last executing test programs: 33.845298342s ago: executing program 2 (id=10321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'tunl0\x00', @remote}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 29.199749426s ago: executing program 1 (id=10337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a0000000000000000000000000000000000ff72bcd002000000000000000000000000000102"], 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) write$cgroup_int(r2, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, &(0x7f0000000440)) 28.914066557s ago: executing program 1 (id=10339): socket$kcm(0x1e, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0_to_bridge\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d99e00b7211e7600000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f00000000c0)='ethtool\x00', 0xa4000, &(0x7f0000000100)={@align=0x2, {0xb022, 0x6, 0x1, 0x100000000}}, 0x10, &(0x7f0000000140), &(0x7f0000000280)=0xfffffffc}, {[0x7, 0x1, 0x5]}, 0x3, 0x7e, &(0x7f00000002c0)=""/126}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000020603000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007800600040000ff0000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0xa00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 28.608628117s ago: executing program 3 (id=10340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf250100000005c0d0e193fd04db73f93dedab"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x86, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES16, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRESOCT], 0x58}}, 0xcc000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000fbffffff00000000d00000001811000033b11158fb8afbfa07687e800af999631de3d5453930130da79ebd259224c924784ad94242d2bae79cb67c6bb3f3eda3dcf175f75973441bf1c059493d8c5c44de9258c27afc60fdb87713c54b9e7cd123b9b399a4b512d7c401d0c9cae73300"/127, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7032000000000008500000083000000bf09000000000000550901000000000095cd13446825000000000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.526034163s ago: executing program 2 (id=10341): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000b00)="66b88c73b297848e54", 0x9}], 0x1) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcc6400000000000045020400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b50000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a79ada613e0c64497fcc059c5f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb469922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b378ab0d529ea4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1409], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 27.60417154s ago: executing program 1 (id=10343): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018010000", @ANYRES32, @ANYBLOB="00000000000000002c00000000000000180000000000000000000000000000009500000000000000a60a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) unshare(0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006b4189276dc3b280b92824cc831740abdc2154da663ed0e78cff1ac74cd322ff8af31995a004d53e90fe5f114fc46229f8f0c07755815532b2921141f123a7629f3f4881d10f02dbd57f960a170e7246bd2fc01ea0c080918e296befb51bb974f988014f7d6414c3474fac2e2bae15ed96cfe0df1fba50b1e5546f2f3a7", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 27.577786421s ago: executing program 4 (id=10344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44851}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x1040) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x0, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 27.548317645s ago: executing program 3 (id=10345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @dev}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_RT_PRIORITY={0x31}]}, 0x48}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x505a}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 25.873883081s ago: executing program 0 (id=10347): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{r0, &(0x7f00000000c0)='ip6erspan\x00', 0xd08c1, &(0x7f0000000100)={@align=0x8, {0x8001, 0x6, 0x7, 0x6}}, 0xa000000, &(0x7f0000000140), &(0x7f0000000180)=0xfffffffe}, 0x5, &(0x7f0000000740)=[{0x2, 0x26f2e9eb, &(0x7f00000001c0)='ip6erspan\x00', &(0x7f00000002c0)="82905f7fdbdb7f9cad771dba45d633f340f2af9a8f1f285fdc524034275aeb96606084cd17269efae2947903ee9f1a340ee3802e4fa67ecd209a7de0f2c56756c69c74fa525dabfab821951b90e09fef1430d686f99b0a93f43cb5fbe0560f435193afa5c96b6e6962cdef1410ec672cccd14c4cb739fad3b4b7ed182296b175f08e493a05a8310cbf2ce3e7c7caece51952a2dbd3c3d20b", 0x98, 0x12}, {0x3, 0x6, &(0x7f0000000380)='ip6erspan\x00', &(0x7f00000003c0)="d30ca0353ec1ba9d57f650d38736639d3bbe60464711878d7245f4d9b705d65d486a077b5b885c84348d6ca3e5a44be4f03a29dc45b41729531bdc26d3e5c67f", 0x40, 0x2}, {0x1, 0xe8, &(0x7f0000000400)='-+^\xaf', &(0x7f0000000440)="efdd2772a9ae4e2ac5afe86aa8bb9759f6f568be86e6b64ef14fefee892fa4bfc91635cf161b3a7a4348c3ac9a68d414556fc8a43bc74dc9b83a099d264ea6fbf2aeb25f867422c0628bbaceab950439803cb61bcaa740c77a45cc42c1ddba8aa7ec821fcd09e3e291e1a9d345238c60edd959a7dfdfb30705e5918882d1a90dd1a2e0b05914b00accbb0e7e2763fe358ffb7184f1e66f3eba757db76e6733908da5545b0e72a574c32f55ef85b53f794017466f41812f17dee480ced0c5dfbae18cd9dde5e85014fde606a5068748fdbd0d93b5cf238457f3b201a02bdc799e00448d97", 0xe4, 0x20}, {0x1, 0x40, &(0x7f0000000540)='ip6erspan\x00', &(0x7f0000000580)="97d21de9809008b980e231ea6fb7ac3cdfc18693fe050ef50c467d339930ee660362ea2ee363299f712d1d2fcd030eafc1abbe87b5d5bcc7fdd8ec1f1c028eb29c0df4e6f3d8f523add800272317a2cd6565b126586c25daee33a161fa16934b203fdefa02d3efefd0e19c3ae9e2cd", 0x6f, 0x12}, {0x1, 0x6, &(0x7f0000000600)='\x00', &(0x7f0000000640)="f4b6b476cda1323d5e02be0727a312b249fde6d3b63752b0bb9dc1f8c37a08b90d79e18f202aba52dea71c426dcb7f549abc5977a0a8c6ab9f4778e74207a84cf1ef30a690aa472960239d1163b59890cb9ffade7cb8b8ac2320e9efe88a3566a2b5f3bbf88236dc7189a31891a5db25b08c6c8461a412c5134995adcd52b3da5f81ce2260a0440b56811e60902f746abfbe56407a55763207c53c45bb216ba9f499582b6e6ec20d331b1b8c3e4ac08afd8438ac3a2ff681474247c1b3ba03b06868d7b40348f7f33d81a2fdb19122d3defdc009cf349cfd8b0f7c262820905115b716a54b104841", 0xe8}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x58, r4, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0x56}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000880)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c80000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="80200100420000002c0012800e00010069703665727370616e0000001800028008000100", @ANYRES32=0x0, @ANYBLOB="040012000600020006000000"], 0x4c}, 0x1, 0xba01}, 0x0) 24.549606157s ago: executing program 0 (id=10348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000fb00000000000000000000000000000990bec214cd256718deb655ec6f986900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 24.320762427s ago: executing program 4 (id=10349): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d0001000000080006000900000008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000808200001400128076657468000000000400028008000300000000000800200008000000"], 0x44}}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000104010100000000000000006000000a050001000100000008000440ffffffff0a0002000000000795"], 0x30}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000016c0)="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", 0x4ae}, {&(0x7f00000011c0)="16f0552ef6a84aebe40f9dcb437a8bc22f8c5fe9398b9f5d2b65218cf898f05e89ae02ab4f16de08671f04db60d8189bdefdc3189b8f1ecece7b1bc5d8fece2e7cc168fdffb56ac79f67a0da40e8a501fc0a", 0x52}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a80)="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", 0x147}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002d00)="ba", 0x1}], 0x1}}], 0x4, 0x24048844) sendto$inet(r5, 0x0, 0x0, 0x32000800, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 24.265026508s ago: executing program 1 (id=10350): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000ffff28bd7000fbdbdf2500000000845bf6d3a53cab3fe2147532518720b460012ad41ea2a8155f138352f7afe77851124d6f36a4f4aa42628c90573b91a8288a147e2e70b38945faec57454a73bef63fa047d7176be2e1ff25675604966cdc", @ANYRES32=0x0, @ANYBLOB="572000002120000014001280090001007663616e000000000400028014000300"/48], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001fa639fbd7a67d00f000000006c2975d0f19146280a50000000060a010400000000000000000a0000010973797a310000000024000480200001800b0001006f626a7265660000100002800900020273797a30000000000900020073797a3200000000140000001100010000000000000000000100000a07d59947698e7051ce227df71d434c25189448185647d78333bca2bc688a6d462a78c71e53b080f3f3e32ec84c75e4b68cc780cb48d659685aa53a58622fb31abed99cebbbe58a958ccda704f99b4e53f627d493570bbd89aee2457df5000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r8, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x6020400) 24.251724682s ago: executing program 3 (id=10351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x38}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c0004"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) (async) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c5", 0x8}], 0x1}, 0x8400) (async) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="fb", 0x1}, {&(0x7f0000003ac0)="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", 0x5ac}], 0x2}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socket$inet6(0x2d, 0x806, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f69620000000400028008000500", @ANYRESOCT], 0x3c}, 0x1, 0xba01}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd3ae", 0x40, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x800c, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xa, 0xf989, "3138eed99a13"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0xe, [0x1, 0x0, 0xfffffffb]}]}}}}}}}}, 0x0) 23.81629016s ago: executing program 0 (id=10352): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x6, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x2, 0x0, 0x0, 0x3}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000104024000000000009b0000ffff", @ANYRES32=0x0, @ANYBLOB="88d10500300101002000128009000100766c616e00000000100002800c0002000b0000000f00000014000300766c616e3000"/60], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) 23.27803522s ago: executing program 3 (id=10353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4110008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x64}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@generic={0x0, 0x7, 0x6}) (async) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/21, 0x15}], 0x7, 0x41d, 0x3) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e23, 0x24e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}}, [0x33d3, 0x1ff, 0x4, 0x24c8d11b, 0x400, 0x4, 0xfffffffffffff4cf, 0xa, 0x0, 0x3, 0x8, 0x10000, 0xffffffff, 0x8]}, &(0x7f00000008c0)=0x100) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={r4, 0x5, 0x401, 0x80, 0x2}, 0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000ac0)={0x1, 0x3}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b00)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000b40)=0x0) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b80)={r8, r9, 0xee00}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000cc0)={r6, &(0x7f0000000bc0)='wlan1\x00', 0x4642, &(0x7f0000000c00)={@align=0x7fffffff, {0x6, 0xfff9, 0xd2ca}}, 0x8, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x7}) write$tun(r10, &(0x7f0000000d00)={@val={0x0, 0x6005}, @val={0x1, 0x1, 0x6, 0x635, 0xa150, 0xffff}, @ipv4=@udp={{0x17, 0x4, 0x1, 0x4, 0x12d, 0x64, 0x0, 0xfd, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, {[@generic={0x44, 0x6, "030fe167"}, @ssrr={0x89, 0x17, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @remote, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xcc, 0x3, 0x8, [{@multicast2, 0x8}, {@loopback, 0x3ff}, {@private=0xa010100, 0x6}, {@broadcast, 0x4}]}]}}, {0x4e23, 0x4e23, 0xd1, 0x0, @opaque="726fced913a1ed1e83bbf357ea23204ede15c1bace773c9c4c4652403239f6ffde374eec4b9d275f7e5d6096040d7e08c9bef84bab753dfb2b57b36c4e6195662cf3d18eb631a06fcdcaf714933bddb640d5e9e11af40854e773bb05c6a3d331319d905d7cf60c7c17f96186cdfbdbc3633da600e9013f8f63015b9cb973871d3431526ffa2ff7528cd5a9aa774401bcadd90277b0223d3c413024c8d6e83c9b7e71f40d29032d3d5dd7d3fa9837e6369a3fc66b7273dfc02c43c1079afaf7468b3921b62396c8d7a2"}}}, 0x13b) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000f40)={r0, &(0x7f0000000e40)='\x00', 0x400a40, &(0x7f0000000e80)={@_ha_fsid={[0x56, 0xfffffff9]}, {0x0, 0x3, 0x0, 0x8001}}, 0x6, &(0x7f0000000ec0), &(0x7f0000000f00)=0xb5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001040)={r11, 0x0, 0x25, 0x12, @val=@uprobe_multi={&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), &(0x7f0000001000)=[0x1, 0x5, 0x3, 0x2, 0x1], 0x6, 0x0, 0x0, r8}}, 0x40) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001400)={&(0x7f00000010c0)={0x330, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2f4, 0x111, 0x0, 0x1, {0x2f0, 0x5, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7b2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x29}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x16c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff0000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x240}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xde}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}]}, 0x330}, 0x1, 0x0, 0x0, 0x8000}, 0xc047) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000001480)={r4, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0x4}}, 0x2000000, 0x1, 0x2, 0xf, 0xd}, &(0x7f0000001540)=0x98) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x68, r13, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x401, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x4) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000001700)="879389be3283406a7c159a1822cca43b5c3358d82f2137fc7dedfea4cd6ba8ff54988602cabc8b19a309c8dfb69f4f6b94cbd86da5e6a0fa76f0a4f99fc118dacd5f81322cb01dbb61362764adde5ba0a8f91f7cd69f190da79da658a3f2735ecece4240d2a8ea77", 0x68) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r11) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1200004}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r14, 0x202, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 23.257462704s ago: executing program 4 (id=10354): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x8000000000000002, 0x9}) ppoll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x6478}, {r0, 0x1}], 0x3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 23.104591124s ago: executing program 0 (id=10355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x0, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000201030000000000000000000a0000040c00d24dd48d9fc297e1872819800800020001000000300002802c00018014000300ff01000000000000000000000000000114080400fe8800000000"], 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) 22.892799786s ago: executing program 2 (id=10356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) 22.589467s ago: executing program 3 (id=10357): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendfile(r2, r1, &(0x7f00000000c0)=0x4, 0x6) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000020000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c000380050001002d000000080001400000000008000240000000000c00048005000100160000000900010073797a30000000000900020073797a32"], 0x94}}, 0x40000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x0, 0x1}, 0x8) 22.392044027s ago: executing program 4 (id=10358): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) socket(0x6, 0x3, 0xff) (async) r3 = socket(0x6, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x798fc554, 0x0, 0x2, 0x8, 0x2, 0x7}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtclass={0x2c, 0x28, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0x3, 0x2}, {0x10, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x12, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x20004859) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6c", 0x2d}], 0x2}], 0x1, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6c", 0x2d}], 0x2}], 0x1, 0x40800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) (async) close(r4) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet6(r3, &(0x7f0000005c00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)="418f98b3b3e3245e3b981febe64e5e5be35d4e0a14b4a8ced88f355d62bc001c4a0b478862a673a3aa617baef9da4967a4ad", 0x32}, {&(0x7f0000000340)="93fe39b88d4a171a2e613dbc25cb3452f0222c8be4958b4e8e3fe0d0ca2f82d0a4f8857573b5e4258a1466e407681c69148e48fb8eb0d87566f0b2e32df71d804253c92d0102ac3ac393d9bf87bb896cf3b4167a474e2ef41f33eb59342cddf1f0966376587ba4f1f8140f9f48af7034f34742f69a29d6b3815abf154b7ac73fd8a84dc170c2fc1477b04d6a99eeccfec1a6b7b7b16625febf5502f59d288e5fd1732fb2d89adf765e58dd4e97d733e26af541e7bbc954aaa40d2bdc850226616607a36c46631eb81213757b240fa518400608bde3688366ee5a27c18d71f6b6e48cedf0be5a5ca9794994e0b99a98", 0xef}], 0x2, &(0x7f0000000480)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x89, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5c71}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts={{0x48, 0x29, 0x36, {0x3a, 0x5, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe6f7}, @calipso={0x7, 0x20, {0x31cc893c0ff26fcf, 0x6, 0x0, 0xb, [0x6, 0x8, 0x0]}}]}}}], 0x98}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000580)="7a183a7d65d4a19e541c4334c72106b614b2cfc677d41c955098a60ad96119dcadb6e49e87bd4ec1c95c3837ba39dccd379275088d08cc72b36f7dac8e010d5382fec7b9", 0x44}, {&(0x7f0000000600)="7e8c532156b0b73660ff0f008478d061b252fab767902b45c0bf17cfa9c69ecf41a9b203eaf20ef8573e3c36a445bddedd5a3787c3d4445ccf2de2e62666e923cd5f30cfe8f49ecefa0eed573f9fd4cea5f13393a95a5ce6e75fb4f80c748f045607c86d67d5476908bc7b27b3d92666fccbe1e590a0c01108ed563bb03b5eed3d619c437ec1e62499b1cc85f7a4bfd43285f876047cb8d55ac27d1c5a72e71c90366475ad7f52e892e9b807d853e6d3e2ca599ef78063eb769ee0283c94664e48405b670a076ca9bd78cd095daaf1b83629a3aa821497eb3538e457c74cec47d27a7523bb70be6882f917cb72e7824bfe993ec329e99e", 0xf7}, {&(0x7f0000000a40)="b7d5c8d1ba09ce1fed3310864e88c9ddeef27bcfe15a46ac8073554109eb633df10097e8ef29dc5744f2cb762f74f530f40b16ebbc39f8185c345ea90859721e7d14def2062ea1da6e09dd7b33de4a9c2ca48ddd1e9a8af35def25ebe93bf7896ebecb6e51ad69856891ec86a9f4bd1a421fee4d5c4bceaab16d7b92b1cc6b2f1ee22e57456dc91b83f3f9061ce520ae059642b9f94155c1c88b9ea68374958f68b111e5947e2f8f2f72bf995c7270f35b88062c9ef96041e5c54185142e6b0a992b1fd12ef8bd14846624870f679040339896aa391230da84e90c9f086ac25e4b138d99bd8acb5ed0c380", 0xeb}], 0x3, &(0x7f0000002500)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts={{0x120, 0x29, 0x36, {0x21, 0x20, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0xfffffffa}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x1, 0xe2, "176b5750707faf63efb53a7647bfff160cb8776b05857975fe4ecc2d8f0c22ab159292d4397e02555094ee9786d691049486a1e6be79e110571b98df8987604964e60b9fd59c26de15b39fdc224a3b078af2379ccf04ff633ccf2117cc69b3d4eaebe58c1c9df480ae9c60898b090ba765c227ec3623c75b48b2bc3e62eb1303952cfc2bddc7a08591b07f3c757d8382e7a751e6b43a706323d8cd1c7f44d124eb68fd9531f40129af4c9b88ee1debe7314d0446372bc39efa1506e5981755e67be3d3f4977774cc1e03aaf2c4a21c8fe343b74d6ef00fc4d4d43f39d17c11d1ba45"}]}}}, @rthdrdstopts={{0x1028, 0x29, 0x37, {0x73, 0x201, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0xd9, 0x1000, "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"}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @hoplimit={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hoplimit={{0x14}}, @dstopts={{0x100, 0x29, 0x37, {0x11, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0xc69}, @calipso={0x7, 0x50, {0x2, 0x12, 0x81, 0xe933, [0x2, 0x6, 0xe5c, 0x2, 0x8f0, 0x9, 0x7, 0xbb, 0x0]}}, @generic={0x8, 0x88, "206210cd9aebcc416de1c0d6d924425f5030ab857fef485d68fda04a71454a2b0b6145241f0b9ca882212f11ca80ccf6c42f6aee506fd4b19aac13df361e9eb97bd3366494ffccc486e180a750a9252c1d6e47b205a4f336a9efdc93600e8c0d22881d7f51b27984d138b312dd197bbfa019389dc33f119af8742ce779c9d7905614a290c35dbcc5"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x8, 0x0, [@remote]}}}], 0x12e8}}, {{&(0x7f0000003800)={0xa, 0x4e23, 0x1, @private1, 0x7}, 0x1c, &(0x7f0000004b40)=[{&(0x7f0000003840)="604d16226fa6b51b85b190f80c7b2c677b17dd7980fcbf80511ee59f4054b1535e5222616d931381429a300088d46a2d01e74347ff1fa3e40f1c25f0120156c16ab141a0999f97dba01cc826947f3f51e63cb6c3caa8bf9604cbb12bf12a34762b754e62e21ec9ba7156cb72c6ff4a9b9bf2cf086a8049ff70b82470377d80262a29952f71df17e368d0e30c55c27dd9289b55b61a559e45c4c2d2957e99bbc233d1caafd3090e36d808813746f370db3ed68558a0361a3ebc2e650ca86f8018b4a22c1da5f7835e8dd84b46", 0xcc}, {&(0x7f0000003940)="d35b53b762399fb867b8ab20b8cd9d2c1f055f6bc40909b918d44b9a4be1dc62476bb3543186f6c53e40339c752aba26a2d3a059a723823c4509fe389d3b5d2a7ac61f256cc64b2d9b835ef519919d54fd131a3d87d469a41fdd7758d8ea87aabe16ae0d8f84293d8d89a8d58bc55c34b3c50cf5dac7019c178c23e98fa73e7566e57cf01d1bcf45ba860c167c563ddf820625e7b62023c3015274777f8749219828b79e4c401a980a34edd286ee17db04025afca12eaf0e2d1377c5f7f3840a3d13c48dc24504530fdc7e2af5a21cd78e6149fd6684b4416b8631a3926b57bdfd22", 0xe2}, {&(0x7f0000003a40)="3452f8569340062281b738ba064937cb7dbf42b7e63f4f941d73f04d0e78d2970cf566580f28845e260c6f808cd726eec7ce9e842b3f8da05f1d47524c22ceb2770faead4f7d3a76de41ebef548d3c71b1d7a83fc3116b508808d3a16173ba9245e7c14ddf02726585b427010a1d33c8fd8aa9e961", 0x75}, {&(0x7f0000003ac0)="c00bee6f2cb1329bf68692cf302e718ceb6dc1", 0x13}, {&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000004b00)="e50035b92ac4f2b5ddca45dfa6acc8c53c69", 0x12}], 0x6, &(0x7f0000004bc0)=[@hopopts={{0x40, 0x29, 0x36, {0x0, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x3ec}, @pad1]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004c00)="2d9e5838a97a3c0f3b5aac4795928aa3554f9fba7ea4dbb5bd6613d63edd496446a7a1b79c063512218a10839ddba4395c8d90be859e576645891c62fb3e0ed478a7085264f58a15961a9f92a8c1eb2407c5947c95d05e65ed415bf825f4909749631c536f9d8678155776575c374f33c52f76b33a65635a26949e4fd2e66104b3abe5d3195f1067bebcec1b0390e1ab17f93f22d3290307e7c7a8aadc1ecbbb840337d9f88f56bf0a3734faff5a3dad01f135880f755ae35ccb80f62b65415be3653325b43c0d765cb6d28db36ec0", 0xcf}, {&(0x7f0000004d00)="7017aae13b7bc166b6550163e6d36d99193434f52299590d1a55a1957cb9f5156357ca013aebd0000545eafc64f22153a3290caf8068e53bc1546b6add05b1a4907279980199e088a74863fd46fe3e6c2804f90ccd5540cdf1e49af4077d98f8e0fb94f0bbe6a97d12803263bb5cc6150ca9b891f0d9f51d3c6ffee453", 0x7d}, {&(0x7f0000004d80)="538f20e3e1949919e38e333f18b0a504cd7d59c2498d109c8cab045af007d726990682e02d5d32a44a6d43677b7a6f8adf428bf09fb3d5d904374e7fc0f5bd4e77cc1491dd9c8f786de2fb1bb23f9aba9f3e1447f2dda6aa991eb0fe03efe474db342397b10e8420aa489151a7ba4048a95e65a505c040d212cdeeb6fa97132e037aa0865b57b78d8874b295f99a90516bd843f41efc772052b70a94a3adf0b0b1c5c8867f4fd3130613af51815304d503421f32e5bd32c18cdfe5d85a5a1c87569c0a", 0xc3}, {&(0x7f0000004e80)="649c9acb8f7e50de3b6acf55652f75cbdfc02e5310293ab0fdfcf25617c1b930598adf5690d4427c5dc644020f33d0090483da9fa8", 0x35}, {&(0x7f0000004ec0)="e127c60fab8fad674b6efad57f78b480f598fbfd095cf21dee45607920bee26d0045be4c22347706f32373cb884ebf36af78dd350db7f34fe74327e748e7", 0x3e}, {&(0x7f0000004f00)="ff4964e0e357e4", 0x7}, {&(0x7f0000004f40)="ff755c54389cc5a1dcc19fa774b72e0a16a3e640ba042f37350f72acdf1f02a2be1241954d5301c84bd1a90fc765fb770780e0856ceab7fce4c3c9ff", 0x3c}, {&(0x7f0000004f80)="21e4b450bbae43f8021ddab1ed1a13a3a88c0594401094d0733f0146fc05c420cb2fd6d65027b1278aaa541e458a86070e056eecfe82443a5e12b77a154189b3b7b74527343ebf4fac0ad81845afec372a4e394f76325bab827936a1aa3732951630b6f7fca7491631274c395a123e73df80ec0d8e3891c01e0e03491fa00a09c9c59c0c2c7a918450d2be2cf793a20dc365405c7e6525860a75950af6d3a5968ec47667bc20d92849b858ef89b7d3e4070dbf90cb582f8f747225c99d9ccdfac3594a044367ed13a901f6d0bd4c0279613be4c8b394fbf055c1bfa33441", 0xde}], 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x88}}, {{&(0x7f00000051c0)={0xa, 0x4e24, 0x3, @private1, 0xffffff02}, 0x1c, &(0x7f00000054c0)=[{&(0x7f0000005200)="4c903470fd3c75acdce333ea0783c784c56e549e2158854c20c55aa5ed58fbdbf9aecb892d2644878ed26d60920e94033d41e907526197e9af9ef7674801e8215ba212615c2f3dd853e4903ab9cff4db70a40bd6d594d4e99fedb017b91dcc7f617a1120e342b33b98e2020c281f739283a6f5d3a120a79a6c93a342258fb4235590a33809bbfc4fe0b39849a92cf7ed5e1eb2c02286ee14ddfc3828972b7c1ecfc66f5ff3e0ef7736f5d839f8e6512116011f4eee859397b0a210d462f4402fd96b2c47b9c643598bcc", 0xca}, {&(0x7f0000005300)}, {&(0x7f0000005340)="86b7562c05ab9d98288ae971d70a03691efb32d443a5531b51bdc427183664d72d5651cd93c62238d180dc8292f6c7d25b8db7ea8f35358035f62aee034070e0a4fd7e4f83a0e501b17024437fd7f706860c6a5a624223b423f615815614e2a63017f4561035354af57bd1f0a5cc6da7bab7562a9005184e2ed7d2352798adf2fa73e8c14e94598b12a35ac39665526e11124e42086aab", 0x97}, {&(0x7f0000005400)="ea5861d04ef3cb9bd5245f57213328a6703a9ee93d8296cdc596deabea6d3678c01dd4aadf87e1818837da167e62903d31fd6e30376d8268148666b914b28b44b95902c0753576bf502633d8e8fd36c6c13069885bc347df9fbc1be948ede2b5e677c1769d4125aa28794932277e3d53804da8d193605629eb97b9a168dcede421d02fa9b7946177faef50ef53fa345406319b043eae", 0x96}], 0x4, &(0x7f0000005500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hopopts={{0xb0, 0x29, 0x36, {0x32, 0x12, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @generic={0x23, 0x88, "aa6844ff0eb3e67f8c7b300e0ac0819fe3fdbb4a1ee3718fe73745be014186d4a10a2310bc9465315f77f2ad3e2c86bfbd6e971aa3ea63f9832ee3e6fec340366f458d61465de918dc66b0709a8db7cbcafa3bd7b05cac47a19724024ba4deb0069507034833ec7ac37fd418f77595990b2ddf091ebccb3b2af3e3e56618eed2462077eacd630ba8"}, @padn={0x1, 0x1, [0x0]}]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000005600)="a03c5c7276ce3fd6af88e03369e61381df39d3ea4fdc1bde693db341dcc383b48185f70b067699f2d2c9e2313445820831d59d2a7aa0bef27e08ea0e1ea8b546d9260cb9fcacc7875ad0d7eecf40668af00d8efe18ed2654b0227b4c18ccdbdf80b7a13dc5b98bc8bad405c2523342d6729f561ce289558b3fe68851a6809d4f1394da1b0a121d057abf4f73b35ddbd35ca725d48182bb9ee63905d884247a57557d8db5068366c0be176282e274adbbb5e75c9a", 0xb4}, {&(0x7f00000056c0)="07f7027d6786e3c5f1a793890c383d646f2447c013b3be42dac2e07c92ec9302dd5f95ed343880efd32cd785acd0b5dba7311aaa651e0fc4c370de6306a1ccaec5ae12b53179c0a30175a0e40e5020d11dba61d04754c540434a8a94bd43c4c20a7184ad408a8a1a3b27507372d38c5fb1ab2fd391edc630ba2d41a3cbb5e6fd7b735a00bd47b3a7124563d30b5ab20d415a928f50c7335a408a927f0e7971e13e46aaf70ac6b83d9d50b13df88673b06e3450de963561b9be94672f63b362fbb172e34d4ef57ab27f2a", 0xca}, {&(0x7f00000057c0)="ee76e9acb52a7e42f20f5c8b3334640ac5c2a67e7d75aea0630658102863d9c0d8c031beca44cd3e1bb3022224304e0711f5d30e7ec8a3526b2d1a9365f08b47585f9c5a6442fd606cad6c705aeb9297c01fbdf0eb5455cbd3355d25d77e2b9a755d23ea14a454ee76be5590de4fe7424035e73a1f24c7e992a4ce823107f807f105c632f391f8b4f5baf6124702022a6b3938ad836bd26bd40b910a3e8661451aef0c64a29687f8e4693b20d12e53bca5c00722318047cb0782603ce80d4ac2878021276e573f67d53685ee32bd4ea06e665a20cf997ca98b6ae7fa7ce705f5dcb84891c626de60f0d9391cd6249b8dd4a2511aabe792bb5ab9163a438b", 0xfe}, {&(0x7f00000058c0)="4d55cd7b551581947782e355c71e679ead6868b59f389ceaa75535b13fed60b68d49014f54647ee0ca91481db762f1adff15e2e14591e50bf69283dac56d13c09dbe8de2848bf586ae048c32bb0d6dd1aeebdb40ed93a3e009fc800434079ca9de2438b03ac80828af08bacdfd52ad1d30fb0924197cd913f015aa0d6c04eec5a7f6a55181a6aa5d3f6084698ea2521bbc0cbd3471f87f97baab9da6d00f3b68cfa95cf4447f852917e554ebba184dd81ccc6cfa8fcbc079d33c67f757db23728067393ddce565dbcb45d11a4b14ec8e3645d03a2488b92779", 0xd9}, {&(0x7f00000059c0)="17cb9ec03f831581a0e0d06fcbae318411a448ba9fc3ba15736769ea0a15616c4a966f1a3453fd4a7f797f828b73447ce757281dd7c8c9287c125c353c89c84628d27819aceec2fa44f000cf45e8e0c7304e67d298cb90ac465e2a371e67e1fa5bafe9645e6d4933c0dcc747c5b426ea09292075bc4f31712fd38070382e2e801fb9fce3bb5ba005be2f85b33c94", 0x8e}, {&(0x7f0000005a80)="3ecc5f505da1ae5fda2c0f81bf311da6bd2b6d4fefc64ef157988d15133ada5b7316e498b6756ef4d311d777d3c675f5d6fbb2b716710031d1652c042a05893868d05a26c094b14a0f53bb863dbdd317558eabfb07e1104e7e417ece641bb6df991c5959ba865d05", 0x68}, {&(0x7f0000005b00)="aa4d77d8125305f15468", 0xa}], 0x7, &(0x7f0000005bc0)=[@tclass={{0x14, 0x29, 0x43, 0xc}}], 0x18}}], 0x6, 0x800) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000001240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x48, @private1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1400000000000000290000000b0900000000000e00000000"], 0x18}}], 0x1, 0x20040010) ioctl(r5, 0x8b32, &(0x7f0000000040)) (async) ioctl(r5, 0x8b32, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r7}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 21.933591469s ago: executing program 1 (id=10359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c001}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x38, r3, 0x109, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44814}, 0x4000000) unshare(0x60600) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$unix(0x1, 0x3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000200)={0x0, 0x38}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001780)={'ip6_vti0\x00', &(0x7f0000001700)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xe, 0x9, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x20, 0x20, 0x1ff}}) ioctl$XFS_IOC_GETBMAPA(r5, 0xc020582c, &(0x7f0000000280)={0x0, 0x8, 0xffffffff, 0x80000000, 0x3}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced120", 0x39, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x7, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, [@dstopts={0x84}], "83"}}}}}}}, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r7, &(0x7f00000000c0)="3adf63", 0x3, 0x40048d7, 0x0, 0x0) splice(r7, 0x0, r8, 0x0, 0x8, 0x5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x73}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000100)={r9, 0x1, 0x6, [0xe, 0x400, 0xee5, 0xfe00, 0x2, 0x101]}, &(0x7f0000000140)=0x14) unshare(0x22020400) close(r4) unshare(0x8000000) 21.192273958s ago: executing program 4 (id=10360): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r4, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fd00000700000000060015000100001614001680100008000c0003800800020400000006"], 0x38}}, 0x0) 21.133513848s ago: executing program 3 (id=10361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000006c0)={{r1, &(0x7f0000000480)='bridge\x00', 0x2, &(0x7f00000004c0)={@align=0x3, {0xc, 0x9, 0xe8f, 0x5}}, 0x2, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x2}, {[0x4, 0x68, 0x1, 0x4]}, 0xe7, 0x26, &(0x7f0000000600)=""/38}) openat$cgroup_pressure(r6, &(0x7f0000000740)='io.pressure\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r11, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r13, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0x2, r12, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000600000000000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53}, 0x28) 20.376278429s ago: executing program 0 (id=10362): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000481340001800c0001007061796c6f616400240002800800014000000009080003484f000000000000400000003708000240000000021800018008000100647570000c00028008000140000000100900020073797a3200000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000000000000000000711888000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockname$tipc(r3, &(0x7f0000000400), &(0x7f0000000440)=0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x98}) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r4, 0x9cc21000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYRES8=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r7, &(0x7f0000000300)=""/213, 0xd5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0xe, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$qrtr(0x2a, 0x2, 0x0) 19.930355196s ago: executing program 2 (id=10363): socket$inet6(0xa, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) (async) unshare(0x24020400) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000180)=0x200003, 0x4) 19.771739012s ago: executing program 1 (id=10364): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/197, &(0x7f0000000100)=0xc5) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000140)={'dummy0\x00', @ifru_flags=0x1000}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x800) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000240)={0x6c6, 0x10, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f000000a5c0)={&(0x7f000000a500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xfffffffe}}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x5, [{0x3, 0x1, 0x7}]}]}, {0x0, [0x30, 0x30, 0x5f]}}, &(0x7f000000a580)=""/2, 0x4d, 0x2, 0x1, 0xffff4879, 0x10000}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000000a6c0)={&(0x7f000000a600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000a680)={&(0x7f000000a640)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000000a700)) r5 = accept4(r3, &(0x7f000000a900)=@phonet, &(0x7f000000a980)=0x80, 0x80800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f000000a9c0)=[@timestamp, @window={0x3, 0x400, 0x2}, @sack_perm, @window={0x3, 0x2, 0x82}, @sack_perm, @sack_perm], 0x6) r6 = syz_genetlink_get_family_id$team(&(0x7f000000aa40), r5) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f000000aa80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f000000aac0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000ab00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000000abc0)={r2, 0x58, &(0x7f000000ab40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f000000ac40)={'syztnl2\x00', &(0x7f000000ac00)={'gre0\x00', 0x0, 0x10, 0x1, 0xc207, 0x9, {{0x8, 0x4, 0x3, 0x3, 0x20, 0x65, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x8, 0x66, 0x0, 0xe, [0x51a]}, @generic={0x82, 0x4, "0418"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f000000ad40)={'ip_vti0\x00', &(0x7f000000ac80)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x4, 0x81, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x65, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0xb, [{@local, 0x5}, {@loopback, 0x7}, {@remote, 0x7}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xb6, 0x3, 0xb, [{@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xe790}, {@multicast2, 0x2}, {@empty, 0xe1d}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@broadcast, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f000000ad80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f000000adc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f000000ae00)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f000000aec0)={'syztnl0\x00', &(0x7f000000ae40)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x10, 0x3, @local, @loopback, 0x20, 0x0, 0x73227adf, 0xcef0}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000af00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000afc0)={'syztnl2\x00', &(0x7f000000af40)={'gretap0\x00', 0x0, 0x700, 0x20, 0x7f, 0x3, {{0x13, 0x4, 0x1, 0x18, 0x4c, 0x64, 0x0, 0x2b, 0x4, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x13, 0xe3, [@remote, @multicast1, @rand_addr=0x64010100, @remote]}, @lsrr={0x83, 0x7, 0x3e, [@empty]}, @end, @rr={0x7, 0xf, 0x31, [@multicast1, @broadcast, @loopback]}, @generic={0x94, 0xd, "79015decda643bef16d1bb"}]}}}}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f000000b5c0)={&(0x7f000000aa00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b580)={&(0x7f000000b000)={0x580, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8726}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r14}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x104, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xc, 0x1, 0x6f, 0x229}, {0xba6a, 0x4, 0x9, 0x1}, {0xa8, 0xb, 0x7f, 0x40}, {0xfffd, 0x1, 0x8, 0x7}, {0x6, 0x4, 0x79, 0x8000}, {0x919b, 0x62, 0x7, 0x8}, {0x52, 0x6, 0x7f, 0xa}, {0x7fff, 0x8, 0x52}, {0x1000, 0xf, 0xd8, 0x2}, {0x99, 0x7, 0x3, 0x800}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x80}, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$tipc2(&(0x7f000000b640), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r19, &(0x7f000000b9c0)={&(0x7f000000b600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000b980)={&(0x7f000000b680)={0x2d0, r20, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x563}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5339}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff6e76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff0c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf908}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x755}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe59}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6d43}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x48011}, 0x44000) getsockopt$IP_VS_SO_GET_SERVICES(r19, 0x0, 0x482, &(0x7f000000ba00)=""/116, &(0x7f000000ba80)=0x74) 19.558603271s ago: executing program 4 (id=10365): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000500)={0x59, "596dd231ce3c32b6fc0efe46c0a10604750771df33fd6dacea8a4fbc6a79f3741d498ee3f65e967000fffeffffda61ee4cd372207e7d8cbf12b7bb68b74919e7b9ffb044e4b0e96270d198c066f0a6eabcdf5cd34b6f29657d2356d8df650871c34955d380b3e3cf122b41634e8e71ab8c0000000001000000223c78ce1800"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=ANY=[@ANYBLOB="007a862adba0ccef2df00261c6cbbe1e0ebc170f9b8aee1bf7b7ea2f6c8eb08714dcd67424e25e10ac10", @ANYRES16, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYBLOB="10002d7da70000000202020202020000042d800a1dfd2132872b3013d44a163686ede9917026a61ae26d77c79b2fe1fef0ca5f6df2bf4a05e60b3e17a7b12443433e7d276dde9a01649d84d3a229ff7c2ec228197d81ad25dcd3c72d8018655806972851dcd12a67973c961392ee1324722c9351ce52fa3aa8270d83f01c490a40565f9eb8f1780707064f34aa270ae964122df9259765ee4351e30d75d1a269f15b4271a518e48638863a9a099dfe90c2059a0b000000000000006d9d4a05296e8f0ff19e004254c5b8fa80828045c28cf2ebf21857"], 0x80}}, 0x2000c0d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="180800000000109d095e963e2a3a4600851000000600000018000000b7e90100fad39e", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff000000008500"], &(0x7f0000000480)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b00010065787068647200001c0002800800064000000001050002000000000008000740000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c280000800050058a3", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/288], 0x120}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed", 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0xff, 0xffffff00, 0xff], [0xff, 0xff000000, 0xff], 'veth1_to_bridge\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x5, 0x3, 0x22}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc9, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000015, 0x4010, 0xffffffffffffffff, 0x1000) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 18.651945141s ago: executing program 2 (id=10366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8091) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 18.280665978s ago: executing program 2 (id=10367): r0 = socket$inet6(0xa, 0xa, 0xfffffffe) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xf22, 0x0, @local, 0x80000001}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x800, @remote, 0x4000003}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000000)=0x100000b3, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000007000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000962667e87b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x406}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) 15.132279166s ago: executing program 0 (id=10368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRESDEC=0x0, @ANYBLOB="000000dad3340ba4ff00"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="fc65cf09864c123db16e0184d964", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x1, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd704d24b5af10a253330c271d3900fbdbdf25010000000c000200d640000000000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vcan0\x00', 0x1, 0x5, 0x5}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xffffd000) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 6.02637165s ago: executing program 32 (id=10361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000006c0)={{r1, &(0x7f0000000480)='bridge\x00', 0x2, &(0x7f00000004c0)={@align=0x3, {0xc, 0x9, 0xe8f, 0x5}}, 0x2, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x2}, {[0x4, 0x68, 0x1, 0x4]}, 0xe7, 0x26, &(0x7f0000000600)=""/38}) openat$cgroup_pressure(r6, &(0x7f0000000740)='io.pressure\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r11, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r13, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0x2, r12, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000600000000000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53}, 0x28) 4.523044445s ago: executing program 33 (id=10364): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/197, &(0x7f0000000100)=0xc5) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000140)={'dummy0\x00', @ifru_flags=0x1000}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x800) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000240)={0x6c6, 0x10, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f000000a5c0)={&(0x7f000000a500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xfffffffe}}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x5, [{0x3, 0x1, 0x7}]}]}, {0x0, [0x30, 0x30, 0x5f]}}, &(0x7f000000a580)=""/2, 0x4d, 0x2, 0x1, 0xffff4879, 0x10000}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000000a6c0)={&(0x7f000000a600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000a680)={&(0x7f000000a640)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000000a700)) r5 = accept4(r3, &(0x7f000000a900)=@phonet, &(0x7f000000a980)=0x80, 0x80800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f000000a9c0)=[@timestamp, @window={0x3, 0x400, 0x2}, @sack_perm, @window={0x3, 0x2, 0x82}, @sack_perm, @sack_perm], 0x6) r6 = syz_genetlink_get_family_id$team(&(0x7f000000aa40), r5) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f000000aa80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f000000aac0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000ab00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000000abc0)={r2, 0x58, &(0x7f000000ab40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f000000ac40)={'syztnl2\x00', &(0x7f000000ac00)={'gre0\x00', 0x0, 0x10, 0x1, 0xc207, 0x9, {{0x8, 0x4, 0x3, 0x3, 0x20, 0x65, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x8, 0x66, 0x0, 0xe, [0x51a]}, @generic={0x82, 0x4, "0418"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f000000ad40)={'ip_vti0\x00', &(0x7f000000ac80)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x4, 0x81, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x65, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0xb, [{@local, 0x5}, {@loopback, 0x7}, {@remote, 0x7}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xb6, 0x3, 0xb, [{@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xe790}, {@multicast2, 0x2}, {@empty, 0xe1d}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@broadcast, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f000000ad80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f000000adc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f000000ae00)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f000000aec0)={'syztnl0\x00', &(0x7f000000ae40)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x10, 0x3, @local, @loopback, 0x20, 0x0, 0x73227adf, 0xcef0}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000af00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000afc0)={'syztnl2\x00', &(0x7f000000af40)={'gretap0\x00', 0x0, 0x700, 0x20, 0x7f, 0x3, {{0x13, 0x4, 0x1, 0x18, 0x4c, 0x64, 0x0, 0x2b, 0x4, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x13, 0xe3, [@remote, @multicast1, @rand_addr=0x64010100, @remote]}, @lsrr={0x83, 0x7, 0x3e, [@empty]}, @end, @rr={0x7, 0xf, 0x31, [@multicast1, @broadcast, @loopback]}, @generic={0x94, 0xd, "79015decda643bef16d1bb"}]}}}}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f000000b5c0)={&(0x7f000000aa00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b580)={&(0x7f000000b000)={0x580, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8726}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r14}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x104, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xc, 0x1, 0x6f, 0x229}, {0xba6a, 0x4, 0x9, 0x1}, {0xa8, 0xb, 0x7f, 0x40}, {0xfffd, 0x1, 0x8, 0x7}, {0x6, 0x4, 0x79, 0x8000}, {0x919b, 0x62, 0x7, 0x8}, {0x52, 0x6, 0x7f, 0xa}, {0x7fff, 0x8, 0x52}, {0x1000, 0xf, 0xd8, 0x2}, {0x99, 0x7, 0x3, 0x800}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x80}, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$tipc2(&(0x7f000000b640), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r19, &(0x7f000000b9c0)={&(0x7f000000b600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000b980)={&(0x7f000000b680)={0x2d0, r20, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x563}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5339}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff6e76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff0c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf908}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x755}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe59}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6d43}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x48011}, 0x44000) getsockopt$IP_VS_SO_GET_SERVICES(r19, 0x0, 0x482, &(0x7f000000ba00)=""/116, &(0x7f000000ba80)=0x74) 3.515422804s ago: executing program 34 (id=10365): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000500)={0x59, "596dd231ce3c32b6fc0efe46c0a10604750771df33fd6dacea8a4fbc6a79f3741d498ee3f65e967000fffeffffda61ee4cd372207e7d8cbf12b7bb68b74919e7b9ffb044e4b0e96270d198c066f0a6eabcdf5cd34b6f29657d2356d8df650871c34955d380b3e3cf122b41634e8e71ab8c0000000001000000223c78ce1800"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=ANY=[@ANYBLOB="007a862adba0ccef2df00261c6cbbe1e0ebc170f9b8aee1bf7b7ea2f6c8eb08714dcd67424e25e10ac10", @ANYRES16, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYBLOB="10002d7da70000000202020202020000042d800a1dfd2132872b3013d44a163686ede9917026a61ae26d77c79b2fe1fef0ca5f6df2bf4a05e60b3e17a7b12443433e7d276dde9a01649d84d3a229ff7c2ec228197d81ad25dcd3c72d8018655806972851dcd12a67973c961392ee1324722c9351ce52fa3aa8270d83f01c490a40565f9eb8f1780707064f34aa270ae964122df9259765ee4351e30d75d1a269f15b4271a518e48638863a9a099dfe90c2059a0b000000000000006d9d4a05296e8f0ff19e004254c5b8fa80828045c28cf2ebf21857"], 0x80}}, 0x2000c0d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="180800000000109d095e963e2a3a4600851000000600000018000000b7e90100fad39e", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff000000008500"], &(0x7f0000000480)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b00010065787068647200001c0002800800064000000001050002000000000008000740000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c280000800050058a3", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/288], 0x120}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed", 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0xff, 0xffffff00, 0xff], [0xff, 0xff000000, 0xff], 'veth1_to_bridge\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x5, 0x3, 0x22}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc9, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000015, 0x4010, 0xffffffffffffffff, 0x1000) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.521253276s ago: executing program 35 (id=10367): r0 = socket$inet6(0xa, 0xa, 0xfffffffe) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xf22, 0x0, @local, 0x80000001}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x800, @remote, 0x4000003}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000000)=0x100000b3, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000007000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000962667e87b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x406}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) 0s ago: executing program 36 (id=10368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRESDEC=0x0, @ANYBLOB="000000dad3340ba4ff00"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="fc65cf09864c123db16e0184d964", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x1, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd704d24b5af10a253330c271d3900fbdbdf25010000000c000200d640000000000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)='vcan0\x00', 0x1, 0x5, 0x5}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0xffffd000) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') kernel console output (not intermixed with test programs): 0004 - 0 [ 1353.264122][T15359] IPVS: starting estimator thread 0... [ 1353.264300][T12660] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1353.359340][T12662] IPVS: using max 34 ests per chain, 81600 per kthread [ 1354.045985][T12658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.349568][T12697] netlink: 'syz.0.9193': attribute type 1 has an invalid length. [ 1354.468065][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1354.540551][T12704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1354.545010][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1354.663178][T12701] geneve2: entered promiscuous mode [ 1354.686285][T12701] geneve2: entered allmulticast mode [ 1354.846893][T12259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1354.876210][T12259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1354.884700][T12259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1354.897877][T12259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1354.913244][T12259] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1355.520492][T12737] tipc: Enabled bearer , priority 0 [ 1355.555138][T12737] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 1355.590939][T12737] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 1355.634276][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1356.092269][T12719] lo speed is unknown, defaulting to 1000 [ 1356.456889][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9211'. [ 1357.030123][ T50] Bluetooth: hci5: command tx timeout [ 1357.049966][T12795] syz_tun: entered allmulticast mode [ 1357.256382][T12719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.276270][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.295875][T12719] bridge_slave_0: entered allmulticast mode [ 1357.300618][T12808] netlink: 34 bytes leftover after parsing attributes in process `syz.1.9219'. [ 1357.307145][T12719] bridge_slave_0: entered promiscuous mode [ 1357.320955][T12719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.331293][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.360001][T12719] bridge_slave_1: entered allmulticast mode [ 1357.373455][T12719] bridge_slave_1: entered promiscuous mode [ 1357.424818][T12719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.441315][T12719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.487627][T12719] team0: Port device team_slave_0 added [ 1357.512717][T12719] team0: Port device team_slave_1 added [ 1357.586902][T12719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.598042][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.647534][T12719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.663207][T12719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.672063][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.728492][T12719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.762267][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9223'. [ 1357.917034][T12719] hsr_slave_0: entered promiscuous mode [ 1357.943331][T12719] hsr_slave_1: entered promiscuous mode [ 1357.967415][T12719] debugfs: 'hsr0' already exists in 'hsr' [ 1357.977304][T12719] Cannot create hsr debugfs directory [ 1358.224495][T12825] gretap0: left promiscuous mode [ 1358.399057][T12833] nbd0: detected capacity change from 0 to 63 [ 1358.410414][T12836] block nbd0: NBD_DISCONNECT [ 1358.430859][T12836] block nbd0: Disconnected due to user request. [ 1358.445411][T12836] block nbd0: shutting down sockets [ 1358.452707][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.485885][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.513737][ C1] blk_print_req_error: 104 callbacks suppressed [ 1358.513759][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.529274][ C1] buffer_io_error: 138 callbacks suppressed [ 1358.529291][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1358.545354][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.551506][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.554499][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1358.569183][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.572910][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1358.581167][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1358.599607][ T1628] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.609140][ T1628] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1358.620067][ T1628] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.632222][ T1628] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1358.640596][ T1628] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.650098][ T1628] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1358.658253][ T1628] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.667742][ T1628] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1358.676713][ T1628] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.686714][ T1628] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1358.694990][ T1628] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.704454][ T1628] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1358.725254][T12180] ldm_validate_partition_table(): Disk read failed. [ 1358.740108][T12180] Dev nbd0: unable to read RDB block 0 [ 1358.752183][T12180] nbd0: unable to read partition table [ 1358.766200][T12180] ldm_validate_partition_table(): Disk read failed. [ 1358.776922][T12180] Dev nbd0: unable to read RDB block 0 [ 1358.785618][T12180] nbd0: unable to read partition table [ 1358.800194][T12825] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1358.832643][T12825] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1358.899716][T12825] veth1_macvtap: left promiscuous mode [ 1358.907945][T12825] veth0_macvtap: left promiscuous mode [ 1358.915660][T12825] veth0_macvtap: entered promiscuous mode [ 1358.940944][T12825] veth1_macvtap: entered promiscuous mode [ 1358.953888][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1358.978341][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1359.005720][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1359.013457][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9232'. [ 1359.024637][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9232'. [ 1359.065754][T12825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1359.075940][T12825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.091247][T12825] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1359.107702][T12825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1359.109225][ T50] Bluetooth: hci5: command tx timeout [ 1359.123276][T12825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1359.134139][T12825] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1359.146664][T12825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1359.157723][T12825] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1359.166180][T12825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1359.184548][T12825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1359.197424][T12825] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1359.206144][T12825] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1359.216649][T12825] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1359.231588][T12825] gretap0: entered promiscuous mode [ 1359.241858][T12825] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1359.252405][T12825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1359.263096][T12825] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1359.280543][T12825] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1359.291621][T12825] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1359.300088][T12825] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 1359.309946][T12825] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1359.321075][T12825] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1359.351537][T15359] lo speed is unknown, defaulting to 1000 [ 1359.364700][T15359] syz2: Port: 1 Link ACTIVE [ 1359.454951][T16053] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.471034][T16053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.483444][T16053] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.495422][T16053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.542621][T12869] IPVS: set_ctl: invalid protocol: 2 172.20.20.61:20000 [ 1359.563286][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9235'. [ 1359.578629][T16053] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.597729][T16053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.618701][ T7558] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1359.734934][T12870] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1359.871429][T12882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9239'. [ 1359.982998][T12885] syzkaller1: entered promiscuous mode [ 1360.016976][T12885] syzkaller1: entered allmulticast mode [ 1360.092765][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1360.231715][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1360.406689][T12719] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.421839][T12719] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.467153][T12891] team0: entered allmulticast mode [ 1360.473802][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.131645][T12719] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.156656][T12719] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.191037][ T50] Bluetooth: hci5: command tx timeout [ 1361.204827][T12932] __nla_validate_parse: 1 callbacks suppressed [ 1361.204859][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1361.515775][T12932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1361.657979][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9254'. [ 1361.806602][T12719] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.817563][T12719] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.850909][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9256'. [ 1361.864949][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9255'. [ 1361.930955][T12952] SET target dimension over the limit! [ 1362.038303][T12719] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.064165][T12963] sctp: [Deprecated]: syz.2.9257 (pid 12963) Use of int in max_burst socket option. [ 1362.064165][T12963] Use struct sctp_assoc_value instead [ 1362.079345][T12719] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.145520][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9257'. [ 1362.867426][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9267'. [ 1362.951873][T12719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1362.981496][T12719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.028149][T12719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1363.086720][T12719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.146902][T12719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1363.211989][T12719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.269280][ T50] Bluetooth: hci5: command tx timeout [ 1363.301274][T13017] bridge2: entered allmulticast mode [ 1363.312139][T12719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1363.337307][T12719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1363.349958][T13022] netlink: 'syz.2.9273': attribute type 11 has an invalid length. [ 1363.359902][T13020] dummy0: entered allmulticast mode [ 1363.375109][T13019] dummy0: left allmulticast mode [ 1363.403435][T13026] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9275'. [ 1363.429173][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1363.592931][T12719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.611873][T13042] netlink: 271 bytes leftover after parsing attributes in process `syz.0.9278'. [ 1363.704538][T12719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.767331][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.774602][ T1465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.844525][T16053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.851737][T16053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.415647][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9283'. [ 1364.980757][T13090] netlink: ct family unspecified [ 1364.996308][T13090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.028120][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1365.637545][T12719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.791908][T13118] lo speed is unknown, defaulting to 1000 [ 1366.197248][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.205344][T13123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.345059][T13123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.363474][T13123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.550986][T13132] veth1_to_bond: entered allmulticast mode [ 1366.553994][T13122] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1366.599079][ T1465] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.615639][T13122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1366.626579][ T1465] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.626627][ T1465] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.626671][ T1465] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.659467][T13122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1366.824607][T13120] veth1_to_bond: left allmulticast mode [ 1366.963416][T13164] netlink: 'syz.1.9299': attribute type 63 has an invalid length. [ 1367.067906][T13164] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 1367.092385][T13164] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 1367.126022][T13164] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1367.297139][T13179] __nla_validate_parse: 5 callbacks suppressed [ 1367.297158][T13179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1367.388186][T12719] veth0_vlan: entered promiscuous mode [ 1367.403611][T12719] veth1_vlan: entered promiscuous mode [ 1367.454418][T13182] openvswitch: netlink: IP tunnel dst address not specified [ 1367.536116][T12719] veth0_macvtap: entered promiscuous mode [ 1367.558505][T12719] veth1_macvtap: entered promiscuous mode [ 1367.614715][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1367.635548][T12719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.683315][T13194] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1367.705419][T12719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.738669][ T5874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.740474][T13200] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1367.766349][T13200] syzkaller0: entered promiscuous mode [ 1367.784414][T13200] syzkaller0: entered allmulticast mode [ 1367.801599][ T5874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.811083][ T5874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.827983][T13194] macvlan0: entered promiscuous mode [ 1367.835303][T13194] macvlan0: entered allmulticast mode [ 1367.843552][T13194] bond17: entered promiscuous mode [ 1367.851190][T13194] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1367.871782][T13194] bond17: left promiscuous mode [ 1367.901321][ T5874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.956580][T13203] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1368.338594][T13217] tipc: Resetting bearer [ 1368.623395][T13217] tipc: Resetting bearer [ 1368.840614][T13234] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1369.003159][T13237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1369.118798][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.146230][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.225211][ T5884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.247892][ T5884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.314166][T13246] bridge_slave_0: left allmulticast mode [ 1369.334648][T13246] bridge_slave_0: left promiscuous mode [ 1369.354505][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.390653][T13246] bridge_slave_1: left allmulticast mode [ 1369.407203][T13246] bridge_slave_1: left promiscuous mode [ 1369.414157][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.431554][T13246] bond0: (slave bond_slave_0): Releasing backup interface [ 1369.454742][T13246] bond0: (slave bond_slave_1): Releasing backup interface [ 1369.488526][T13246] team0: Port device team_slave_0 removed [ 1369.514310][T13246] team0: Port device team_slave_1 removed [ 1369.543947][T13246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.558234][T13246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.566807][T13246] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1369.593009][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1369.703859][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9318'. [ 1370.089794][T13173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1370.162128][T13283] ip6tnl0: Caught tx_queue_len zero misconfig [ 1370.171788][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1370.308704][T12259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1370.342171][T12259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1370.352159][T12259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1370.365637][T12259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1370.373655][T12259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1370.731979][T13301] netlink: 'syz.4.9327': attribute type 1 has an invalid length. [ 1371.004061][T32662] bridge0: port 1(syz_tun) entered disabled state [ 1371.140507][T32662] syz_tun (unregistering): left allmulticast mode [ 1371.167959][T32662] syz_tun (unregistering): left promiscuous mode [ 1371.189146][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1371.196643][T32662] bridge0: port 1(syz_tun) entered disabled state [ 1371.265688][T13316] netlink: 'syz.4.9329': attribute type 2 has an invalid length. [ 1371.812725][T13349] netlink: 272 bytes leftover after parsing attributes in process `syz.4.9337'. [ 1371.829108][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1372.010529][T13290] lo speed is unknown, defaulting to 1000 [ 1372.014599][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9337'. [ 1372.152302][T13356] netlink: 'syz.4.9337': attribute type 30 has an invalid length. [ 1372.312955][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1372.469823][T12259] Bluetooth: hci1: command tx timeout [ 1372.934531][T13379] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1373.046925][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9343'. [ 1373.355767][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.364301][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.545989][T13385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.570066][T13385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.837780][T13290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.853323][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.868203][T13290] bridge_slave_0: entered allmulticast mode [ 1373.893657][T13290] bridge_slave_0: entered promiscuous mode [ 1373.912546][T13290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.930488][T13290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.944692][T13290] bridge_slave_1: entered allmulticast mode [ 1373.964524][T13290] bridge_slave_1: entered promiscuous mode [ 1373.991225][T13390] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1374.004481][ T1475] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.039453][ T1475] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.051574][ T1475] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.137187][ T1475] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.171131][T13290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.213484][T13290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.268313][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9348'. [ 1374.358387][T13290] team0: Port device team_slave_0 added [ 1374.377849][T13290] team0: Port device team_slave_1 added [ 1374.463858][T13411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9350'. [ 1374.506740][T13290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.521801][T13290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.556371][T12259] Bluetooth: hci1: command tx timeout [ 1374.588119][T13290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.611506][T13290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.623720][T13290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.663991][T13290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.788282][T13290] hsr_slave_0: entered promiscuous mode [ 1374.812975][T13290] hsr_slave_1: entered promiscuous mode [ 1374.831079][T13290] debugfs: 'hsr0' already exists in 'hsr' [ 1374.847578][T13290] Cannot create hsr debugfs directory [ 1375.364825][T13423] FAULT_INJECTION: forcing a failure. [ 1375.364825][T13423] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.432227][T13423] CPU: 1 UID: 0 PID: 13423 Comm: syz.4.9352 Not tainted syzkaller #0 PREEMPT(full) [ 1375.432255][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1375.432267][T13423] Call Trace: [ 1375.432274][T13423] [ 1375.432283][T13423] dump_stack_lvl+0xe8/0x150 [ 1375.432316][T13423] should_fail_ex+0x40c/0x560 [ 1375.432431][T13423] should_failslab+0xa8/0x100 [ 1375.432459][T13423] __kmalloc_noprof+0xfe/0x720 [ 1375.432491][T13423] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1375.432590][T13423] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1375.432626][T13423] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1375.432663][T13423] genl_family_rcv_msg_doit+0xda/0x340 [ 1375.432698][T13423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1375.432733][T13423] ? apparmor_capable+0x126/0x170 [ 1375.432798][T13423] ? bpf_lsm_capable+0x9/0x20 [ 1375.432818][T13423] ? security_capable+0x7e/0x2c0 [ 1375.432891][T13423] genl_rcv_msg+0x614/0x7a0 [ 1375.432923][T13423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1375.432947][T13423] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 1375.433031][T13423] netlink_rcv_skb+0x226/0x4a0 [ 1375.433054][T13423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1375.433081][T13423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1375.433118][T13423] ? down_read+0x2be/0x330 [ 1375.433172][T13423] genl_rcv+0x28/0x40 [ 1375.433196][T13423] netlink_unicast+0x7bb/0x940 [ 1375.433228][T13423] netlink_sendmsg+0x813/0xb40 [ 1375.433261][T13423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.433288][T13423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1375.433318][T13423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1375.433338][T13423] sock_sendmsg_nosec+0x13a/0x180 [ 1375.433396][T13423] ____sys_sendmsg+0x54e/0x850 [ 1375.433422][T13423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1375.433452][T13423] ? import_iovec+0x73/0xa0 [ 1375.433477][T13423] ___sys_sendmsg+0x2a5/0x360 [ 1375.433497][T13423] ? __lock_acquire+0x683/0x2cf0 [ 1375.433523][T13423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1375.433585][T13423] ? __fget_files+0x2a/0x420 [ 1375.433604][T13423] ? __fget_files+0x3a2/0x420 [ 1375.433635][T13423] __x64_sys_sendmsg+0x1b1/0x290 [ 1375.433660][T13423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1375.433702][T13423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.433724][T13423] do_syscall_64+0x174/0x580 [ 1375.433742][T13423] ? trace_irq_disable+0x3b/0x140 [ 1375.433762][T13423] ? clear_bhb_loop+0x40/0x90 [ 1375.433787][T13423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.433806][T13423] RIP: 0033:0x7fc69cf9ce59 [ 1375.433825][T13423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.433849][T13423] RSP: 002b:00007fc69ddbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1375.433870][T13423] RAX: ffffffffffffffda RBX: 00007fc69d216090 RCX: 00007fc69cf9ce59 [ 1375.433885][T13423] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1375.433898][T13423] RBP: 00007fc69ddbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.433911][T13423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.433922][T13423] R13: 00007fc69d216128 R14: 00007fc69d216090 R15: 00007ffc07f4ea28 [ 1375.433955][T13423] [ 1376.629549][T12259] Bluetooth: hci1: command tx timeout [ 1376.876180][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9355'. [ 1377.675241][T13290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.703746][T13290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.781035][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9355'. [ 1377.801013][T13153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.810894][T13153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.935983][T13290] team0: Port device netdevsim1 removed [ 1377.984920][T13461] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9357'. [ 1378.009301][T13290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.024333][T13290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.054230][T13153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.079130][T13153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.192038][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9358'. [ 1378.215053][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9358'. [ 1378.242576][T13290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1378.248411][T13470] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9359'. [ 1378.254859][T13465] netlink: 58 bytes leftover after parsing attributes in process `syz.2.9358'. [ 1378.275147][T13290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.301686][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9359'. [ 1378.595818][T13476] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9361'. [ 1378.710046][T12259] Bluetooth: hci1: command tx timeout [ 1379.002117][T13290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1379.055278][T13290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1379.078284][T13290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1379.114636][T13290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1379.146181][ T1475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.165385][ T1475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.188654][T13493] syzkaller0: entered promiscuous mode [ 1379.204279][T13493] syzkaller0: entered allmulticast mode [ 1379.223886][T13290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1379.242222][T13290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1379.259413][ T1475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.288754][ T1475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1379.381350][T13290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1379.414018][T13290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1379.674483][T13290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.747903][T13290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.788282][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.795509][T13154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.837333][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9369'. [ 1379.857331][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.864558][T13154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.661359][T13522] netlink: 'syz.2.9371': attribute type 21 has an invalid length. [ 1380.701846][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9371'. [ 1380.746708][T13522] netlink: 'syz.2.9371': attribute type 1 has an invalid length. [ 1381.678425][T13555] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1381.692955][T13290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.934590][T13290] veth0_vlan: entered promiscuous mode [ 1381.966784][T13290] veth1_vlan: entered promiscuous mode [ 1382.082083][T13290] veth0_macvtap: entered promiscuous mode [ 1382.118712][T13290] veth1_macvtap: entered promiscuous mode [ 1382.184585][T13290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.210072][T13568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.227473][T13290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1382.286405][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.426209][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.446586][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.522896][T13587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.628030][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.989365][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.020299][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.147770][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.182676][T13612] __nla_validate_parse: 5 callbacks suppressed [ 1383.182720][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9391'. [ 1383.203439][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.234237][T13612] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9391'. [ 1383.271537][T13612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9391'. [ 1383.515895][T13623] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1384.191665][T13646] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9395'. [ 1384.453438][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1384.473087][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1384.488753][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1384.502970][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1384.511356][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1384.639396][T13655] netlink: 'syz.0.9398': attribute type 24 has an invalid length. [ 1384.656100][T13655] pimreg9: entered allmulticast mode [ 1384.761455][T13665] netlink: 'syz.0.9400': attribute type 1 has an invalid length. [ 1384.787487][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1385.412520][T13679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1385.436152][T13672] lo speed is unknown, defaulting to 1000 [ 1385.957765][T13708] sctp: [Deprecated]: syz.3.9411 (pid 13708) Use of int in maxseg socket option. [ 1385.957765][T13708] Use struct sctp_assoc_value instead [ 1385.998324][T13652] lo speed is unknown, defaulting to 1000 [ 1386.550308][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1386.631293][ T50] Bluetooth: hci3: command tx timeout [ 1386.744939][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9416'. [ 1386.867181][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1386.880551][T13739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1387.027031][T13739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1387.139889][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.148105][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.157505][T13652] bridge_slave_0: entered allmulticast mode [ 1387.167621][T13652] bridge_slave_0: entered promiscuous mode [ 1387.203605][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.218743][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.228064][T13652] bridge_slave_1: entered allmulticast mode [ 1387.250451][T13652] bridge_slave_1: entered promiscuous mode [ 1387.429885][T13652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.453011][T13652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.530318][T13652] team0: Port device team_slave_0 added [ 1388.711936][ T50] Bluetooth: hci3: command tx timeout [ 1390.044663][T13751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1390.806078][ T50] Bluetooth: hci3: command tx timeout [ 1392.022039][T13652] team0: Port device team_slave_1 added [ 1392.235009][T13652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.257847][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.309124][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1392.327110][T13652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.345074][T13652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.361437][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.420717][T13652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.476771][T13777] veth0_macvtap: left promiscuous mode [ 1392.477662][T13785] x_tables: duplicate underflow at hook 1 [ 1392.628653][T13796] netlink: 'syz.3.9428': attribute type 1 has an invalid length. [ 1392.737136][T13799] __nla_validate_parse: 1 callbacks suppressed [ 1392.737155][T13799] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1392.841191][T13803] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1392.869719][ T50] Bluetooth: hci3: command tx timeout [ 1392.917163][T13796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1393.087191][T13810] netlink: 'syz.1.9432': attribute type 1 has an invalid length. [ 1393.088112][T13652] hsr_slave_0: entered promiscuous mode [ 1393.135069][T13652] hsr_slave_1: entered promiscuous mode [ 1393.144642][T13652] debugfs: 'hsr0' already exists in 'hsr' [ 1393.150404][T13652] Cannot create hsr debugfs directory [ 1393.536361][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1394.071512][T13854] bridge3: entered allmulticast mode [ 1394.102967][T13840] lo speed is unknown, defaulting to 1000 [ 1394.456452][T13652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.667097][T13863] IPVS: Error connecting to the multicast addr [ 1394.771910][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1394.847375][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1394.952684][T13652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.037721][ T5290] veth0_macvtap: entered promiscuous mode [ 1395.052425][ T5290] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1395.218618][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1395.242862][T13652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.305289][T31046] IPVS: starting estimator thread 0... [ 1395.352095][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9455'. [ 1395.409929][T13905] IPVS: using max 39 ests per chain, 93600 per kthread [ 1395.424071][T13652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.461886][T13907] vlan2: entered promiscuous mode [ 1395.467001][T13907] bridge0: entered promiscuous mode [ 1395.952203][T13922] netlink: 'syz.4.9459': attribute type 29 has an invalid length. [ 1395.990130][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1396.311162][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9461'. [ 1396.835242][T13652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1396.882095][T13652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.914186][T13652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1396.953170][T13652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.989458][T13955] IPv6: sit1: Disabled Multicast RS [ 1397.024297][T13652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1397.126464][T13652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.148493][T13652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1397.217184][T13652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.284699][T13963] bond1 (unregistering): Released all slaves [ 1397.318329][T13971] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 1397.684655][T13652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.732533][T13652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.747094][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.754615][T13154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.786996][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.796026][T13154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.296389][T14011] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1398.732695][T14032] netlink: 'syz.3.9479': attribute type 1 has an invalid length. [ 1398.783724][T14032] bond3: (slave geneve3): making interface the new active one [ 1398.797242][T14032] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1398.809868][T14032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1398.824229][T13154] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 20000 - 0 [ 1398.837682][T13154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1398.876432][T14032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1398.904929][T13154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1398.922849][T13154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1399.033804][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9480'. [ 1399.115927][T13652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.140842][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9480'. [ 1399.242282][T13652] veth0_vlan: entered promiscuous mode [ 1399.267238][T13652] veth1_vlan: entered promiscuous mode [ 1399.443429][T13652] veth0_macvtap: entered promiscuous mode [ 1399.478563][T13652] veth1_macvtap: entered promiscuous mode [ 1399.550031][T13652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.594513][T13652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.655151][ T201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.672713][ T201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.695473][ T201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.738496][T14067] netlink: 'syz.1.9485': attribute type 13 has an invalid length. [ 1399.760381][ T201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.241864][T13153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.279198][T13153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.340201][T16054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.357794][T16054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.376869][T13153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.400854][T13153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.403751][T14082] atomic_op ffff88805456f998 conn xmit_atomic 0000000000000000 [ 1401.304153][T14109] syzkaller0: entered promiscuous mode [ 1401.333002][T14109] syzkaller0: entered allmulticast mode [ 1401.376508][T14109] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1401.536437][T14124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1401.570616][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9493'. [ 1402.332399][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1402.364601][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1402.618622][T14150] netlink: 2780 bytes leftover after parsing attributes in process `syz.0.9500'. [ 1403.007080][T14172] netlink: 'syz.3.9505': attribute type 4 has an invalid length. [ 1403.833933][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1403.858414][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1404.066966][T14214] xfrm1: entered allmulticast mode [ 1404.548120][T14237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1404.642822][T14239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1404.653075][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9521'. [ 1404.677361][T14239] netlink: 830 bytes leftover after parsing attributes in process `syz.4.9521'. [ 1404.851353][T14251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1405.150666][T14261] lo speed is unknown, defaulting to 1000 [ 1412.799409][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1417.279664][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1417.916491][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1433.660573][ T50] Bluetooth: hci3: link tx timeout [ 1433.666728][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.749092][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1436.526046][T14336] netlink: 'syz.1.9530': attribute type 3 has an invalid length. [ 1436.721363][T14354] netlink: 'syz.3.9535': attribute type 3 has an invalid length. [ 1436.741615][T14354] netlink: 'syz.3.9535': attribute type 1 has an invalid length. [ 1436.767910][T14354] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9535'. [ 1437.050884][T14367] lo: Caught tx_queue_len zero misconfig [ 1437.278656][T16054] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.305877][T16054] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.335895][T16054] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.370092][T16054] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.580504][T14400] netlink: zone id is out of range [ 1437.585788][T14400] netlink: del zone limit has 4 unknown bytes [ 1437.612853][T14403] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 1437.627666][T14403] bond5 (unregistering): Released all slaves [ 1437.721399][T14401] lo speed is unknown, defaulting to 1000 [ 1437.810713][T14410] netlink: 'syz.1.9552': attribute type 13 has an invalid length. [ 1437.842582][T14412] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1437.846994][T14410] netlink: 'syz.1.9552': attribute type 17 has an invalid length. [ 1437.925030][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9553'. [ 1437.935769][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.944653][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.021727][T14418] sctp: [Deprecated]: syz.3.9555 (pid 14418) Use of int in max_burst socket option. [ 1438.021727][T14418] Use struct sctp_assoc_value instead [ 1438.084099][T14407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.153670][T14407] tipc: Resetting bearer [ 1438.355335][T14421] netlink: 'syz.0.9556': attribute type 11 has an invalid length. [ 1438.364880][T14421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9556'. [ 1438.383549][T14421] netlink: 'syz.0.9556': attribute type 10 has an invalid length. [ 1438.383716][T14422] netlink: 'syz.0.9556': attribute type 10 has an invalid length. [ 1438.430108][T14410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.441902][T14410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.456577][T14410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1438.510240][T14410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.517493][T14410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.532441][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.539747][T14410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.575164][T14410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.612735][T14410] veth1_vlan: left promiscuous mode [ 1438.620827][T14410] veth0_vlan: left promiscuous mode [ 1438.632146][T14410] veth0_vlan: entered promiscuous mode [ 1438.643453][T14410] veth1_vlan: entered promiscuous mode [ 1438.664480][T14410] veth1_macvtap: left promiscuous mode [ 1438.675570][T14410] veth1_macvtap: entered promiscuous mode [ 1438.690164][T14410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.704720][T14410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1438.720933][T14410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1438.733514][T14410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1438.745641][T14410] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 1438.753123][T14410] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 1438.760699][T14410] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1438.894583][ T1473] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.924475][ T1473] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1438.975842][T14421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1438.991856][T14421] team0: Port device netdevsim1 added [ 1439.004984][ T1473] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.032253][ T1473] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1439.075299][ T1473] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.122497][ T1473] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1439.125084][T14437] netlink: 'syz.4.9560': attribute type 1 has an invalid length. [ 1439.195668][ T1473] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.233161][ T1473] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1439.258465][T14437] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1439.307658][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9562'. [ 1439.791741][T14464] syzkaller0: entered promiscuous mode [ 1439.815522][T14464] syzkaller0: entered allmulticast mode [ 1440.167452][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9571'. [ 1440.212302][T14475] tipc: Started in network mode [ 1440.219805][T14475] tipc: Node identity 6203a376b441, cluster identity 4711 [ 1440.245919][T14475] tipc: Enabled bearer , priority 0 [ 1440.353863][T14462] tipc: Resetting bearer [ 1440.437253][T14462] tipc: Disabling bearer [ 1441.025701][T14518] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9578'. [ 1441.179937][T14508] lo speed is unknown, defaulting to 1000 [ 1442.228020][T14563] netlink: 'syz.2.9592': attribute type 18 has an invalid length. [ 1442.281102][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9591'. [ 1442.327534][T14555] syzkaller0: entered promiscuous mode [ 1442.339669][T14555] syzkaller0: entered allmulticast mode [ 1442.433148][ T201] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.460022][ T201] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.506649][ T201] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.317295][ T201] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1443.468032][T14597] bridge3: entered promiscuous mode [ 1443.726100][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1448.253397][T14622] netlink: 280 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1449.106521][T14668] netlink: zone id is out of range [ 1449.614175][T14683] ipvlan2: entered allmulticast mode [ 1449.642167][T14683] syz_tun: entered allmulticast mode [ 1449.767145][T14688] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9619'. [ 1449.789488][T14686] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1449.818828][T14692] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9618'. [ 1449.937314][T14688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1450.074156][T14702] netlink: 'syz.3.9620': attribute type 12 has an invalid length. [ 1450.664128][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9627'. [ 1450.698379][T14721] nbd: couldn't find a device at index 65546 [ 1451.252168][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1451.290473][T14738] Bluetooth: MGMT ver 1.23 [ 1451.351594][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9634'. [ 1451.423488][T14744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1451.455305][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1452.168428][T14767] netlink: 'syz.1.9639': attribute type 21 has an invalid length. [ 1452.209352][T14767] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1452.253963][T14767] netlink: 'syz.1.9639': attribute type 5 has an invalid length. [ 1453.332355][T14802] __nla_validate_parse: 2 callbacks suppressed [ 1453.332406][T14802] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9649'. [ 1453.613928][T14806] gtp0: entered allmulticast mode [ 1453.784034][T14812] netlink: 'syz.3.9651': attribute type 4 has an invalid length. [ 1454.184765][T14819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9655'. [ 1454.267084][T14824] nbd: couldn't find a device at index 2 [ 1454.528385][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1454.560959][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1454.637769][T14829] ipt_ECN: cannot use operation on non-tcp rule [ 1454.765947][T14829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.834877][T14829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.205429][T14867] xt_CT: No such helper "snmp_trap" [ 1456.257211][T14867] netdevsim0: mtu less than device minimum [ 1456.417051][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9668'. [ 1456.448020][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1456.455992][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1456.472238][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1456.480521][T14873] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1456.499309][T14873] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1456.592273][T14873] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1456.665351][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9669'. [ 1456.725483][T14876] IPv6: NLM_F_CREATE should be specified when creating new route [ 1456.773850][T14873] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1457.551618][T14900] netlink: 'syz.0.9675': attribute type 4 has an invalid length. [ 1457.576692][T14900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1458.028049][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.036551][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.278296][T14874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.295606][T14874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.571589][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1458.646719][T13154] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.691554][T13154] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.721146][T13154] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.750211][T13154] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.769274][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1458.806288][T14910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9676'. [ 1458.955042][T13154] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.990086][T13154] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.012697][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.031040][T13154] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.055315][T13154] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.065932][T14912] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1459.082290][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.105465][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.143825][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.191286][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.215602][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.261731][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.448126][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.510679][T14873] wlan0 speed is unknown, defaulting to 1000 [ 1459.996415][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1460.040423][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1460.742141][T14956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9686'. [ 1461.112198][T14962] netlink: 'syz.4.9689': attribute type 13 has an invalid length. [ 1461.139859][T14962] netlink: 'syz.4.9689': attribute type 17 has an invalid length. [ 1461.686451][T14978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1461.768661][T14962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.777857][T14861] udevd[14861]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1461.802772][T14962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.833941][T14962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.960752][T14962] bond_slave_0: entered promiscuous mode [ 1462.020824][T14962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.054013][T14962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1462.066125][T14962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1462.117853][T14962] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1462.180295][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.188363][T13154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.221422][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.229432][T13154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.472635][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9696'. [ 1462.816222][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9698'. [ 1463.078113][T15014] netlink: 34 bytes leftover after parsing attributes in process `syz.4.9701'. [ 1463.262468][T15022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.978278][T15045] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1464.058093][T15045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9708'. [ 1464.067791][T15049] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9709'. [ 1464.075105][T15049] syzkaller0: entered promiscuous mode [ 1464.088503][T15049] syzkaller0: entered allmulticast mode [ 1464.142413][T15050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1464.202739][T15050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1464.624551][T15066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9715'. [ 1464.691961][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9715'. [ 1464.760499][ T141] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1464.852818][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9716'. [ 1464.858312][T15070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.874664][T15070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.896034][T15070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.924571][T15086] netlink: 'syz.3.9714': attribute type 1 has an invalid length. [ 1464.939909][T15086] netlink: 'syz.3.9714': attribute type 2 has an invalid length. [ 1465.135087][T15070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1465.160549][T15070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1465.184822][T15070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1465.492394][T15097] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9719'. [ 1465.518384][T15087] bond1: entered promiscuous mode [ 1465.524391][T15087] bond1: entered allmulticast mode [ 1465.551879][T15067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1466.070739][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1466.171367][T15108] netlink: 'syz.3.9723': attribute type 1 has an invalid length. [ 1466.276196][T15108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1466.529450][T15113] bond5: (slave ip6gretap1): making interface the new active one [ 1466.567451][T15113] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1466.611303][T15127] batman_adv: batadv0: Adding interface: vlan2 [ 1466.622796][T15127] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.656019][T15127] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1467.132290][ T29] audit: type=1804 audit(1782720320.477:40): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9728" name="/newroot/44/cgroup.controllers" dev="tmpfs" ino=243 res=1 errno=0 [ 1467.281921][ T29] audit: type=1800 audit(1782720320.497:41): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9728" name="cgroup.controllers" dev="tmpfs" ino=243 res=0 errno=0 [ 1467.353836][T15135] syzkaller0: entered promiscuous mode [ 1467.361410][T15135] syzkaller0: entered allmulticast mode [ 1467.782487][T15171] Bluetooth: MGMT ver 1.23 [ 1473.470762][T15144] tipc: Started in network mode [ 1473.476235][T15144] tipc: Node identity ac1414aa, cluster identity 4711 [ 1473.486161][T15144] tipc: Enabled bearer , priority 26 [ 1473.925400][T15175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9738'. [ 1474.067758][T15179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1474.601763][T15359] tipc: Node number set to 2886997162 [ 1474.985152][T15216] --map-set only usable from mangle table [ 1475.563237][T15232] xfrm1: left allmulticast mode [ 1475.637983][T15232] bond1: left promiscuous mode [ 1475.671886][T15232] bond1: left allmulticast mode [ 1476.082232][T15247] lo speed is unknown, defaulting to 1000 [ 1476.099962][T15253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1476.159335][T15247] wlan0 speed is unknown, defaulting to 1000 [ 1476.182365][T15254] netlink: 'syz.2.9757': attribute type 11 has an invalid length. [ 1476.504450][T15253] netlink: 'syz.1.9756': attribute type 21 has an invalid length. [ 1476.521002][T15253] netlink: 'syz.1.9756': attribute type 22 has an invalid length. [ 1476.534780][T15253] netlink: 'syz.1.9756': attribute type 23 has an invalid length. [ 1476.565178][T15253] netlink: 'syz.1.9756': attribute type 25 has an invalid length. [ 1476.577260][T15253] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9756'. [ 1476.754870][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9760'. [ 1476.927606][T15276] netlink: 'syz.4.9762': attribute type 1 has an invalid length. [ 1476.967812][T15276] netlink: 'syz.4.9762': attribute type 2 has an invalid length. [ 1477.544881][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9764'. [ 1478.215523][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9768'. [ 1478.655274][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9775'. [ 1479.141252][T15335] tipc: Enabled bearer , priority 0 [ 1479.151266][T15296] netlink: 'syz.0.9765': attribute type 4 has an invalid length. [ 1479.209757][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1479.234901][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1479.250393][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1479.331901][T15335] syzkaller0: entered promiscuous mode [ 1479.341761][T15347] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1479.354796][T15335] syzkaller0: entered allmulticast mode [ 1479.376224][T15335] tipc: Resetting bearer [ 1479.575564][T15339] tipc: Resetting bearer [ 1479.715622][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9781'. [ 1479.808427][T15357] netlink: 'syz.4.9781': attribute type 1 has an invalid length. [ 1480.692980][T15377] netlink: 'syz.2.9786': attribute type 21 has an invalid length. [ 1480.714554][T15377] IPv6: NLM_F_CREATE should be specified when creating new route [ 1480.895559][T15385] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9788'. [ 1480.906213][ T29] audit: type=1800 audit(1782720334.247:42): pid=15384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9789" name="r" dev="tmpfs" ino=374 res=0 errno=0 [ 1484.477122][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1486.316302][T15339] tipc: Disabling bearer [ 1486.334701][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1486.344848][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1486.354980][T15358] netlink: 'syz.1.9782': attribute type 6 has an invalid length. [ 1486.550278][T12259] Bluetooth: hci5: command 0x0406 tx timeout [ 1486.687851][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9791'. [ 1486.762398][T15397] netlink: 'syz.0.9792': attribute type 1 has an invalid length. [ 1486.858537][T15397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1486.914900][T15398] vlan2: entered allmulticast mode [ 1486.921626][T15398] bond2: entered allmulticast mode [ 1486.990575][T15397] bond2: (slave geneve2): making interface the new active one [ 1487.012026][T15397] geneve2: entered allmulticast mode [ 1487.023604][T15409] netlink: 'syz.3.9795': attribute type 4 has an invalid length. [ 1487.107586][T15409] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9795'. [ 1487.124599][T15394] can: request_module (can-proto-0) failed. [ 1487.133302][T15397] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1487.538701][T15422] Cannot find add_set index 1 as target [ 1487.578376][T15422] netlink: 'syz.0.9798': attribute type 4 has an invalid length. [ 1487.622325][T15422] netlink: 'syz.0.9798': attribute type 4 has an invalid length. [ 1487.696483][T15424] bridge0: port 3(dummy0) entered blocking state [ 1487.711449][T15424] bridge0: port 3(dummy0) entered disabled state [ 1487.723846][T15422] "syz.0.9798" (15422) uses obsolete ecb(arc4) skcipher [ 1487.733846][T15424] dummy0: entered allmulticast mode [ 1487.818570][T15424] dummy0: entered promiscuous mode [ 1487.938664][T15424] bridge0: port 3(dummy0) entered blocking state [ 1487.945985][T15424] bridge0: port 3(dummy0) entered forwarding state [ 1488.050509][T15428] dummy0: left allmulticast mode [ 1488.077392][T15428] dummy0: left promiscuous mode [ 1488.107326][T15428] bridge0: port 3(dummy0) entered disabled state [ 1488.345200][T15440] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1488.832744][T15447] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1489.094205][T15450] netlink: 'syz.1.9803': attribute type 11 has an invalid length. [ 1489.251342][T15457] openvswitch: netlink: Actions may not be safe on all matching packets [ 1489.369661][T15451] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1489.817815][T15469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1489.853268][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1489.891221][T15469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1489.935129][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1489.994180][T15469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1490.036343][T15476] netlink: 404 bytes leftover after parsing attributes in process `syz.1.9810'. [ 1490.274251][T15474] bond2: entered promiscuous mode [ 1490.300002][T15474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1490.705916][T15490] IPVS: Error connecting to the multicast addr [ 1490.736990][T15495] vlan0: entered promiscuous mode [ 1491.032032][T15505] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1491.096097][T15500] syzkaller0: entered promiscuous mode [ 1491.103905][T15500] syzkaller0: entered allmulticast mode [ 1498.466770][T15515] tipc: Enabling of bearer rejected, failed to enable media [ 1498.861185][T15548] __nla_validate_parse: 5 callbacks suppressed [ 1498.861229][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9829'. [ 1499.042483][T15548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1499.057359][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9832'. [ 1499.065457][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9831'. [ 1499.117344][T15554] gretap2: entered allmulticast mode [ 1499.167306][T15548] netlink: 'syz.3.9829': attribute type 1 has an invalid length. [ 1499.198782][T15554] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 1499.642246][T15578] bridge0: port 3(ipvlan2) entered blocking state [ 1499.664634][T15586] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1499.686431][T15578] bridge0: port 3(ipvlan2) entered disabled state [ 1499.693181][T15578] ipvlan2: entered allmulticast mode [ 1499.713565][T15578] bridge0: entered allmulticast mode [ 1499.769830][T15578] ipvlan2: left allmulticast mode [ 1499.791584][T15578] bridge0: left allmulticast mode [ 1500.314452][T15605] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1500.328829][T15604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1500.806870][T15617] veth1_to_hsr: entered promiscuous mode [ 1500.844352][T15617] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9843'. [ 1500.856708][T15617] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1500.973783][T15627] netlink: 'syz.3.9846': attribute type 1 has an invalid length. [ 1501.237870][T15634] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1501.322906][T15631] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9846'. [ 1501.652569][T15627] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1501.665810][T15627] bond7: (slave bond8): making interface the new active one [ 1501.676550][T15627] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1501.742806][T15636] dummy0: entered promiscuous mode [ 1501.772103][T15636] macvlan2: entered allmulticast mode [ 1501.788849][T15636] dummy0: entered allmulticast mode [ 1502.075708][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9853'. [ 1502.693897][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1503.084968][T15681] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9860'. [ 1503.096858][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.104214][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.475349][T15711] __nla_validate_parse: 2 callbacks suppressed [ 1504.475384][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9865'. [ 1504.628710][T15716] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9866'. [ 1504.684590][T15716] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9866'. [ 1506.736646][T15756] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9876'. [ 1507.003512][T15737] Set syz1 is full, maxelem 4037 reached [ 1507.030017][T12722] Bluetooth: hci1: command 0x0406 tx timeout [ 1507.733874][T15776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9882'. [ 1507.866872][T15783] netlink: 'syz.3.9884': attribute type 1 has an invalid length. [ 1507.908103][T15771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1507.983343][T15771] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1508.413802][T15785] bond3: entered allmulticast mode [ 1508.425662][T15785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1508.484642][T15782] syzkaller0: entered promiscuous mode [ 1508.540345][T15782] syzkaller0: entered allmulticast mode [ 1508.540772][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1508.600314][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1508.734431][T15786] tipc: Enabled bearer , priority 0 [ 1508.995404][T15780] tipc: Resetting bearer [ 1509.117776][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9889'. [ 1509.118263][T15780] tipc: Disabling bearer [ 1509.234949][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1509.365870][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1509.515385][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9890'. [ 1510.071473][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1511.174082][T15872] syzkaller0: entered promiscuous mode [ 1511.199194][T15872] syzkaller0: entered allmulticast mode [ 1511.323978][T15877] dvmrp0: entered allmulticast mode [ 1511.706419][T15888] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9908'. [ 1512.014429][T15897] siw: device registration error -23 [ 1512.284433][T15903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9912'. [ 1512.437205][T15905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9912'. [ 1512.567931][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1512.632051][T15916] syzkaller0: entered promiscuous mode [ 1512.652502][T15916] syzkaller0: entered allmulticast mode [ 1513.216284][T15927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.331015][T15927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.554531][T15938] netlink: 'syz.1.9924': attribute type 27 has an invalid length. [ 1513.622294][T15942] IPVS: Error connecting to the multicast addr [ 1513.958766][T15945] lo speed is unknown, defaulting to 1000 [ 1514.003830][T15945] wlan0 speed is unknown, defaulting to 1000 [ 1514.230493][T15958] netlink: 'syz.0.9929': attribute type 1 has an invalid length. [ 1514.263199][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1514.471346][T15964] netlink: 'syz.2.9931': attribute type 1 has an invalid length. [ 1514.578462][T15958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1515.125486][T15968] can: request_module (can-proto-0) failed. [ 1515.174720][T15975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9932'. [ 1515.298299][T15966] bond2: (slave geneve2): making interface the new active one [ 1515.317855][T15966] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1515.504161][ T1473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1515.530962][T15978] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9933'. [ 1515.557079][ T1473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1515.609537][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9933'. [ 1515.651809][ T1473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1515.694731][ T1473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1516.548572][T16005] netlink: 'syz.3.9941': attribute type 4 has an invalid length. [ 1516.625485][T16002] netlink: 'syz.3.9941': attribute type 4 has an invalid length. [ 1516.906105][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9945'. [ 1517.136408][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9947'. [ 1517.148327][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1517.173176][T16018] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1517.450038][T16039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1517.599565][T16057] netlink: 'syz.0.9951': attribute type 23 has an invalid length. [ 1517.645312][T16059] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1517.689716][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9953'. [ 1517.901342][T16060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1517.973394][T16068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.184760][T16057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.496941][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9959'. [ 1518.525393][T16086] lo speed is unknown, defaulting to 1000 [ 1518.586993][T16086] wlan0 speed is unknown, defaulting to 1000 [ 1519.877796][T16114] bond3: option xmit_hash_policy: invalid value (10) [ 1519.939805][T16114] bond3 (unregistering): Released all slaves [ 1520.308480][T16143] openvswitch: netlink: Message has 4 unknown bytes. [ 1520.322711][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1520.392246][T16143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1521.085273][T16160] sctp: [Deprecated]: syz.3.9971 (pid 16160) Use of int in maxseg socket option. [ 1521.085273][T16160] Use struct sctp_assoc_value instead [ 1521.251219][T16170] netlink: 'syz.0.9976': attribute type 1 has an invalid length. [ 1521.265937][T16170] __nla_validate_parse: 2 callbacks suppressed [ 1521.265955][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9976'. [ 1521.543318][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9977'. [ 1522.138632][T16189] lo speed is unknown, defaulting to 1000 [ 1522.224292][T16189] wlan0 speed is unknown, defaulting to 1000 [ 1522.483532][T16204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1523.126351][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9986'. [ 1523.158535][T16213] netlink: 'syz.3.9986': attribute type 5 has an invalid length. [ 1523.182777][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9986'. [ 1523.259670][T16213] geneve4: entered promiscuous mode [ 1523.276269][T16213] geneve4: entered allmulticast mode [ 1523.301336][T16033] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 44373 - 0 [ 1523.325753][T16033] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 44373 - 0 [ 1523.368163][T16033] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 44373 - 0 [ 1523.404853][T16033] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 44373 - 0 [ 1523.520147][T16189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9980'. [ 1523.663564][T16189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1523.754639][T16227] gre1: entered promiscuous mode [ 1524.156086][T15359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.171915][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.858226][T16250] netlink: 'syz.1.9994': attribute type 1 has an invalid length. [ 1525.060176][T16250] bond3: entered promiscuous mode [ 1525.066296][T16250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1525.370734][T16250] vlan2: entered allmulticast mode [ 1525.410652][T16250] bond3: entered allmulticast mode [ 1525.432439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.602472][T16259] bridge4: entered promiscuous mode [ 1525.677914][T16271] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9999'. [ 1525.689448][T16259] bridge4: entered allmulticast mode [ 1525.731425][T16259] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1526.158466][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10002'. [ 1526.207684][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10002'. [ 1526.813156][T16297] ip6tnl1: entered allmulticast mode [ 1527.496848][T16307] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10011'. [ 1527.930262][T16312] netlink: 'syz.2.10013': attribute type 11 has an invalid length. [ 1529.635525][ T50] Bluetooth: hci3: link tx timeout [ 1529.642435][ T50] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1531.020743][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10016'. [ 1531.166469][T16334] netlink: 'syz.4.10017': attribute type 11 has an invalid length. [ 1531.231998][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10019'. [ 1531.677455][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1532.601770][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10022'. [ 1532.641823][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10022'. [ 1533.570468][T16401] netlink: 'syz.4.10029': attribute type 1 has an invalid length. [ 1533.752924][T15359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.782760][T16402] erspan1: entered allmulticast mode [ 1534.023266][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1534.033967][T16423] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1534.267388][T16427] netlink: 'syz.1.10033': attribute type 1 has an invalid length. [ 1534.494118][T16425] netlink: 'syz.2.10030': attribute type 1 has an invalid length. [ 1534.513773][T16425] netlink: 'syz.2.10030': attribute type 2 has an invalid length. [ 1534.602689][T16427] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1534.836495][T16432] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1534.907502][T16434] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1534.923287][T16449] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1534.936361][T16434] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1535.275531][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10040'. [ 1535.699265][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1536.133649][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10049'. [ 1537.207353][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10057'. [ 1537.344533][T16523] tipc: New replicast peer: 172.20.20.187 [ 1537.391364][T16523] tipc: Enabled bearer , priority 26 [ 1537.864146][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10064'. [ 1537.911532][T16543] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1537.950301][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10064'. [ 1538.128588][T15359] IPVS: starting estimator thread 0... [ 1538.332974][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10068'. [ 1538.350085][T16552] IPVS: using max 28 ests per chain, 67200 per kthread [ 1538.578669][T16560] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1539.049829][T16580] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1539.070770][T16580] syzkaller1: linktype set to 773 [ 1539.094781][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10073'. [ 1540.023289][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10083'. [ 1540.059380][T16616] netlink: 15 bytes leftover after parsing attributes in process `syz.1.10083'. [ 1540.179666][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10084'. [ 1540.555276][T16629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10085'. [ 1540.617297][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10085'. [ 1541.121914][T16646] "syz.1.10088" (16646) uses obsolete ecb(arc4) skcipher [ 1541.746393][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10090'. [ 1541.987992][T16664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.080798][T16664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.186679][T16664] bond0 (unregistering): Released all slaves [ 1542.755581][T16679] macsec1: entered promiscuous mode [ 1542.953405][T16678] bond9: option arp_all_targets: invalid value (3) [ 1542.976011][T16678] bond9 (unregistering): Released all slaves [ 1543.248100][T16686] xt_l2tp: unknown flags: 51 [ 1543.372643][ T7371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.385588][T15359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.931301][T16715] __nla_validate_parse: 4 callbacks suppressed [ 1543.931335][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10104'. [ 1544.026483][T16718] netlink: 'syz.2.10105': attribute type 1 has an invalid length. [ 1544.071610][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10104'. [ 1544.120334][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10104'. [ 1544.146354][T16718] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1544.585197][T16734] netlink: 'syz.2.10108': attribute type 1 has an invalid length. [ 1544.689308][T16734] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10108'. [ 1544.836209][T16740] lo speed is unknown, defaulting to 1000 [ 1544.880227][T16740] wlan0 speed is unknown, defaulting to 1000 [ 1544.953857][T16752] netlink: 'syz.0.10111': attribute type 6 has an invalid length. [ 1544.994811][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1545.099340][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1545.264864][T16759] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1545.560210][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1545.597606][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1545.831174][T16763] xt_TCPMSS: Only works on TCP SYN packets [ 1545.912051][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1546.460217][T16770] lo speed is unknown, defaulting to 1000 [ 1546.564868][T16770] wlan0 speed is unknown, defaulting to 1000 [ 1546.602297][T16782] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1547.770386][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10122'. [ 1549.142355][T16840] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10125'. [ 1549.469714][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10126'. [ 1549.717420][T16851] syzkaller0: entered promiscuous mode [ 1549.759820][T16851] syzkaller0: entered allmulticast mode [ 1550.109826][T16863] netlink: 524 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1551.303887][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10132'. [ 1551.655603][T16895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10135'. [ 1551.831633][T16895] ip6gre2: entered promiscuous mode [ 1551.864963][T16895] ip6gre2: entered allmulticast mode [ 1551.905170][ T5884] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1551.972819][ T5884] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1551.982136][T31046] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1552.343027][T16913] netlink: 207236 bytes leftover after parsing attributes in process `syz.4.10138'. [ 1552.440937][T31046] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1552.502324][T31046] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1552.951361][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.308537][T16941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10143'. [ 1554.380282][T16972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1554.388365][T16972] IPv6: NLM_F_CREATE should be set when creating new route [ 1554.396507][T16972] IPv6: NLM_F_CREATE should be set when creating new route [ 1554.404585][T16972] IPv6: NLM_F_CREATE should be set when creating new route [ 1554.667014][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10155'. [ 1554.707310][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10157'. [ 1554.812991][T16983] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1554.816268][T16981] xt_TCPMSS: Only works on TCP SYN packets [ 1554.820727][T16983] block (null): Could not allocate knbd recv work queue. [ 1554.920653][T16983] nbd: failed to add new device [ 1554.978154][T16993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.982611][T16981] bridge_slave_1: left allmulticast mode [ 1555.016126][T16981] bridge_slave_1: left promiscuous mode [ 1555.046040][T16981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.094585][T16981] bridge_slave_0: left allmulticast mode [ 1555.124141][T16981] bridge_slave_0: left promiscuous mode [ 1555.143804][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.245410][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1555.755766][T17002] lo speed is unknown, defaulting to 1000 [ 1555.801278][T17002] wlan0 speed is unknown, defaulting to 1000 [ 1555.829227][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1556.047832][T17008] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1556.454886][T17019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10166'. [ 1557.348295][T17028] netlink: 'syz.2.10169': attribute type 13 has an invalid length. [ 1558.007289][T17035] xt_hashlimit: size too large, truncated to 1048576 [ 1558.073182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.081891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.158638][T17036] tipc: Invalid UDP bearer configuration [ 1558.158744][T17036] tipc: Enabling of bearer rejected, failed to enable media [ 1558.460419][T17038] bond3: Removing last arp target with arp_interval on [ 1558.844078][T17046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10172'. [ 1559.135460][T17052] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10174'. [ 1559.325524][T17058] tipc: Enabling of bearer rejected, failed to enable media [ 1559.719788][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10178'. [ 1559.795036][T17073] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1559.834905][T17073] bond5 (unregistering): Released all slaves [ 1560.052042][T17083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.321571][T17091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10181'. [ 1560.750548][T17104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10186'. [ 1560.932614][T17111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10188'. [ 1561.338258][T16994] udevd[16994]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1561.492836][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10190'. [ 1561.524475][T17120] bond0: option resend_igmp: invalid value (18446744071564623876) [ 1561.548334][T17120] bond0: option resend_igmp: allowed values 0 - 255 [ 1561.692692][T17123] erspan0: entered promiscuous mode [ 1562.024636][T17134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10194'. [ 1562.036685][T17134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10194'. [ 1562.170199][T17099] erspan0: left promiscuous mode [ 1562.552930][T15359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.564320][ T7371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.750100][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10197'. [ 1563.422979][T17152] syzkaller0: entered promiscuous mode [ 1563.462276][T17152] syzkaller0: entered allmulticast mode [ 1563.576736][T17178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10202'. [ 1563.830311][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1563.841929][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1564.255558][T17202] netlink: 'syz.0.10209': attribute type 1 has an invalid length. [ 1564.481292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.490661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.048585][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10210'. [ 1565.051047][ T29] audit: type=1107 audit(1782720418.387:43): pid=17209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1570.265737][T17202] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1570.339665][T17206] team0: entered promiscuous mode [ 1570.363233][T17206] team_slave_0: entered promiscuous mode [ 1570.373255][T17206] team_slave_1: entered promiscuous mode [ 1570.380120][T17206] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1570.388691][T17206] team0: entered allmulticast mode [ 1570.402261][T17206] team_slave_0: entered allmulticast mode [ 1570.408689][T17206] team_slave_1: entered allmulticast mode [ 1570.422767][T17206] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1570.640716][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10211'. [ 1570.801806][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10214'. [ 1570.834814][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10211'. [ 1571.195927][T17220] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1571.316914][T17218] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1571.320186][T17243] x_tables: duplicate underflow at hook 2 [ 1571.343607][T13154] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.472073][T13154] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.492346][T13154] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.549199][T13154] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.758468][T17247] lo speed is unknown, defaulting to 1000 [ 1571.768570][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10219'. [ 1571.808743][T17247] wlan0 speed is unknown, defaulting to 1000 [ 1572.067062][T17263] geneve2: entered promiscuous mode [ 1572.152419][ T7371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.195909][ T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.248500][ T29] audit: type=1107 audit(1782720425.587:44): pid=17275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L ٩5{Q wm1P`\f' [ 1572.302558][ T62] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.314812][T17274] sock: sock_timestamping_bind_phc: sock not bind to device [ 1572.324882][ T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.352706][T17274] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10224'. [ 1572.363749][ T62] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.366009][T17261] lo speed is unknown, defaulting to 1000 [ 1572.374585][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10224'. [ 1572.437086][T17261] wlan0 speed is unknown, defaulting to 1000 [ 1572.905936][T17283] netlink: 'syz.4.10227': attribute type 1 has an invalid length. [ 1572.915667][T17283] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.10227'. [ 1572.934133][T17283] syzkaller0: entered promiscuous mode [ 1572.941277][T17283] syzkaller0: entered allmulticast mode [ 1573.485594][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1573.861320][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10233'. [ 1573.924473][T17296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.967239][T17310] bridge_slave_0: left allmulticast mode [ 1574.012097][T17310] bridge_slave_0: left promiscuous mode [ 1574.033513][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.085203][T17310] bridge_slave_1: left allmulticast mode [ 1574.097255][T17310] bridge_slave_1: left promiscuous mode [ 1574.103885][ T29] audit: type=1804 audit(1782720427.437:45): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10235" name="/newroot/320/cgroup.controllers" dev="tmpfs" ino=1670 res=1 errno=0 [ 1574.105974][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.186136][T17310] bond0: (slave bond_slave_0): Releasing backup interface [ 1574.188552][ T29] audit: type=1800 audit(1782720427.437:46): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10235" name="cgroup.controllers" dev="tmpfs" ino=1670 res=0 errno=0 [ 1574.258740][T17310] bond0: (slave bond_slave_1): Releasing backup interface [ 1574.343325][T17310] team0: Port device team_slave_0 removed [ 1574.405653][T17310] team0: Port device team_slave_1 removed [ 1574.436250][T17310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.485021][T17310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.517690][T17310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1575.092182][T17348] netlink: 'syz.4.10241': attribute type 1 has an invalid length. [ 1575.146882][T17351] sctp: [Deprecated]: syz.2.10242 (pid 17351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1575.146882][T17351] Use struct sctp_sack_info instead [ 1575.175721][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10241'. [ 1575.201416][T17348] bond3: entered promiscuous mode [ 1575.207214][T17348] bond3: entered allmulticast mode [ 1575.216944][T17348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1575.247449][T17352] macvlan2: entered promiscuous mode [ 1575.255155][T17352] macvlan2: entered allmulticast mode [ 1575.860891][T17378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10247'. [ 1577.497372][ T201] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1577.528506][ T201] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.741012][T17436] netlink: 'syz.2.10260': attribute type 5 has an invalid length. [ 1578.434993][T17462] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1578.683344][T17471] tipc: Enabled bearer , priority 0 [ 1578.707759][T17471] syzkaller0: entered promiscuous mode [ 1578.732202][T17471] syzkaller0: entered allmulticast mode [ 1578.916826][T17482] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1579.008704][T17471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10271'. [ 1579.083201][T17481] tipc: Resetting bearer [ 1579.150564][T17488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.199267][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1579.261953][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10275'. [ 1579.286948][T17470] tipc: Resetting bearer [ 1579.306942][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10275'. [ 1579.363261][T17470] tipc: Disabling bearer [ 1579.521780][T17493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1580.363807][T17511] xt_cgroup: invalid path, errno=-2 [ 1580.605642][T17513] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10285'. [ 1580.708143][T17518] ip6gre1: entered promiscuous mode [ 1580.726593][T17518] ip6gre1: entered allmulticast mode [ 1581.034527][T17525] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10289'. [ 1581.087547][T17526] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.10289'. [ 1581.089047][T17525] netlink: 'syz.0.10289': attribute type 2 has an invalid length. [ 1581.117755][T17526] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1581.178145][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10289'. [ 1581.753110][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.779431][ T7371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.806371][T17550] netlink: 'syz.3.10295': attribute type 1 has an invalid length. [ 1581.882973][T17539] bond4 (unregistering): Released all slaves [ 1581.964576][T17552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10295'. [ 1582.342958][T17552] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1583.416566][T17568] syzkaller0: entered promiscuous mode [ 1583.425645][T17568] syzkaller0: entered allmulticast mode [ 1583.868257][T17590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10304'. [ 1584.308409][T17596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10304'. [ 1585.459215][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10309'. [ 1585.472884][T17610] netlink: 'syz.2.10309': attribute type 3 has an invalid length. [ 1590.602207][T17587] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1590.610800][T17587] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1590.619686][T17587] veth1_to_bridge: entered allmulticast mode [ 1590.628206][T17587] veth1_to_bridge: entered promiscuous mode [ 1590.635103][T17593] netlink: 'syz.3.10304': attribute type 3 has an invalid length. [ 1590.854828][T17606] lo speed is unknown, defaulting to 1000 [ 1590.882946][T17606] wlan0 speed is unknown, defaulting to 1000 [ 1591.353482][ T7371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.831286][T17646] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10316'. [ 1592.443772][T17623] scsi_nl_rcv_msg: discarding partial skb [ 1592.510886][T17623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.159577][T17675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10323'. [ 1594.532333][T17692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10329'. [ 1595.817666][T17707] netlink: 'syz.4.10331': attribute type 1 has an invalid length. [ 1596.063634][T17710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.231965][T17710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.313434][T17714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.343083][T17717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10333'. [ 1596.398431][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10332'. [ 1596.430441][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10332'. [ 1596.573640][T17707] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1596.655832][T17713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1596.988246][T17727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10336'. [ 1597.022185][T17727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10336'. [ 1597.602589][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10338'. [ 1598.047896][T17736] team1: entered promiscuous mode [ 1598.099345][T17736] team1: entered allmulticast mode [ 1598.175924][T17736] 8021q: adding VLAN 0 to HW filter on device team1 [ 1598.676548][ C0] sched: DL replenish lagged too much [ 1599.165187][T17758] netlink: 'syz.3.10345': attribute type 11 has an invalid length. [ 1599.194807][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10343'. [ 1599.243666][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1599.286594][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10343'. [ 1599.421440][T17760] openvswitch: netlink: EtherType 0 is less than min 600 [ 1599.627783][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10343'. [ 1600.525529][T17741] netlink: 'syz.2.10341': attribute type 4 has an invalid length. [ 1600.630679][T17745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10341'. [ 1600.694257][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10341'. [ 1600.750154][T17745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10341'. [ 1600.951878][T15359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.965607][ T7371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.981860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.991098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.293094][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10349'. [ 1602.397846][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10349'. [ 1602.556647][T17780] sctp: [Deprecated]: syz.3.10351 (pid 17780) Use of int in maxseg socket option. [ 1602.556647][T17780] Use struct sctp_assoc_value instead [ 1602.673136][T17785] netlink: 'syz.0.10352': attribute type 5 has an invalid length. [ 1602.757756][T17787] vlan0: entered promiscuous mode [ 1602.784427][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10350'. [ 1604.004806][T17802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10355'. [ 1604.112252][T17808] tipc: Enabled bearer , priority 0 [ 1604.135580][T17809] syzkaller0: entered promiscuous mode [ 1604.197453][T17809] syzkaller0: entered allmulticast mode [ 1605.509434][T12722] Bluetooth: hci3: command 0x0406 tx timeout [ 1605.912906][T17808] tipc: Disabling bearer [ 1606.192691][ T7371] tipc: Node number set to 3594691446 [ 1606.343559][T17831] bridge4: entered allmulticast mode [ 1607.047865][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10365'. [ 1607.211575][T17848] x_tables: duplicate underflow at hook 1 [ 1607.746633][T17850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10366'. [ 1608.019264][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1610.550179][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.579896][T22111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.184334][T17855] netlink: 'syz.0.10368': attribute type 8 has an invalid length. [ 1611.467453][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1612.470421][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1620.686954][T12722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1620.708568][T12722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1620.725115][T12722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1620.742778][T12722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1620.759366][T12722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1622.036709][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1622.055847][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1622.071217][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1622.094863][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1622.104798][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1622.790292][T12722] Bluetooth: hci4: command tx timeout [ 1623.034032][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1623.053432][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1623.070361][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1623.091500][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1623.106606][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1624.046419][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1624.073040][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1624.085685][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1624.100232][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1624.113772][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1624.229837][ T50] Bluetooth: hci6: command tx timeout [ 1624.869420][ T50] Bluetooth: hci4: command tx timeout [ 1625.189471][ T50] Bluetooth: hci7: command tx timeout [ 1625.913399][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.230541][ T50] Bluetooth: hci8: command tx timeout [ 1626.309652][ T50] Bluetooth: hci6: command tx timeout [ 1626.605548][T12722] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1626.628596][T12722] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1626.643467][T12722] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1626.657656][T12722] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1626.667619][T12722] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1626.954076][ T50] Bluetooth: hci4: command tx timeout [ 1627.269752][ T50] Bluetooth: hci7: command tx timeout [ 1628.309797][ T50] Bluetooth: hci8: command tx timeout [ 1628.390256][ T50] Bluetooth: hci6: command tx timeout [ 1628.709350][ T50] Bluetooth: hci9: command tx timeout [ 1629.029536][ T50] Bluetooth: hci4: command tx timeout [ 1629.350389][ T50] Bluetooth: hci7: command tx timeout [ 1630.390039][ T50] Bluetooth: hci8: command tx timeout [ 1630.469437][ T50] Bluetooth: hci6: command tx timeout [ 1630.790387][ T50] Bluetooth: hci9: command tx timeout [ 1631.429309][ T50] Bluetooth: hci7: command tx timeout [ 1631.672686][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.470217][ T50] Bluetooth: hci8: command tx timeout [ 1632.869879][ T50] Bluetooth: hci9: command tx timeout [ 1632.953013][T22112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.974574][T22112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.988010][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.949398][ T50] Bluetooth: hci9: command tx timeout [ 1636.790903][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.077425][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.550262][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.851346][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.318369][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.594939][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.462238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.471617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.076797][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.353171][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.192202][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.114348][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.950300][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.233331][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.791881][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1670.077801][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.354662][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.910258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.830652][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.110613][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.950415][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.046292][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1681.064644][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1681.086109][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1681.100109][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1681.109802][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1682.101921][T12722] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1682.122471][T12722] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1682.134073][T12722] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1682.152134][T12722] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1682.161891][T12722] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1682.232532][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.090494][T12722] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1683.113954][T12722] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1683.133235][T12722] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1683.145027][T12722] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1683.155874][T12722] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1683.194272][T12722] Bluetooth: hci10: command tx timeout [ 1684.134841][T17916] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1684.155199][T17916] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1684.165073][T17916] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1684.183185][T17916] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1684.220604][T17916] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1684.235868][T12259] Bluetooth: hci11: command tx timeout [ 1685.189355][ T50] Bluetooth: hci12: command tx timeout [ 1685.269311][ T50] Bluetooth: hci10: command tx timeout [ 1686.309853][T12259] Bluetooth: hci11: command tx timeout [ 1686.316082][ T50] Bluetooth: hci13: command tx timeout [ 1686.710290][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.270057][T12259] Bluetooth: hci12: command tx timeout [ 1687.350004][T12259] Bluetooth: hci10: command tx timeout [ 1687.678152][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1687.708724][ T50] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1687.728818][ T50] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1687.739926][ T50] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1687.751723][ T50] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1687.991157][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.389380][T12259] Bluetooth: hci11: command tx timeout [ 1688.395597][ T50] Bluetooth: hci13: command tx timeout [ 1689.349335][ T50] Bluetooth: hci12: command tx timeout [ 1689.430870][ T50] Bluetooth: hci10: command tx timeout [ 1689.831313][ T50] Bluetooth: hci14: command tx timeout [ 1690.469257][ T50] Bluetooth: hci13: command tx timeout [ 1690.475473][T12259] Bluetooth: hci11: command tx timeout [ 1691.430181][ T50] Bluetooth: hci12: command tx timeout [ 1691.909255][ T50] Bluetooth: hci14: command tx timeout [ 1692.473792][T16030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.549687][ T50] Bluetooth: hci13: command tx timeout [ 1693.752011][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.989762][ T50] Bluetooth: hci14: command tx timeout [ 1696.069250][ T50] Bluetooth: hci14: command tx timeout [ 1698.231179][T16030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.516293][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.555733][T17932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.990362][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.272200][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.754669][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.031579][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.512738][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.796357][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.273847][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.830992][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.031299][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.043553][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.153229][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.795804][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.350274][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1738.550760][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.118639][T17916] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1741.165647][T17916] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1741.179943][T17916] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1741.193093][T17916] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1741.203206][T17916] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1741.759912][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.186667][T17916] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1742.212191][T17916] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1742.223705][T17916] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1742.237070][T17916] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1742.247103][T17916] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1743.269653][T12259] Bluetooth: hci15: command tx timeout [ 1743.355507][ T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1743.374150][ T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1743.386734][ T50] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1743.398330][ T50] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1743.417406][ T50] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1743.672283][T16032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.314165][T12259] Bluetooth: hci16: command tx timeout [ 1744.466893][ T50] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1744.485554][ T50] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1744.500690][ T50] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1744.518220][ T50] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1744.531319][ T50] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1745.350221][T12259] Bluetooth: hci15: command tx timeout [ 1745.613124][T17916] Bluetooth: hci17: command tx timeout [ 1746.389557][T17963] Bluetooth: hci16: command tx timeout [ 1746.629290][T17963] Bluetooth: hci18: command tx timeout [ 1747.429486][T17963] Bluetooth: hci15: command tx timeout [ 1747.525066][T13146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.773692][T17963] Bluetooth: hci8: command 0x0406 tx timeout [ 1747.792690][T17963] Bluetooth: hci6: command 0x0406 tx timeout [ 1747.800236][T17963] Bluetooth: hci4: command 0x0406 tx timeout [ 1747.806972][T17963] Bluetooth: hci17: command tx timeout [ 1747.824738][T17963] Bluetooth: hci7: command 0x0406 tx timeout [ 1748.470839][T12259] Bluetooth: hci16: command tx timeout [ 1748.711436][T17916] Bluetooth: hci18: command tx timeout [ 1748.936091][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.533834][T12722] Bluetooth: hci15: command tx timeout [ 1749.932344][T12722] Bluetooth: hci17: command tx timeout [ 1750.549323][T12722] Bluetooth: hci16: command tx timeout [ 1750.737713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.748267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.790298][T17916] Bluetooth: hci18: command tx timeout [ 1751.990761][T17916] Bluetooth: hci17: command tx timeout [ 1752.800816][T17916] Bluetooth: hci9: command 0x0406 tx timeout [ 1752.869959][T17916] Bluetooth: hci18: command tx timeout [ 1753.270942][T13146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.345433][T16033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1753.737686][T16033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44373 - 0 [ 1755.155079][T17916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1755.182229][T17916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1755.215173][T17916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1755.239640][T17916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1755.258816][T17916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1756.624824][T16033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1756.659691][T16033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44373 - 0 [ 1757.438120][T12722] Bluetooth: hci0: command tx timeout [ 1757.896562][T16033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1757.945869][T16033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44373 - 0 [ 1758.402189][T17953] lo speed is unknown, defaulting to 1000 [ 1758.433275][T17953] wlan0 speed is unknown, defaulting to 1000 [ 1758.442287][T17940] lo speed is unknown, defaulting to 1000 [ 1758.477652][T17940] wlan0 speed is unknown, defaulting to 1000 [ 1758.485224][T17948] lo speed is unknown, defaulting to 1000 [ 1758.758769][T16033] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1758.785357][T16033] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 44373 - 0 [ 1758.879458][T17948] wlan0 speed is unknown, defaulting to 1000 [ 1758.897611][T17958] lo speed is unknown, defaulting to 1000 [ 1759.030131][T13154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.064513][T17958] wlan0 speed is unknown, defaulting to 1000 [ 1759.509965][T12722] Bluetooth: hci0: command tx timeout [ 1759.809354][T17977] lo speed is unknown, defaulting to 1000 [ 1760.012785][T17977] wlan0 speed is unknown, defaulting to 1000 [ 1761.601718][T12722] Bluetooth: hci0: command tx timeout [ 1763.669505][T12722] Bluetooth: hci0: command tx timeout [ 1764.790929][ T3304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.990296][ T30] INFO: task kworker/1:13:15359 blocked for more than 143 seconds. [ 1768.001372][T13154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.024773][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1768.039451][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1768.069556][ T30] task:kworker/1:13 state:D stack:23872 pid:15359 tgid:15359 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1768.099776][ T30] Workqueue: events drain_vmap_area_work [ 1768.111538][ T30] Call Trace: [ 1768.127554][ T30] [ 1768.135487][ T30] __schedule+0x17d9/0x56c0 [ 1768.177471][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1768.226553][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1768.289216][ T30] ? register_lock_class+0x31/0x2e0 [ 1768.355142][ T30] ? __pfx___schedule+0x10/0x10 [ 1768.397050][ T30] ? schedule+0x90/0x2b0 [ 1768.409810][ T30] schedule+0x164/0x2b0 [ 1768.418651][ T30] schedule_timeout+0xc0/0x2c0 [ 1768.431240][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1768.455974][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1768.467024][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1768.485398][ T30] ? wait_for_completion+0x272/0x5e0 [ 1768.494477][ T30] wait_for_completion+0x2ca/0x5e0 [ 1768.501056][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1768.507456][ T30] ? __flush_work+0x101/0xca0 [ 1768.514135][ T30] __flush_work+0xa63/0xca0 [ 1768.519852][ T30] ? __flush_work+0x101/0xca0 [ 1768.525155][ T30] ? __pfx___flush_work+0x10/0x10 [ 1768.531491][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 1768.537572][ T30] ? flush_work+0xd/0x30 [ 1768.544511][ T30] __purge_vmap_area_lazy+0x880/0xb40 [ 1768.564013][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1768.584460][ T30] drain_vmap_area_work+0x27/0x40 [ 1768.591829][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1768.598260][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1768.606708][ T30] ? assign_work+0x3cf/0x5d0 [ 1768.612309][ T30] worker_thread+0xa47/0xfb0 [ 1768.617583][ T30] ? __kthread_parkme+0x71/0x1f0 [ 1768.624248][ T30] kthread+0x388/0x470 [ 1768.628834][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1768.640753][ T30] ? __pfx_kthread+0x10/0x10 [ 1768.645961][ T30] ret_from_fork+0x514/0xb70 [ 1768.652001][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1768.658391][ T30] ? __switch_to+0xc89/0x1420 [ 1768.664389][ T30] ? __pfx_kthread+0x10/0x10 [ 1768.671961][ T30] ret_from_fork_asm+0x1a/0x30 [ 1768.677392][ T30] [ 1768.685325][ T30] [ 1768.685325][ T30] Showing all locks held in the system: [ 1768.698293][ T30] 1 lock held by khungtaskd/30: [ 1768.705253][ T30] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1768.718987][ T30] 1 lock held by dhcpcd/5290: [ 1768.725864][ T30] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1768.737126][ T30] 2 locks held by getty/5384: [ 1768.743227][ T30] #0: ffff88803223e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1768.755022][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1768.767447][ T30] 2 locks held by kworker/u9:2/5627: [ 1768.774359][ T30] #0: ffff888027140940 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.797793][ T30] #1: ffffc90003a2fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.846347][ T30] 2 locks held by kworker/0:7/5813: [ 1768.853071][ T30] 6 locks held by kworker/0:15/7387: [ 1768.859817][ T30] 3 locks held by kworker/1:13/15359: [ 1768.865849][ T30] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.879319][ T30] #1: ffffc90005577c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.892463][ T30] #2: ffffffff8ea802a0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1768.907123][ T30] 3 locks held by kworker/1:15/22111: [ 1768.914340][ T30] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.927420][ T30] #1: ffffc9000ef27c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.951052][ T30] #2: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1768.962849][ T30] 2 locks held by kworker/u9:1/32666: [ 1768.970549][ T30] #0: ffff888027140940 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.983799][ T30] #1: ffffc90005967c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1768.997431][ T30] 2 locks held by kworker/u9:3/11708: [ 1769.004983][ T30] #0: ffff888027140940 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.024285][ T30] #1: ffffc90004d17c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.042212][ T30] 2 locks held by kworker/u9:4/12258: [ 1769.048283][ T30] #0: ffff888027140940 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.064659][ T30] #1: ffffc900033cfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.083284][ T30] 3 locks held by kworker/u8:28/13146: [ 1769.090221][ T30] #0: ffff88801ae8c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.104044][ T30] #1: ffffc900035efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.117295][ T30] #2: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1769.134853][ T30] 5 locks held by kworker/u8:44/16033: [ 1769.141476][ T30] #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.154906][ T30] #1: ffffc9000ef87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1769.167376][ T30] #2: ffffffff8fddc068 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1769.180630][ T30] #3: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1769.192942][ T30] #4: ffffffff8e7e75b0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0xcac/0x2150 [ 1769.206746][ T30] 2 locks held by syz-executor/17940: [ 1769.214025][ T30] #0: ffffffff90331580 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1769.246265][ T30] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1769.258351][ T30] 2 locks held by syz-executor/17948: [ 1769.265404][ T30] #0: ffffffff90331ff8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1769.279749][ T30] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1769.293576][ T30] 2 locks held by syz-executor/17953: [ 1769.300889][ T30] #0: ffffffff90330cc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1769.312425][ T30] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1769.324612][ T30] 2 locks held by syz-executor/17958: [ 1769.331947][ T30] #0: ffffffff9034df30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1769.343324][ T30] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1769.362751][ T30] 2 locks held by syz-executor/17977: [ 1769.369647][ T30] #0: ffffffff8fddc068 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1769.383879][ T30] #1: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 1769.395651][ T30] [ 1769.397995][ T30] ============================================= [ 1769.397995][ T30] [ 1769.410495][ T30] NMI backtrace for cpu 1 [ 1769.410515][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1769.410536][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1769.410547][ T30] Call Trace: [ 1769.410555][ T30] [ 1769.410564][ T30] dump_stack_lvl+0xe8/0x150 [ 1769.410592][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1769.410707][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1769.410741][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1769.410768][ T30] sys_info+0x135/0x170 [ 1769.410790][ T30] watchdog+0xfd7/0x1030 [ 1769.410834][ T30] ? watchdog+0x1c7/0x1030 [ 1769.410868][ T30] kthread+0x388/0x470 [ 1769.410889][ T30] ? __pfx_watchdog+0x10/0x10 [ 1769.410915][ T30] ? __pfx_kthread+0x10/0x10 [ 1769.410936][ T30] ret_from_fork+0x514/0xb70 [ 1769.410961][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1769.410983][ T30] ? __switch_to+0xc89/0x1420 [ 1769.411013][ T30] ? __pfx_kthread+0x10/0x10 [ 1769.411035][ T30] ret_from_fork_asm+0x1a/0x30 [ 1769.411075][ T30] [ 1769.411157][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1769.537081][ C0] NMI backtrace for cpu 0 [ 1769.537099][ C0] CPU: 0 UID: 0 PID: 7387 Comm: kworker/0:15 Not tainted syzkaller #0 PREEMPT(full) [ 1769.537119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1769.537131][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 1769.537274][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 1769.537295][ C0] Code: 8b 05 80 4c 9d 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 83 4c 9d 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 2c 7f 90 0e <73> 0d e8 25 f9 08 00 84 c0 0f 84 94 02 00 00 83 3d 26 b2 90 0e 00 [ 1769.537311][ C0] RSP: 0000:ffffc900000061c8 EFLAGS: 00000093 [ 1769.537325][ C0] RAX: 0000000000000000 RBX: 0000000000000086 RCX: 0000000000000001 [ 1769.537336][ C0] RDX: 0000000000000001 RSI: ffffffff84c38b1c RDI: ffffffff9a6c4460 [ 1769.537349][ C0] RBP: ffff888069245cf8 R08: 0000000000000003 R09: 0000000000000004 [ 1769.537361][ C0] R10: dffffc0000000000 R11: fffff52000000c34 R12: ffff888069245d00 [ 1769.537374][ C0] R13: ffffffff84c38b1c R14: ffffffff9a6c4460 R15: 1ffff1100d248b9f [ 1769.537388][ C0] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 1769.537402][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1769.537415][ C0] CR2: fffffffffffffffe CR3: 000000000e746000 CR4: 00000000003526f0 [ 1769.537431][ C0] Call Trace: [ 1769.537438][ C0] [ 1769.537452][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 1769.537477][ C0] debug_object_activate+0x2ec/0x420 [ 1769.537564][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 1769.537597][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 1769.537631][ C0] hrtimer_interrupt+0x448/0x910 [ 1769.537669][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1769.537695][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1769.537721][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1769.537741][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 1769.537764][ C0] Code: 8e 9d 11 00 00 00 00 eb b5 e8 e5 4e 11 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 d5 49 9d 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 92 0d 94 [ 1769.537779][ C0] RSP: 0000:ffffc900000065e8 EFLAGS: 00000286 [ 1769.537793][ C0] RAX: 8920c029aebb0300 RBX: 0000000000000206 RCX: 0000000000000101 [ 1769.537805][ C0] RDX: 0000000000000005 RSI: ffffffff8e25a5b4 RDI: ffffffff8c2a9f80 [ 1769.537817][ C0] RBP: ffff8880321f0c68 R08: ffffc90000006d00 R09: 0000000000000000 [ 1769.537829][ C0] R10: ffffc90000006718 R11: fffff52000000ce5 R12: 0000000000000005 [ 1769.537842][ C0] R13: 0000000000000005 R14: ffffffff8e959c20 R15: ffff8880321f0000 [ 1769.537866][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1769.537889][ C0] unwind_next_frame+0x1baa/0x2550 [ 1769.537913][ C0] ? br_nf_post_routing+0xa53/0xee0 [ 1769.537973][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1769.537996][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1769.538023][ C0] arch_stack_walk+0x11b/0x150 [ 1769.538049][ C0] ? nf_hook_slow+0xc5/0x220 [ 1769.538100][ C0] stack_trace_save+0xa9/0x100 [ 1769.538125][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1769.538149][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1769.538205][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1769.538224][ C0] kasan_save_track+0x3e/0x80 [ 1769.538241][ C0] ? kasan_save_track+0x3e/0x80 [ 1769.538255][ C0] ? kasan_save_free_info+0x40/0x50 [ 1769.538277][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1769.538293][ C0] ? kmem_cache_free+0x182/0x650 [ 1769.538309][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1769.538325][ C0] ? NF_HOOK+0x64e/0x6e0 [ 1769.538340][ C0] ? br_nf_post_routing+0xa53/0xee0 [ 1769.538383][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1769.538399][ C0] kasan_save_free_info+0x40/0x50 [ 1769.538421][ C0] __kasan_slab_free+0x5c/0x80 [ 1769.538439][ C0] kmem_cache_free+0x182/0x650 [ 1769.538454][ C0] ? __skb_ext_put+0x221/0x2f0 [ 1769.538471][ C0] ? __skb_ext_del+0x271/0x390 [ 1769.538491][ C0] br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1769.538516][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1769.538531][ C0] NF_HOOK+0x64e/0x6e0 [ 1769.538549][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1769.538599][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1769.538617][ C0] ? net_generic+0x1e/0x240 [ 1769.538642][ C0] ? net_generic+0x1e/0x240 [ 1769.538669][ C0] br_nf_post_routing+0xa53/0xee0 [ 1769.538686][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1769.538705][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1769.538723][ C0] nf_hook_slow+0xc5/0x220 [ 1769.538745][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1769.538827][ C0] NF_HOOK+0x23e/0x3f0 [ 1769.538852][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1769.538874][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1769.538896][ C0] ? net_generic+0x1e/0x240 [ 1769.538922][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1769.538950][ C0] ? net_generic+0x1e/0x240 [ 1769.538976][ C0] br_forward_finish+0xd3/0x130 [ 1769.538999][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1769.539026][ C0] br_nf_forward_finish+0xa76/0xea0 [ 1769.539048][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1769.539067][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1769.539094][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1769.539109][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1769.539124][ C0] NF_HOOK+0x64e/0x6e0 [ 1769.539142][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1769.539166][ C0] ? net_generic+0x1e/0x240 [ 1769.539191][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1769.539209][ C0] ? net_generic+0x1e/0x240 [ 1769.539233][ C0] ? net_generic+0x1e/0x240 [ 1769.539260][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 1769.539277][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1769.539295][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1769.539312][ C0] nf_hook_slow+0xc5/0x220 [ 1769.539335][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1769.539359][ C0] NF_HOOK+0x23e/0x3f0 [ 1769.539383][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1769.539406][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1769.539430][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1769.539457][ C0] ? br_handle_vlan+0x5e/0x530 [ 1769.539505][ C0] __br_forward+0x397/0x540 [ 1769.539528][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1769.539554][ C0] br_flood+0x3e6/0x8d0 [ 1769.539585][ C0] br_handle_frame_finish+0x1175/0x1990 [ 1769.539611][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1769.539644][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1769.539674][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1769.539696][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1769.539717][ C0] ? nf_hook_slow+0x176/0x220 [ 1769.539740][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1769.539772][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1769.539797][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1769.539858][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1769.539885][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1769.539913][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1769.539931][ C0] ? lock_acquire+0x106/0x350 [ 1769.539951][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1769.539970][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1769.540001][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1769.540020][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1769.540038][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1769.540057][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1769.540076][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1769.540106][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1769.540132][ C0] br_handle_frame+0x127f/0x1510 [ 1769.540154][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1769.540172][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1769.540198][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1769.540229][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1769.540244][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1769.540279][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1769.540306][ C0] ? irqentry_exit+0x218/0x8f0 [ 1769.540337][ C0] ? process_backlog+0x3c3/0x1860 [ 1769.540365][ C0] ? process_backlog+0x3c3/0x1860 [ 1769.540389][ C0] ? process_backlog+0x3c3/0x1860 [ 1769.540415][ C0] process_backlog+0x706/0x1860 [ 1769.540442][ C0] ? process_backlog+0x3c3/0x1860 [ 1769.540475][ C0] __napi_poll+0xaa/0x330 [ 1769.540499][ C0] net_rx_action+0x61d/0xf50 [ 1769.540531][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1769.540554][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1769.540643][ C0] ? net_tx_action+0xbff/0xc30 [ 1769.540670][ C0] handle_softirqs+0x225/0x840 [ 1769.540702][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1769.540728][ C0] __irq_exit_rcu+0xca/0x220 [ 1769.540749][ C0] irq_exit_rcu+0x9/0x30 [ 1769.540777][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1769.540805][ C0] [ 1769.540812][ C0] [ 1769.540819][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1769.540840][ C0] RIP: 0010:preempt_count_add+0x42/0x190 [ 1769.540868][ C0] Code: 4a 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d 9e 17 b7 18 00 75 07 65 8b 05 45 c2 ab 11 65 01 3d 3e c2 ab 11 <48> c7 c0 80 f5 4a 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e5 00 [ 1769.540884][ C0] RSP: 0000:ffffc90003affa78 EFLAGS: 00000282 [ 1769.540900][ C0] RAX: 0000000080000000 RBX: ffffffff8f533a40 RCX: ffffffff9a4af503 [ 1769.540914][ C0] RDX: 0000000000000000 RSI: ffffffff8e25a5b4 RDI: 0000000000000001 [ 1769.540927][ C0] RBP: dffffc0000000000 R08: ffffffff8f533a43 R09: 1ffffffff1ea6748 [ 1769.540941][ C0] R10: dffffc0000000000 R11: fffffbfff1ea6749 R12: ffff8880587fb490 [ 1769.540955][ C0] R13: dffffc0000000000 R14: 0000000000001693 R15: dffffc0000000000 [ 1769.540982][ C0] _raw_spin_lock+0x12/0x40 [ 1769.541005][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 1769.541033][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1769.541059][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1769.541103][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1769.541134][ C0] ? assign_work+0x3cf/0x5d0 [ 1769.541160][ C0] worker_thread+0xa47/0xfb0 [ 1769.541200][ C0] kthread+0x388/0x470 [ 1769.541220][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1769.541245][ C0] ? __pfx_kthread+0x10/0x10 [ 1769.541264][ C0] ret_from_fork+0x514/0xb70 [ 1769.541287][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1769.541308][ C0] ? __switch_to+0xc89/0x1420 [ 1769.541337][ C0] ? __pfx_kthread+0x10/0x10 [ 1769.541357][ C0] ret_from_fork_asm+0x1a/0x30 [ 1769.541391][ C0] [ 1770.603461][ T3304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.769904][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1770.776813][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1770.785927][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1770.795987][ T30] Call Trace: [ 1770.799274][ T30] [ 1770.802210][ T30] vpanic+0x56c/0xa60 [ 1770.806206][ T30] ? __pfx___schedule+0x10/0x10 [ 1770.811069][ T30] ? __pfx_vpanic+0x10/0x10 [ 1770.815583][ T30] ? irqentry_exit+0x218/0x8f0 [ 1770.820370][ T30] panic+0xc5/0xd0 [ 1770.824096][ T30] ? __pfx_panic+0x10/0x10 [ 1770.828528][ T30] watchdog+0x1030/0x1030 [ 1770.832881][ T30] ? watchdog+0x1c7/0x1030 [ 1770.837320][ T30] kthread+0x388/0x470 [ 1770.841395][ T30] ? __pfx_watchdog+0x10/0x10 [ 1770.846086][ T30] ? __pfx_kthread+0x10/0x10 [ 1770.850684][ T30] ret_from_fork+0x514/0xb70 [ 1770.855284][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1770.860404][ T30] ? __switch_to+0xc89/0x1420 [ 1770.865108][ T30] ? __pfx_kthread+0x10/0x10 [ 1770.869705][ T30] ret_from_fork_asm+0x1a/0x30 [ 1770.874505][ T30] [ 1770.877803][ T30] Kernel Offset: disabled [ 1770.882125][ T30] Rebooting in 86400 seconds..