last executing test programs: 41.744997163s ago: executing program 3 (id=500): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x6f, 0xfffffffffffffd9d, &(0x7f0000000380)="b9ff0331001000000000000000dd2097625c25439f9907885cb4a39c1e6ed3c7ac786726b65a951cc5411cd8144f0e56f44a6ae1c07360b2547af346c1783b40ed07d6423cab351a5619af10073531567de47618352e3d5849cd502c756cd4d4f698a6aac655781572e68b3c9f3cad", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000001}, 0x50) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="00701000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25010000001400020077673100000000000000000000000000340008803000008006000500080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x5c}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r9, 0x114, 0x3, &(0x7f0000000180)={{0x6, 0x7}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, {0x1, @multicast}, 0x0, {0x2, 0x4e20, @private=0xa010104}, 'team_slave_0\x00'}) 41.585171516s ago: executing program 4 (id=502): socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x40}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="9f00000000000800a00002000000abece7360d00"/29], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffec7, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0xfffffffffffffe57) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2b637075202d706599046e0372665f6576656e7420"], 0x11) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x245000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53) (async) bind$rds(r7, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53) sendmsg$rds(r7, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}, @rdma_args={0x19, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xfffffffffffffc83}, {&(0x7f0000000880)=""/113, 0x71}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x150}, 0x0) 41.389168643s ago: executing program 0 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 41.388291972s ago: executing program 4 (id=507): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000024c0)={'sit0\x00', &(0x7f0000002440)={'erspan0\x00', 0x0, 0x8, 0x80, 0x7, 0x3, {{0x9, 0x4, 0x1, 0x10, 0x24, 0x67, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@rr={0x7, 0xf, 0xb5, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @broadcast]}]}}}}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) (rerun: 64) bind$can_raw(r7, &(0x7f0000000200)={0x1d, r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xffff, 0xa}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, &(0x7f0000001140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa5ab}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}, {{&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001300)=[{&(0x7f00000000c0)}, {&(0x7f00000011c0)="3d4d0146a91c52", 0x7}, {&(0x7f0000001200)="acbe7a7abbcac3d6e1388b4d977e8e74b1f5da59db8619b9a20d314a884f228b65fcb16a91d345cb37b73854f3eb67f1db3b6381261d57023d5dbef76aa3decb09257401a1bc4798f7434fa4b3aad3d675b22a4732246c9e8046c4665de80fd9a0d14c798c30861e4f887946d224a29aea4d1ec3ccba8dbab3fbb35c7a9adfcb73d8442c6dda2f722607a4f72a52a120068cc5501565c15f31aa8f82", 0x9c}, {&(0x7f00000012c0)}], 0x4, &(0x7f0000001340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)="9e2f3a6cfe2c6beadb1abeb776430b893636a17d9bfc6864baab0c627d1ec5e441e266c3410a0143c0a0d33b075bc0bc0e3cd1814b21ecbd59f1b3ae3b66e4d57d5423de345c499af493abf15f509db05740940087fa26e30bf46f9509e56e00555cee57d10815332936bf2e3817af086380417c15cbf4cc685534006501d18212d90eecb687db99396cf00a14e9b9ad587afc09a29369ca043725381936338d992a5ba2fd12908525f855b339254f6e3be386a7ae739e196ee0c94d2703f237d2541a6d39b6accc9b7dbe95dcc9c0685b7e4d481b6f8fefae6f3162e83aa2", 0xdf}, {&(0x7f0000001500)="13afbe7c1537e43040d1519fbed02ab271fc8a4179453394b81df13d3b82f245f7a44413583981f5ad6c204f222ac89cce2fd59f42e86030e71e9f4733f9d77c0622b20fd92c7b7e9046b05109be735c7cb6e178ea7023a7ee613982217c6f1560ff190d44657f645c614ad22f78ac1de7d23c53cdaae495a7f6aa08ae4c9f3a104799c0dbe445c749cc1fe64b2f4ef7f30143151956062536f33867ad51ee0039c8ad0a3f757c7958ac51ef990abc4e43d4b192fbd01fcc5221", 0xba}, {&(0x7f00000015c0)="3b42c94ffb6ac50c70658dd57cf64abac619e63ca84dc6bb59b83c61c96f3d8625b51e8a63fb8ba16a3b011b2c9cf3202d721dc1b8dee96bccf4bdf0bedeb92956bf9eeab683e11ac57ad10424cab7c2a040749f58e6e6f16638ffb81e8a9d5219241ceee4d9befe94a4d927f62bb5482b52f454e1c87cb7c195f230718fb9326055466cb96fbca9412fa0edcb75ec1f64db0e3fff5bc8566378c747df3770a2ee74b48f76d9c8b3602c93d5f9b9b93e5d0510", 0xb3}, {&(0x7f0000001680)="cdc4020267901c4d13b1cda7e78ae6ffa83da9c5", 0x14}, {&(0x7f00000016c0)="3ab592e58241b7ac440124958f5229c6eae4ca8d11b5ba350c4558daf6d9", 0x1e}, {&(0x7f0000001700)="f824bc8dc08185e99ac898672f28941236c4165fe02c7730fa2df064cbbdb271f5690a7bd6c9d7f590a91765d423df61644a1022073e0eb063f9e590776a99e01e45eaa5f69b9f2ff0580ac06f0180", 0x4f}, {&(0x7f0000001780)="33068009783fb982a539e4c704a8976681d0bba88c4aedac1efd9f091e5bfd445ccb9b179c6b776b175e8db2f143da0b8efdabc49c5877d86c756d274ffa1eed1b7f6d618d987549533e54870c3b50228ddfa28e8729ffab57b06103d6051849a91fefbdfd7b71ff3a94b999987ff641cca0e5b019", 0x75}], 0x7, &(0x7f0000001880)=[@ip_retopts={{0xc8, 0x0, 0x7, {[@rr={0x7, 0x27, 0x3d, [@multicast2, @remote, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @multicast2, @loopback]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x25, 0x0, 0x2, [0x2, 0x400, 0xd03e, 0x40]}, @rr={0x7, 0xb, 0xd0, [@empty, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x1}]}, @generic={0xc3, 0x8, "a2018d7033ea"}, @cipso={0x86, 0x37, 0x2, [{0x6, 0x8, "7832814954ba"}, {0x1, 0x4, "20be"}, {0x1, 0xd, "51565d11acd31b006815c4"}, {0x0, 0x10, "d12453c056222ecaffc1ad870ebf"}, {0x3, 0x8, "65c664a6e12c"}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x5, 0x11, "b88a1dbe47a4e36dd7373a4cd82335"}, {0x0, 0x8, "ca8ad7b6e8b2"}]}, @end]}}}], 0xc8}}, {{&(0x7f0000001980)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001f40)=[{&(0x7f00000019c0)="9c382721646a9ed093c0d630851b2f82bf3ec77736d885d28978a189bf331281a6675affd04bbae217f279044465", 0x2e}, {&(0x7f0000001a00)="1057def353ffce7aa5c9fdd469573002b08ee0de8618105657be2db11107a66ab4d22bfc1c4d06c54afc396265bc66044009758b28903aa54ec24b16c77ca3b0d96c05ba9b254afef36c63a8e37207cd04acad2f8934ddd712adc185b5372cef6d2e3e771628654e7f15f7ada3fa6ec3e5d0b27c64b325e6658116f4c85c0c619bbd59364173b4a4b749263db08004a2836f11c832b84d52df42b965faf8a87b22d833bbfd2de6769dd556a3fe1562c2c432d3e0cbd2258426355bb21b4f8436c4ed3e1cfd41600d11ae2b2201b0235d1fe76cd5fa699c9ffb878476f2012c6df1c0", 0xe2}, {&(0x7f0000001b00)="8d2baf354e5e5985c7863321419d7d4e222ef179369f0431324c156001f37ec78c8782fda392bc9873474cc7c11e16e8903171775a051f41709d27b3843f4c4dc4927acd6e1db3f3a1a5801775bf9069cab6684eae67f580935d7a24d8e48d7fcbcf2434b95ff80d7cf825961306c62b10ba1cecb408f6d6e3ba0491951f147138a5111ec5168c835b48b2fc2f95f9985931aadb9e78907e18e84d7186137829f84d2dfc6f0439be825c172906605ac4b1a79f83", 0xb4}, {&(0x7f0000001bc0)="ac165489bc9fc2818faaebcf9c34fcc4a0849a190828f9f116d0d6319754e8a8f95c260f95e0323cf68f30688c6a9abed9ed73d8f61b0f6ce7fd020d941f6d531de4c491edb9abaff045c9d5e021c8fa79343f3d9b0425fbc15a6e58798e60c79d4aecafe8a60f2a4607ad4cb0c0da8372096a876238242850d7f27111c82d6a7280250769a39d9a96081e576856d8bef8700cd54fd5e9aaea1e575251fdf339e27561e3478fac98163c542f0ad76e9a070239c4d524a92f4861e3c29d38fec45a645f087c74075ac6f98b5fe6e98871", 0xd0}, {&(0x7f0000001cc0)="6a937273a52c828efdcf4b7728932ac5fd85272cb1469e1e7ca61401dd4ce41d2957e7123b09639e9bf04785cbb5623335832fc0fc800eaf9b0be71e7642b3e3583569ce4cb56c82fd7d5dbab2fbcd74074746a0101a7c1e56478f018ca2671f0cdf475d97ef1c7696eaa25f631be54e0f96505150e09ca1b956bb5d1ed421864700fe82dd683e98a8179a86c2f322b06215cfc02328a7d10b2dcf315edc000cb1e1bc87dafd6b8bd3810b73f6d3f73f2e74a054226ab0e4031f3dea2f1a95de45efd579970432a71adeeccccac025ddfe9583329d3716ce8ca0af56790169a88225e40dfaba", 0xe6}, {&(0x7f0000001dc0)="65a9dc9fcd541899c6c8a370bccfe4e1662ff59637a1b127ca9a8bf0ebf76a03b9ec08cae1eb2d9aefd2bfc169befd5b6bedfe6aca39aadd7244b8967cfd076c2b0d098170a95f42023b749107d888d2554f409248ad87c9498af5ec0c3a2b9c4f13def459fcb875ed547d40845b7ea0c394e93d0d447f7036dd4038694c26faf4bf1f7fa58bb59193f3c087903c4a7206eedb1de677fd7815f6ab1602883b242fe88b093428ab42e6c37f1188530d34dd145e27478d3bb88a0fc1d7f3ffd9686016772bbb020fa29113f87e6a2e", 0xce}, {&(0x7f0000001ec0)="1cca4de347cf364a840d3b1f6cbe79238d910713de27cbfe9a856addcd07883ba7e746ffff637803bb7ff4f8a66e471b0077f4c3ed189129340f53026891", 0x3e}, {&(0x7f0000001f00)="2d4ea837db7ad2ebf1f447ae40f6a9939a68175da91bca673521f8094ed35991aa013aeec17c6fd87daadfc0114e595f27e1df2b1df26c1edcced2d12d114499", 0x40}], 0x8, &(0x7f0000001fc0)=[@ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x89, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @broadcast, @local, @loopback, @multicast2, @broadcast, @multicast1]}, @timestamp={0x44, 0x8, 0xaa, 0x0, 0xe, [0x8]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @ssrr={0x89, 0xb, 0x33, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x68}}, {{&(0x7f0000002040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002080)="81e0acb50f357e0a518a9198c659f4bb9483ff2a1fdb53", 0x17}, {&(0x7f00000020c0)="f861a21a93da0fefeaeeabe89ae0c4beba9d80e533325665869cd4eed7c12614", 0x20}, {&(0x7f0000002100)="65299a2627ca8177eda875761f22c269da69af617947c3dea89bc9b19c174c5f53f4d09ffa4db10f0dbe8e3b13e902370045e866501b260d5ba52cb2603394c2b4fdf5a298f044ff3954a0242dbf265c6a2717ec5600a275b4c0ae4db2feafd8284a88ae43d779199713ff9f92bb203975659c4434fd0b1b278cd7cd015500eb4c3ca9ce809fc941d0b3509b54fe8ea2661727da561ea7226368c06fc33beba486b713b0b4484ff80b84dd", 0xab}, {&(0x7f00000021c0)="18780e16c305b748ed3737a273012e8afb1f013e07e3f60c9cc10066504e735be941b8ca748d6f3529f59390fdab141f7bd6d49e732bcb613f6288277a0c4be017e147a6496ba2e3aa753b25e453caac96ba665c30aa6b5c31b2d77713e656fdbf89df8dd4dd0ceb4992ff41b6aa543380e9b068a568ec88099ad2a8753211b28f781a560472300e462f7a3b92a67930b34f1b47141eb0d429622dc863a5d6edc49cd69324c1a13276aedd075c2960d4a76c5b6a8a90ef127f966e5b2ff668b375a49b166319d877e6cd1cffa5dd2ed3e86fe1ac4017161feeff63", 0xdb}, {&(0x7f00000022c0)="7695ef6902a9e5c499e8d4eb3ada0223f4e6a890dd54d8a34a2f9b510224790fc82263cc84b2d4051dd3251ecbddb1ef388d8328fcb985f86d62b4aa2a233e980c829e9616a9f50b2148f158a7980162d44ce0163cf831c074d02fd3b8a7e84b974fdbf93ea8e078c32ef0c6390ff0471a417e84450a5b56e44813736069fd1f0e5766273a8009b251414f5dd7899b5bf2a45c8d46f70fb589c2fa7f110a93413becfadade6bfc286716a7e4eee4fe962b7355aa0bf565f45c1fb92ec95bff506116b098824d9d7aa54ca9173a", 0xcd}], 0x5, &(0x7f0000002500)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xe, "aa6457537d7b4b223d82d50b"}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x104, 0x0, 0x7, {[@generic={0x44, 0x10, "ab3bb9c7300ae9b5ca1291323c2d"}, @cipso={0x86, 0x4c, 0x3, [{0x0, 0xa, "b5dde70e3fdafe2f"}, {0x2, 0xd, "a55011b0722b0d78fb8b17"}, {0x2, 0x12, "32ca7d44ab59c6f98d99fdbaf5787edb"}, {0x5, 0x6, "ead2c077"}, {0x5, 0x7, "33556163ef"}, {0x5, 0x10, "f2933c7816ac8682f461b0515994"}]}, @ssrr={0x89, 0x1f, 0xba, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}, @rr={0x7, 0x17, 0x74, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @local, @local]}, @timestamp={0x44, 0x1c, 0xa5, 0x0, 0x0, [0xe2, 0x0, 0x8, 0x800, 0x0, 0x9]}, @end, @timestamp_prespec={0x44, 0x44, 0xeb, 0x3, 0x0, [{@broadcast, 0x9}, {@local, 0x8}, {@local, 0x2}, {@remote, 0x9}, {@broadcast, 0x3}, {@empty, 0xd}, {@local, 0xd5}, {@broadcast, 0x9}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x126e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x98, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xa0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @empty, @private=0xa010102]}, @noop, @rr={0x7, 0xb, 0xcf, [@local, @broadcast]}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x7, [0x0]}, @generic={0x94, 0x3, '3'}, @cipso={0x86, 0x55, 0x3, [{0x1, 0x2}, {0x5, 0x7, "99140273ce"}, {0x5, 0x5, "00800f"}, {0x7, 0xd, "440f5a8fe3189318508242"}, {0x2, 0x3, '3'}, {0x6, 0xd, "f14db40257d78dc217b7f0"}, {0x1, 0x4, '}r'}, {0x2, 0xa, "713b33d0722d80dd"}, {0x6, 0xc, "169e9a3e00427e1cabc0"}, {0x2, 0xa, "a52ae19556ca7566"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x278}}, {{&(0x7f0000002780)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000028c0)=[{&(0x7f00000027c0)="f6f5f32fb3ab5e9459851c32734d88d0f970d27153a31b1aec0e4ade1f85e1125a1541adc3e94ba4e0d0eb9d6052d0ed8b6d1e76b8c944e0d43d448261a3b7bf4917d03691c9c97d76c798cb854ffa0023384e75f9ffe1395fa3cee77fe1f4453b8a40c063d56ae1b0f08078213cf1af2d824963d1a59717b4d8e670988c838e69429a192e300bfa6dab9db009b56cd81b660e9002272045f5a9962ba608ecb71019c50535f11565c71c8e30f7d81e02d23e32f71a5cb6d78c51bd1e6d51e13d433a7b19e60f06ac7aeb5c49ae475b7bc53fef634024a69a4e", 0xd9}], 0x1, &(0x7f0000002900)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xc5, 0x0, 0x9, [0x81, 0x6]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x75, [@loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @multicast1]}, @noop, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0x5, [{@remote, 0x6315}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x3}, {@rand_addr=0x64010101, 0x80}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xd}, {@broadcast, 0x1}, {@remote, 0x2b5b}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private=0xa010102}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x8b, 0x0, 0xc, [0x4, 0xfff, 0x3, 0x4]}]}}}], 0x108}}], 0x6, 0x2) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0xfffffffd, 0x20040005, 0x0, 0x7, 0x0, 0xfffffff7, 0x100000, 0x10000}}) 41.188500945s ago: executing program 0 (id=510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 41.113017739s ago: executing program 3 (id=511): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000440)={0x5e, @broadcast, 0x4e21, 0x2, 'sh\x00', 0x0, 0x1000, 0x7b}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async, rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x10, 0x4, 0x3ff) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x10, 0x70bd2b, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x1, @any, 0x6}, 0xe) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f0000000400), 0xe) listen(r11, 0x0) listen(r10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 40.956140454s ago: executing program 0 (id=514): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000e40)) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES16=r6, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r5, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) (async) connect$packet(r3, &(0x7f00000002c0)={0x11, 0xd, r5, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000880)=[@iv={0xf0, 0x117, 0x2, 0xd8, "93feaa43d59f92ea206d362a9d4a9b9df813c3906eb6e27f91bc7900358026e2a41448c11f3da5f3cd7f495510d07f6af89708be9c8f12d861d337be61d5b3ffbf5c83cafd002d7c026104e7df16c7f0eefd58ff51db6234b5fa22ec9133a5b49d06c899fe7a58e6a4c9c298ee0de52729fd9eed3191156b70cb95b7e0f90766b87a523fb4a01574e09137bea95a1350cbc45845d7b7bb39d46e7a98dce12654cc6fb04e64a12a8a17f97a7eae447ae1b8b26557b5465500e5d478c3319496cce767f06c884225886a516e2616769fe3fa98abce3fef5310"}], 0xf0}], 0x1, 0x40800) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="93378e0762cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c11dbb35b448a0037ffc52007bdc5d1c", 0x30) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7d911f46", @ANYRES16=r7, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008001) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r9, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.809260242s ago: executing program 3 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0xf3ff}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 40.773460835s ago: executing program 0 (id=517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x8) (async) close(r3) (async) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@llc={0x1a, 0x306, 0x9, 0x81, 0x4, 0x1, @random="d43c2e0072ce"}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4080) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0xd}, 0x94) 40.590579068s ago: executing program 4 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'gre0\x00', 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000000000ff7fffffffffffff000a010100000000000000133e00020000000900010073797a300000000048000000030a01010000000000000000020000090900010073797a30000000000900030073797a3200000000080007006e6174001400048008000240000000000a0102000000000000000017000002140000001100010000000000000000000a80c3daa736189fc204fa4048891fd28132ed83c5283c0042cbc9cbdc306e1edc64b177ff2af352e747bf7c2783377ebb0a80d5567c61ea2dcb433ea9f53a7a5a14cfda0cd748cf955fee948b65c2f9378c3091629c2b654fd351f60c"], 0xa4}}, 0x4) 40.585175338s ago: executing program 3 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 40.463208526s ago: executing program 0 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='cdev_update\x00', r1, 0x0, 0x800}, 0x18) pipe(&(0x7f0000000140)) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='memory.low\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r4, 0x42}], 0x1, 0x23f679b6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@TCA_RATE={0x0, 0x5, {0xf, 0x4}}]}, 0x88}}, 0x20040054) 40.374283914s ago: executing program 3 (id=524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a010400000000f4ffffff010000000900030073797a31000000780900010073797a3100000000280004800800014000000005"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f00000000c0)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="080f419b5ef6815affffffff8abfaba50500"/30, @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) sendto$inet6(r4, &(0x7f0000000980)="2ee4764f17ae33ca526c8a122a9fb35341f4f952db6ae03feb9cc8302b1d26ddcab5f5d818a24addc3a2b2808b69792538b140ad8dacfa15b77f08e2b73505be828d658794fe6cbaf8cd003517b5920ef06da69885537acf24a2f5c92afe13a01671b07a6a01e68b518f8f5c195550b522e1d4f8415100be5ee9c6bfa7fae0c0ada11ef6e7a3f3f5f5302123ca4828a9e8e8be5dc1657d82a1791fa294c775", 0x9f, 0x44080, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x44804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x174, 0x0, 0x102, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_NAN_FUNC={0x154, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_INFO={0x56, 0xb, "f4f51bb4b0a22bfe12cef2b491bffc08c6472306e408b146a6320cdd875e05a3ce7f868033a4745896d498f51c89065892b4e95ad31bf22aa53f74942eefd7240c97dab2fd0c1176a6f4c7689d5fac7665c5"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x401}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x48}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb9, 0xb, "fdc8a4479618440e88bf1a7a5f9ced870beb05bca1ee0132155ce0e0d36d46f5ca4f36a0df39f3eca23a1df5ca6e127c3e096ba17cda25a965865f695adb8a9417d7c24f181546378d7826bb6b15a53e6b09932e00b7254e1809e530c172c39577a11a38b0643c6bb2f6a5d7aa06e806ca7d23495ca6fcae7e5207db0c6e24122715b3553f6d7d01d9ad889312f8c3e97803bc32464dfed86ff213c3a5e16bdaa756ddc82ceca3dcd89c59696bbae54e2f08a09acb"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "41a9e891fbf1"}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x894) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 40.255242205s ago: executing program 0 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r3, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba", 0x2}], 0x1, 0x5e, 0xdc) sendmmsg$inet6(r2, &(0x7f0000002300)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @empty, 0xeba}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@hopopts={{0x18, 0x29, 0x36, {0x6c}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}}], 0x1, 0x2000c000) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x240040c0) 39.993121639s ago: executing program 3 (id=527): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a4b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x800) 39.596772757s ago: executing program 4 (id=531): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38"], 0x18}, 0xfc00) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x86, 0xc1, &(0x7f0000000580)="45340c8c727786e54b91e248e8b1cf41f1ea91c80b98d1ce27dec79f11e27fb4c5155c6af658c0705d999b3c1016fd0ae365ae934d9093cb400e2f29cd0587c44d7bfc69e6e19bd132e4513038c907f654cf38cad12eeceb1c8bf151c7d627c8899cc47e98731d59c2b523184053c35e6c434ffa11fd7ff102809e446bec5c9240cba55141ef", &(0x7f0000000780)=""/193, 0x94, 0x0, 0x8, 0x5, &(0x7f00000001c0)="ecfc9bbae35bbe4d", &(0x7f0000000640)="e8ac8497c3", 0x1, 0x0, 0x9a79}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r6, &(0x7f0000000380)='/', 0x0}, 0x20) recvmmsg(r5, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000d86dae2100080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NFT_BATCH(r7, 0x0, 0x40) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close(0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x4, "1c586133b53c0a76b5a420c17f654eaf"}}}]}, 0x44}}, 0x4000040) 37.964738499s ago: executing program 1 (id=540): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x0, 0x5f}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x6f, 0xfffffffffffffd9d, &(0x7f0000000380)="b9ff0331001000000000000000dd2097625c25439f9907885cb4a39c1e6ed3c7ac786726b65a951cc5411cd8144f0e56f44a6ae1c07360b2547af346c1783b40ed07d6423cab351a5619af10073531567de47618352e3d5849cd502c756cd4d4f698a6aac655781572e68b3c9f3cad", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000001}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x882}], 0x1, 0x8) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="00701000", @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf25010000001400020077673100000000000000000000000000340008803000008006000500080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x5c}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$rds(0x15, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 37.869055617s ago: executing program 1 (id=541): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 37.744247397s ago: executing program 1 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000), 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x1a, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000031eafd0008000300000000000800230a1dbd5159c6a5", @ANYRES32=r2, @ANYBLOB="0c009900ff070000740000001400040073797a6b616c6c6572300000000000000500530001000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 37.614068707s ago: executing program 1 (id=544): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1}, 0x40010002) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2100080}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x134, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1000}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'ip6_vti0\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5e3b}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x17b267ce}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x134}, 0x1, 0x0, 0x0, 0x4040084}, 0x844) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000000)=@base={0x1d, 0x4, 0x2, 0x0, 0x201}, 0x48) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000180)) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x672303, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, 0x0) 36.664761627s ago: executing program 1 (id=553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0xc4, 0x30, 0x1, 0x70bd25, 0x3, {}, [{0xb0, 0x1, [@m_sample={0x0, 0x13, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x2}]}, {0x0, 0x6, "ae0085c53accde67c4c5c7ffb03a1f2ce1980ae74bf6dcd0ba276f9783a18f0cc5565ab552689b440b5ea98cb47ce9bd938c655ba3dd1d5b94cc1973eabfc341bc3075d9eb6d"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x1}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x880}, 0x24000000) socket$caif_seqpacket(0x25, 0x5, 0x4) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) 36.656368014s ago: executing program 4 (id=554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000006300"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x1, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000001a00)=""/16, 0x3a, 0x10, 0x1, 0x8}, 0x28) 36.576761431s ago: executing program 2 (id=555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x3c, 0x0, 0x2, 0x62}}}], 0x18}, 0x840) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a010400000000f4ffffff010000000900030073797a31000000780900010073797a3100000000280004800800014000000005"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r7 = socket(0x15, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1}}, 0x10) getsockopt(r7, 0x200000000114, 0x271d, 0x0, &(0x7f00000000c0)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="080f419b5ef6815affffffff8abfaba50500"/30, @ANYRES16=r11, @ANYBLOB="010000000000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) sendto$inet6(r7, &(0x7f0000000980)="2ee4764f17ae33ca526c8a122a9fb35341f4f952db6ae03feb9cc8302b1d26ddcab5f5d818a24addc3a2b2808b69792538b140ad8dacfa15b77f08e2b73505be828d658794fe6cbaf8cd003517b5920ef06da69885537acf24a2f5c92afe13a01671b07a6a01e68b518f8f5c195550b522e1d4f8415100be5ee9c6bfa7fae0c0ada11ef6e7a3f3f5f5302123ca4828a9e8e8be5dc1657d82a1791fa294c775", 0x9f, 0x44080, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x44804) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x174, 0x0, 0x102, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_NAN_FUNC={0x154, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_INFO={0x56, 0xb, "f4f51bb4b0a22bfe12cef2b491bffc08c6472306e408b146a6320cdd875e05a3ce7f868033a4745896d498f51c89065892b4e95ad31bf22aa53f74942eefd7240c97dab2fd0c1176a6f4c7689d5fac7665c5"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x401}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x48}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb9, 0xb, "fdc8a4479618440e88bf1a7a5f9ced870beb05bca1ee0132155ce0e0d36d46f5ca4f36a0df39f3eca23a1df5ca6e127c3e096ba17cda25a965865f695adb8a9417d7c24f181546378d7826bb6b15a53e6b09932e00b7254e1809e530c172c39577a11a38b0643c6bb2f6a5d7aa06e806ca7d23495ca6fcae7e5207db0c6e24122715b3553f6d7d01d9ad889312f8c3e97803bc32464dfed86ff213c3a5e16bdaa756ddc82ceca3dcd89c59696bbae54e2f08a09acb"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "41a9e891fbf1"}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x24000814) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x10c, 0x0, 0xa, 0x500, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "cdfee5bb2c28100e2dc0d6111835b95bf22d31c5e01c4205a353fae4c332a60c3e3ea7af1d9a5e11b57b2a920bd6e353d7e9390ab4fd45ceda2b160e39487d09dfe982808386c0253074ba206b77e69e08773466fced624e2f467b89b6e1ff767be4e660bb74b9ff00cd4ab99b0049ee5cdb6db112556d6531f4be283e03ba6b02cde1d9fa29251174699c07bc5a694fe9769169d95206acc767a050d3050235a3d06caaf3ea89e8a7d260c2ed72a20a711b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x91, 0x7, 0x1, 0x0, "7299099b901bc34ed78adb5210ec796c8084909666af3bf659f854b6afab6dd992a636576adfbb29df93337523a3f57414a35ba27c3aafdbbb123db0b93f5f8b4652c4163dd9c816d8318a87f44fc88830aaf5c4d163161ef51121ed868b88362cf6898a15647041081ae2e9fc6c6085ef5951311ad9141134cfb8d750c1ee68884e26c2aa9a4ea90c620fe133"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x65, 0x7, 0x1, 0x0, "fc893f9bc4c2ddd2e7aaf6b9960d43e6ed570d37884f79d5323c401f9ca15b06b257fbff4dd17533acf193fb1e355822ff903958d156195d364352813117caedff978adae71cf48175c3d00a11eeb44d22e3ec0d06ca65752b143cec591c416ac3"}, @NFTA_RULE_USERDATA={0x63, 0x7, 0x1, 0x0, "f31c2184a7c13c507631a41f843e3b4f79a79fc3f0b8b7cf91d8ad87198404461773b94d8a861e5be0bada694520548cbe86367c5edbed8d8c49d042738869f6a1458dd9d03408b62d7eadb683131cc76decd71ed4e091d6f5072957a7e27d"}]}, @NFT_MSG_NEWFLOWTABLE={0x208, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5adbe6a3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x17c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x73, 0xd, 0x1, 0x0, "82df4009d1bea2fd7f9c4bfe823dcd10d6ebce49bdd90314bc0f5b9d4841868844e8576f6101b9857dbe428841f2263f074ba2797794cd1a2edf2a66a940fdd08f4dac4aa290a728c4644daeda73e98e2f13160b65ae44b4b7d4f09d2d09d751bd31fb2c6e3c8cfbbf2d1b0a798043"}, @NFTA_SET_USERDATA={0xf2, 0xd, 0x1, 0x0, "cf6ede34a369a6f830dbaadfb1d5bdc85373ef6961133dd7a9b15e027d014c303344ff7b86731d4a9f21abdabbcceb2f51baf0a66fe4d94dc8d7e084ddbb1b59ae28e76ebd3bb879e0b18c20658d907eb1c11494f378873041f33e97b25681bd94e16e73e36900c1556df075a60fef887f0bd558bf83566349c60c3a6aa03754bc5bb03a99a68f9c255fe2b728557a243a4cb2e8f8b02e88df31e4f811e52856fcdd4df944eac273f684df68c37cd1d75d075ad38315ebd3c7a4e324a331d8a7220d123c457905a0ce13cd939473bceb1c3710d024b73f7a740586bccc590026a4c3ef325025cdaf547b64241a40"}]}, @NFT_MSG_NEWTABLE={0x200, 0x0, 0xa, 0x201, 0x0, 0x0, {0xf}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x72, 0x6, "ba78b2dc3d131e7ae5fdc5c901f55ffaed86698f7ca9eed54e4ce3d6e8122cd0c99ccf5a7d29520cd1457bb30152fbfa8c4a378404281adf35a85febb4fe9effea44ddd4715d13000f899f339f7dc5119fcca53ed0c378763dea5ddf4cb91e3bffe665f9ddabd276e5e622926d74"}, @NFTA_TABLE_USERDATA={0x15, 0x6, "987409bcc9a477520121fe23f167397d64"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "030e1fd571fd91df2b974ef023cfe231927ddf88812318c2308316875410e11112a07b05d5340ef6e5c7c59d18a22423603a30d3639ac02a66336ed71966214dd2c6bd0f08ca8268c76c6880dbfa84c3f6de740d851d4ab31eba5d81504655164870e670e78b7e00f201b59dded544c8ec65575a76824319dace54e053ff2d6ab02db14b83bc4f82fbfd21ce367a8228bc98b4685692d38b18c9fbab14980bad8f2093f90501202692b227b8"}, @NFTA_TABLE_USERDATA={0x86, 0x6, "57b7de5abeee31ffeb301d88dd4ff8d1304aafaa4a0e5a4ab140f18796e540a752c406c13e642a753a94ae0f4c679ae78aefc697afb2d201dad8e6881bb64111fc3afdbde30f0458a3bbb7d3d6ad60cd78957dd267e13b756cec5ef2009ac2917538bac49d1996388544df2a926b2c246e25a782fb7a59d891ac8f5c94fa0b51aa8e"}]}, @NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x82c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7e4, 0x3, 0x0, 0x1, [{0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "38aa80043fd316f69ea7dcaa5090fb3ed764098d76baa7b8d06b799801aecd8d240f6a8d43d02046a49ae971e1ae0442e7998b4534c061"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x170, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "a2baf6737e9373a9613c8cb1bad33d9cf33c6c887232f5744c3c0fd6e21198ae09b3acb9f0910c4b2966906de23659f48027d725ff58d7a3e19935606f77db3d05f0ac8cac7fc0cd30588e06c12881036c65fdd521d4fe3bcc7266e67cf640a224c992d0ecf8ecc3729f8bf3e1cd67eb3e6b4f0a31163cbc4db3b187b331fb5ea30e0ecb2a26a6ee7b7e7aed18da53341bb563076a11c83036619fa13b9c9bc6384eea801fc191ba72eee61086e2799b580c01b1c0ec416e78724f87d959c39e941e5846de6a898e8ceb7aa08d8951ea3aef67cc2d2f9dce6f25c1b166e73fe353034303f9d4fc37d2e50f4237a3f8b8e93a"}, @NFTA_DATA_VALUE={0x5b, 0x1, "d2fcee62c44d8b92c44cd3ab56f9f774ee12350e7a29d821e797009e10e20f8d80c5090863d8e8c6c69fae6eee5ea117f9c0220bd8343fef752a5a23606622994c7f3b57d5b706c75e553478cb1160407a9afe185a3468"}]}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x50, 0x6, 0x1, 0x0, "c568551a6203a5b2cc258f360a49cbf0096cfb49dd99fd4a85fa9b9000c49a5e6f11380c8510e9f4a2f8eac18f9b4a13f865bbbf8010437d9d0c4e3b90b80c8adb9e676eea14f9a27b680103"}, @NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "6942a332ba1032566d7f4799c2310fe8b0658035de78e152644852aad5d72e5916e276170b91709b1c1b115459ff1391158795db7cc82d79293135cbe101fc1ea82ca0091a5a6f5a72540f5dc1c7aa5a2be6"}, @NFTA_SET_ELEM_USERDATA={0xd3, 0x6, 0x1, 0x0, "4556d609bebcb7a3b10b9ea2bbd6a33f1631433f0e871fa7e456caaf74b4f32733245a470bd4725c76676c2472036dbbcf7a5f1d23f653b624d67f9bf8de69c32cab55e82af12d913eae85314bf1bb88a453906604270a04a7309d4f7803216bae194c0bc4615c9186eb76d7a84072cb46e12cdc89b875aef697898f56d12301206da6d1b7639160e3ab0f42cc46d984f6f00ac1ef366bac6b0cbcc23d6a3ca7c99679350cdf0acc6bc036cea1b735736a554b3fbae5ffa3fc138f2aa7d3a4f5f97328672a1c4d530070b14c1a352e"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "e9e48b4187ee28769f7a604021a9d653ca12b20215dbdf8d"}, @NFTA_DATA_VALUE={0x54, 0x1, "b066b18f6fa373bcb67a64ea057f28bfdfcebeb2ceb93e250fa1044540805e0583e674b77c24f48a28fb40f5d9d479bf3a33ed52ba601c782ea0091af7f0b2ef1ea33d78435ed77fc1e7955c7720a20c"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff7}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x400}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, 'devlink\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xef94dcd242aaa54a}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "ceff87f966e79f63ac194bd8e67b09ad4d6fdd56702e527689b5f0ce1bb34a4e93606d50051000951b8dc2115d9565c813754f67343d8d5769788919a2d73bbd840de2a0faf3805747e81b4366fc3520e912cf0d22642573c689b4e649"}, @NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "c30c7e742c319a1e89ec"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1128}, 0x1, 0x0, 0x0, 0x8080}, 0x4008040) 36.477864882s ago: executing program 2 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 36.254885784s ago: executing program 2 (id=557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000050000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001"], 0x254}}, 0x0) 3.080189ms ago: executing program 2 (id=558): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31", @ANYRES32=0x0, @ANYBLOB="e8001a80"], 0x15c}}, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, 0x0) (async) ioctl$IMGETCOUNT(r0, 0x80044943, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)=0x647, 0x4) unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x562a}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="040000006a0001002abd7000fdd9df250002000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={r8, 0x4, 0x2, 0x403f6236, 0x0, 0xff}, 0x14) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={r8, 0x4, 0x2, 0x403f6236, 0x0, 0xff}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2.837227ms ago: executing program 2 (id=559): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/164, 0xa4}}], 0x1, 0x40000000, 0x0) unshare(0x6a040000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2.244948ms ago: executing program 1 (id=560): r0 = socket(0x2a, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x31, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000001600008500000007000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x15, 0x1, 0x800000, 0x300, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x5}, {0x81}}}, 0xb8}}, 0x90) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="08001eb3b0335d000e", 0x9}, {0x0}], 0x2, 0x0, 0x0, 0xe0000000}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000014c0)=@newchain={0xb0, 0x64, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0x3ddcf913801494f3}, {0x6, 0x2}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xa}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "780c55f3604bd7fb7f0d1015fb2ffe45"}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0xa4, 0x6}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400088c}, 0x40000) (async) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359c01}]}}]}, 0x40}}, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.260752ms ago: executing program 4 (id=561): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x6f, 0xfffffffffffffd9d, &(0x7f0000000380)="b9ff0331001000000000000000dd2097625c25439f9907885cb4a39c1e6ed3c7ac786726b65a951cc5411cd8144f0e56f44a6ae1c07360b2547af346c1783b40ed07d6423cab351a5619af10073531567de47618352e3d5849cd502c756cd4d4f698a6aac655781572e68b3c9f3cad", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000001}, 0x50) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="00701000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25010000001400020077673100000000000000000000000000340008803000008006000500080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x5c}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r9, 0x114, 0x3, &(0x7f0000000180)={{0x6, 0x7}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, {0x1, @multicast}, 0x0, {0x2, 0x4e20, @private=0xa010104}, 'team_slave_0\x00'}) 770.363µs ago: executing program 2 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x1) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 492.701µs ago: executing program 32 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r3, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba", 0x2}], 0x1, 0x5e, 0xdc) sendmmsg$inet6(r2, &(0x7f0000002300)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @empty, 0xeba}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@hopopts={{0x18, 0x29, 0x36, {0x6c}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}}], 0x1, 0x2000c000) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x240040c0) 453.23µs ago: executing program 33 (id=527): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a4b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x800) 232.795µs ago: executing program 34 (id=560): r0 = socket(0x2a, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x31, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000001600008500000007000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x15, 0x1, 0x800000, 0x300, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x5}, {0x81}}}, 0xb8}}, 0x90) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="08001eb3b0335d000e", 0x9}, {0x0}], 0x2, 0x0, 0x0, 0xe0000000}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000014c0)=@newchain={0xb0, 0x64, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0x3ddcf913801494f3}, {0x6, 0x2}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xa}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "780c55f3604bd7fb7f0d1015fb2ffe45"}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0xa4, 0x6}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400088c}, 0x40000) (async) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359c01}]}}]}, 0x40}}, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 155.639µs ago: executing program 35 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x1) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) 0s ago: executing program 36 (id=561): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x6f, 0xfffffffffffffd9d, &(0x7f0000000380)="b9ff0331001000000000000000dd2097625c25439f9907885cb4a39c1e6ed3c7ac786726b65a951cc5411cd8144f0e56f44a6ae1c07360b2547af346c1783b40ed07d6423cab351a5619af10073531567de47618352e3d5849cd502c756cd4d4f698a6aac655781572e68b3c9f3cad", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000001}, 0x50) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="00701000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25010000001400020077673100000000000000000000000000340008803000008006000500080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x5c}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r9, 0x114, 0x3, &(0x7f0000000180)={{0x6, 0x7}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, {0x1, @multicast}, 0x0, {0x2, 0x4e20, @private=0xa010104}, 'team_slave_0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts. [ 81.402538][ T5850] cgroup: Unknown subsys name 'net' [ 81.511097][ T5850] cgroup: Unknown subsys name 'cpuset' [ 81.520104][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.175891][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.783655][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.792134][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.807486][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.815469][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.824100][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.824244][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.838026][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.845768][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.855537][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.873592][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.882910][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.891752][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.899813][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.914119][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.921410][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.922358][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.929820][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.936522][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.950771][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.958600][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.988852][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.997602][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.006562][ T5184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.022054][ T5184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.034125][ T5184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.565358][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 86.626852][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 86.970870][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.978371][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.985765][ T5860] bridge_slave_0: entered allmulticast mode [ 86.994476][ T5860] bridge_slave_0: entered promiscuous mode [ 87.004464][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.011694][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.019395][ T5860] bridge_slave_1: entered allmulticast mode [ 87.027481][ T5860] bridge_slave_1: entered promiscuous mode [ 87.034945][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 87.056078][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 87.069263][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 87.201932][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.228819][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.236154][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.243655][ T5864] bridge_slave_0: entered allmulticast mode [ 87.251363][ T5864] bridge_slave_0: entered promiscuous mode [ 87.266224][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.311134][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.318332][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.325506][ T5864] bridge_slave_1: entered allmulticast mode [ 87.333348][ T5864] bridge_slave_1: entered promiscuous mode [ 87.421460][ T5860] team0: Port device team_slave_0 added [ 87.429372][ T5860] team0: Port device team_slave_1 added [ 87.459086][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.518424][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.546203][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.553977][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.561573][ T5866] bridge_slave_0: entered allmulticast mode [ 87.569112][ T5866] bridge_slave_0: entered promiscuous mode [ 87.616995][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.624218][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.632568][ T5869] bridge_slave_0: entered allmulticast mode [ 87.640286][ T5869] bridge_slave_0: entered promiscuous mode [ 87.660313][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.667501][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.674621][ T5866] bridge_slave_1: entered allmulticast mode [ 87.682157][ T5866] bridge_slave_1: entered promiscuous mode [ 87.690131][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.697546][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.723663][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.735363][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.742748][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.750014][ T5875] bridge_slave_0: entered allmulticast mode [ 87.757366][ T5875] bridge_slave_0: entered promiscuous mode [ 87.764843][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.772009][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.779464][ T5869] bridge_slave_1: entered allmulticast mode [ 87.786918][ T5869] bridge_slave_1: entered promiscuous mode [ 87.795820][ T5864] team0: Port device team_slave_0 added [ 87.814653][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.821802][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.847792][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.859002][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.866132][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.873585][ T5875] bridge_slave_1: entered allmulticast mode [ 87.881022][ T5875] bridge_slave_1: entered promiscuous mode [ 87.901695][ T5864] team0: Port device team_slave_1 added [ 87.947922][ T5862] Bluetooth: hci0: command tx timeout [ 87.957494][ T5862] Bluetooth: hci2: command tx timeout [ 87.957502][ T5184] Bluetooth: hci1: command tx timeout [ 87.975864][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.015810][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.027265][ T5862] Bluetooth: hci3: command tx timeout [ 88.042486][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.066492][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.079036][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.089116][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.096067][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.107285][ T5862] Bluetooth: hci4: command tx timeout [ 88.128137][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.157734][ T5860] hsr_slave_0: entered promiscuous mode [ 88.164269][ T5860] hsr_slave_1: entered promiscuous mode [ 88.173525][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.210654][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.217878][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.244040][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.270160][ T5866] team0: Port device team_slave_0 added [ 88.321052][ T5866] team0: Port device team_slave_1 added [ 88.335106][ T5875] team0: Port device team_slave_0 added [ 88.342738][ T5869] team0: Port device team_slave_0 added [ 88.351407][ T5869] team0: Port device team_slave_1 added [ 88.397593][ T5875] team0: Port device team_slave_1 added [ 88.472433][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.479523][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.506459][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.518394][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.525359][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.551487][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.592947][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.599962][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.626410][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.638741][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.645695][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.671687][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.683545][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.690777][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.716781][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.734031][ T5864] hsr_slave_0: entered promiscuous mode [ 88.740710][ T5864] hsr_slave_1: entered promiscuous mode [ 88.746840][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 88.752729][ T5864] Cannot create hsr debugfs directory [ 88.804824][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.811872][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.837979][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.013846][ T5866] hsr_slave_0: entered promiscuous mode [ 89.020651][ T5866] hsr_slave_1: entered promiscuous mode [ 89.026915][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 89.032747][ T5866] Cannot create hsr debugfs directory [ 89.044153][ T5875] hsr_slave_0: entered promiscuous mode [ 89.050652][ T5875] hsr_slave_1: entered promiscuous mode [ 89.056738][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 89.062667][ T5875] Cannot create hsr debugfs directory [ 89.116797][ T5869] hsr_slave_0: entered promiscuous mode [ 89.124001][ T5869] hsr_slave_1: entered promiscuous mode [ 89.130542][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 89.136285][ T5869] Cannot create hsr debugfs directory [ 89.332012][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.366742][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.425372][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.437016][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.621005][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.649746][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.661883][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.672816][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.760200][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.785197][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.796790][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.827590][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.902923][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.914924][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.945056][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.958627][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.028293][ T5862] Bluetooth: hci1: command tx timeout [ 90.028325][ T5184] Bluetooth: hci2: command tx timeout [ 90.033822][ T5862] Bluetooth: hci0: command tx timeout [ 90.052921][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.103713][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.107906][ T5862] Bluetooth: hci3: command tx timeout [ 90.119345][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.144555][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.155536][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.183461][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.187408][ T5862] Bluetooth: hci4: command tx timeout [ 90.226196][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233599][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.295439][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.302631][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.346333][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.373232][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.415987][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.438570][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.478450][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.485566][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.494926][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.502134][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.511617][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.518748][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.541935][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.549115][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.612308][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.706223][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.737880][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.770558][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.777871][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.812460][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.819768][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.907015][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.977566][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.984844][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.022759][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.029970][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.060016][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.343281][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.454441][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.532321][ T5864] veth0_vlan: entered promiscuous mode [ 91.603527][ T5864] veth1_vlan: entered promiscuous mode [ 91.673767][ T5866] veth0_vlan: entered promiscuous mode [ 91.727331][ T5866] veth1_vlan: entered promiscuous mode [ 91.750548][ T5864] veth0_macvtap: entered promiscuous mode [ 91.765414][ T5864] veth1_macvtap: entered promiscuous mode [ 91.792338][ T1210] cfg80211: failed to load regulatory.db [ 91.794816][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.810198][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.866854][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.886507][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.905575][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.928213][ T1008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.938413][ T5860] veth0_vlan: entered promiscuous mode [ 91.954913][ T5866] veth0_macvtap: entered promiscuous mode [ 91.962821][ T1008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.972360][ T1008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.994016][ T5866] veth1_macvtap: entered promiscuous mode [ 92.011317][ T5860] veth1_vlan: entered promiscuous mode [ 92.089883][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.108366][ T5875] veth0_vlan: entered promiscuous mode [ 92.110025][ T5862] Bluetooth: hci2: command tx timeout [ 92.113916][ T51] Bluetooth: hci0: command tx timeout [ 92.125166][ T5184] Bluetooth: hci1: command tx timeout [ 92.144322][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.158070][ T5869] veth0_vlan: entered promiscuous mode [ 92.179878][ T5860] veth0_macvtap: entered promiscuous mode [ 92.191275][ T5184] Bluetooth: hci3: command tx timeout [ 92.203392][ T5869] veth1_vlan: entered promiscuous mode [ 92.220304][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.224960][ T5860] veth1_macvtap: entered promiscuous mode [ 92.234236][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.246624][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.256251][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.267896][ T5184] Bluetooth: hci4: command tx timeout [ 92.281050][ T5875] veth1_vlan: entered promiscuous mode [ 92.300888][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309933][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.339691][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.350377][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.381029][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.405046][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.423175][ T5869] veth0_macvtap: entered promiscuous mode [ 92.462507][ T5875] veth0_macvtap: entered promiscuous mode [ 92.474435][ T5869] veth1_macvtap: entered promiscuous mode [ 92.482875][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.501783][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.513030][ T5875] veth1_macvtap: entered promiscuous mode [ 92.527999][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.535245][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.544488][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623560][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.635890][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.656298][ T5979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.666883][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.680230][ T1097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.689053][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.689851][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.705966][ T5979] tipc: Started in network mode [ 92.711635][ T5979] tipc: Node identity fffffe01, cluster identity 64 [ 92.718939][ T5979] tipc: Node number set to 4294966785 [ 92.720051][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.726394][ T5979] tipc: Cannot configure node identity twice [ 92.758998][ T1097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.767924][ T1097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779639][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.803579][ T1097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.836764][ T5979] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.876404][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.904455][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.928016][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.946086][ T4358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.957502][ T4358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.014161][ T4358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029763][ T4358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.080855][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.089946][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.112790][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.125109][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.290247][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.299529][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.343525][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.364728][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.370788][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.402323][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.502195][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.531757][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.756061][ T5994] Bluetooth: MGMT ver 1.23 [ 93.775051][ T5994] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 93.846864][ T5997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 93.891839][ T6000] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 93.908797][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 93.923220][ T5997] batman_adv: batadv0: Adding interface: gretap1 [ 93.932181][ T5997] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.943769][ T6002] Zero length message leads to an empty skb [ 93.960370][ T5997] batman_adv: batadv0: Interface activated: gretap1 [ 93.990594][ T5993] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 94.011941][ T6000] team0: Port device dummy0 added [ 94.034559][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.062689][ T6001] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 94.149120][ T5988] macvtap0: mtu greater than device maximum [ 94.190508][ T5184] Bluetooth: hci1: command tx timeout [ 94.196060][ T5184] Bluetooth: hci0: command tx timeout [ 94.201710][ T5184] Bluetooth: hci2: command tx timeout [ 94.267739][ T51] Bluetooth: hci3: command tx timeout [ 94.344334][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 94.353454][ T51] Bluetooth: hci4: command tx timeout [ 94.428960][ T6009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.549168][ T6011] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 94.922097][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 94.951954][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 95.835200][ T6035] netlink: 6 bytes leftover after parsing attributes in process `syz.0.17'. [ 95.897454][ T6035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.983265][ T6038] team0: entered promiscuous mode [ 95.988738][ T6038] team_slave_0: entered promiscuous mode [ 95.995115][ T6038] team_slave_1: entered promiscuous mode [ 96.037518][ T6038] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.190349][ T6042] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 96.848007][ T6063] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.058671][ T6069] netlink: 'syz.0.25': attribute type 8 has an invalid length. [ 97.161320][ T6069] bond0: entered promiscuous mode [ 97.213256][ T6069] bond_slave_0: entered promiscuous mode [ 97.315734][ T6069] bond_slave_1: entered promiscuous mode [ 97.366697][ T6069] bond0: left promiscuous mode [ 97.371625][ T6069] bond_slave_0: left promiscuous mode [ 97.385972][ T6069] bond_slave_1: left promiscuous mode [ 97.416711][ T6075] veth1_to_bond: entered allmulticast mode [ 97.448951][ T6075] veth1_to_bond: entered promiscuous mode [ 97.456082][ T6074] veth1_to_bond: left promiscuous mode [ 97.462528][ T6074] veth1_to_bond: left allmulticast mode [ 97.609152][ T6082] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 98.076729][ T6094] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 98.134418][ T6094] batman_adv: batadv0: Adding interface: gretap1 [ 98.162773][ T6094] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.206246][ T6089] netlink: 'syz.4.31': attribute type 3 has an invalid length. [ 98.216843][ T6094] batman_adv: batadv0: Interface activated: gretap1 [ 98.293650][ T6096] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 98.694453][ T6110] __nla_validate_parse: 2 callbacks suppressed [ 98.694472][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.4.37'. [ 98.741241][ T6111] netlink: 68 bytes leftover after parsing attributes in process `syz.4.37'. [ 98.801817][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 98.975535][ T6120] syz_tun: entered allmulticast mode [ 99.029317][ T6120] netlink: 68 bytes leftover after parsing attributes in process `syz.2.39'. [ 99.065735][ T6115] syz_tun: left allmulticast mode [ 99.122209][ T6122] netlink: 72 bytes leftover after parsing attributes in process `syz.3.41'. [ 99.266686][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 99.513229][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 99.539712][ T6139] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 99.707643][ T6143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.48'. [ 100.154459][ T6167] netlink: 32 bytes leftover after parsing attributes in process `syz.2.54'. [ 100.286936][ T6172] FAULT_INJECTION: forcing a failure. [ 100.286936][ T6172] name failslab, interval 1, probability 0, space 0, times 1 [ 100.299863][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 100.299890][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.299917][ T6172] Call Trace: [ 100.299929][ T6172] [ 100.299938][ T6172] dump_stack_lvl+0x189/0x250 [ 100.299970][ T6172] ? __pfx____ratelimit+0x10/0x10 [ 100.300001][ T6172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.300023][ T6172] ? __pfx__printk+0x10/0x10 [ 100.300055][ T6172] ? __pfx___might_resched+0x10/0x10 [ 100.300091][ T6172] should_fail_ex+0x414/0x560 [ 100.300126][ T6172] should_failslab+0xa8/0x100 [ 100.300156][ T6172] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 100.300183][ T6172] ? __alloc_skb+0x112/0x2d0 [ 100.300210][ T6172] __alloc_skb+0x112/0x2d0 [ 100.300237][ T6172] netlink_sendmsg+0x5c6/0xb30 [ 100.300272][ T6172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.300299][ T6172] ? aa_sock_msg_perm+0xf1/0x1d0 [ 100.300334][ T6172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.300354][ T6172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.300378][ T6172] __sock_sendmsg+0x21c/0x270 [ 100.300411][ T6172] ____sys_sendmsg+0x505/0x830 [ 100.300442][ T6172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.300475][ T6172] ? import_iovec+0x74/0xa0 [ 100.300504][ T6172] ___sys_sendmsg+0x21f/0x2a0 [ 100.300533][ T6172] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.300600][ T6172] ? __fget_files+0x2a/0x420 [ 100.300629][ T6172] ? __fget_files+0x3a0/0x420 [ 100.300671][ T6172] __x64_sys_sendmsg+0x19b/0x260 [ 100.300700][ T6172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.300737][ T6172] ? __pfx_ksys_write+0x10/0x10 [ 100.300760][ T6172] ? rcu_is_watching+0x15/0xb0 [ 100.300785][ T6172] ? do_syscall_64+0xbe/0x3b0 [ 100.300821][ T6172] do_syscall_64+0xfa/0x3b0 [ 100.300838][ T6172] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.300868][ T6172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.300889][ T6172] ? clear_bhb_loop+0x60/0xb0 [ 100.300920][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.300939][ T6172] RIP: 0033:0x7f687ff8eec9 [ 100.300964][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.300980][ T6172] RSP: 002b:00007f6880d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.301005][ T6172] RAX: ffffffffffffffda RBX: 00007f68801e5fa0 RCX: 00007f687ff8eec9 [ 100.301019][ T6172] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 100.301031][ T6172] RBP: 00007f6880d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.301042][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.301053][ T6172] R13: 00007f68801e6038 R14: 00007f68801e5fa0 R15: 00007fff708f6a88 [ 100.301087][ T6172] [ 100.901237][ T6181] netlink: 'syz.3.57': attribute type 3 has an invalid length. [ 101.178751][ T6195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.265266][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 101.342531][ T6199] bridge0: entered promiscuous mode [ 101.363230][ T6199] bridge0: left promiscuous mode [ 102.204784][ T6225] FAULT_INJECTION: forcing a failure. [ 102.204784][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.247024][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT(full) [ 102.247051][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.247063][ T6225] Call Trace: [ 102.247071][ T6225] [ 102.247080][ T6225] dump_stack_lvl+0x189/0x250 [ 102.247107][ T6225] ? __pfx____ratelimit+0x10/0x10 [ 102.247139][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.247161][ T6225] ? __pfx__printk+0x10/0x10 [ 102.247186][ T6225] ? __might_fault+0xb0/0x130 [ 102.247224][ T6225] should_fail_ex+0x414/0x560 [ 102.247258][ T6225] _copy_from_iter+0x1de/0x1790 [ 102.247289][ T6225] ? rcu_is_watching+0x15/0xb0 [ 102.247309][ T6225] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 102.247338][ T6225] ? __pfx__copy_from_iter+0x10/0x10 [ 102.247362][ T6225] ? __build_skb_around+0x257/0x3e0 [ 102.247389][ T6225] ? netlink_sendmsg+0x642/0xb30 [ 102.247410][ T6225] ? skb_put+0x11b/0x210 [ 102.247437][ T6225] netlink_sendmsg+0x6b2/0xb30 [ 102.247470][ T6225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.247496][ T6225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 102.247530][ T6225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.247550][ T6225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.247574][ T6225] __sock_sendmsg+0x21c/0x270 [ 102.247609][ T6225] ____sys_sendmsg+0x505/0x830 [ 102.247641][ T6225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.247678][ T6225] ? import_iovec+0x74/0xa0 [ 102.247707][ T6225] ___sys_sendmsg+0x21f/0x2a0 [ 102.247735][ T6225] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.247802][ T6225] ? __fget_files+0x2a/0x420 [ 102.247830][ T6225] ? __fget_files+0x3a0/0x420 [ 102.247870][ T6225] __x64_sys_sendmsg+0x19b/0x260 [ 102.247897][ T6225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.247932][ T6225] ? __pfx_ksys_write+0x10/0x10 [ 102.247962][ T6225] ? rcu_is_watching+0x15/0xb0 [ 102.247984][ T6225] ? do_syscall_64+0xbe/0x3b0 [ 102.248007][ T6225] do_syscall_64+0xfa/0x3b0 [ 102.248024][ T6225] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.248053][ T6225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.248073][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 102.248097][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.248117][ T6225] RIP: 0033:0x7f3a3ef8eec9 [ 102.248136][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.248152][ T6225] RSP: 002b:00007f3a3fea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.248173][ T6225] RAX: ffffffffffffffda RBX: 00007f3a3f1e5fa0 RCX: 00007f3a3ef8eec9 [ 102.248188][ T6225] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.248200][ T6225] RBP: 00007f3a3fea9090 R08: 0000000000000000 R09: 0000000000000000 [ 102.248212][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.248223][ T6225] R13: 00007f3a3f1e6038 R14: 00007f3a3f1e5fa0 R15: 00007fff579dc398 [ 102.248256][ T6225] [ 102.990683][ T6235] dvmrp8: entered allmulticast mode [ 103.068966][ T6235] dvmrp8: left allmulticast mode [ 103.463678][ T6247] netlink: 'syz.1.80': attribute type 3 has an invalid length. [ 103.701024][ T6240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.713000][ T6258] netlink: 'syz.2.81': attribute type 3 has an invalid length. [ 103.724173][ T6240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.738867][ T6240] bond0 (unregistering): Released all slaves [ 103.768116][ T6253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 103.800976][ T6257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 103.819784][ T6257] batman_adv: batadv0: Adding interface: gretap1 [ 103.826501][ T6257] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.867292][ T6257] batman_adv: batadv0: Interface activated: gretap1 [ 103.949415][ T6255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 103.969961][ T6260] netlink: 'syz.1.82': attribute type 42 has an invalid length. [ 103.999815][ T6260] netlink: 'syz.1.82': attribute type 7 has an invalid length. [ 104.030236][ T6260] netlink: 'syz.1.82': attribute type 8 has an invalid length. [ 104.289274][ T6272] tipc: Enabled bearer , priority 0 [ 104.322604][ T6272] syzkaller0: entered promiscuous mode [ 104.335257][ T6272] syzkaller0: entered allmulticast mode [ 104.630197][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.638784][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.782936][ T6292] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 104.786436][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.812318][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.997915][ T6281] tipc: Resetting bearer [ 105.051916][ T6283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.103129][ T6293] veth1_to_batadv: entered promiscuous mode [ 105.109840][ T6293] veth1_to_batadv: entered allmulticast mode [ 105.203275][ T4358] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.212597][ T4358] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.251449][ T6269] tipc: Resetting bearer [ 105.277828][ T6269] tipc: Disabling bearer [ 105.327707][ T6299] __nla_validate_parse: 9 callbacks suppressed [ 105.327728][ T6299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 105.381336][ T6283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.423886][ T4358] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.435542][ T4358] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.445715][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'. [ 105.636338][ T6283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.736412][ T6319] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 105.758621][ T6319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.914015][ T6319] team0: Port device geneve0 added [ 106.001152][ T6283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.197253][ T6326] dvmrp8: entered allmulticast mode [ 106.260819][ T6326] dvmrp8: left allmulticast mode [ 106.319829][ T6331] netlink: 168 bytes leftover after parsing attributes in process `syz.3.99'. [ 106.449240][ T1097] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.483056][ T1097] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.526041][ T4358] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.594824][ T1097] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.648667][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 106.765095][ T6346] batadv_slave_1: entered promiscuous mode [ 106.850004][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 106.861092][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 106.938118][ T6352] nbd0: detected capacity change from 0 to 127 [ 106.951075][ T51] block nbd0: Receive control failed (result -32) [ 106.966529][ T6354] netlink: 248 bytes leftover after parsing attributes in process `syz.0.110'. [ 106.974313][ T5861] block nbd0: Dead connection, failed to find a fallback [ 107.225557][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 107.309601][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 107.524761][ T6369] netlink: 'syz.1.113': attribute type 2 has an invalid length. [ 107.581393][ T6342] batadv_slave_1: left promiscuous mode [ 108.245589][ T6405] netlink: 'syz.3.121': attribute type 3 has an invalid length. [ 108.300013][ T6413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 108.313702][ T6413] batman_adv: batadv0: Adding interface: gretap1 [ 108.321385][ T6413] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.352233][ T6413] batman_adv: batadv0: Interface activated: gretap1 [ 108.405638][ T6415] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 108.819087][ T6436] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 108.842066][ T6436] team0: Device macvtap1 is already an upper device of the team interface [ 109.260885][ T6453] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 109.314810][ T6453] macvtap1: entered promiscuous mode [ 109.607829][ T6463] syzkaller0: entered promiscuous mode [ 109.637228][ T6463] syzkaller0: entered allmulticast mode [ 110.108139][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 110.721401][ T6528] __nla_validate_parse: 8 callbacks suppressed [ 110.721419][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 110.776232][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.148'. [ 111.428584][ T6549] netdevsim netdevsim1: Direct firmware load for . [ 111.428584][ T6549] failed with error -2 [ 111.443072][ T6549] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 111.443072][ T6549] [ 111.760200][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 111.830915][ T6566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.157'. [ 112.243284][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 112.276704][ T6585] lo speed is unknown, defaulting to 1000 [ 112.305799][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 112.316607][ T6585] lo speed is unknown, defaulting to 1000 [ 112.384554][ T6585] lo speed is unknown, defaulting to 1000 [ 112.433683][ T6585] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.467646][ T6589] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 112.515983][ T6585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.635287][ T6585] lo speed is unknown, defaulting to 1000 [ 112.644768][ T6585] lo speed is unknown, defaulting to 1000 [ 112.682516][ T6585] lo speed is unknown, defaulting to 1000 [ 112.720501][ T6585] lo speed is unknown, defaulting to 1000 [ 112.782738][ T6585] lo speed is unknown, defaulting to 1000 [ 112.798222][ T6608] netlink: 168 bytes leftover after parsing attributes in process `syz.0.165'. [ 112.809475][ T6585] lo speed is unknown, defaulting to 1000 [ 113.020026][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.167'. [ 113.206901][ T6629] netlink: 168 bytes leftover after parsing attributes in process `syz.1.170'. [ 113.845069][ T6659] dvmrp8: entered allmulticast mode [ 113.897526][ T6659] dvmrp8: left allmulticast mode [ 113.903024][ T6666] netlink: 168 bytes leftover after parsing attributes in process `syz.0.178'. [ 114.045927][ T6670] syzkaller1: entered promiscuous mode [ 114.069763][ T6670] syzkaller1: entered allmulticast mode [ 114.120185][ T6670] syzkaller1: left promiscuous mode [ 114.138987][ T6670] syzkaller1: left allmulticast mode [ 114.192262][ T5861] block nbd0: shutting down sockets [ 114.221458][ T5861] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.260283][ T5861] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.321210][ T5861] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.369634][ T5861] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.382146][ T5861] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.406437][ T5861] Buffer I/O error on dev nbd0, logical block 2, async page read [ 114.415883][ T5861] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.437280][ T5861] Buffer I/O error on dev nbd0, logical block 3, async page read [ 114.445337][ T5861] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.471589][ T5861] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.497656][ T5861] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.536004][ T5861] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.553521][ T5861] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.607241][ T5861] Buffer I/O error on dev nbd0, logical block 2, async page read [ 114.631485][ T5861] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.644684][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.677110][ T5861] Buffer I/O error on dev nbd0, logical block 3, async page read [ 114.698039][ T5861] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.767308][ T5861] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.803177][ T5861] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.832280][ T5861] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.888767][ T5861] ldm_validate_partition_table(): Disk read failed. [ 114.939415][ T5861] Dev nbd0: unable to read RDB block 0 [ 114.959657][ T5861] nbd0: unable to read partition table [ 114.981304][ T5234] udevd[5234]: worker [5861] terminated by signal 33 (Unknown signal 33) [ 114.990717][ T5234] udevd[5234]: worker [5861] failed while handling '/devices/virtual/block/nbd0' [ 115.187637][ T6723] veth2: entered allmulticast mode [ 115.484715][ T6729] dvmrp8: entered allmulticast mode [ 115.540545][ T6729] dvmrp8: left allmulticast mode [ 115.839893][ T6740] __nla_validate_parse: 5 callbacks suppressed [ 115.839913][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 115.882910][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 115.980679][ T6739] lo speed is unknown, defaulting to 1000 [ 116.123514][ T6754] netlink: 'syz.3.203': attribute type 4 has an invalid length. [ 116.176492][ T6716] ip6tnl1: entered promiscuous mode [ 116.963181][ T6781] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 117.040784][ T6782] lo speed is unknown, defaulting to 1000 [ 117.169388][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 117.310417][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.212'. [ 117.398398][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 117.417226][ T6790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.212'. [ 117.648099][ T6798] delete_channel: no stack [ 118.206719][ T6814] lo speed is unknown, defaulting to 1000 [ 119.072952][ T6832] lo speed is unknown, defaulting to 1000 [ 119.256140][ T6838] pim6reg1: entered promiscuous mode [ 119.262422][ T6831] syz.4.223 (6831) used greatest stack depth: 17576 bytes left [ 119.275389][ T6838] pim6reg1: entered allmulticast mode [ 119.305529][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 119.335326][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 120.508626][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 120.541739][ T6868] lo speed is unknown, defaulting to 1000 [ 120.838743][ T6871] team0 (unregistering): Failed to send options change via netlink (err -105) [ 120.848651][ T6871] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 120.862648][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 120.873045][ T6871] team0 (unregistering): Failed to send options change via netlink (err -105) [ 120.883433][ T6871] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 120.896894][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 120.994718][ T6876] dvmrp8: entered allmulticast mode [ 121.006077][ T6876] dvmrp8: left allmulticast mode [ 121.063879][ T6878] netlink: 168 bytes leftover after parsing attributes in process `syz.3.237'. [ 121.380046][ T6885] netlink: 'syz.2.239': attribute type 3 has an invalid length. [ 121.394322][ T6892] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 121.440630][ T6886] netlink: 'syz.4.240': attribute type 3 has an invalid length. [ 122.493411][ T6924] lo speed is unknown, defaulting to 1000 [ 122.857289][ T6930] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.251'. [ 122.901660][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 122.912472][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 122.930523][ T6941] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 122.965666][ T6941] netlink: 10 bytes leftover after parsing attributes in process `syz.3.253'. [ 123.012743][ T6941] nbd: socks must be embedded in a SOCK_ITEM attr [ 123.022222][ T6941] block nbd1: shutting down sockets [ 123.065242][ T6936] syzkaller1: entered promiscuous mode [ 123.071054][ T6936] syzkaller1: entered allmulticast mode [ 123.193000][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 123.199688][ T6952] netlink: 'syz.1.254': attribute type 12 has an invalid length. [ 123.252295][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 123.277920][ T6954] netlink: 'syz.0.257': attribute type 2 has an invalid length. [ 123.285622][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 123.338216][ T6959] netlink: 'syz.3.259': attribute type 21 has an invalid length. [ 123.361075][ T6960] !: renamed from dummy0 (while UP) [ 123.491147][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.531233][ T6968] dvmrp8: entered allmulticast mode [ 123.569915][ T6968] dvmrp8: left allmulticast mode [ 123.626216][ T6974] netlink: 168 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.884604][ T6983] tipc: Started in network mode [ 123.890046][ T6983] tipc: Node identity 42b62f3cd9ba, cluster identity 4711 [ 123.897613][ T6983] tipc: Enabled bearer , priority 0 [ 123.954685][ T6983] syzkaller0: entered promiscuous mode [ 123.963848][ T6983] syzkaller0: entered allmulticast mode [ 123.980541][ T6983] tipc: Resetting bearer [ 124.001317][ T6982] tipc: Resetting bearer [ 124.999194][ T5871] tipc: Node number set to 2601267004 [ 125.513817][ T6982] tipc: Disabling bearer [ 125.565978][ T7004] lo speed is unknown, defaulting to 1000 [ 125.766296][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 125.785033][ T7019] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 125.820182][ T7014] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 126.106651][ T7026] dvmrp8: entered allmulticast mode [ 126.137462][ T7026] dvmrp8: left allmulticast mode [ 126.165325][ T7031] netlink: 436 bytes leftover after parsing attributes in process `syz.4.280'. [ 126.182365][ T7030] netlink: 168 bytes leftover after parsing attributes in process `syz.0.278'. [ 126.218562][ T7031] tipc: Enabled bearer , priority 0 [ 126.226905][ T7031] syzkaller0: entered promiscuous mode [ 126.249760][ T7031] syzkaller0: entered allmulticast mode [ 126.280511][ T7033] lo speed is unknown, defaulting to 1000 [ 126.289493][ T7031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.368752][ T7031] tipc: Resetting bearer [ 126.388196][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 126.389723][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.430834][ T7029] tipc: Resetting bearer [ 126.482629][ T7044] netlink: 'syz.3.285': attribute type 7 has an invalid length. [ 126.491466][ T7029] tipc: Disabling bearer [ 127.163974][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.4.289'. [ 127.182939][ T7063] lo speed is unknown, defaulting to 1000 [ 127.195833][ T7064] lo speed is unknown, defaulting to 1000 [ 127.314328][ T7071] nbd: must specify at least one socket [ 127.608112][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 127.891717][ T7089] netlink: 'syz.0.297': attribute type 2 has an invalid length. [ 127.989626][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.297'. [ 128.263530][ T7074] lo speed is unknown, defaulting to 1000 [ 128.983639][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 128.993115][ T7128] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 129.012478][ T7128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.308'. [ 129.036612][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 129.095441][ T7127] tipc: Started in network mode [ 129.107177][ T7127] tipc: Node identity aa325bfafb5, cluster identity 4711 [ 129.114431][ T7127] tipc: Enabled bearer , priority 0 [ 129.130923][ T7133] netlink: 'syz.0.309': attribute type 30 has an invalid length. [ 129.178221][ T7129] syzkaller0: entered promiscuous mode [ 129.186764][ T7129] syzkaller0: entered allmulticast mode [ 129.224361][ T7130] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 129.258943][ T7129] tipc: Resetting bearer [ 129.286362][ T7124] tipc: Resetting bearer [ 129.362433][ T7124] tipc: Disabling bearer [ 129.623212][ T7155] sctp: [Deprecated]: syz.4.315 (pid 7155) Use of int in maxseg socket option. [ 129.623212][ T7155] Use struct sctp_assoc_value instead [ 130.345468][ T7188] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 130.455430][ T7188] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.738140][ T7208] dvmrp8: entered allmulticast mode [ 130.852858][ T51] block nbd1: Receive control failed (result -32) [ 131.191255][ T7222] __nla_validate_parse: 4 callbacks suppressed [ 131.191275][ T7222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.333'. [ 131.220855][ T7231] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 131.265056][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.330102][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.342093][ T7231] bond1: (slave batadv1): making interface the new active one [ 131.353711][ T7231] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 131.391399][ T7228] lo speed is unknown, defaulting to 1000 [ 131.440410][ T7234] netlink: 128 bytes leftover after parsing attributes in process `syz.1.338'. [ 131.449718][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'. [ 131.555885][ T7242] dvmrp8: entered allmulticast mode [ 131.572933][ T7242] netlink: 168 bytes leftover after parsing attributes in process `syz.3.339'. [ 131.679622][ T7249] netlink: 'syz.4.341': attribute type 39 has an invalid length. [ 131.823210][ T7248] tipc: Enabled bearer , priority 0 [ 131.839481][ T7248] syzkaller0: entered promiscuous mode [ 131.852299][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 131.858571][ T7248] syzkaller0: entered allmulticast mode [ 132.040011][ T7248] tipc: Resetting bearer [ 132.090032][ T7247] tipc: Resetting bearer [ 132.119357][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.346'. [ 132.148760][ T7247] tipc: Disabling bearer [ 132.245441][ T7265] lo speed is unknown, defaulting to 1000 [ 132.314626][ T7275] netlink: 176 bytes leftover after parsing attributes in process `syz.3.350'. [ 132.574614][ T7283] lo speed is unknown, defaulting to 1000 [ 132.584062][ T7289] netlink: 168 bytes leftover after parsing attributes in process `syz.4.354'. [ 132.752397][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159381][ T7319] netlink: 'syz.1.362': attribute type 39 has an invalid length. [ 133.230628][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 133.350890][ T7330] bridge0: entered promiscuous mode [ 133.356863][ T7330] macsec1: entered promiscuous mode [ 133.365157][ T7330] bridge0: port 3(macsec1) entered blocking state [ 133.372353][ T7330] bridge0: port 3(macsec1) entered disabled state [ 133.379534][ T7330] macsec1: entered allmulticast mode [ 133.385612][ T7330] bridge0: entered allmulticast mode [ 133.385780][ T7338] netlink: 168 bytes leftover after parsing attributes in process `syz.0.368'. [ 133.424868][ T7330] macsec1: left allmulticast mode [ 133.431393][ T7330] bridge0: left allmulticast mode [ 133.438618][ T7330] bridge0: left promiscuous mode [ 133.483818][ T7333] lo speed is unknown, defaulting to 1000 [ 134.146358][ T7362] syzkaller1: entered promiscuous mode [ 134.180388][ T7362] syzkaller1: entered allmulticast mode [ 134.663953][ T7400] team0: Port device dummy0 removed [ 134.700472][ T7400] bridge_slave_0: left allmulticast mode [ 134.706185][ T7400] bridge_slave_0: left promiscuous mode [ 134.728352][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.743098][ T7400] bridge_slave_1: left allmulticast mode [ 134.749237][ T7400] bridge_slave_1: left promiscuous mode [ 134.755309][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.773247][ T7400] team0: Port device team_slave_0 removed [ 134.785296][ T7400] team0: Port device team_slave_1 removed [ 134.792220][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.800101][ T7400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.810982][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.819365][ T7400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.829928][ T7400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.847002][ T7404] team0: No ports can be present during mode change [ 135.014967][ T7417] pimreg: entered allmulticast mode [ 135.037332][ T7417] pimreg: left allmulticast mode [ 135.070854][ T7411] lo speed is unknown, defaulting to 1000 [ 135.085650][ T7421] openvswitch: netlink: IP tunnel dst address not specified [ 135.326547][ T7423] netlink: 'syz.1.387': attribute type 4 has an invalid length. [ 135.554370][ T7437] dvmrp8: entered allmulticast mode [ 135.579856][ T7437] dvmrp8: left allmulticast mode [ 135.838072][ T7451] IPv6: sit1: Disabled Multicast RS [ 135.844435][ T7451] sit1: entered allmulticast mode [ 135.915450][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.243516][ T7473] __nla_validate_parse: 10 callbacks suppressed [ 136.243536][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'. [ 136.640504][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 136.792413][ T7505] pimreg3: entered allmulticast mode [ 136.921109][ T7515] netlink: 'syz.4.413': attribute type 1 has an invalid length. [ 137.003649][ T7518] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.015645][ T7518] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 137.155010][ T7515] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 137.198089][ T7524] tipc: Started in network mode [ 137.203044][ T7524] tipc: Node identity 06118231599b, cluster identity 4711 [ 137.231047][ T7524] tipc: Enabled bearer , priority 0 [ 137.413214][ T7530] syzkaller0: entered promiscuous mode [ 137.420815][ T7530] syzkaller0: entered allmulticast mode [ 137.432784][ T7530] tipc: Resetting bearer [ 137.552903][ T7522] tipc: Resetting bearer [ 137.597726][ T7542] netlink: 44 bytes leftover after parsing attributes in process `syz.3.419'. [ 138.137875][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 138.269989][ T9] tipc: Node number set to 1602912817 [ 138.928970][ T7522] tipc: Disabling bearer [ 139.191926][ T7558] dvmrp8: entered allmulticast mode [ 139.234254][ T7558] dvmrp8: left allmulticast mode [ 139.320804][ T7558] netlink: 168 bytes leftover after parsing attributes in process `syz.2.425'. [ 139.388055][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 139.496037][ T7577] netlink: 168 bytes leftover after parsing attributes in process `syz.3.433'. [ 139.586937][ T7584] netlink: 'syz.0.434': attribute type 11 has an invalid length. [ 139.663674][ T7586] netlink: 'syz.2.432': attribute type 13 has an invalid length. [ 139.681311][ T7586] netlink: 'syz.2.432': attribute type 17 has an invalid length. [ 139.848848][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.856669][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.192478][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.212066][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.338272][ T7575] batman_adv: batadv0: Interface deactivated: gretap1 [ 140.353085][ T7575] ip6tnl1: left promiscuous mode [ 140.359453][ T7579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.404654][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.473930][ T7586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.490084][ T7580] xfrm0: entered promiscuous mode [ 140.495249][ T7580] xfrm0: entered allmulticast mode [ 140.530112][ T4358] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.542721][ T4358] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.666785][ T4358] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.714090][ T4358] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.747968][ T7595] lo speed is unknown, defaulting to 1000 [ 140.908107][ T7630] lo speed is unknown, defaulting to 1000 [ 141.011798][ T7639] dvmrp8: entered allmulticast mode [ 141.043949][ T7639] dvmrp8: left allmulticast mode [ 141.098295][ T7649] netlink: 168 bytes leftover after parsing attributes in process `syz.4.445'. [ 141.309360][ T7658] netlink: 'syz.1.449': attribute type 12 has an invalid length. [ 141.756435][ T7669] netlink: 'syz.3.454': attribute type 13 has an invalid length. [ 141.973374][ T7674] lo speed is unknown, defaulting to 1000 [ 142.004238][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 142.025133][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 142.038696][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 142.057242][ T7683] netlink: 'syz.3.458': attribute type 18 has an invalid length. [ 142.065403][ T7683] netlink: 'syz.3.458': attribute type 20 has an invalid length. [ 142.409003][ T7704] netlink: 'syz.3.462': attribute type 28 has an invalid length. [ 142.748759][ T7722] netlink: 220 bytes leftover after parsing attributes in process `syz.3.465'. [ 142.840016][ T7722] lo speed is unknown, defaulting to 1000 [ 142.892859][ T7724] netlink: 168 bytes leftover after parsing attributes in process `syz.0.467'. [ 143.382741][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 143.817234][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 143.850829][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 143.873661][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 143.911427][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 143.945987][ T7762] sctp: [Deprecated]: syz.4.475 (pid 7762) Use of int in maxseg socket option. [ 143.945987][ T7762] Use struct sctp_assoc_value instead [ 144.251356][ T7773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.463259][ T7773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.470018][ T7787] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 144.636289][ T7773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.770746][ T7773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.894371][ T7805] lo speed is unknown, defaulting to 1000 [ 145.128625][ T1008] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.288772][ T1008] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.345824][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.423880][ T7808] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 145.432914][ T7808] netlink: 'syz.3.488': attribute type 6 has an invalid length. [ 145.455363][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.482579][ T7826] dvmrp8: entered allmulticast mode [ 145.492069][ T7826] dvmrp8: left allmulticast mode [ 145.923132][ T5947] IPVS: starting estimator thread 0... [ 146.031433][ T7842] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.418726][ T7865] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 146.503734][ T7875] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 146.612981][ T7865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.702918][ T7866] bond3: (slave geneve2): making interface the new active one [ 146.712496][ T7866] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 146.745455][ T7879] bond3: entered promiscuous mode [ 146.758617][ T7879] geneve2: entered promiscuous mode [ 146.794904][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.837179][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.846771][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.867309][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.370160][ T7919] FAULT_INJECTION: forcing a failure. [ 147.370160][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 147.407320][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 147.407350][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.407363][ T7919] Call Trace: [ 147.407371][ T7919] [ 147.407380][ T7919] dump_stack_lvl+0x189/0x250 [ 147.407408][ T7919] ? __pfx____ratelimit+0x10/0x10 [ 147.407439][ T7919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.407461][ T7919] ? __pfx__printk+0x10/0x10 [ 147.407493][ T7919] ? __pfx___might_resched+0x10/0x10 [ 147.407522][ T7919] ? fs_reclaim_acquire+0x7d/0x100 [ 147.407557][ T7919] should_fail_ex+0x414/0x560 [ 147.407591][ T7919] should_failslab+0xa8/0x100 [ 147.407621][ T7919] kmem_cache_alloc_noprof+0x73/0x3c0 [ 147.407646][ T7919] ? skb_clone+0x212/0x3a0 [ 147.407677][ T7919] skb_clone+0x212/0x3a0 [ 147.407701][ T7919] ? nfnetlink_rcv+0x486/0x2520 [ 147.407736][ T7919] nfnetlink_rcv+0x4b4/0x2520 [ 147.407771][ T7919] ? __dev_queue_xmit+0x1d79/0x3b50 [ 147.407811][ T7919] ? __dev_queue_xmit+0x27b/0x3b50 [ 147.407852][ T7919] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.407901][ T7919] ? ref_tracker_free+0x63a/0x7d0 [ 147.407931][ T7919] ? __asan_memcpy+0x40/0x70 [ 147.407952][ T7919] ? __pfx_ref_tracker_free+0x10/0x10 [ 147.408009][ T7919] ? skb_clone+0x246/0x3a0 [ 147.408040][ T7919] ? __netlink_deliver_tap+0x807/0x850 [ 147.408062][ T7919] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.408104][ T7919] netlink_unicast+0x82f/0x9e0 [ 147.408133][ T7919] ? __pfx_netlink_unicast+0x10/0x10 [ 147.408155][ T7919] ? netlink_sendmsg+0x642/0xb30 [ 147.408175][ T7919] ? skb_put+0x11b/0x210 [ 147.408202][ T7919] netlink_sendmsg+0x805/0xb30 [ 147.408241][ T7919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.408267][ T7919] ? aa_sock_msg_perm+0xf1/0x1d0 [ 147.408302][ T7919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.408321][ T7919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.408346][ T7919] __sock_sendmsg+0x21c/0x270 [ 147.408381][ T7919] ____sys_sendmsg+0x505/0x830 [ 147.408414][ T7919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.408451][ T7919] ? import_iovec+0x74/0xa0 [ 147.408479][ T7919] ___sys_sendmsg+0x21f/0x2a0 [ 147.408507][ T7919] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.408573][ T7919] ? __fget_files+0x2a/0x420 [ 147.408619][ T7919] ? __fget_files+0x3a0/0x420 [ 147.408660][ T7919] __x64_sys_sendmsg+0x19b/0x260 [ 147.408689][ T7919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.408820][ T7919] ? __pfx_ksys_write+0x10/0x10 [ 147.408854][ T7919] ? rcu_is_watching+0x15/0xb0 [ 147.408877][ T7919] ? do_syscall_64+0xbe/0x3b0 [ 147.408901][ T7919] do_syscall_64+0xfa/0x3b0 [ 147.408919][ T7919] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.408950][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.408970][ T7919] ? clear_bhb_loop+0x60/0xb0 [ 147.409003][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.409021][ T7919] RIP: 0033:0x7f687ff8eec9 [ 147.409039][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.409055][ T7919] RSP: 002b:00007f6880d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.409075][ T7919] RAX: ffffffffffffffda RBX: 00007f68801e5fa0 RCX: 00007f687ff8eec9 [ 147.409089][ T7919] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 147.409101][ T7919] RBP: 00007f6880d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 147.409118][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.409130][ T7919] R13: 00007f68801e6038 R14: 00007f68801e5fa0 R15: 00007fff708f6a88 [ 147.409162][ T7919] [ 147.437248][ T7923] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 147.559963][ T7928] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 147.821908][ T7928] __nla_validate_parse: 12 callbacks suppressed [ 147.822350][ T7928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.526'. [ 147.940717][ T7937] dvmrp8: entered allmulticast mode [ 147.958774][ T7937] dvmrp8: left allmulticast mode [ 148.043665][ T7937] netlink: 168 bytes leftover after parsing attributes in process `syz.1.530'. [ 148.058911][ T7939] lo speed is unknown, defaulting to 1000 [ 148.456699][ T7930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.476246][ T7930] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 148.687200][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 148.755926][ T7964] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 148.765187][ T7966] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 148.918208][ T7930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.957324][ T7930] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 149.006661][ T7964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.076223][ T7930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.097278][ T7930] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 149.211537][ T7930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.231731][ T7930] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 149.286804][ T7930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.317168][ T7930] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 149.928402][ T7991] dvmrp8: entered allmulticast mode [ 149.950009][ T7991] dvmrp8: left allmulticast mode [ 150.011249][ T7992] netlink: 168 bytes leftover after parsing attributes in process `syz.2.543'. [ 150.182994][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 150.403254][ T8007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.548'. [ 151.029764][ T8028] netlink: 172 bytes leftover after parsing attributes in process `syz.1.553'. [ 151.052100][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 151.085865][ T8027] tipc: Enabled bearer , priority 0 [ 151.144012][ T8027] syzkaller0: entered promiscuous mode [ 151.150173][ T8027] syzkaller0: entered allmulticast mode [ 151.156516][ T8027] tipc: Resetting bearer [ 151.175759][ T8028] lo speed is unknown, defaulting to 1000 [ 151.315320][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 151.473970][ T8025] tipc: Resetting bearer [ 151.868434][ T8045] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 151.923497][ T8048] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 151.999016][ T8050] netlink: 104 bytes leftover after parsing attributes in process `syz.1.560'. [ 152.934261][ T8025] tipc: Disabling bearer [ 153.048962][ T8047] lo speed is unknown, defaulting to 1000 [ 153.305915][ T8058] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 153.347157][ T8058] bond2: (slave gretap2): making interface the new active one [ 153.358010][ T8058] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 153.427319][ T8060] vlan2: entered allmulticast mode [ 153.434338][ T8060] bond2: entered allmulticast mode [ 153.441634][ T8060] gretap2: entered allmulticast mode [ 153.450467][ T8060] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 160.907850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.191179][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.147888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.630631][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.187455][ T31] INFO: task kworker/1:5:5947 blocked for more than 143 seconds. [ 306.195306][ T31] Not tainted syzkaller #0 [ 306.200287][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.209023][ T31] task:kworker/1:5 state:D stack:23336 pid:5947 tgid:5947 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 306.222123][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 306.228883][ T31] Call Trace: [ 306.232195][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 306.235127][ T31] __schedule+0x1798/0x4cc0 [ 306.239909][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.245322][ T31] ? __pfx___schedule+0x10/0x10 [ 306.250254][ T31] ? schedule+0x91/0x360 [ 306.254522][ T31] schedule+0x165/0x360 [ 306.258781][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.264269][ T31] __mutex_lock+0x7e6/0x1350 [ 306.268922][ T31] ? __mutex_lock+0x5bb/0x1350 [ 306.273716][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 306.280071][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.285134][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 306.291256][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 306.297299][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 306.303410][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 306.309476][ T31] process_scheduled_works+0xae1/0x17b0 [ 306.315101][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.321548][ T31] worker_thread+0x8a0/0xda0 [ 306.326175][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.332916][ T31] ? __kthread_parkme+0x7b/0x200 [ 306.338133][ T31] kthread+0x70e/0x8a0 [ 306.342228][ T31] ? __pfx_worker_thread+0x10/0x10 [ 306.356058][ T31] ? __pfx_kthread+0x10/0x10 [ 306.360927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.366189][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.372436][ T31] ? __pfx_kthread+0x10/0x10 [ 306.387028][ T31] ret_from_fork+0x439/0x7d0 [ 306.391660][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 306.396821][ T31] ? __switch_to_asm+0x39/0x70 [ 306.411596][ T31] ? __switch_to_asm+0x33/0x70 [ 306.416584][ T31] ? __pfx_kthread+0x10/0x10 [ 306.421723][ T31] ret_from_fork_asm+0x1a/0x30 [ 306.426544][ T31] [ 306.430035][ T31] INFO: task syz.0.525:7921 blocked for more than 143 seconds. [ 306.438501][ T31] Not tainted syzkaller #0 [ 306.443466][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.452372][ T31] task:syz.0.525 state:D stack:25096 pid:7921 tgid:7921 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 306.474837][ T31] Call Trace: [ 306.478415][ T31] [ 306.481370][ T31] __schedule+0x1798/0x4cc0 [ 306.485928][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.490959][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.496186][ T31] ? __pfx___schedule+0x10/0x10 [ 306.501147][ T31] ? schedule+0x91/0x360 [ 306.505426][ T31] schedule+0x165/0x360 [ 306.509665][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.515156][ T31] __mutex_lock+0x7e6/0x1350 [ 306.519843][ T31] ? __mutex_lock+0x5bb/0x1350 [ 306.524637][ T31] ? rfkill_unregister+0xc8/0x220 [ 306.529813][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.534864][ T31] ? __pfx_device_del+0x10/0x10 [ 306.539777][ T31] rfkill_unregister+0xc8/0x220 [ 306.544647][ T31] nfc_unregister_device+0x96/0x2a0 [ 306.549898][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 306.555642][ T31] virtual_ncidev_close+0x56/0x90 [ 306.560779][ T31] __fput+0x44c/0xa70 [ 306.564798][ T31] task_work_run+0x1d1/0x260 [ 306.569575][ T31] ? __pfx_task_work_run+0x10/0x10 [ 306.574721][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 306.580252][ T31] exit_to_user_mode_loop+0xec/0x110 [ 306.585560][ T31] do_syscall_64+0x2bd/0x3b0 [ 306.590217][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.595440][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.601614][ T31] ? clear_bhb_loop+0x60/0xb0 [ 306.606316][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.612305][ T31] RIP: 0033:0x7f5cb118eec9 [ 306.616740][ T31] RSP: 002b:00007ffc65173f78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 306.625198][ T31] RAX: 0000000000000000 RBX: 00007f5cb13e7da0 RCX: 00007f5cb118eec9 [ 306.633236][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 306.641249][ T31] RBP: 00007f5cb13e7da0 R08: 0000000000000094 R09: 000000086517426f [ 306.649320][ T31] R10: 00000000003ffd48 R11: 0000000000000246 R12: 00000000000242f0 [ 306.657378][ T31] R13: 00007f5cb13e6090 R14: ffffffffffffffff R15: 00007ffc65174090 [ 306.665382][ T31] [ 306.668720][ T31] INFO: task syz.3.527:7930 blocked for more than 143 seconds. [ 306.676285][ T31] Not tainted syzkaller #0 [ 306.683918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.692665][ T31] task:syz.3.527 state:D stack:26712 pid:7930 tgid:7929 ppid:5875 task_flags:0x400040 flags:0x00004006 [ 306.704651][ T31] Call Trace: [ 306.708039][ T31] [ 306.711037][ T31] __schedule+0x1798/0x4cc0 [ 306.715608][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.720513][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.725403][ T31] ? __pfx___schedule+0x10/0x10 [ 306.730405][ T31] ? schedule+0x91/0x360 [ 306.734695][ T31] schedule+0x165/0x360 [ 306.739114][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.744608][ T31] __mutex_lock+0x7e6/0x1350 [ 306.749927][ T31] ? __mutex_lock+0x5bb/0x1350 [ 306.754746][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 306.760093][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.765145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.770449][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 306.776368][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.782739][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 306.788999][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 306.794175][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 306.799974][ T31] rfkill_set_block+0x1d2/0x440 [ 306.804892][ T31] rfkill_fop_write+0x44b/0x570 [ 306.809908][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 306.815345][ T31] ? security_file_permission+0x60/0x290 [ 306.821178][ T31] ? rw_verify_area+0x255/0x4d0 [ 306.826058][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.831798][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 306.837300][ T31] vfs_write+0x27e/0xb30 [ 306.841621][ T31] ? __pfx_vfs_write+0x10/0x10 [ 306.846393][ T31] ? __fget_files+0x2a/0x420 [ 306.851186][ T31] ? __fget_files+0x2a/0x420 [ 306.855813][ T31] ? __fget_files+0x3a0/0x420 [ 306.860559][ T31] ? __fget_files+0x2a/0x420 [ 306.865211][ T31] ksys_write+0x145/0x250 [ 306.869711][ T31] ? __pfx_ksys_write+0x10/0x10 [ 306.874583][ T31] ? rcu_is_watching+0x15/0xb0 [ 306.879450][ T31] ? do_syscall_64+0xbe/0x3b0 [ 306.884147][ T31] do_syscall_64+0xfa/0x3b0 [ 306.888862][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.894174][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.901358][ T31] ? clear_bhb_loop+0x60/0xb0 [ 306.906082][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.912208][ T31] RIP: 0033:0x7f687ff8eec9 [ 306.916651][ T31] RSP: 002b:00007f6880d9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.925180][ T31] RAX: ffffffffffffffda RBX: 00007f68801e5fa0 RCX: 00007f687ff8eec9 [ 306.933325][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 306.941539][ T31] RBP: 00007f6880011f91 R08: 0000000000000000 R09: 0000000000000000 [ 306.949590][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.957609][ T31] R13: 00007f68801e6038 R14: 00007f68801e5fa0 R15: 00007fff708f6a88 [ 306.965609][ T31] [ 306.968747][ T31] INFO: task syz.1.560:8050 blocked for more than 144 seconds. [ 306.976314][ T31] Not tainted syzkaller #0 [ 306.984656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.993534][ T31] task:syz.1.560 state:D stack:23112 pid:8050 tgid:8049 ppid:5869 task_flags:0x400140 flags:0x00004006 [ 307.005590][ T31] Call Trace: [ 307.008994][ T31] [ 307.011948][ T31] __schedule+0x1798/0x4cc0 [ 307.016468][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.021410][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.026300][ T31] ? __pfx___schedule+0x10/0x10 [ 307.031246][ T31] ? schedule+0x91/0x360 [ 307.035521][ T31] schedule+0x165/0x360 [ 307.039756][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.045249][ T31] __mutex_lock+0x7e6/0x1350 [ 307.049978][ T31] ? rcu_is_watching+0x15/0xb0 [ 307.054775][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.059598][ T31] ? rfkill_register+0x37/0x8e0 [ 307.064481][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.069690][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 307.074669][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.079946][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 307.085306][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 307.091058][ T31] rfkill_register+0x37/0x8e0 [ 307.095764][ T31] wiphy_register+0x2231/0x2aa0 [ 307.100689][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 307.105908][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 307.111105][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 307.117236][ T31] ieee80211_register_hw+0x3442/0x40a0 [ 307.122798][ T31] ? ieee80211_register_hw+0x13f1/0x40a0 [ 307.128557][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 307.134398][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.140801][ T31] ? __hrtimer_setup+0x187/0x210 [ 307.145865][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 307.151888][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 307.157702][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 307.163007][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 307.169207][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 307.174990][ T31] ? __sock_sendmsg+0x21c/0x270 [ 307.179947][ T31] ? ____sys_sendmsg+0x505/0x830 [ 307.184932][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 307.190145][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 307.196003][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 307.201674][ T31] ? __nla_parse+0x40/0x60 [ 307.206121][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 307.212696][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 307.218312][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 307.224410][ T31] ? bpf_lsm_capable+0x9/0x20 [ 307.229296][ T31] ? security_capable+0x7e/0x2e0 [ 307.234367][ T31] genl_rcv_msg+0x60e/0x790 [ 307.239011][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.244069][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 307.249730][ T31] ? __asan_memcpy+0x40/0x70 [ 307.254340][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.259770][ T31] netlink_rcv_skb+0x208/0x470 [ 307.264554][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.269569][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.274644][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.280015][ T31] ? down_read+0x1ad/0x2e0 [ 307.284635][ T31] genl_rcv+0x28/0x40 [ 307.288746][ T31] netlink_unicast+0x82f/0x9e0 [ 307.293538][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 307.298883][ T31] ? netlink_sendmsg+0x642/0xb30 [ 307.303841][ T31] ? skb_put+0x11b/0x210 [ 307.308197][ T31] netlink_sendmsg+0x805/0xb30 [ 307.313007][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.318368][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.323353][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.328777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.334093][ T31] __sock_sendmsg+0x21c/0x270 [ 307.338841][ T31] ____sys_sendmsg+0x505/0x830 [ 307.343755][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.349142][ T31] ? import_iovec+0x74/0xa0 [ 307.353680][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 307.358499][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.363773][ T31] ? __fget_files+0x2a/0x420 [ 307.368483][ T31] ? __fget_files+0x3a0/0x420 [ 307.373204][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 307.378195][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.383696][ T31] ? rcu_is_watching+0x15/0xb0 [ 307.388545][ T31] ? do_syscall_64+0xbe/0x3b0 [ 307.393252][ T31] do_syscall_64+0xfa/0x3b0 [ 307.397849][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.403099][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.409273][ T31] ? clear_bhb_loop+0x60/0xb0 [ 307.413982][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.419959][ T31] RIP: 0033:0x7f3a3ef8eec9 [ 307.424399][ T31] RSP: 002b:00007f3a3fea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.433164][ T31] RAX: ffffffffffffffda RBX: 00007f3a3f1e5fa0 RCX: 00007f3a3ef8eec9 [ 307.441531][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 000000000000000b [ 307.449844][ T31] RBP: 00007f3a3f011f91 R08: 0000000000000000 R09: 0000000000000000 [ 307.458659][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.466821][ T31] R13: 00007f3a3f1e6038 R14: 00007f3a3f1e5fa0 R15: 00007fff579dc398 [ 307.474922][ T31] [ 307.477999][ T31] INFO: task syz.4.561:8055 blocked for more than 144 seconds. [ 307.485557][ T31] Not tainted syzkaller #0 [ 307.493502][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.502236][ T31] task:syz.4.561 state:D stack:25384 pid:8055 tgid:8054 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 307.514276][ T31] Call Trace: [ 307.517814][ T31] [ 307.520777][ T31] __schedule+0x1798/0x4cc0 [ 307.525297][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.530243][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.535124][ T31] ? __pfx___schedule+0x10/0x10 [ 307.540042][ T31] ? schedule+0x91/0x360 [ 307.544317][ T31] schedule+0x165/0x360 [ 307.548698][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.554191][ T31] __mutex_lock+0x7e6/0x1350 [ 307.558862][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.563682][ T31] ? genl_rcv_msg+0x10d/0x790 [ 307.568460][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.573523][ T31] ? stack_trace_save+0x9c/0xe0 [ 307.578451][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 307.583846][ T31] ? radix_tree_lookup+0x240/0x290 [ 307.589022][ T31] genl_rcv_msg+0x10d/0x790 [ 307.593554][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.598450][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.603516][ T31] netlink_rcv_skb+0x208/0x470 [ 307.608344][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.613222][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.618338][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.623663][ T31] ? down_read+0x1ad/0x2e0 [ 307.628345][ T31] genl_rcv+0x28/0x40 [ 307.632348][ T31] netlink_unicast+0x82f/0x9e0 [ 307.637163][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 307.642469][ T31] ? netlink_sendmsg+0x642/0xb30 [ 307.647455][ T31] ? skb_put+0x11b/0x210 [ 307.651739][ T31] netlink_sendmsg+0x805/0xb30 [ 307.656531][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.661878][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.666854][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.672200][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.677537][ T31] __sock_sendmsg+0x21c/0x270 [ 307.682226][ T31] __sys_sendto+0x3bd/0x520 [ 307.686733][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 307.691845][ T31] ? count_memcg_event_mm+0x21/0x260 [ 307.697227][ T31] ? exc_page_fault+0x76/0xf0 [ 307.701953][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 307.707354][ T31] __x64_sys_sendto+0xde/0x100 [ 307.712156][ T31] do_syscall_64+0xfa/0x3b0 [ 307.716683][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.721985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.728131][ T31] ? clear_bhb_loop+0x60/0xb0 [ 307.732822][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.738963][ T31] RIP: 0033:0x7f7c96390d5c [ 307.743423][ T31] RSP: 002b:00007f7c971a5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 307.751979][ T31] RAX: ffffffffffffffda RBX: 00007f7c971a5fc0 RCX: 00007f7c96390d5c [ 307.759999][ T31] RDX: 0000000000000024 RSI: 00007f7c971a6010 RDI: 0000000000000005 [ 307.768015][ T31] RBP: 0000000000000000 R08: 00007f7c971a5f14 R09: 000000000000000c [ 307.776017][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 307.784035][ T31] R13: 00007f7c971a5f68 R14: 00007f7c971a6010 R15: 0000000000000000 [ 307.792217][ T31] [ 307.795255][ T31] INFO: task syz.2.562:8058 blocked for more than 144 seconds. [ 307.802904][ T31] Not tainted syzkaller #0 [ 307.807881][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.816558][ T31] task:syz.2.562 state:D stack:20952 pid:8058 tgid:8057 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 307.828607][ T31] Call Trace: [ 307.831940][ T31] [ 307.834906][ T31] __schedule+0x1798/0x4cc0 [ 307.839501][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.844371][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.849470][ T31] ? __pfx___schedule+0x10/0x10 [ 307.854376][ T31] ? schedule+0x91/0x360 [ 307.858683][ T31] schedule+0x165/0x360 [ 307.862874][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.868464][ T31] __mutex_lock+0x7e6/0x1350 [ 307.873084][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.877908][ T31] ? genl_rcv_msg+0x10d/0x790 [ 307.882629][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.887705][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 307.892867][ T31] ? radix_tree_lookup+0x240/0x290 [ 307.898047][ T31] genl_rcv_msg+0x10d/0x790 [ 307.902587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.907675][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 307.912734][ T31] ? __asan_memcpy+0x40/0x70 [ 307.917394][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.922802][ T31] netlink_rcv_skb+0x208/0x470 [ 307.927650][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.932541][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.937657][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.943001][ T31] ? down_read+0x1ad/0x2e0 [ 307.947537][ T31] genl_rcv+0x28/0x40 [ 307.951564][ T31] netlink_unicast+0x82f/0x9e0 [ 307.956351][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 307.961892][ T31] ? netlink_sendmsg+0x642/0xb30 [ 307.966858][ T31] ? skb_put+0x11b/0x210 [ 307.971185][ T31] netlink_sendmsg+0x805/0xb30 [ 307.975980][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.981333][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.986304][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.991636][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.996992][ T31] __sock_sendmsg+0x21c/0x270 [ 308.001705][ T31] __sys_sendto+0x3bd/0x520 [ 308.006236][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 308.011338][ T31] ? count_memcg_event_mm+0x21/0x260 [ 308.016660][ T31] ? exc_page_fault+0x76/0xf0 [ 308.021425][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 308.026754][ T31] __x64_sys_sendto+0xde/0x100 [ 308.031851][ T31] do_syscall_64+0xfa/0x3b0 [ 308.036393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.041749][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.047950][ T31] ? clear_bhb_loop+0x60/0xb0 [ 308.052655][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.058695][ T31] RIP: 0033:0x7f032b790d5c [ 308.063154][ T31] RSP: 002b:00007f032c6dce60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 308.071717][ T31] RAX: ffffffffffffffda RBX: 00007f032c6dcfa0 RCX: 00007f032b790d5c [ 308.079807][ T31] RDX: 0000000000000020 RSI: 00007f032c6dcff0 RDI: 0000000000000008 [ 308.087892][ T31] RBP: 0000000000000000 R08: 00007f032c6dceb4 R09: 000000000000000c [ 308.095888][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 308.103974][ T31] R13: 00007f032c6dcf08 R14: 00007f032c6dcff0 R15: 0000000000000000 [ 308.112485][ T31] [ 308.115556][ T31] INFO: task syz-executor:8063 blocked for more than 145 seconds. [ 308.123457][ T31] Not tainted syzkaller #0 [ 308.128518][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.137267][ T31] task:syz-executor state:D stack:28040 pid:8063 tgid:8063 ppid:1 task_flags:0x400040 flags:0x00004000 [ 308.149301][ T31] Call Trace: [ 308.152582][ T31] [ 308.155530][ T31] __schedule+0x1798/0x4cc0 [ 308.160111][ T31] ? __lock_acquire+0xab9/0xd20 [ 308.164997][ T31] ? __lock_acquire+0xab9/0xd20 [ 308.169920][ T31] ? __pfx___schedule+0x10/0x10 [ 308.174813][ T31] ? schedule+0x91/0x360 [ 308.179133][ T31] schedule+0x165/0x360 [ 308.183350][ T31] schedule_preempt_disabled+0x13/0x30 [ 308.188901][ T31] __mutex_lock+0x7e6/0x1350 [ 308.193518][ T31] ? __mutex_lock+0x5bb/0x1350 [ 308.198374][ T31] ? rfkill_register+0x37/0x8e0 [ 308.203263][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 308.208373][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 308.213691][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 308.219179][ T31] ? device_initialize+0x24b/0x440 [ 308.224320][ T31] rfkill_register+0x37/0x8e0 [ 308.229060][ T31] hci_register_dev+0x3f5/0x890 [ 308.233926][ T31] vhci_create_device+0x39c/0x650 [ 308.239028][ T31] vhci_write+0x3ce/0x4a0 [ 308.243395][ T31] vfs_write+0x5c9/0xb30 [ 308.247757][ T31] ? __pfx_vhci_write+0x10/0x10 [ 308.252649][ T31] ? __pfx_vfs_write+0x10/0x10 [ 308.257491][ T31] ? count_memcg_event_mm+0x21/0x260 [ 308.262814][ T31] ksys_write+0x145/0x250 [ 308.267230][ T31] ? __pfx_ksys_write+0x10/0x10 [ 308.272116][ T31] ? do_syscall_64+0xbe/0x3b0 [ 308.276805][ T31] do_syscall_64+0xfa/0x3b0 [ 308.281406][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.286643][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.292787][ T31] ? clear_bhb_loop+0x60/0xb0 [ 308.297539][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.303448][ T31] RIP: 0033:0x7ff34e78d940 [ 308.307964][ T31] RSP: 002b:00007fffe1c7cb78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 308.316416][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff34e78d940 [ 308.324531][ T31] RDX: 0000000000000002 RSI: 00007fffe1c7cb8a RDI: 00000000000000ca [ 308.332623][ T31] RBP: 00007ff34e9e67b8 R08: 0000000000000000 R09: 00007ff34f51d6c0 [ 308.340700][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 308.348758][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 308.356779][ T31] [ 308.359932][ T31] [ 308.359932][ T31] Showing all locks held in the system: [ 308.367738][ T31] 1 lock held by khungtaskd/31: [ 308.372607][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 308.382604][ T31] 2 locks held by getty/5620: [ 308.387346][ T31] #0: ffff88814e6780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 308.397158][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 308.407354][ T31] 3 locks held by kworker/1:5/5947: [ 308.412547][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.423601][ T31] #1: ffffc9000458fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.437407][ T31] #2: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 308.448863][ T31] 2 locks held by syz.0.525/7921: [ 308.453905][ T31] #0: ffff88805915c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 308.463742][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 308.473940][ T31] 2 locks held by syz.3.527/7930: [ 308.479052][ T31] #0: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 308.489326][ T31] #1: ffff88805915c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 308.499107][ T31] 3 locks held by syz.1.560/8050: [ 308.504148][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.512518][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 308.521608][ T31] #2: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.531582][ T31] 2 locks held by syz.4.561/8055: [ 308.536622][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.544911][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 308.553954][ T31] 2 locks held by syz.2.562/8058: [ 308.559027][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.567303][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 308.576289][ T31] 2 locks held by syz-executor/8063: [ 308.581660][ T31] #0: ffff88807ed88918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.591874][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.601928][ T31] 2 locks held by syz-executor/8066: [ 308.607282][ T31] #0: ffff888030dc0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.617415][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.627442][ T31] 2 locks held by syz-executor/8068: [ 308.632750][ T31] #0: ffff8880290fe918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.642902][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.652911][ T31] 2 locks held by syz-executor/8072: [ 308.658268][ T31] #0: ffff88805988d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.668375][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.678360][ T31] 2 locks held by syz-executor/8073: [ 308.683655][ T31] #0: ffff8880577ed118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.693755][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.703789][ T31] 2 locks held by syz-executor/8076: [ 308.709112][ T31] #0: ffff88807c340918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.719227][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.729237][ T31] 2 locks held by syz-executor/8079: [ 308.734543][ T31] #0: ffff8880597c1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.744645][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.754880][ T31] 2 locks held by syz-executor/8081: [ 308.760269][ T31] #0: ffff88802c264118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.770522][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.780673][ T31] 2 locks held by syz-executor/8084: [ 308.785974][ T31] #0: ffff88806df4f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.796038][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.806039][ T31] 2 locks held by syz-executor/8086: [ 308.811669][ T31] #0: ffff88802ed5e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.821860][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.831997][ T31] 2 locks held by syz-executor/8089: [ 308.837317][ T31] #0: ffff888079538918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.847503][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.857508][ T31] 2 locks held by syz-executor/8092: [ 308.862822][ T31] #0: ffff88807e9ca118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.873204][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.883297][ T31] 2 locks held by syz-executor/8094: [ 308.888683][ T31] #0: ffff888064708118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.898883][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.909040][ T31] 2 locks held by syz-executor/8097: [ 308.914370][ T31] #0: ffff88807ac72118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 308.924567][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.934619][ T31] [ 308.937429][ T31] ============================================= [ 308.937429][ T31] [ 308.945864][ T31] NMI backtrace for cpu 0 [ 308.945877][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 308.945893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.945901][ T31] Call Trace: [ 308.945908][ T31] [ 308.945914][ T31] dump_stack_lvl+0x189/0x250 [ 308.945937][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.945953][ T31] ? __pfx__printk+0x10/0x10 [ 308.945982][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 308.946004][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 308.946025][ T31] ? __pfx__printk+0x10/0x10 [ 308.946048][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.946072][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 308.946094][ T31] watchdog+0xf93/0xfe0 [ 308.946117][ T31] ? watchdog+0x1de/0xfe0 [ 308.946141][ T31] kthread+0x70e/0x8a0 [ 308.946161][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.946179][ T31] ? __pfx_kthread+0x10/0x10 [ 308.946197][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.946218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.946239][ T31] ? __pfx_kthread+0x10/0x10 [ 308.946256][ T31] ret_from_fork+0x439/0x7d0 [ 308.946272][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.946290][ T31] ? __switch_to_asm+0x39/0x70 [ 308.946307][ T31] ? __switch_to_asm+0x33/0x70 [ 308.946323][ T31] ? __pfx_kthread+0x10/0x10 [ 308.946341][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.946371][ T31] [ 308.946376][ T31] Sending NMI from CPU 0 to CPUs 1: [ 309.091426][ C1] NMI backtrace for cpu 1 [ 309.091442][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 309.091461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.091471][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 309.091503][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 49 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 309.091517][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 309.091533][ C1] RAX: 3bf8d68651082500 RBX: ffffffff819683f8 RCX: 3bf8d68651082500 [ 309.091546][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b06ab RDI: ffffffff8be33f00 [ 309.091558][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 309.091570][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa2ee30 [ 309.091582][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 309.091593][ C1] FS: 0000000000000000(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 309.091607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.091618][ C1] CR2: 0000558eaf0b7000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 309.091633][ C1] Call Trace: [ 309.091639][ C1] [ 309.091646][ C1] default_idle+0x13/0x20 [ 309.091663][ C1] default_idle_call+0x74/0xb0 [ 309.091682][ C1] do_idle+0x1e8/0x510 [ 309.091708][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 309.091727][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.091765][ C1] ? __pfx_do_idle+0x10/0x10 [ 309.091795][ C1] ? do_idle+0x4ef/0x510 [ 309.091822][ C1] cpu_startup_entry+0x44/0x60 [ 309.091846][ C1] start_secondary+0x101/0x110 [ 309.091870][ C1] common_startup_64+0x13e/0x147 [ 309.091899][ C1] [ 309.092468][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 309.274087][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 309.283198][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.293254][ T31] Call Trace: [ 309.296535][ T31] [ 309.299471][ T31] dump_stack_lvl+0x99/0x250 [ 309.304077][ T31] ? __asan_memcpy+0x40/0x70 [ 309.308672][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.313878][ T31] ? __pfx__printk+0x10/0x10 [ 309.318492][ T31] vpanic+0x281/0x750 [ 309.322488][ T31] ? __pfx_vpanic+0x10/0x10 [ 309.327006][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 309.332558][ T31] ? preempt_schedule+0xae/0xc0 [ 309.337425][ T31] ? preempt_schedule_common+0x83/0xd0 [ 309.342898][ T31] panic+0xb9/0xc0 [ 309.346665][ T31] ? __pfx_panic+0x10/0x10 [ 309.351087][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 309.356474][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 309.362642][ T31] watchdog+0xfd2/0xfe0 [ 309.366807][ T31] ? watchdog+0x1de/0xfe0 [ 309.371149][ T31] kthread+0x70e/0x8a0 [ 309.375227][ T31] ? __pfx_watchdog+0x10/0x10 [ 309.379923][ T31] ? __pfx_kthread+0x10/0x10 [ 309.384534][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.389742][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.394955][ T31] ? __pfx_kthread+0x10/0x10 [ 309.399556][ T31] ret_from_fork+0x439/0x7d0 [ 309.404154][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 309.409278][ T31] ? __switch_to_asm+0x39/0x70 [ 309.414052][ T31] ? __switch_to_asm+0x33/0x70 [ 309.418823][ T31] ? __pfx_kthread+0x10/0x10 [ 309.423418][ T31] ret_from_fork_asm+0x1a/0x30 [ 309.428201][ T31] [ 309.431486][ T31] Kernel Offset: disabled [ 309.435813][ T31] Rebooting in 86400 seconds..