099953][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.139941][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2456'. [ 247.313956][ T24] tipc: Node number set to 134353152 [ 247.313979][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 247.550899][T14517] netlink: 'syz.4.2463': attribute type 29 has an invalid length. [ 247.623611][T14517] netlink: 'syz.4.2463': attribute type 29 has an invalid length. [ 247.646133][T14517] netlink: 396 bytes leftover after parsing attributes in process `syz.4.2463'. [ 247.678718][T14524] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 247.701459][T14528] xt_connbytes: Forcing CT accounting to be enabled [ 247.786705][T14528] tipc: Enabling of bearer rejected, already enabled [ 247.833345][ T5152] Bluetooth: hci4: command 0x0419 tx timeout [ 247.906586][T14541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.960384][T14543] syzkaller1: entered promiscuous mode [ 247.966078][T14543] syzkaller1: entered allmulticast mode [ 248.002809][ T24] IPVS: starting estimator thread 0... [ 248.103071][T14549] IPVS: using max 26 ests per chain, 62400 per kthread [ 248.173949][T14558] syzkaller0: entered promiscuous mode [ 248.179453][T14558] syzkaller0: entered allmulticast mode [ 248.471901][T14574] tap0: tun_chr_ioctl cmd 1074025678 [ 248.477814][T14574] tap0: group set to 0 [ 248.760276][T14592] ip6gre0: Master is either lo or non-ether device [ 248.886048][T14592] syzkaller1: entered promiscuous mode [ 248.892987][T14592] syzkaller1: entered allmulticast mode [ 248.929689][T14592] syzkaller1: left promiscuous mode [ 248.968436][T14592] syzkaller1: left allmulticast mode [ 249.318021][T14613] netlink: 'syz.4.2495': attribute type 13 has an invalid length. [ 249.991923][T14666] netlink: 'syz.7.2513': attribute type 10 has an invalid length. [ 250.063749][T14670] netlink: 'syz.6.2512': attribute type 5 has an invalid length. [ 250.528354][T14692] __nla_validate_parse: 14 callbacks suppressed [ 250.528372][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2520'. [ 250.567702][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2523'. [ 250.700167][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2527'. [ 251.421392][T14733] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2533'. [ 251.535057][T14733] netlink: 'syz.8.2533': attribute type 12 has an invalid length. [ 251.748640][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2537'. [ 251.890140][T14772] netlink: 13 bytes leftover after parsing attributes in process `syz.8.2541'. [ 252.015367][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2541'. [ 252.046501][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2544'. [ 252.047365][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2541'. [ 252.083143][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2541'. [ 252.093728][T14781] wg2: entered promiscuous mode [ 252.098600][T14781] wg2: entered allmulticast mode [ 252.295052][T14785] sit1: entered promiscuous mode [ 252.302343][T14785] sit1: entered allmulticast mode [ 252.319622][T14792] xt_hashlimit: overflow, rate too high: 0 [ 252.432332][T14796] tipc: Enabled bearer , priority 0 [ 252.471880][T14800] syzkaller0: entered promiscuous mode [ 252.493854][T14800] syzkaller0: entered allmulticast mode [ 252.612580][T14796] tipc: Resetting bearer [ 252.679613][T14796] tipc: Disabling bearer [ 252.722589][T14815] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.779583][T14818] netlink: 'syz.6.2556': attribute type 6 has an invalid length. [ 252.939309][T14827] nbd: must specify an index to disconnect [ 253.427039][T14855] sctp: [Deprecated]: syz.4.2567 (pid 14855) Use of int in max_burst socket option deprecated. [ 253.427039][T14855] Use struct sctp_assoc_value instead [ 253.514036][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.530986][T14860] veth0_virt_wifi: entered allmulticast mode [ 253.556294][T14860] team0: Port device veth0_virt_wifi added [ 253.562671][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.626773][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.664510][T14870] netlink: 'syz.5.2572': attribute type 1 has an invalid length. [ 253.667023][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.729723][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.774064][T14877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.782638][T14877] bond2: (slave bond3): making interface the new active one [ 253.791045][T14877] bond2: (slave bond3): Enslaving as an active interface with an up link [ 253.806366][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.824420][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 253.893134][T14860] netlink: 'syz.7.2569': attribute type 10 has an invalid length. [ 254.425454][T14903] xt_SECMARK: invalid mode: 9 [ 255.137844][T14940] team0: No ports can be present during mode change [ 255.227037][T14946] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 255.601915][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.659550][T14979] __nla_validate_parse: 18 callbacks suppressed [ 255.659567][T14979] netlink: 272 bytes leftover after parsing attributes in process `syz.7.2601'. [ 255.856050][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 255.909847][T12540] IPVS: starting estimator thread 0... [ 256.016934][T14998] IPVS: using max 29 ests per chain, 69600 per kthread [ 256.073052][T15007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.211283][T15012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2611'. [ 256.422576][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 256.431639][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 256.467319][T15012] team0 (unregistering): Port device team_slave_0 removed [ 256.476417][T15012] team0 (unregistering): Port device team_slave_1 removed [ 256.729850][T15045] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2620'. [ 256.827073][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2622'. [ 256.850208][T15053] bond2: option coupled_control: invalid value (52) [ 256.859627][T15053] bond2 (unregistering): Released all slaves [ 257.455851][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2631'. [ 257.479489][T15078] IPVS: Error connecting to the multicast addr [ 257.511307][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2631'. [ 257.529082][T15082] 9: entered promiscuous mode [ 257.541069][T15078] IPVS: Error connecting to the multicast addr [ 257.740001][T15093] wg0: entered allmulticast mode [ 258.073912][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2642'. [ 258.361181][T15138] validate_nla: 65 callbacks suppressed [ 258.361198][T15138] netlink: 'syz.8.2648': attribute type 21 has an invalid length. [ 258.559300][T15145] syzkaller0: entered promiscuous mode [ 258.565875][T15145] syzkaller0: entered allmulticast mode [ 260.227630][T15187] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.352089][T15195] netlink: 'syz.5.2662': attribute type 1 has an invalid length. [ 260.956493][T15245] tipc: Enabling of bearer rejected, already enabled [ 261.218644][T15259] __nla_validate_parse: 12 callbacks suppressed [ 261.218660][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2679'. [ 261.265348][T15259] bond0: entered promiscuous mode [ 261.270513][T15259] bond_slave_0: entered promiscuous mode [ 261.280161][T15259] bond_slave_1: entered promiscuous mode [ 261.306384][T15259] gretap0: entered promiscuous mode [ 261.315748][T15259] debugfs: 'hsr1' already exists in 'hsr' [ 261.321488][T15259] Cannot create hsr debugfs directory [ 261.328791][T15259] hsr1: entered promiscuous mode [ 261.454708][T15271] x_tables: duplicate underflow at hook 2 [ 261.495355][T15276] netlink: 'syz.7.2684': attribute type 12 has an invalid length. [ 261.517912][T15276] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 261.684787][T15283] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 261.707938][T15286] openvswitch: netlink: Duplicate or invalid key (type 0). [ 261.727371][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.750013][T15281] openvswitch: netlink: IP tunnel dst address not specified [ 261.899308][T15286] syzkaller0: entered promiscuous mode [ 261.914072][T15286] syzkaller0: entered allmulticast mode [ 262.309344][T15305] netlink: 'syz.8.2697': attribute type 23 has an invalid length. [ 262.410083][T15303] syzkaller0: entered promiscuous mode [ 262.416259][T15303] syzkaller0: entered allmulticast mode [ 262.455920][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.456183][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 262.480079][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.488335][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.499627][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.509279][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.739853][T15309] lo speed is unknown, defaulting to 1000 [ 262.996308][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2707'. [ 263.005508][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2707'. [ 263.109353][T15309] wlan0 speed is unknown, defaulting to 1000 [ 263.380377][T15309] chnl_net:caif_netlink_parms(): no params data found [ 263.500320][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.507765][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.521620][T15309] bridge_slave_0: entered allmulticast mode [ 263.535651][T15309] bridge_slave_0: entered promiscuous mode [ 263.555317][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.562650][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.570282][T15309] bridge_slave_1: entered allmulticast mode [ 263.577925][T15309] bridge_slave_1: entered promiscuous mode [ 263.585488][T15352] tipc: Enabled bearer , priority 10 [ 263.592435][T15352] netlink: 'syz.8.2711': attribute type 1 has an invalid length. [ 263.605497][T15352] netlink: 'syz.8.2711': attribute type 2 has an invalid length. [ 263.624869][T15352] netlink: 'syz.8.2711': attribute type 1 has an invalid length. [ 263.667689][T15309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.698184][T15309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.758489][T15309] team0: Port device team_slave_0 added [ 263.779958][T15309] team0: Port device team_slave_1 added [ 263.867458][T15364] IPv6: NLM_F_REPLACE set, but no existing node found! [ 263.970277][T15309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.978115][T15366] netlink: 'syz.8.2716': attribute type 1 has an invalid length. [ 263.990076][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.991968][T15366] netlink: 'syz.8.2716': attribute type 10 has an invalid length. [ 264.081947][T15309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.147647][T15309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.163215][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2716'. [ 264.183702][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.264821][T15309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.314859][ T10] IPVS: starting estimator thread 0... [ 264.337840][T15391] IPVS: sh: FWM 3 0x00000003 - no destination available [ 264.355668][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2716'. [ 264.422861][T15393] IPVS: using max 29 ests per chain, 69600 per kthread [ 264.558202][ T5844] Bluetooth: hci0: command tx timeout [ 264.587064][T15309] hsr_slave_0: entered promiscuous mode [ 264.607027][T15309] hsr_slave_1: entered promiscuous mode [ 264.620054][T15309] debugfs: 'hsr0' already exists in 'hsr' [ 264.636794][T15309] Cannot create hsr debugfs directory [ 265.253535][T15413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.466649][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2728'. [ 265.502346][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2728'. [ 265.552926][T15432] netlink: 'syz.5.2728': attribute type 14 has an invalid length. [ 265.560767][T15432] netlink: 'syz.5.2728': attribute type 13 has an invalid length. [ 265.570558][T15427] syzkaller0: entered promiscuous mode [ 265.607186][T15427] syzkaller0: entered allmulticast mode [ 265.869176][T15450] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2735'. [ 265.872206][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2736'. [ 265.888867][T15449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.903157][T15448] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.916969][T15445] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 265.926001][T15445] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 266.057329][T15457] netlink: 'syz.6.2737': attribute type 1 has an invalid length. [ 266.146096][T15463] netlink: 'syz.7.2738': attribute type 10 has an invalid length. [ 266.163575][T15463] bond0: (slave wg0): refused to change device type [ 266.436000][T15309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.510269][T15309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.567446][T15309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.617850][T15309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.710983][T15490] __nla_validate_parse: 5 callbacks suppressed [ 266.711001][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2748'. [ 266.734956][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2748'. [ 266.756765][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2748'. [ 266.771550][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2748'. [ 266.896946][T15309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.991731][T15309] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.030178][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.037383][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.057980][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.065179][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.125083][T15510] syzkaller0: entered promiscuous mode [ 267.131707][T15510] syzkaller0: entered allmulticast mode [ 267.141606][T15515] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 267.150158][T15515] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 267.169688][T15507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.383845][T15309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.489099][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2756'. [ 267.498232][T15530] netlink: 'syz.7.2756': attribute type 7 has an invalid length. [ 267.506937][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2756'. [ 267.603971][T15540] ip6erspan0: entered promiscuous mode [ 267.609475][T15540] ip6erspan0: entered allmulticast mode [ 267.910686][ T1166] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.963503][ T1166] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.991278][ T3470] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.030868][ T3470] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.202667][T15570] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2761'. [ 268.213617][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2762'. [ 268.245125][T15570] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2761'. [ 268.398562][T15309] veth0_vlan: entered promiscuous mode [ 268.425221][T15309] veth1_vlan: entered promiscuous mode [ 268.455982][T15582] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2765'. [ 268.496530][T15582] tipc: Enabling of bearer rejected, already enabled [ 268.517100][T15309] veth0_macvtap: entered promiscuous mode [ 268.539642][T15309] veth1_macvtap: entered promiscuous mode [ 268.585411][T15309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.616865][T15309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.647736][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.679347][T15590] validate_nla: 1 callbacks suppressed [ 268.679363][T15590] netlink: 'syz.8.2767': attribute type 1 has an invalid length. [ 268.691690][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.704918][T15589] netlink: 'syz.8.2767': attribute type 1 has an invalid length. [ 268.810082][ T1109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.823139][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.851819][T15589] bond2: (slave ip6gretap2): making interface the new active one [ 268.861234][T15589] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 268.870128][T15589] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 268.879445][T15589] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 268.890801][T15593] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 268.942589][T15593] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 269.061532][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.081949][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.213303][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.238507][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.263258][T15608] netlink: 'syz.8.2773': attribute type 29 has an invalid length. [ 269.799904][ T5202] udevd[5202]: worker [13062] terminated by signal 33 (Unknown signal 33) [ 269.912049][T15650] netlink: 'syz.6.2786': attribute type 1 has an invalid length. [ 270.000367][T15650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.079264][T15657] veth5: entered promiscuous mode [ 270.093118][T15657] bond2: (slave veth5): Enslaving as an active interface with a down link [ 270.135176][T15650] vlan2: entered allmulticast mode [ 270.140498][T15650] bond2: entered allmulticast mode [ 270.179021][T15669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.179026][T15650] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.512379][T15688] netlink: 'syz.7.2795': attribute type 9 has an invalid length. [ 270.564717][T15688] netlink: 'syz.7.2795': attribute type 9 has an invalid length. [ 270.759201][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.191071][T15742] xt_policy: output policy not valid in PREROUTING and INPUT [ 271.557713][T15756] bond2: option mode: invalid value (133) [ 271.566752][T15756] bond2 (unregistering): Released all slaves [ 271.721198][T15759] syzkaller0: entered promiscuous mode [ 271.728512][T15759] syzkaller0: entered allmulticast mode [ 271.829418][T15770] __nla_validate_parse: 12 callbacks suppressed [ 271.829434][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2818'. [ 271.859412][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2818'. [ 272.135525][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2827'. [ 272.157593][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2827'. [ 272.185110][T15793] SET target dimension over the limit! [ 272.218659][T15795] vlan2: entered allmulticast mode [ 272.484892][T15812] ip6gre1: entered allmulticast mode [ 272.595136][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2835'. [ 272.606519][T15822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2837'. [ 272.662616][T15826] netlink: 'syz.5.2837': attribute type 2 has an invalid length. [ 272.689535][T15831] openvswitch: netlink: IP tunnel dst address not specified [ 272.843982][T15838] netlink: 'syz.6.2842': attribute type 1 has an invalid length. [ 272.857882][T15838] netlink: 'syz.6.2842': attribute type 2 has an invalid length. [ 272.869472][T15838] netlink: 'syz.6.2842': attribute type 2 has an invalid length. [ 273.088012][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2852'. [ 273.112385][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2853'. [ 273.153858][T15872] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 273.180337][T15872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2851'. [ 273.269302][T15872] team0: Port device geneve0 added [ 273.336317][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2856'. [ 273.347631][T15878] veth0: entered promiscuous mode [ 273.530870][T15882] veth0 (unregistering): left promiscuous mode [ 273.744066][T15886] bond4: Removing last ns target with arp_interval on [ 273.784706][T15894] syzkaller1: entered promiscuous mode [ 273.821492][T15894] syzkaller1: entered allmulticast mode [ 274.159149][T15906] macsec1: entered promiscuous mode [ 274.217091][T15921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.247022][T15920] syz_tun: entered allmulticast mode [ 274.359161][T15920] syz_tun (unregistering): left allmulticast mode [ 274.558655][T15942] validate_nla: 7 callbacks suppressed [ 274.558675][T15942] netlink: 'syz.7.2874': attribute type 12 has an invalid length. [ 275.090275][T15974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.003117][T15976] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.685709][T15999] wg0: left allmulticast mode [ 276.757302][T15999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.776547][T15999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.128393][T15999] geneve2: left promiscuous mode [ 277.140697][T15999] geneve2: left allmulticast mode [ 277.149676][T15999] bond1: left promiscuous mode [ 277.155651][T15999] bond1: left allmulticast mode [ 277.181078][T16019] tipc: Enabled bearer , priority 0 [ 277.207066][T16024] __nla_validate_parse: 36 callbacks suppressed [ 277.207080][T16024] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2894'. [ 277.207198][T16020] syzkaller0: entered promiscuous mode [ 277.252094][T16020] syzkaller0: entered allmulticast mode [ 277.261198][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.270407][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.282448][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.292137][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.301530][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.310596][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.331611][T16017] tipc: Resetting bearer [ 277.340756][T16034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2897'. [ 277.350581][ T3634] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.367617][ T3634] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.388474][ T3634] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.397681][ T3634] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.408491][ T3634] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.421055][ T3634] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.437986][T16016] tipc: Resetting bearer [ 277.470017][T16016] tipc: Disabling bearer [ 277.496489][T16043] syzkaller0: entered promiscuous mode [ 277.512347][T16043] syzkaller0: entered allmulticast mode [ 277.589735][T16048] netlink: 'syz.5.2902': attribute type 26 has an invalid length. [ 277.617293][T16036] tipc: Enabled bearer , priority 0 [ 277.638859][T16035] tipc: Resetting bearer [ 277.683723][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'. [ 277.704924][T16035] tipc: Disabling bearer [ 277.801187][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2906'. [ 277.838510][T16066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2907'. [ 278.201064][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2914'. [ 278.218400][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2914'. [ 278.227661][T16093] netlink: 'syz.6.2914': attribute type 4 has an invalid length. [ 278.236054][T16093] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2914'. [ 278.305056][T16096] lo: entered allmulticast mode [ 278.311115][T16096] lo: left allmulticast mode [ 278.345367][T16099] syzkaller0: entered promiscuous mode [ 278.352637][T16099] syzkaller0: entered allmulticast mode [ 278.361376][T16098] tipc: Started in network mode [ 278.366691][T16098] tipc: Node identity fed10fb917d8, cluster identity 4711 [ 278.374866][T16098] tipc: Enabled bearer , priority 0 [ 278.410626][T16098] tipc: Resetting bearer [ 278.435357][T16098] tipc: Disabling bearer [ 279.166184][T16135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2930'. [ 279.177513][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2929'. [ 279.194355][T16137] netem: change failed [ 279.384994][T16140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.395310][T16140] netlink: 'syz.6.2932': attribute type 2 has an invalid length. [ 279.414605][T16152] Cannot find del_set index 49151 as target [ 279.507659][T16155] batman_adv: batadv0: Adding interface: dummy0 [ 279.513101][T16157] netlink: 'syz.5.2939': attribute type 1 has an invalid length. [ 279.529439][T16155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.555385][T16155] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 279.582515][T16161] x_tables: duplicate underflow at hook 1 [ 279.843851][T16187] netlink: 'syz.4.2946': attribute type 10 has an invalid length. [ 279.862499][T16187] batadv0: entered promiscuous mode [ 279.875695][T16187] batadv0: entered allmulticast mode [ 279.881720][T16187] bridge0: port 3(batadv0) entered blocking state [ 279.903302][T16187] bridge0: port 3(batadv0) entered disabled state [ 279.928867][T16187] bridge0: port 3(batadv0) entered blocking state [ 279.935467][T16187] bridge0: port 3(batadv0) entered forwarding state [ 279.955786][T16193] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 280.170623][T16148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.179653][T16148] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 280.240800][T16148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.247304][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 280.247338][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 280.274443][T16148] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 280.304068][T16148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.311220][T16148] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 280.325378][T16148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.331423][T16148] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 280.362620][T16208] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 280.376171][T16208] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 280.895932][T16250] netlink: 'syz.7.2967': attribute type 10 has an invalid length. [ 280.928607][T16250] team0: Port device geneve0 added [ 280.949686][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.965712][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.983908][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.011574][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.027409][T16257] syzkaller0: entered promiscuous mode [ 281.035290][T16257] syzkaller0: entered allmulticast mode [ 281.323639][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.385394][T16270] wg2: left promiscuous mode [ 281.399741][T16283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.430628][T16270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.446865][T16270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.538681][T16270] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 281.547856][T16270] sit1: left promiscuous mode [ 281.557063][T16270] ip6erspan0: left promiscuous mode [ 281.566752][ T3470] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.586302][ T3470] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.636429][ T3470] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.675346][ T3470] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.696592][ T3470] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.717116][ T3470] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.738280][ T3470] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.755517][ T3470] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.786772][T16294] Cannot find set identified by id 65534 to match [ 282.022010][T16307] bridge0: port 3(batadv2) entered blocking state [ 282.040995][T16307] bridge0: port 3(batadv2) entered disabled state [ 282.048419][T16307] batadv2: entered allmulticast mode [ 282.055867][T16307] batadv2: entered promiscuous mode [ 282.062314][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.319450][T16330] lo speed is unknown, defaulting to 1000 [ 282.505514][T16351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.521909][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 282.521929][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 282.766335][T16330] wlan0 speed is unknown, defaulting to 1000 [ 282.955992][T16377] sctp: [Deprecated]: syz.6.3002 (pid 16377) Use of int in max_burst socket option. [ 282.955992][T16377] Use struct sctp_assoc_value instead [ 283.034806][T16382] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20000 [ 283.411855][T16396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.536716][T16409] IPv6: sit1: Disabled Multicast RS [ 283.582545][T16396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.879643][T16432] __nla_validate_parse: 19 callbacks suppressed [ 283.879662][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3012'. [ 284.253921][T16445] syz_tun: entered allmulticast mode [ 284.400739][T16455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.465731][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3019'. [ 284.522121][T16462] netlink: 'syz.7.3020': attribute type 12 has an invalid length. [ 284.792593][T16468] netlink: 'syz.7.3023': attribute type 2 has an invalid length. [ 284.831043][T16468] netlink: 'syz.7.3023': attribute type 11 has an invalid length. [ 284.853686][T16468] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3023'. [ 285.015681][T16445] syz_tun: left allmulticast mode [ 285.047083][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3026'. [ 285.189890][T16485] tipc: Enabling of bearer rejected, already enabled [ 285.198446][T16488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.214907][T16485] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 285.226260][T16485] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3029'. [ 285.236144][T16487] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3029'. [ 285.248951][T16491] netlink: 'syz.5.3031': attribute type 2 has an invalid length. [ 285.266642][T16491] : entered promiscuous mode [ 285.282691][T16492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.366000][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'. [ 285.375495][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'. [ 285.456591][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3037'. [ 285.466908][T16506] netlink: 'syz.6.3037': attribute type 11 has an invalid length. [ 285.472682][T16507] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3036'. [ 285.483320][ T3470] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.485691][T16506] netlink: 'syz.6.3037': attribute type 11 has an invalid length. [ 285.493863][ T3470] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.529594][ T3470] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.538915][ T3470] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.745850][T16523] netlink: 'syz.8.3042': attribute type 27 has an invalid length. [ 285.808952][T16532] syzkaller0: entered promiscuous mode [ 285.828593][T16532] syzkaller0: entered allmulticast mode [ 286.054144][T16542] syz.8.3048 (16542) used obsolete PPPIOCDETACH ioctl [ 286.130522][T16554] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 286.140725][T16554] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 286.147435][T16557] netdevsim netdevsim7: Firmware load for './file0/../file0' refused, path contains '..' component [ 286.204025][T16560] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 286.211563][T16560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.354867][T16569] netlink: 'syz.7.3058': attribute type 1 has an invalid length. [ 286.458949][T16576] xt_hashlimit: size too large, truncated to 1048576 [ 286.907757][T16606] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 286.937952][T16606] team1: entered promiscuous mode [ 286.943421][T16606] team1: entered allmulticast mode [ 286.950320][T16607] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 286.986597][T16607] team2: entered promiscuous mode [ 286.991813][T16607] team2: entered allmulticast mode [ 287.321206][T16637] netlink: 'syz.8.3077': attribute type 5 has an invalid length. [ 287.329584][T16637] netlink: 'syz.8.3077': attribute type 5 has an invalid length. [ 287.428575][T16639] veth5: entered allmulticast mode [ 287.657874][T16662] Bluetooth: MGMT ver 1.23 [ 287.851691][T16671] netlink: 'syz.5.3090': attribute type 8 has an invalid length. [ 287.879172][T16683] sctp: [Deprecated]: syz.8.3093 (pid 16683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.879172][T16683] Use struct sctp_sack_info instead [ 287.917484][T16687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.136455][T16701] x_tables: duplicate underflow at hook 1 [ 288.806070][T16765] netlink: 'syz.5.3120': attribute type 24 has an invalid length. [ 288.814724][T16757] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 288.831986][T16757] bond1 (unregistering): Released all slaves [ 288.889331][T16758] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 288.897067][T16773] __nla_validate_parse: 14 callbacks suppressed [ 288.897082][T16773] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3123'. [ 288.919578][T16758] bond1 (unregistering): Released all slaves [ 289.064711][T16780] tipc: Enabling of bearer rejected, failed to enable media [ 289.202419][T16788] netlink: 'syz.5.3129': attribute type 1 has an invalid length. [ 289.238566][T16788] vlan2: entered promiscuous mode [ 289.243871][T16788] bridge0: entered promiscuous mode [ 290.018074][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3134'. [ 290.253086][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3136'. [ 290.436443][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3137'. [ 291.183319][T16807] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 291.337367][T16838] validate_nla: 1 callbacks suppressed [ 291.337385][T16838] netlink: 'syz.6.3139': attribute type 1 has an invalid length. [ 291.375460][T16838] netlink: 'syz.6.3139': attribute type 2 has an invalid length. [ 291.424713][T16852] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3143'. [ 291.438892][T16852] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3143'. [ 291.454164][T16852] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3143'. [ 291.467191][T16841] syzkaller0: entered promiscuous mode [ 291.477115][T16841] syzkaller0: entered allmulticast mode [ 291.766864][T16881] syz_tun: entered allmulticast mode [ 292.105529][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3157'. [ 292.135998][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3157'. [ 292.243299][T16924] syzkaller1: entered promiscuous mode [ 292.252205][T16924] syzkaller1: entered allmulticast mode [ 292.283586][T16924] : entered promiscuous mode [ 292.315354][T16927] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 292.332566][T16927] netlink: 'syz.4.3163': attribute type 11 has an invalid length. [ 292.345685][T16927] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3163'. [ 292.557919][T16958] netlink: 'syz.5.3169': attribute type 26 has an invalid length. [ 292.567804][T16958] netlink: 'syz.5.3169': attribute type 26 has an invalid length. [ 292.667273][T16967] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 292.732182][T16973] netlink: 'syz.5.3174': attribute type 24 has an invalid length. [ 292.853128][T16976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.950172][T16991] netlink: 'syz.5.3179': attribute type 13 has an invalid length. [ 292.969219][T16991] netlink: 'syz.5.3179': attribute type 13 has an invalid length. [ 293.058568][T17002] IPv6: sit1: Disabled Multicast RS [ 293.065364][T17002] sit1: entered allmulticast mode [ 293.499699][T17038] tunl0: entered promiscuous mode [ 293.700957][T17047] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 293.713426][T17047] bond3 (unregistering): Released all slaves [ 293.737334][T17050] tipc: Enabling of bearer rejected, already enabled [ 293.835680][T17058] bond1: (slave gretap3): making interface the new active one [ 293.844541][T17058] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 293.927548][T17066] __nla_validate_parse: 13 callbacks suppressed [ 293.927567][T17066] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3205'. [ 293.963577][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3205'. [ 293.972544][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3205'. [ 294.007741][T17066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3205'. [ 294.059980][T17075] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3207'. [ 294.405439][T17103] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 294.416107][T17105] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3215'. [ 294.468360][T17108] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3217'. [ 294.744420][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3221'. [ 294.789938][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3225'. [ 294.811586][T17141] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 294.818691][T17141] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 294.826495][T17141] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 294.833919][T17141] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 294.840706][T17141] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 294.848003][T17141] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 294.855744][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3225'. [ 294.959647][T17151] batadv1: left allmulticast mode [ 294.980422][T17151] batadv1: left promiscuous mode [ 294.986191][T17151] bridge0: port 1(batadv1) entered disabled state [ 295.396436][T17176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.057857][T17231] macvtap0: entered allmulticast mode [ 296.064013][T17231] macvtap0: refused to change device tx_queue_len [ 296.637669][T17275] x_tables: unsorted underflow at hook 2 [ 296.759696][T17287] validate_nla: 7 callbacks suppressed [ 296.759708][T17287] netlink: 'syz.4.3270': attribute type 10 has an invalid length. [ 296.788283][T17287] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.802854][T17287] bond0: (slave team0): Enslaving as an active interface with an up link [ 297.576495][T17323] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.587757][T17324] batman_adv: batadv0: Adding interface: dummy0 [ 297.600119][T17324] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.601832][T17332] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.626647][T17324] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 297.653668][T17330] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.677485][T17333] netlink: 'syz.7.3286': attribute type 29 has an invalid length. [ 297.689896][T17324] netlink: 'syz.7.3286': attribute type 29 has an invalid length. [ 297.747125][T17324] team0 (unregistering): Port device veth0_virt_wifi removed [ 297.767165][T17324] team0 (unregistering): Port device geneve0 removed [ 297.791189][ T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.805157][ T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.845303][T17339] erspan0: entered promiscuous mode [ 297.855425][ T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.883273][ T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.316080][T17374] syz_tun: entered allmulticast mode [ 298.350867][T17368] syz_tun: left allmulticast mode [ 298.385554][T17378] syzkaller0: entered promiscuous mode [ 298.396025][T17378] syzkaller0: entered allmulticast mode [ 298.467971][T17387] : renamed from ip6tnl0 [ 298.537855][T17393] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 298.809996][T17417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.848443][T17419] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 298.901281][T17426] ip6gre2: entered promiscuous mode [ 298.913646][T17426] ip6gre2: entered allmulticast mode [ 298.937563][T17431] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.001568][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.022449][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.030645][T12535] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.056620][T17433] __nla_validate_parse: 30 callbacks suppressed [ 299.056635][T17433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3321'. [ 299.056869][T17434] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3317'. [ 299.093334][T12535] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.141714][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3322'. [ 299.177724][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 299.208834][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3324'. [ 299.221095][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 299.235917][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3324'. [ 299.253005][ T5914] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.288992][T17449] bond3: option all_slaves_active: invalid value (222) [ 299.316173][T17449] bond3 (unregistering): Released all slaves [ 299.668252][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3332'. [ 299.678258][T17479] netlink: 'syz.8.3334': attribute type 11 has an invalid length. [ 299.885284][T17493] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 300.030979][T17501] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3342'. [ 300.047778][T17502] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3343'. [ 300.086552][T17501] lo: entered allmulticast mode [ 300.103687][T17501] lo: left allmulticast mode [ 300.166620][T17514] team0: entered allmulticast mode [ 300.172021][T17514] team_slave_0: entered allmulticast mode [ 300.192155][T17514] team_slave_1: entered allmulticast mode [ 300.198929][T17514] geneve0: entered allmulticast mode [ 300.211814][T17518] : entered promiscuous mode [ 300.350023][T17526] xt_hashlimit: size too large, truncated to 1048576 [ 300.364765][T17526] syz.4.3353: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 300.442599][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.4.3353 Not tainted syzkaller #0 PREEMPT(full) [ 300.442645][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.442678][T17526] Call Trace: [ 300.442685][T17526] [ 300.442693][T17526] dump_stack_lvl+0x189/0x250 [ 300.442727][T17526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.442749][T17526] ? __pfx__printk+0x10/0x10 [ 300.442767][T17526] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.442788][T17526] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.442812][T17526] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 300.442837][T17526] warn_alloc+0x214/0x310 [ 300.442868][T17526] ? __pfx_warn_alloc+0x10/0x10 [ 300.442901][T17526] ? __get_vm_area_node+0x28f/0x300 [ 300.442925][T17526] ? htable_create+0x101/0x7a0 [ 300.442950][T17526] __vmalloc_node_range_noprof+0x690/0x12d0 [ 300.442998][T17526] ? alloc_pages_mpol+0x3cd/0x4a0 [ 300.443017][T17526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 300.443043][T17526] ? rcu_is_watching+0x15/0xb0 [ 300.443063][T17526] ? htable_create+0x101/0x7a0 [ 300.443085][T17526] __kvmalloc_node_noprof+0x674/0x910 [ 300.443109][T17526] ? htable_create+0x101/0x7a0 [ 300.443128][T17526] ? hashlimit_pernet+0x23/0x240 [ 300.443148][T17526] ? hashlimit_pernet+0x23/0x240 [ 300.443166][T17526] ? hashlimit_pernet+0x23/0x240 [ 300.443193][T17526] htable_create+0x101/0x7a0 [ 300.443229][T17526] hashlimit_mt_check_common+0x719/0xa10 [ 300.443261][T17526] xt_check_match+0x3d1/0xab0 [ 300.443288][T17526] ? __pfx_xt_check_match+0x10/0x10 [ 300.443312][T17526] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 300.443346][T17526] ? xt_find_match+0x1f7/0x250 [ 300.443373][T17526] translate_table+0x1553/0x2040 [ 300.443421][T17526] ? __pfx_translate_table+0x10/0x10 [ 300.443447][T17526] ? __might_fault+0xb0/0x130 [ 300.443484][T17526] ? _copy_from_user+0x94/0xb0 [ 300.443509][T17526] do_ip6t_set_ctl+0x970/0xce0 [ 300.443534][T17526] ? rcu_is_watching+0x15/0xb0 [ 300.443553][T17526] ? trace_contention_end+0x39/0x120 [ 300.443572][T17526] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 300.443616][T17526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.443644][T17526] ? __pfx_css_rstat_updated+0x10/0x10 [ 300.443667][T17526] ? __lock_acquire+0xab9/0xd20 [ 300.443688][T17526] nf_setsockopt+0x26f/0x290 [ 300.443715][T17526] rawv6_setsockopt+0x23b/0x5b0 [ 300.443735][T17526] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 300.443753][T17526] ? aa_sock_opt_perm+0xff/0x1b0 [ 300.443779][T17526] ? sock_common_setsockopt+0x36/0xc0 [ 300.443801][T17526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 300.443823][T17526] do_sock_setsockopt+0x17c/0x1b0 [ 300.443845][T17526] __x64_sys_setsockopt+0x13f/0x1b0 [ 300.443867][T17526] do_syscall_64+0xfa/0xfa0 [ 300.443889][T17526] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.443911][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.443928][T17526] ? clear_bhb_loop+0x60/0xb0 [ 300.443950][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.443966][T17526] RIP: 0033:0x7fba8c18f6c9 [ 300.443982][T17526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.443995][T17526] RSP: 002b:00007fba8cf7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.444013][T17526] RAX: ffffffffffffffda RBX: 00007fba8c3e6180 RCX: 00007fba8c18f6c9 [ 300.444025][T17526] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 300.444036][T17526] RBP: 00007fba8c211f91 R08: 0000000000000588 R09: 0000000000000000 [ 300.444047][T17526] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 300.444058][T17526] R13: 00007fba8c3e6218 R14: 00007fba8c3e6180 R15: 00007fffc73ac488 [ 300.444088][T17526] [ 300.829717][T17526] Mem-Info: [ 300.875639][T17526] active_anon:3908 inactive_anon:0 isolated_anon:0 [ 300.875639][T17526] active_file:3336 inactive_file:39980 isolated_file:0 [ 300.875639][T17526] unevictable:768 dirty:48 writeback:12 [ 300.875639][T17526] slab_reclaimable:12970 slab_unreclaimable:118164 [ 300.875639][T17526] mapped:28818 shmem:1363 pagetables:1091 [ 300.875639][T17526] sec_pagetables:0 bounce:0 [ 300.875639][T17526] kernel_misc_reclaimable:0 [ 300.875639][T17526] free:1301654 free_pcp:13507 free_cma:0 [ 300.994792][T17526] Node 0 active_anon:15632kB inactive_anon:0kB active_file:13344kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115372kB dirty:192kB writeback:48kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13856kB pagetables:4128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 301.083277][T17526] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 301.113594][T17526] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.116289][T17563] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.156499][T17567] x_tables: duplicate underflow at hook 2 [ 301.167899][T17526] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 301.176797][T17564] blkio.reset_stats is deprecated [ 301.183599][T17564] netlink: 'syz.6.3362': attribute type 1 has an invalid length. [ 301.195251][T17526] Node 0 DMA32 free:1291660kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15632kB inactive_anon:0kB active_file:13344kB inactive_file:159716kB unevictable:1536kB writepending:240kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:36332kB local_pcp:21072kB free_cma:0kB [ 301.221157][T17564] netlink: 'syz.6.3362': attribute type 2 has an invalid length. [ 301.251103][T17526] lowmem_reserve[]: 0 0 0 0 0 [ 301.260622][T17526] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.324489][T17526] lowmem_reserve[]: 0 0 0 0 0 [ 301.329247][T17526] Node 1 Normal free:3899704kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17400kB local_pcp:8472kB free_cma:0kB [ 301.388268][T17526] lowmem_reserve[]: 0 0 0 0 0 [ 301.419951][T17526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.437425][T17526] Node 0 DMA32: 1817*4kB (UME) 663*8kB (UME) 473*16kB (UME) 511*32kB (UM) 156*64kB (UM) 146*128kB (UM) 100*256kB (UM) 55*512kB (UME) 29*1024kB (UME) 6*2048kB (UME) 276*4096kB (M) = 1291404kB [ 301.458706][T17526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.473965][T17526] Node 1 Normal: 182*4kB (UE) 58*8kB (UME) 43*16kB (UME) 71*32kB (UME) 14*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3899704kB [ 301.496897][T17526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.506548][T17526] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.556701][T17526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.590026][T17526] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.629459][T17526] 44926 total pagecache pages [ 301.638344][T17526] 0 pages in swap cache [ 301.642604][T17526] Free swap = 124996kB [ 301.647182][T17585] can: request_module (can-proto-0) failed. [ 301.653823][T17526] Total swap = 124996kB [ 301.672964][T17526] 2097051 pages RAM [ 301.682637][T17526] 0 pages HighMem/MovableOnly [ 301.703249][T17526] 424119 pages reserved [ 301.711061][T17526] 0 pages cma reserved [ 302.214197][T17627] netlink: 'syz.7.3380': attribute type 29 has an invalid length. [ 302.227245][T17627] netlink: 'syz.7.3380': attribute type 29 has an invalid length. [ 302.337024][T17634] sch_fq: defrate 0 ignored. [ 302.367060][T17638] netlink: 'syz.6.3383': attribute type 6 has an invalid length. [ 302.410466][T17638] netlink: 'syz.6.3383': attribute type 6 has an invalid length. [ 302.527355][T17654] netlink: 'syz.6.3389': attribute type 4 has an invalid length. [ 302.540041][T17647] v: renamed from vlan0 [ 302.636663][T17658] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 302.705226][T17662] netlink: 'syz.8.3393': attribute type 1 has an invalid length. [ 302.831049][T17665] dvmrp6: entered allmulticast mode [ 302.965952][T17685] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20003 [ 303.090087][T17692] sock: sock_set_timeout: `syz.4.3401' (pid 17692) tries to set negative timeout [ 303.114111][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.706785][T17747] x_tables: duplicate underflow at hook 1 [ 303.761668][T17749] netlink: 'syz.4.3417': attribute type 3 has an invalid length. [ 304.166613][T17786] netlink: 'syz.7.3431': attribute type 10 has an invalid length. [ 304.199395][T17790] __nla_validate_parse: 21 callbacks suppressed [ 304.199411][T17790] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3430'. [ 304.224581][T17789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3432'. [ 304.262352][T17790] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3430'. [ 304.368042][T17800] bridge0: port 3(batadv0) entered disabled state [ 304.374832][T17800] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.445769][T17800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.459628][T17800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.556710][T17801] geneve2: entered promiscuous mode [ 304.561960][T17801] geneve2: entered allmulticast mode [ 304.607575][T17795] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 304.625508][T17795] bond3 (unregistering): Released all slaves [ 304.656787][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.695971][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 304.714500][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.724948][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 304.742370][T17820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.755264][T17817] netlink: 'syz.4.3439': attribute type 2 has an invalid length. [ 304.768187][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.777663][T17820] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.786352][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 304.798215][T17821] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.801951][T17815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3437'. [ 304.819684][T17815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3437'. [ 304.836351][T17817] 9: entered promiscuous mode [ 304.842483][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.854528][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 305.005394][T17838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3439'. [ 305.780811][T17872] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 305.851040][T17876] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3455'. [ 305.897156][T17878] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3456'. [ 305.907984][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3456'. [ 306.082456][T17889] xt_hashlimit: overflow, try lower: 3/0 [ 306.090204][T17890] xt_hashlimit: overflow, try lower: 3/0 [ 306.198608][T17893] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3460'. [ 306.389483][T17908] veth0_to_team: entered allmulticast mode [ 311.272981][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.037349][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 326.633069][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 358.003763][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.475730][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 419.432962][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 439.925227][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 457.193210][ T31] INFO: task kworker/0:4:5914 blocked for more than 143 seconds. [ 457.200960][ T31] Not tainted syzkaller #0 [ 457.206138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.214861][ T31] task:kworker/0:4 state:D stack:23240 pid:5914 tgid:5914 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 457.226976][ T31] Workqueue: events rfkill_sync_work [ 457.232287][ T31] Call Trace: [ 457.235610][ T31] [ 457.238540][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.243223][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.248733][ T31] ? __pfx___schedule+0x10/0x10 [ 457.254173][ T31] ? schedule+0x91/0x360 [ 457.258683][ T31] schedule+0x165/0x360 [ 457.263020][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.268496][ T31] __mutex_lock+0x7e6/0x1350 [ 457.302901][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.307718][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 457.332798][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.337881][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.343498][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.349421][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.356720][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 457.362713][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 457.367856][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 457.373722][ T31] rfkill_set_block+0x1d2/0x440 [ 457.378594][ T31] rfkill_sync_work+0x114/0x200 [ 457.383968][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 457.389702][ T31] process_scheduled_works+0xae1/0x17b0 [ 457.395345][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.401334][ T31] worker_thread+0x8a0/0xda0 [ 457.405997][ T31] ? __kthread_parkme+0x7b/0x200 [ 457.410946][ T31] kthread+0x711/0x8a0 [ 457.415420][ T31] ? __pfx_worker_thread+0x10/0x10 [ 457.420539][ T31] ? __pfx_kthread+0x10/0x10 [ 457.425170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.430371][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.435803][ T31] ? __pfx_kthread+0x10/0x10 [ 457.440403][ T31] ret_from_fork+0x4bc/0x870 [ 457.445441][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.450556][ T31] ? __switch_to_asm+0x39/0x70 [ 457.455338][ T31] ? __switch_to_asm+0x33/0x70 [ 457.460098][ T31] ? __pfx_kthread+0x10/0x10 [ 457.464739][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.469542][ T31] [ 457.472580][ T31] INFO: task kworker/0:7:12535 blocked for more than 143 seconds. [ 457.480886][ T31] Not tainted syzkaller #0 [ 457.485850][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.494544][ T31] task:kworker/0:7 state:D stack:25384 pid:12535 tgid:12535 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 457.507078][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 457.513816][ T31] Call Trace: [ 457.517094][ T31] [ 457.520009][ T31] __schedule+0x1798/0x4cc0 [ 457.524564][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.529944][ T31] ? __pfx___schedule+0x10/0x10 [ 457.535190][ T31] ? schedule+0x91/0x360 [ 457.539430][ T31] schedule+0x165/0x360 [ 457.543632][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.549093][ T31] __mutex_lock+0x7e6/0x1350 [ 457.553731][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.558505][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 457.565147][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.570171][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 457.575937][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 457.581653][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 457.587767][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 457.593840][ T31] process_scheduled_works+0xae1/0x17b0 [ 457.599549][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.605593][ T31] worker_thread+0x8a0/0xda0 [ 457.610209][ T31] kthread+0x711/0x8a0 [ 457.614368][ T31] ? __pfx_worker_thread+0x10/0x10 [ 457.619486][ T31] ? __pfx_kthread+0x10/0x10 [ 457.624682][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.629894][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.635126][ T31] ? __pfx_kthread+0x10/0x10 [ 457.639717][ T31] ret_from_fork+0x4bc/0x870 [ 457.644343][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.649459][ T31] ? __switch_to_asm+0x39/0x70 [ 457.654596][ T31] ? __switch_to_asm+0x33/0x70 [ 457.659852][ T31] ? __pfx_kthread+0x10/0x10 [ 457.664472][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.669244][ T31] [ 457.672295][ T31] INFO: task syz.5.3404:17699 blocked for more than 143 seconds. [ 457.680086][ T31] Not tainted syzkaller #0 [ 457.685275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.693964][ T31] task:syz.5.3404 state:D stack:25960 pid:17699 tgid:17699 ppid:13060 task_flags:0x400040 flags:0x00080002 [ 457.705930][ T31] Call Trace: [ 457.709195][ T31] [ 457.712111][ T31] __schedule+0x1798/0x4cc0 [ 457.717136][ T31] ? validate_chain+0x897/0x2140 [ 457.722075][ T31] ? __lock_acquire+0xab9/0xd20 [ 457.727063][ T31] ? __pfx___schedule+0x10/0x10 [ 457.731930][ T31] ? schedule+0x91/0x360 [ 457.736225][ T31] schedule+0x165/0x360 [ 457.740389][ T31] schedule_timeout+0x9a/0x270 [ 457.745672][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 457.751057][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.756404][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.761612][ T31] ? wait_for_completion+0x267/0x5d0 [ 457.767020][ T31] wait_for_completion+0x2bf/0x5d0 [ 457.772145][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 457.778157][ T31] ? __flush_work+0xd2/0xbc0 [ 457.782776][ T31] ? __flush_work+0xd2/0xbc0 [ 457.787376][ T31] __flush_work+0x9b9/0xbc0 [ 457.791879][ T31] ? __flush_work+0xd2/0xbc0 [ 457.796599][ T31] ? __pfx___flush_work+0x10/0x10 [ 457.801631][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 457.807306][ T31] ? __pfx___cancel_work+0x10/0x10 [ 457.812410][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 457.818092][ T31] __cancel_work_sync+0xbe/0x110 [ 457.823091][ T31] rfkill_unregister+0x92/0x220 [ 457.827953][ T31] nfc_unregister_device+0x96/0x2a0 [ 457.833741][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 457.839478][ T31] virtual_ncidev_close+0x56/0x90 [ 457.844532][ T31] __fput+0x44c/0xa70 [ 457.848526][ T31] task_work_run+0x1d4/0x260 [ 457.853231][ T31] ? __pfx_task_work_run+0x10/0x10 [ 457.858372][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 457.864056][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 457.869349][ T31] do_syscall_64+0x2bd/0xfa0 [ 457.874235][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.879452][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.885704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 457.890390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.896326][ T31] RIP: 0033:0x7fb50678f6c9 [ 457.900737][ T31] RSP: 002b:00007fffbe0518a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 457.909703][ T31] RAX: 0000000000000000 RBX: 0000000000049fda RCX: 00007fb50678f6c9 [ 457.918013][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 457.926596][ T31] RBP: 00007fb5069e7da0 R08: 0000000000000001 R09: 0000001ebe051b9f [ 457.934611][ T31] R10: 0000001b33c20000 R11: 0000000000000246 R12: 00007fb5069e5fac [ 457.942564][ T31] R13: 00007fb5069e5fa0 R14: ffffffffffffffff R15: 00007fffbe0519c0 [ 457.950574][ T31] [ 457.953869][ T31] INFO: task syz.4.3439:17817 blocked for more than 144 seconds. [ 457.961578][ T31] Not tainted syzkaller #0 [ 457.972869][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.981555][ T31] task:syz.4.3439 state:D stack:24360 pid:17817 tgid:17816 ppid:15309 task_flags:0x400140 flags:0x00080002 [ 457.995453][ T31] Call Trace: [ 457.998746][ T31] [ 458.001680][ T31] __schedule+0x1798/0x4cc0 [ 458.006477][ T31] ? security_file_open+0xb1/0x270 [ 458.011605][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.017018][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.021875][ T31] ? __pfx___schedule+0x10/0x10 [ 458.026820][ T31] ? schedule+0x91/0x360 [ 458.031074][ T31] schedule+0x165/0x360 [ 458.035518][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.040994][ T31] __mutex_lock+0x7e6/0x1350 [ 458.045937][ T31] ? __mutex_lock+0x5bb/0x1350 [ 458.050705][ T31] ? misc_open+0x51/0x350 [ 458.055462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.060491][ T31] misc_open+0x51/0x350 [ 458.064692][ T31] chrdev_open+0x4cc/0x5e0 [ 458.069109][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.074114][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 458.080444][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.085735][ T31] do_dentry_open+0x953/0x13f0 [ 458.090510][ T31] vfs_open+0x3b/0x340 [ 458.094611][ T31] ? path_openat+0x2ecd/0x3830 [ 458.099376][ T31] path_openat+0x2ee5/0x3830 [ 458.104115][ T31] ? __pfx_path_openat+0x10/0x10 [ 458.109083][ T31] do_filp_open+0x1fa/0x410 [ 458.114107][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.118968][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 458.124177][ T31] ? _raw_spin_unlock+0x28/0x50 [ 458.129032][ T31] ? alloc_fd+0x64c/0x6c0 [ 458.133405][ T31] do_sys_openat2+0x121/0x1c0 [ 458.138084][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.143697][ T31] ? rcu_is_watching+0x15/0xb0 [ 458.148466][ T31] __x64_sys_openat+0x138/0x170 [ 458.153333][ T31] do_syscall_64+0xfa/0xfa0 [ 458.157841][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.163092][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.169160][ T31] ? clear_bhb_loop+0x60/0xb0 [ 458.174374][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.180259][ T31] RIP: 0033:0x7fba8c18f6c9 [ 458.184714][ T31] RSP: 002b:00007fba8cfbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.193166][ T31] RAX: ffffffffffffffda RBX: 00007fba8c3e5fa0 RCX: 00007fba8c18f6c9 [ 458.201119][ T31] RDX: 0000000000080080 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 458.209512][ T31] RBP: 00007fba8c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.217554][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.225551][ T31] R13: 00007fba8c3e6038 R14: 00007fba8c3e5fa0 R15: 00007fffc73ac488 [ 458.234323][ T31] [ 458.237385][ T31] INFO: task syz.4.3439:17824 blocked for more than 144 seconds. [ 458.245166][ T31] Not tainted syzkaller #0 [ 458.250097][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.258826][ T31] task:syz.4.3439 state:D stack:26056 pid:17824 tgid:17816 ppid:15309 task_flags:0x400140 flags:0x00080003 [ 458.271006][ T31] Call Trace: [ 458.274316][ T31] [ 458.277245][ T31] __schedule+0x1798/0x4cc0 [ 458.281740][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.286622][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.291467][ T31] ? __pfx___schedule+0x10/0x10 [ 458.296701][ T31] ? schedule+0x91/0x360 [ 458.300937][ T31] schedule+0x165/0x360 [ 458.305155][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.310621][ T31] __mutex_lock+0x7e6/0x1350 [ 458.316694][ T31] ? __mutex_lock+0x5bb/0x1350 [ 458.321504][ T31] ? rfkill_register+0x37/0x8e0 [ 458.326761][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.331781][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 458.337182][ T31] ? device_initialize+0x24b/0x440 [ 458.342303][ T31] rfkill_register+0x37/0x8e0 [ 458.347035][ T31] nfc_register_device+0x14a/0x320 [ 458.352147][ T31] nci_register_device+0x87f/0x9d0 [ 458.357646][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 458.363339][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 458.368652][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 458.374058][ T31] virtual_ncidev_open+0x129/0x1a0 [ 458.379171][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 458.385169][ T31] misc_open+0x2d5/0x350 [ 458.389408][ T31] chrdev_open+0x4cc/0x5e0 [ 458.393868][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.398803][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 458.405200][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.410135][ T31] do_dentry_open+0x953/0x13f0 [ 458.415268][ T31] vfs_open+0x3b/0x340 [ 458.419324][ T31] ? path_openat+0x2ecd/0x3830 [ 458.424125][ T31] path_openat+0x2ee5/0x3830 [ 458.428737][ T31] ? __pfx_path_openat+0x10/0x10 [ 458.433731][ T31] do_filp_open+0x1fa/0x410 [ 458.438242][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.443456][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 458.448480][ T31] ? _raw_spin_unlock+0x28/0x50 [ 458.453348][ T31] ? alloc_fd+0x64c/0x6c0 [ 458.457686][ T31] do_sys_openat2+0x121/0x1c0 [ 458.462346][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.467584][ T31] ? rcu_is_watching+0x15/0xb0 [ 458.472354][ T31] __x64_sys_openat+0x138/0x170 [ 458.479070][ T31] do_syscall_64+0xfa/0xfa0 [ 458.483646][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.488850][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.494958][ T31] ? clear_bhb_loop+0x60/0xb0 [ 458.499641][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.505928][ T31] RIP: 0033:0x7fba8c18f6c9 [ 458.510328][ T31] RSP: 002b:00007fba8cf9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.518766][ T31] RAX: ffffffffffffffda RBX: 00007fba8c3e6090 RCX: 00007fba8c18f6c9 [ 458.526769][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 458.535108][ T31] RBP: 00007fba8c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.543140][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.551106][ T31] R13: 00007fba8c3e6128 R14: 00007fba8c3e6090 R15: 00007fffc73ac488 [ 458.559146][ T31] [ 458.562175][ T31] INFO: task syz.4.3439:17835 blocked for more than 144 seconds. [ 458.570323][ T31] Not tainted syzkaller #0 [ 458.575290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.583981][ T31] task:syz.4.3439 state:D stack:28296 pid:17835 tgid:17816 ppid:15309 task_flags:0x400140 flags:0x00080002 [ 458.596383][ T31] Call Trace: [ 458.599646][ T31] [ 458.602560][ T31] __schedule+0x1798/0x4cc0 [ 458.607109][ T31] ? security_file_open+0xb1/0x270 [ 458.612231][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.617128][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.621983][ T31] ? __pfx___schedule+0x10/0x10 [ 458.627242][ T31] ? schedule+0x91/0x360 [ 458.631477][ T31] schedule+0x165/0x360 [ 458.635692][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.641159][ T31] __mutex_lock+0x7e6/0x1350 [ 458.645809][ T31] ? __mutex_lock+0x5bb/0x1350 [ 458.650579][ T31] ? misc_open+0x51/0x350 [ 458.655283][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.660308][ T31] misc_open+0x51/0x350 [ 458.664507][ T31] chrdev_open+0x4cc/0x5e0 [ 458.668922][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.673891][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 458.680220][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.685529][ T31] do_dentry_open+0x953/0x13f0 [ 458.690292][ T31] vfs_open+0x3b/0x340 [ 458.694376][ T31] ? path_openat+0x2ecd/0x3830 [ 458.699142][ T31] path_openat+0x2ee5/0x3830 [ 458.703808][ T31] ? __pfx_path_openat+0x10/0x10 [ 458.708758][ T31] do_filp_open+0x1fa/0x410 [ 458.713646][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.718486][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 458.723577][ T31] ? _raw_spin_unlock+0x28/0x50 [ 458.728434][ T31] ? alloc_fd+0x64c/0x6c0 [ 458.732816][ T31] do_sys_openat2+0x121/0x1c0 [ 458.737496][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.742681][ T31] ? rcu_is_watching+0x15/0xb0 [ 458.747901][ T31] __x64_sys_openat+0x138/0x170 [ 458.752898][ T31] do_syscall_64+0xfa/0xfa0 [ 458.757416][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.762603][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.768699][ T31] ? clear_bhb_loop+0x60/0xb0 [ 458.773654][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.779537][ T31] RIP: 0033:0x7fba8c18f6c9 [ 458.784098][ T31] RSP: 002b:00007fba8cf7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.792514][ T31] RAX: ffffffffffffffda RBX: 00007fba8c3e6180 RCX: 00007fba8c18f6c9 [ 458.800624][ T31] RDX: 0000000000080800 RSI: 0000200000001d80 RDI: ffffffffffffff9c [ 458.808877][ T31] RBP: 00007fba8c211f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.816888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.824890][ T31] R13: 00007fba8c3e6218 R14: 00007fba8c3e6180 R15: 00007fffc73ac488 [ 458.833322][ T31] [ 458.836347][ T31] INFO: task syz.8.3444:17841 blocked for more than 145 seconds. [ 458.844761][ T31] Not tainted syzkaller #0 [ 458.849701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.858425][ T31] task:syz.8.3444 state:D stack:28296 pid:17841 tgid:17837 ppid:13068 task_flags:0x400040 flags:0x00080002 [ 458.870661][ T31] Call Trace: [ 458.874002][ T31] [ 458.876936][ T31] __schedule+0x1798/0x4cc0 [ 458.881429][ T31] ? security_file_open+0xb1/0x270 [ 458.886571][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.891425][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.896654][ T31] ? __pfx___schedule+0x10/0x10 [ 458.901507][ T31] ? schedule+0x91/0x360 [ 458.905786][ T31] schedule+0x165/0x360 [ 458.909943][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.915603][ T31] __mutex_lock+0x7e6/0x1350 [ 458.920217][ T31] ? __mutex_lock+0x5bb/0x1350 [ 458.925359][ T31] ? misc_open+0x51/0x350 [ 458.929690][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.934779][ T31] misc_open+0x51/0x350 [ 458.938936][ T31] chrdev_open+0x4cc/0x5e0 [ 458.943407][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.948362][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 458.955122][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 458.960050][ T31] do_dentry_open+0x953/0x13f0 [ 458.964891][ T31] vfs_open+0x3b/0x340 [ 458.968960][ T31] ? path_openat+0x2ecd/0x3830 [ 458.973771][ T31] path_openat+0x2ee5/0x3830 [ 458.978410][ T31] ? __pfx_path_openat+0x10/0x10 [ 458.983648][ T31] do_filp_open+0x1fa/0x410 [ 458.988135][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.993005][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 458.998042][ T31] ? _raw_spin_unlock+0x28/0x50 [ 459.002928][ T31] ? alloc_fd+0x64c/0x6c0 [ 459.007277][ T31] do_sys_openat2+0x121/0x1c0 [ 459.011939][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 459.017580][ T31] ? exc_page_fault+0x82/0x100 [ 459.022339][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 459.027668][ T31] __x64_sys_openat+0x138/0x170 [ 459.032528][ T31] do_syscall_64+0xfa/0xfa0 [ 459.037197][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.042404][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.048850][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.053549][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.059442][ T31] RIP: 0033:0x7f86a5b8f6c9 [ 459.063892][ T31] RSP: 002b:00007f86a697b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.072305][ T31] RAX: ffffffffffffffda RBX: 00007f86a5de5fa0 RCX: 00007f86a5b8f6c9 [ 459.080665][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 459.088698][ T31] RBP: 00007f86a5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.096729][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.105242][ T31] R13: 00007f86a5de6038 R14: 00007f86a5de5fa0 R15: 00007ffeb7765ca8 [ 459.113457][ T31] [ 459.116507][ T31] INFO: task syz.8.3444:17845 blocked for more than 145 seconds. [ 459.124264][ T31] Not tainted syzkaller #0 [ 459.129195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.138279][ T31] task:syz.8.3444 state:D stack:28296 pid:17845 tgid:17837 ppid:13068 task_flags:0x400040 flags:0x00080002 [ 459.150223][ T31] Call Trace: [ 459.153550][ T31] [ 459.156473][ T31] __schedule+0x1798/0x4cc0 [ 459.160980][ T31] ? security_file_open+0xb1/0x270 [ 459.166615][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.171464][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.176340][ T31] ? __pfx___schedule+0x10/0x10 [ 459.181205][ T31] ? schedule+0x91/0x360 [ 459.185509][ T31] schedule+0x165/0x360 [ 459.189670][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.195513][ T31] __mutex_lock+0x7e6/0x1350 [ 459.200100][ T31] ? __mutex_lock+0x5bb/0x1350 [ 459.204909][ T31] ? misc_open+0x51/0x350 [ 459.209243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.214338][ T31] misc_open+0x51/0x350 [ 459.218511][ T31] chrdev_open+0x4cc/0x5e0 [ 459.223481][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 459.228431][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 459.234826][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 459.239767][ T31] do_dentry_open+0x953/0x13f0 [ 459.244597][ T31] vfs_open+0x3b/0x340 [ 459.248669][ T31] ? path_openat+0x2ecd/0x3830 [ 459.253816][ T31] path_openat+0x2ee5/0x3830 [ 459.258419][ T31] ? __pfx_path_openat+0x10/0x10 [ 459.263404][ T31] do_filp_open+0x1fa/0x410 [ 459.267910][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.272780][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 459.277822][ T31] ? _raw_spin_unlock+0x28/0x50 [ 459.282658][ T31] ? alloc_fd+0x64c/0x6c0 [ 459.287432][ T31] do_sys_openat2+0x121/0x1c0 [ 459.292110][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 459.297329][ T31] ? exc_page_fault+0x82/0x100 [ 459.302095][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 459.307414][ T31] __x64_sys_openat+0x138/0x170 [ 459.312276][ T31] do_syscall_64+0xfa/0xfa0 [ 459.317152][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.322340][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.328461][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.333177][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.339080][ T31] RIP: 0033:0x7f86a5b8f6c9 [ 459.344026][ T31] RSP: 002b:00007f86a3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.352453][ T31] RAX: ffffffffffffffda RBX: 00007f86a5de6180 RCX: 00007f86a5b8f6c9 [ 459.360490][ T31] RDX: 0000000000000102 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 459.368497][ T31] RBP: 00007f86a5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.376851][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.384871][ T31] R13: 00007f86a5de6218 R14: 00007f86a5de6180 R15: 00007ffeb7765ca8 [ 459.392884][ T31] [ 459.395910][ T31] INFO: task syz.6.3447:17850 blocked for more than 145 seconds. [ 459.404099][ T31] Not tainted syzkaller #0 [ 459.409020][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.417716][ T31] task:syz.6.3447 state:D stack:27704 pid:17850 tgid:17849 ppid:13066 task_flags:0x400040 flags:0x00080002 [ 459.429657][ T31] Call Trace: [ 459.433343][ T31] [ 459.436266][ T31] __schedule+0x1798/0x4cc0 [ 459.440755][ T31] ? security_file_open+0xb1/0x270 [ 459.445918][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.450772][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.455669][ T31] ? __pfx___schedule+0x10/0x10 [ 459.460544][ T31] ? schedule+0x91/0x360 [ 459.465304][ T31] schedule+0x165/0x360 [ 459.469480][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.474988][ T31] __mutex_lock+0x7e6/0x1350 [ 459.479586][ T31] ? __mutex_lock+0x5bb/0x1350 [ 459.484397][ T31] ? misc_open+0x51/0x350 [ 459.488736][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.494136][ T31] misc_open+0x51/0x350 [ 459.498285][ T31] chrdev_open+0x4cc/0x5e0 [ 459.502681][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 459.507671][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 459.514054][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 459.518987][ T31] do_dentry_open+0x953/0x13f0 [ 459.524177][ T31] vfs_open+0x3b/0x340 [ 459.528235][ T31] ? path_openat+0x2ecd/0x3830 [ 459.533046][ T31] path_openat+0x2ee5/0x3830 [ 459.537654][ T31] ? __pfx_path_openat+0x10/0x10 [ 459.542582][ T31] do_filp_open+0x1fa/0x410 [ 459.547095][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.551943][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 459.557367][ T31] ? _raw_spin_unlock+0x28/0x50 [ 459.562206][ T31] ? alloc_fd+0x64c/0x6c0 [ 459.566598][ T31] do_sys_openat2+0x121/0x1c0 [ 459.571281][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 459.576518][ T31] ? exc_page_fault+0x82/0x100 [ 459.581294][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 459.587073][ T31] __x64_sys_openat+0x138/0x170 [ 459.591917][ T31] do_syscall_64+0xfa/0xfa0 [ 459.596650][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.601855][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.607963][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.612639][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.618917][ T31] RIP: 0033:0x7fa17f38f6c9 [ 459.623381][ T31] RSP: 002b:00007fa1802d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.631799][ T31] RAX: ffffffffffffffda RBX: 00007fa17f5e5fa0 RCX: 00007fa17f38f6c9 [ 459.639786][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 459.648028][ T31] RBP: 00007fa17f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.656023][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.664021][ T31] R13: 00007fa17f5e6038 R14: 00007fa17f5e5fa0 R15: 00007ffdbabfe7f8 [ 459.671985][ T31] [ 459.675438][ T31] INFO: task syz.7.3468:17914 blocked for more than 145 seconds. [ 459.683215][ T31] Not tainted syzkaller #0 [ 459.688140][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.696869][ T31] task:syz.7.3468 state:D stack:27384 pid:17914 tgid:17913 ppid:13064 task_flags:0x400140 flags:0x00080002 [ 459.709204][ T31] Call Trace: [ 459.712472][ T31] [ 459.715443][ T31] __schedule+0x1798/0x4cc0 [ 459.719960][ T31] ? security_file_open+0xb1/0x270 [ 459.725133][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.729990][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.735230][ T31] ? __pfx___schedule+0x10/0x10 [ 459.740084][ T31] ? schedule+0x91/0x360 [ 459.744372][ T31] schedule+0x165/0x360 [ 459.748536][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.754211][ T31] __mutex_lock+0x7e6/0x1350 [ 459.758821][ T31] ? __mutex_lock+0x5bb/0x1350 [ 459.763970][ T31] ? misc_open+0x51/0x350 [ 459.768294][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.773389][ T31] misc_open+0x51/0x350 [ 459.777561][ T31] chrdev_open+0x4cc/0x5e0 [ 459.781979][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 459.786955][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 459.793789][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 459.798722][ T31] do_dentry_open+0x953/0x13f0 [ 459.803561][ T31] vfs_open+0x3b/0x340 [ 459.807629][ T31] ? path_openat+0x2ecd/0x3830 [ 459.812383][ T31] path_openat+0x2ee5/0x3830 [ 459.817256][ T31] ? __pfx_path_openat+0x10/0x10 [ 459.822319][ T31] do_filp_open+0x1fa/0x410 [ 459.827315][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.832184][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 459.837302][ T31] ? _raw_spin_unlock+0x28/0x50 [ 459.842153][ T31] ? alloc_fd+0x64c/0x6c0 [ 459.846533][ T31] do_sys_openat2+0x121/0x1c0 [ 459.851210][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 459.856776][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 459.861971][ T31] __x64_sys_openat+0x138/0x170 [ 459.866870][ T31] do_syscall_64+0xfa/0xfa0 [ 459.871377][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.876622][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.882699][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.887831][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.893761][ T31] RIP: 0033:0x7f3e43d8f6c9 [ 459.898170][ T31] RSP: 002b:00007f3e44c5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 459.906639][ T31] RAX: ffffffffffffffda RBX: 00007f3e43fe5fa0 RCX: 00007f3e43d8f6c9 [ 459.915189][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 459.923221][ T31] RBP: 00007f3e43e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.931190][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.939239][ T31] R13: 00007f3e43fe6038 R14: 00007f3e43fe5fa0 R15: 00007ffc9e161cb8 [ 459.947758][ T31] [ 459.950770][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 459.959837][ T31] [ 459.959837][ T31] Showing all locks held in the system: [ 459.967572][ T31] 1 lock held by khungtaskd/31: [ 459.972398][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 459.982699][ T31] 2 locks held by getty/5587: [ 459.987409][ T31] #0: ffff888033f8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 459.997210][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 460.007689][ T31] 4 locks held by kworker/0:4/5914: [ 460.012930][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 460.023930][ T31] #1: ffffc90004447ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 460.036649][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 460.046702][ T31] #3: ffff88804829c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 460.056456][ T31] 3 locks held by kworker/0:7/12535: [ 460.061729][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 460.073197][ T31] #1: ffffc90003967ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 460.086748][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 460.098143][ T31] 1 lock held by syz.5.3404/17699: [ 460.103650][ T31] #0: ffff88804829c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 460.113440][ T31] 1 lock held by syz.4.3439/17817: [ 460.118541][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.127017][ T31] 3 locks held by syz.4.3439/17824: [ 460.132205][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.141003][ T31] #1: ffff888059ff4100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 460.150598][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 460.160559][ T31] 1 lock held by syz.4.3439/17835: [ 460.166052][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.174537][ T31] 1 lock held by syz.8.3444/17841: [ 460.179637][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.188113][ T31] 1 lock held by syz.8.3444/17845: [ 460.193489][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.201924][ T31] 1 lock held by syz.6.3447/17850: [ 460.207062][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.215561][ T31] 1 lock held by syz.7.3468/17914: [ 460.220668][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.229633][ T31] 1 lock held by syz-executor/17918: [ 460.235000][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.243479][ T31] 1 lock held by syz-executor/17922: [ 460.248737][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.257661][ T31] 1 lock held by syz-executor/17923: [ 460.262972][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.271423][ T31] 1 lock held by syz-executor/17924: [ 460.276727][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.285456][ T31] 1 lock held by syz-executor/17926: [ 460.290716][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.299195][ T31] 1 lock held by syz-executor/17928: [ 460.304500][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.313590][ T31] 1 lock held by syz-executor/17931: [ 460.318874][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.327346][ T31] 1 lock held by syz-executor/17932: [ 460.332624][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.341121][ T31] 1 lock held by syz-executor/17934: [ 460.346942][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.355453][ T31] 1 lock held by syz-executor/17936: [ 460.361247][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.369713][ T31] 1 lock held by syz-executor/17938: [ 460.375271][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.383766][ T31] 1 lock held by syz-executor/17941: [ 460.389040][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.397954][ T31] 1 lock held by syz-executor/17942: [ 460.403616][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.412041][ T31] 1 lock held by syz-executor/17944: [ 460.417346][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.425821][ T31] 1 lock held by syz-executor/17946: [ 460.431079][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 460.439951][ T31] [ 460.442272][ T31] ============================================= [ 460.442272][ T31] [ 460.450703][ T31] NMI backtrace for cpu 0 [ 460.450719][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 460.450735][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.450746][ T31] Call Trace: [ 460.450753][ T31] [ 460.450760][ T31] dump_stack_lvl+0x189/0x250 [ 460.450787][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.450808][ T31] ? __pfx__printk+0x10/0x10 [ 460.450836][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 460.450859][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 460.450880][ T31] ? __pfx__printk+0x10/0x10 [ 460.450902][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 460.450929][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 460.450950][ T31] watchdog+0xf60/0xfa0 [ 460.450973][ T31] ? watchdog+0x1e2/0xfa0 [ 460.450996][ T31] kthread+0x711/0x8a0 [ 460.451021][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.451037][ T31] ? __pfx_kthread+0x10/0x10 [ 460.451059][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.451080][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.451101][ T31] ? __pfx_kthread+0x10/0x10 [ 460.451124][ T31] ret_from_fork+0x4bc/0x870 [ 460.451146][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 460.451177][ T31] ? __switch_to_asm+0x39/0x70 [ 460.451191][ T31] ? __switch_to_asm+0x33/0x70 [ 460.451205][ T31] ? __pfx_kthread+0x10/0x10 [ 460.451227][ T31] ret_from_fork_asm+0x1a/0x30 [ 460.451255][ T31] [ 460.451261][ T31] Sending NMI from CPU 0 to CPUs 1: [ 460.597483][ C1] NMI backtrace for cpu 1 [ 460.597498][ C1] CPU: 1 UID: 0 PID: 3470 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 460.597517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.597526][ C1] Workqueue: events_unbound toggle_allocation_gate [ 460.597547][ C1] RIP: 0010:pick_next_task_fair+0x950/0xb90 [ 460.597566][ C1] Code: fc ff df 48 8b 7c 24 08 e9 9b fe ff ff 4c 89 ef 4c 89 f6 e8 32 08 00 00 4c 89 ef 4c 89 fe e8 67 0a 00 00 48 89 df 48 8b 1c 24 <48> 89 de ba 01 00 00 00 e8 f3 10 00 00 48 89 d8 e9 06 fd ff ff 90 [ 460.597579][ C1] RSP: 0018:ffffc9000c05f688 EFLAGS: 00000086 [ 460.597592][ C1] RAX: 1ffff1100fc3c3e5 RBX: ffff88807e1e1e40 RCX: b1590d86e4d2fa00 [ 460.597604][ C1] RDX: 000000000000020f RSI: ffffffff8d8f48bb RDI: ffff8880b893a040 [ 460.597619][ C1] RBP: ffff888030cb9f60 R08: ffffffff8f7ce477 R09: 1ffffffff1ef9c8e [ 460.597631][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9c8f R12: ffff88807e1e1f60 [ 460.597642][ C1] R13: ffff8880b893a100 R14: ffff888030cb9ec0 R15: ffff88807e1e1ec0 [ 460.597655][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 460.597667][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.597678][ C1] CR2: 00005562446d8000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 460.597692][ C1] Call Trace: [ 460.597698][ C1] [ 460.597709][ C1] __pick_next_task+0xe4/0x450 [ 460.597732][ C1] __schedule+0x7a4/0x4cc0 [ 460.597758][ C1] ? do_raw_spin_lock+0x121/0x290 [ 460.597780][ C1] ? __lock_acquire+0xab9/0xd20 [ 460.597794][ C1] ? __pfx___schedule+0x10/0x10 [ 460.597820][ C1] ? schedule+0x91/0x360 [ 460.597840][ C1] schedule+0x165/0x360 [ 460.597858][ C1] toggle_allocation_gate+0x159/0x240 [ 460.597873][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 460.597888][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 460.597911][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 460.597927][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 460.597943][ C1] process_scheduled_works+0xae1/0x17b0 [ 460.597974][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.597999][ C1] worker_thread+0x8a0/0xda0 [ 460.598028][ C1] kthread+0x711/0x8a0 [ 460.598048][ C1] ? __pfx_worker_thread+0x10/0x10 [ 460.598063][ C1] ? __pfx_kthread+0x10/0x10 [ 460.598082][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.598100][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.598119][ C1] ? __pfx_kthread+0x10/0x10 [ 460.598137][ C1] ret_from_fork+0x4bc/0x870 [ 460.598154][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 460.598173][ C1] ? __switch_to_asm+0x39/0x70 [ 460.598186][ C1] ? __switch_to_asm+0x33/0x70 [ 460.598199][ C1] ? __pfx_kthread+0x10/0x10 [ 460.598217][ C1] ret_from_fork_asm+0x1a/0x30 [ 460.598239][ C1]