last executing test programs: 3m24.447794825s ago: executing program 1 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x68, 0x0, 0x1, 0x6, 0x0, @empty=0x7f000000, @private=0xa010101, {[@timestamp_prespec={0x44, 0x4, 0xc1, 0x3, 0x7}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x6, 0x0, 0x3f9}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x80000000}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1, r7, 0x100, 0x10000, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24010810}, 0x4000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="210928bd6000fcdbdf251b00000010002e802d0004000200aaaaaaaaaaaa08000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000500)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x8040) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18006da1145035569c19edb009810a2d060000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250100000004000500"], 0x18}}, 0x0) 3m24.306524011s ago: executing program 0 (id=954): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0xec69c22b9e3bcf68, "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"}, &(0x7f0000000040)=0x4c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r3, 0x80000000, 0x5, 0x8, 0x81, 0x8, 0x6, 0x7496, {r3, @in6={{0xa, 0x4e1e, 0x6, @local, 0x3}}, 0x8003, 0x2, 0x7, 0x0, 0x4}}, &(0x7f0000000200)=0xb0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x3c, r7, 0x1, 0x70bd30, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "92c3ffdf6720ac1f515463b4453540e33d9b390746de2432a89bd5215bc5cfb6"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x0, 'vlan0\x00', {}, 0x3}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r4, 0x1805f319, 0x101}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, &(0x7f0000000000)={0x5, &(0x7f0000000900)=[{}, {}, {}, {@none}, {@fixed}]}) 3m24.182279621s ago: executing program 1 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r4, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES16=r4, @ANYBLOB="000129bd7000fcdbdf25100000000000050010000000000005000f0007000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000044) (async, rerun: 32) unshare(0x6020480) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1830007546861750265a4b00030000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x8c, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x70, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x0, @default, 0x508, @void, @val, @void, @val={0x4, 0x6, {0x6, 0x1, 0xfffe, 0x200}}, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x57, 0x2}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x4, 0x0, {0x7fd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x9, 0x7}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xfa, 0xffffffffffffffff, 0x8d, 0x60}}, @val={0x76, 0x6, {0xe, 0x39, 0x3, 0x2}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x2f76, 0x1, 0x0, 0x9, 0x2, 0xf}, &(0x7f0000000240)=0x20) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0) 3m24.150202104s ago: executing program 0 (id=959): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x54, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x11}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x200}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x54}}, 0x48004) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) 3m24.018498602s ago: executing program 0 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @empty}, &(0x7f0000000040)=0xc) connect$packet(r1, &(0x7f0000000080)={0x11, 0x15, r2, 0x1, 0xb8, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 3m23.826373532s ago: executing program 1 (id=963): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) r1 = socket(0x25, 0x4, 0xfffffffe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x44, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x0, 0x1, 0x4d3, 0x4, 0x65, 0x6c, 0x4, 0x20000000}]}, 0x70}}, 0x80c0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) 3m23.630096526s ago: executing program 0 (id=967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) 3m23.454464349s ago: executing program 1 (id=972): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3], 0x78}}, 0x0) 3m23.302024008s ago: executing program 1 (id=976): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) listen(r2, 0x0) (async) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'macsec0\x00', {}, 0x8000}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x81, 0x74, 0x10, 0xab, 0xff, 0x8, 0x7, 0x7, 0x8, 0x4, 0x32, 0x0, 0x6, 0x1c}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x81, 0x74, 0x10, 0xab, 0xff, 0x8, 0x7, 0x7, 0x8, 0x4, 0x32, 0x0, 0x6, 0x1c}, 0xe) ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 3m23.299852558s ago: executing program 0 (id=977): unshare(0x20040600) r0 = socket(0x10, 0x3, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4088044}, 0x40004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x34}, 0x2, 0x34005, 0x0, 0x40}, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000010000000000000000000000000a140000001000010000000000000000000000000aba89772a01dd5f4e3f4c8da7215b874e2f3cae50b8ce1eae7745a026d6efde525af0cf20743409e17340a52374b862127fb3529e6f258079c98ccb269e57c169d23267d8a35b30782e68c814742fa846c0840f645a80aab4a9b3954553719a97687a75cd168992b5f4a55b15bd0585a94ff92400b01e4c7eb0af872cab854648a79564d6907c650385725cc939acba74ac2d11cee49e8c4485501ac40882c7d53900533834b79bf439", @ANYBLOB="0df6e28c3922ca3315900fa9869db0087e35b42ed4717970ecd2dd1c895501f98711e9b450b85301bc2114962cf40d9790d218619618886355490d6a82ca4e72cfd62cb2493dbf1f0be18e057539497d3b21ddfa9b11fef5596c245b3efc2cc03e4952f148c88b4cdbbbce944c8dfa58ee656044f7b511852a2a77aba1ff726545bae509ceb3e9e19d79c742c8501500914d8aaf83d673d368d3608b567f5d93542b60571fe1"], 0xfc}}, 0xf02702ac43dfd5a5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r13 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r13, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)=[{&(0x7f0000000040)=""/30, 0x1e}], 0x1, 0x0, 0x0, 0x20}, 0x38, 0x160) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r14, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 3m22.944638586s ago: executing program 1 (id=982): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0xa, 0x2, 0x10, 0x4, 0x6}, &(0x7f0000000340)=0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @multicast1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="795e46f3a1774cdbf51a550b506533000e9b2a00010000008ae9736978f884e033f008dc460700000400000007000000", @ANYRES32=r8, @ANYBLOB="06a00000000000000c001a800800058004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r10, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, 0x0, 0x0) r12 = socket(0x2a, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r14, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000000)={@local, @loopback, r2}, 0xc) 3m22.857864906s ago: executing program 0 (id=983): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xbc, 0x6, "8460b5ac1c1b2efcd5260596fa4d7d04840ac5f694a73d85de6657477146cb9bfd8a16958c380f6776e3c2112ed7b455784791193dd0bced41be729265d2e849b9fd98108251cd35ec90b94abea295ebeaa904cf8450c8cb58a84b6da3ebd39ad6c5ff532e75259a088bbb4bce9bc95abbfc9bb08c7cd2974a91ded8de6eaefe1741e010935ac23f5742ecb28e4b900fc0b9afbb3a8740724af5153182d47ac20814678bcd6b52228b165257881004ee384787446857bf11"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x20b, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x220c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6810000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x50, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3ff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x80}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48001}, 0x48000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r6, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x2, 0x0, 0x6, 0x6}}}, @NL80211_ATTR_SSID={0x17, 0x34, @random="d0bf3875a23585c50edb6a826ca18456b4b282"}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x410, 0x1, 0x5, 0x0, {0xaa, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x1, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x0, 0x1c}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0xd8a6, 0x0}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0x18, &(0x7f0000000d80)=@raw=[@generic={0xfc, 0x9, 0x7, 0x2, 0xb2b}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x4, 0x0, 0x8, 0xfff, 0xbdb}, @ldst={0x0, 0x0, 0x1, 0x7, 0x3, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb2}}], &(0x7f0000000e40)='syzkaller\x00', 0xfffffff7, 0x87, &(0x7f0000000e80)=""/135, 0x41000, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x9, 0x0, 0xffffb1e7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001000)=[{0x0, 0x2, 0x1, 0x1}, {0x0, 0x5, 0xf, 0x9}, {0x2, 0x3, 0x8, 0x5}]}, 0x94) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@o_path={&(0x7f0000001100)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)='%pS \x00'}, 0x20) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4e0ca68a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, 0x4) r21 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1, 0x8, 0xfffffffb, 0xfffffff8, 0x24108, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x18, 0x2e, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x10001}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @func, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000b40)='syzkaller\x00', 0xbed, 0xc3, &(0x7f0000000b80)=""/195, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x10, r12, 0x8, &(0x7f0000000cc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0xd, 0x7, 0x3}, 0x10, r13, r14, 0x3, &(0x7f0000001500)=[r15, 0xffffffffffffffff, r16, r17, r18, r19, r20, r21], &(0x7f0000001540)=[{0x5, 0x5, 0x2, 0xc}, {0x3, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x5}], 0x10, 0xe1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x22, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_fd={0x18, 0x2, 0x1, 0x0, r20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001780)='GPL\x00', 0x1, 0xd0, &(0x7f00000017c0)=""/208, 0x40f00, 0x88, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xf, 0x101, 0x3}, 0x10, r13, r12, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) setsockopt$RDS_FREE_MR(r12, 0x114, 0x3, &(0x7f0000001a00)={{0x3a8}, 0x30}, 0x10) 3m22.569697937s ago: executing program 32 (id=982): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0xa, 0x2, 0x10, 0x4, 0x6}, &(0x7f0000000340)=0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @multicast1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="795e46f3a1774cdbf51a550b506533000e9b2a00010000008ae9736978f884e033f008dc460700000400000007000000", @ANYRES32=r8, @ANYBLOB="06a00000000000000c001a800800058004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r10, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, 0x0, 0x0) r12 = socket(0x2a, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r14, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000000)={@local, @loopback, r2}, 0xc) 3m22.542655668s ago: executing program 33 (id=983): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xbc, 0x6, "8460b5ac1c1b2efcd5260596fa4d7d04840ac5f694a73d85de6657477146cb9bfd8a16958c380f6776e3c2112ed7b455784791193dd0bced41be729265d2e849b9fd98108251cd35ec90b94abea295ebeaa904cf8450c8cb58a84b6da3ebd39ad6c5ff532e75259a088bbb4bce9bc95abbfc9bb08c7cd2974a91ded8de6eaefe1741e010935ac23f5742ecb28e4b900fc0b9afbb3a8740724af5153182d47ac20814678bcd6b52228b165257881004ee384787446857bf11"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x20b, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x220c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6810000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x50, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3ff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x80}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48001}, 0x48000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r6, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x2, 0x0, 0x6, 0x6}}}, @NL80211_ATTR_SSID={0x17, 0x34, @random="d0bf3875a23585c50edb6a826ca18456b4b282"}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x410, 0x1, 0x5, 0x0, {0xaa, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x1, 0x2}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x0, 0x1c}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0xd8a6, 0x0}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0x18, &(0x7f0000000d80)=@raw=[@generic={0xfc, 0x9, 0x7, 0x2, 0xb2b}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x4, 0x0, 0x8, 0xfff, 0xbdb}, @ldst={0x0, 0x0, 0x1, 0x7, 0x3, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb2}}], &(0x7f0000000e40)='syzkaller\x00', 0xfffffff7, 0x87, &(0x7f0000000e80)=""/135, 0x41000, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x9, 0x0, 0xffffb1e7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001000)=[{0x0, 0x2, 0x1, 0x1}, {0x0, 0x5, 0xf, 0x9}, {0x2, 0x3, 0x8, 0x5}]}, 0x94) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@o_path={&(0x7f0000001100)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)='%pS \x00'}, 0x20) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4e0ca68a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, 0x4) r21 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1, 0x8, 0xfffffffb, 0xfffffff8, 0x24108, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x18, 0x2e, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x10001}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @func, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000b40)='syzkaller\x00', 0xbed, 0xc3, &(0x7f0000000b80)=""/195, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x10, r12, 0x8, &(0x7f0000000cc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0xd, 0x7, 0x3}, 0x10, r13, r14, 0x3, &(0x7f0000001500)=[r15, 0xffffffffffffffff, r16, r17, r18, r19, r20, r21], &(0x7f0000001540)=[{0x5, 0x5, 0x2, 0xc}, {0x3, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x5}], 0x10, 0xe1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x22, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_fd={0x18, 0x2, 0x1, 0x0, r20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001780)='GPL\x00', 0x1, 0xd0, &(0x7f00000017c0)=""/208, 0x40f00, 0x88, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xf, 0x101, 0x3}, 0x10, r13, r12, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) setsockopt$RDS_FREE_MR(r12, 0x114, 0x3, &(0x7f0000001a00)={{0x3a8}, 0x30}, 0x10) 2m19.529851054s ago: executing program 6 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x20, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@alu={0x4, 0x1, 0x9, 0x2, 0x0, 0x30, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x1, 0x4, 0x8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x8e, &(0x7f0000000140)=""/142, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xb, 0x6, 0xfff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x2, 0x1, 0x10}, {0x1, 0x1, 0xa}, {0x0, 0x5, 0xa, 0xb}, {0x3, 0x4, 0x8, 0xb}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x1}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf0d}, @call={0x85, 0x0, 0x0, 0x81}, @alu={0x7, 0x1, 0x8, 0xa, 0x0, 0x10, 0x800000000000000b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3f}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x76, &(0x7f0000000500)=""/118, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x10, 0x745, 0xe}, 0x10, 0x2a09f, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x2, 0x6, 0x4}, {0x5, 0x2, 0x2, 0x1}, {0x1, 0x3, 0xc, 0xa}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex, 0x33, 0x1, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@ifindex=r5, r1, 0x16, 0x10, r2, @void, @value=r6, @void, @void, r3}, 0x20) 2m19.394338795s ago: executing program 6 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x24}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}]}, 0x50}}, 0x4000040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xa, 0x6}, {0x1, 0xb}, {0x1, 0xfff2}}, [""]}, 0x24}}, 0x4000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x78, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x38, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}, @IFLA_BRPORT_COST={0x8, 0x3, 0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0xec}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="8300b3e0", @ANYRES16=r12, @ANYBLOB="10002bbd7000fbdbdf25420000000c009900030000001e0000000a000600ffffffffffff00000a00060050505050505000000a00060050505050505000000a00060008021100000000000a000600c914778e017000000a00060050505050505000000a0006005050505050500000"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2}) r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) 2m18.972428247s ago: executing program 6 (id=1918): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) (async) shutdown(r0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="10e1b222b00c07285385d27731c319f186c2aad6d5419a8b3688ab92aaa7bcff6beb7476882ca2d318d557ef143dd8445738a245", 0x34}, {&(0x7f0000000240)="a7f8277b2c81fe8e62d8bfcfe9", 0xd}, {&(0x7f0000000280)="2b3ea77714ba0f4f6e75bd5a5c112f186c4e5cc1435e09", 0x17}], 0x3, 0x0, 0x0, 0x11}, 0x40040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x54, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xaf88, @loopback, 0x800000}, @in6={0xa, 0x4e21, 0x707, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e20, 0xb55, @loopback, 0x43d15daf}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r3, 0x9}, &(0x7f0000000180)=0x8) 2m18.830649353s ago: executing program 6 (id=1921): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfe9}], 0x3, 0x0, 0x0, 0x805}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m18.659596194s ago: executing program 6 (id=1923): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x54}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x2}}]}}]}, 0x44}}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000001800)=0xffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x5, 0x7ff}, 0xfffffffffffffe56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x20008880) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600050088a800000a000100aaaaaaaaaa0000002ccfeb2e8ad2b91b1398d72fe938aa9929ca11221991084537173efd33143a80477594c4641ae05cffdef3d43c5ed62e7e49b9aa60936880f0cf0568f7089be1dbcdc68b5f7e2bb88b4cdada6127e38317d889366716095d394c8267568dd7c3475503137d0092ce65274f483a04d9131aae"], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r6, 0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x80, &(0x7f0000000680)=[@in6={0xa, 0x6e23, 0x3, @private0, 0xd0bf4c2b}, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}, @in6={0xa, 0x4e23, 0xffff8080, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x5}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)={r10, 0xf2, "aeec9d30c80dc1a3e78af5972f7da9db5228d2000000007d37df723be89674130694b11b5df824a91cd07fa61610ef1eaf928c6f1f757e027077f8c54a83545e56e693f1490500afc9689d1e98973a00fb10dc724963f26dbb815be7c5a373e301a8a56273940cddac811eed83b2f4e7ff9e57b8cb6244a307bb1a88041d33e6eb52bf30bdd61db0696e2337d9909330f40e22577a2e80e5384fab9d38810faa44a4468e39ed271be061f034c714b6564451e3d8f1d75467b987a9b706f4f097234a81d89355d548f6eca4c9ebeb1e314b5947a98fc4877fac965be92ac2360bd223c649c8032df32ddc4e441586d34076f3"}, &(0x7f00000000c0)=0xad) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20010000", @ANYRESDEC=r11, @ANYRESOCT], 0x120}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 2m18.396893514s ago: executing program 6 (id=1927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x8000000003}, 0x18) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r2, 0x65ff0000) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffb}]}}}]}, 0x40}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x200}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7cf2ac713d15c78ff1cce36f5da7104eeeede764127541c6c6ca7e4fc7cf57936d6f118c6ba16eb35b051f0cc1e53a3df04e54eb1b", @ANYRES16=r7, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000240)={0x0, 0x4c6, [0x0, 0x3, 0xffffffff, 0x9, 0x2b028fdd, 0x3]}) 2m3.394299366s ago: executing program 34 (id=1927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x8000000003}, 0x18) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r2, 0x65ff0000) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffb}]}}}]}, 0x40}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x200}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7cf2ac713d15c78ff1cce36f5da7104eeeede764127541c6c6ca7e4fc7cf57936d6f118c6ba16eb35b051f0cc1e53a3df04e54eb1b", @ANYRES16=r7, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000240)={0x0, 0x4c6, [0x0, 0x3, 0xffffffff, 0x9, 0x2b028fdd, 0x3]}) 7.222725708s ago: executing program 5 (id=3393): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x80000) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001280)={{'\x00', 0x2}, {0x8}, 0x147, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="c0cbe22b857f74f75808788c7cb3ef5d87ec62a0f799432c859337490374f5e92be8a4b89396e2277738971d538b7e8367cc5ecaf2b71aaa919a2b2192f57ef5bca37b19fa3f40905364fa611f0d0b1326739f2e9f22bced578a7016d8ea405a4ec74293d9a7a3b28f665dccadfeb958", 0x70, 0x0, &(0x7f0000000180)={0x2, 0xef, {0x0, 0xc, 0x91, "f48cf34ce12b6f6e630e322fb624586287a90ffade4e59f614902759e262afb7c42ec86056c6de9b89526dc024c7b7fffd593acc2061fed4ea261c1a641de365cf282b1209efa6b2edd9876f7794af35fa35c3fbb9780e0c029fcc8fba76cf3377e2a0470826c22a6295128637e7c71b81fbccb5bc772ae4a7eedf011d3f70d132cf01e1f2185759a94b57b3d7b4a54cdd", 0x51, "b9b273fb0177f5763bc27d5be75da296fa4f05768b8c7bf653155dc4491f95a5584fc5a5f2ea31ffd1238e29707523ae4835d8c5ab176c3d6743e69571b1d546b3e816b6b75277791b2c34e1b0036821cc"}, 0x1000, "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"}, 0x10fb}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001300)) (async, rerun: 32) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async, rerun: 32) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000001440)=@abs, &(0x7f00000014c0)=0x6e, 0x80800) getpeername$unix(r1, &(0x7f0000001500), &(0x7f0000001580)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000017c0)={{0x0, 0x33, 0x7, 0x1, 0x8, 0x9, 0x2, 0x8, 0x10000000, 0xf, 0x9, 0x4, 0x46, 0x80000000, 0x10000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001880)={r2, r3, "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", "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"}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000002880)={0x3, 'veth0_to_bridge\x00', {0x10}, 0xfc9}) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000028c0)=0x1, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002900)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000002940)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000002980)=r4, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000029c0)={r0}) sendto$inet(r6, &(0x7f0000002a00)="aa7290c524ab9068af261ae7d96d5c51e8f4f45374be4dd479fff6b38a466333cc63ed3f6ae85c6e6edc436b3e627d6bb6d3f3d3e4d343426d3f033b685afa94b4bbf83e736d5b75218ab004bdeeec", 0x4f, 0x20004004, &(0x7f0000002a80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002b00), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x30, r7, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1000, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x4040000) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002c00)=@sack_info={r5, 0x9}, &(0x7f0000002c40)=0xc) (async) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000002c80)=[{{0x2, 0x0, 0x1}, {0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x1, 0x1}, {0x4, 0x1}}], 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002cc0)={r4, @in6={{0xa, 0x4e22, 0x1, @local, 0xffffff7f}}, [0x80000000, 0x400, 0x3, 0x2, 0xffffffffffffd381, 0x7d4cb450, 0xbcda, 0x8, 0x5, 0x7fffffffffffffff, 0x800, 0x4, 0xe5, 0xb0, 0x9]}, &(0x7f0000002dc0)=0x100) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000002e00), &(0x7f0000002e80)=0x68) (async, rerun: 64) recvmsg$can_raw(r6, &(0x7f0000004440)={0xffffffffffffffff, 0x0, &(0x7f00000033c0)=[{&(0x7f0000002ec0)=""/178, 0xb2}, {&(0x7f0000002f80)=""/103, 0x67}, {&(0x7f0000003000)=""/143, 0x8f}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000003180)=""/80, 0x50}, {&(0x7f0000003200)=""/196, 0xc4}, {&(0x7f0000003300)=""/182, 0xb6}], 0x7, &(0x7f0000003440)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000004480)={r4, 0xda, "786f30cc419d45854a3d23ebf8d9cdf6b3de8e88bbe6c5a539dd5af92bd7b7e4faa829a08bfd1af211231c4bd96fd1be25ced2c428f97174713526d5346792c7a2bcdc8e5ab33611d622c38b398f879c69c7e76f9770b1c49af40712fecf42092cb89f216ec86d724aa8b0aacd72fcc673fb6992b9e2c045c0121c132cae8eacade309eac94b6ec80f5308355bbef011d9cea5cdefd01b478235e176935a90f12dde2416d8d6e83581023f687a280a93516f37e7981cbbde5ae456d3e2415bd485780d171ee9593a67808c07ea50d0080565d34db38a200f6e07"}, &(0x7f0000004580)=0xe2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000045c0)={r9, 0x33c, 0xe, 0xfff, 0x9a3, 0xfffffffc}, &(0x7f0000004600)=0x14) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000004640), 0x10882, 0x0) (rerun: 64) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) (async) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000004680), &(0x7f00000046c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000004840)={0x0, 0x7}, 0x8) 6.824253707s ago: executing program 5 (id=3399): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x0, &(0x7f0000000000), &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.882248259s ago: executing program 7 (id=3424): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0x7b, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0xa2, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e006c3c0000000000000000000000000000000000ff020000000000000000000000000001000300000000000005020000c9"], 0x0) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ac000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x9, @private1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0xffffffff}, @in6={0xa, 0x4e23, 0x267dfb05, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}], 0xc0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]}) shutdown(r0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @initial, {0x8, 0x9}}, 0x0, @default, 0x2010, @void, @void, @void, @val={0x4, 0x6, {0x59, 0x2, 0x5, 0x9db4}}, @val={0x6, 0x2, 0x9}, @val={0x5, 0xb0, {0x1, 0xa4, 0x5, "0ceffe13940d589dbf21b6cf5a3dd93cd377786f1a0e2b7c62fed56980b9794521f1db22d002b6702e0af09e5a9d0f241d2ecc7a944726b4d41f8bcca69fb5b329eb139731f0d07d14cfdd66802ed3761080b02e5e0ff540fe6c48fd668cf9c9978c43c2dc5bb02e66f067a562f808e5154f5f447f47bc33f957aa733d588fdf3af1a52a90c2c911ff4a83d836c1fc3b68ef8f20095674c347851d0c99bbb9f8bac77d4f951a72106e9dafc392"}}, @val={0x25, 0x3, {0x0, 0x28, 0x9}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x0, 0x5, 0x6a}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x10, 0x9a, 0x6, 0x34a}}, [{0xdd, 0x7, "6f3b2f92d9c329"}]}, 0x11f) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab40c4ce63bfba9bc4bca883dcc8495f3ad3176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc538369959f773a4cddf9e90aa9b73270280d0cab060cfbd99bb790cc95042ba7605f8fa201a80ce6c236a9fa14000bb8fbaddbfe180c573c325977484f45c73b2572663dde"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (async, rerun: 32) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.741075164s ago: executing program 3 (id=3426): syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x2, 0x3, 0x8}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x5f) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) 3.423793282s ago: executing program 7 (id=3429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000200)=0xfff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180090001006c617374000000001800028008000140000000090c0002400000fbff000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) recvmmsg(r2, &(0x7f0000009200)=[{{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/109, 0x6d}], 0x2, &(0x7f0000000880)=""/87, 0x57}, 0x8}, {{&(0x7f0000000900)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/209, 0xd1}, {&(0x7f0000000b00)=""/77, 0x4d}, {&(0x7f0000000b80)=""/88, 0x58}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/114, 0x72}, {&(0x7f0000001c80)=""/48, 0x30}], 0x7, &(0x7f0000001d40)=""/8, 0x8}, 0x10001}, {{&(0x7f0000001d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001e00)=""/225, 0xe1}, {&(0x7f0000001f00)=""/47, 0x2f}, {&(0x7f0000001f40)=""/211, 0xd3}, {&(0x7f0000002040)=""/11, 0xb}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/39, 0x27}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x7, &(0x7f00000031c0)=""/26, 0x1a}, 0x8000}, {{&(0x7f0000003200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003280)=""/117, 0x75}], 0x1, &(0x7f0000003340)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004340)=@tipc, 0x80, &(0x7f00000045c0)=[{&(0x7f00000043c0)=""/193, 0xc1}, {&(0x7f00000044c0)=""/210, 0xd2}], 0x2, &(0x7f0000004600)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f00000077c0)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/129, 0x81}, {&(0x7f00000066c0)=""/19, 0x13}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/139, 0x8b}], 0x5}, 0x4}, {{&(0x7f0000007840)=@ax25={{}, [@null, @null, @netrom, @netrom, @rose, @bcast, @null]}, 0x80, &(0x7f0000007a40)=[{&(0x7f00000078c0)=""/127, 0x7f}, {&(0x7f0000007940)=""/95, 0x5f}, {&(0x7f00000079c0)=""/97, 0x61}], 0x3}, 0xffff0000}, {{&(0x7f0000007a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007b00)=""/133, 0x85}, {&(0x7f0000007bc0)=""/115, 0x73}, {&(0x7f0000007c40)=""/206, 0xce}], 0x3, &(0x7f0000007d80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000009480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000009040)=[{&(0x7f0000008e00)=""/218, 0xda}, {&(0x7f0000008f00)}, {&(0x7f0000008f40)=""/249, 0xf9}], 0x3, &(0x7f0000009080)=""/57, 0x39}, 0x4557}, {{&(0x7f00000090c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000091c0)=[{&(0x7f0000009140)=""/12, 0xc}, {&(0x7f0000009180)=""/16, 0x10}], 0x2}, 0x8}], 0xa, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@getsa={0x60, 0x12, 0x8, 0x70bd27, 0x25dfdbfe, {@in6=@loopback, 0x4d3, 0xa, 0x33}, [@replay_thresh={0x8, 0xb, 0x8}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd2b, 0x70bd27, 0x70bd27, 0x94, [0x8]}}, @replay_thresh={0x8, 0xb, 0x28f}, @extra_flags={0x8, 0x18, 0xa228}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x150, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) 3.278281939s ago: executing program 3 (id=3430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000001140)="62cd309cd5ceb7455eadb98a10eb786c9d61363a09aba8c9c0d3e8ecccd321882363307ee15c1a57a4fd96b9afcc206e536d5ce63cb84fe2b56f9531d689d9ea4d4a138d62bb51b0034deb063c61d6a9cd470ef3dd4e0a3171d6c25a9348a680a577b8b0b6a63d655480a484e9bfb67306ab923e373ef1ac60ffadad5565631d393e", 0x82) tee(r1, r3, 0x81, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}}, &(0x7f00000000c0)=0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r5, 0x6}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000003c0)=@generic={0x3, 0x3, 0x7000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000400)={r5, 0x6}, 0x8) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0b0227bd7000fddbdf25210000001c002d8005000400000000000800030002000000080003000700000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={0x24, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x4010) 2.890162253s ago: executing program 3 (id=3434): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.706452567s ago: executing program 5 (id=3437): r0 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r2, &(0x7f00000003c0)=""/132, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 2.69322169s ago: executing program 3 (id=3438): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400040070696d3672656730000000000000000008000500060000000800178004000200934bb4a19af17aa3e40547ba349259e80d5d5d8330f76cdb4e13609ea6119c839f54a3021bb544748473"], 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x28}}, 0xc000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1, 0x44}}], 0x48}, 0x0) r6 = socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2100000005000000000000000000000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000300)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, 0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}]}, &(0x7f0000000180)=0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0xffffffffffffff72) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={r12, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r13) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7000fddbdf251400000018000180140002007665746831000000000000000000000030f66dbc752535af1d1aa264ba5dc7544aff69a7636679f5bfab15054edc2d5f93ec35f537cc2edcb5cb60a82fb2dbafd68987acd62059f85259df8b255b2303f4f7f30a7e5d847b305de74821b364e86958c0bab82996862959d52caf1d4e1f9ad689fc769ba8089c5c303a37ac467312accebfdcc0220fb4de3145bd386c7a6d1eb70ebf15fc118a56efc67f802b8da8460942020453aa1e045898c107"], 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) setsockopt$inet6_int(r8, 0x29, 0x33, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) 2.566272759s ago: executing program 5 (id=3439): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='nmi_handler\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='svcrdma_qp_error\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, r0, 0x0, 0xf7eda53119602663, &(0x7f0000000700)='\x00\x00\x00\xb3\xd34\xef\x06aZ\xf7\xfc\xa5TU\xefn\x82\xf3DK\xb2\xef;\x1e\xceI\xb6\xda4F\x9c\xd3\xf4\x83E\x16\xb5\to\x1f\x0e\x00\xbcj\xaf\x93t\x83\xaa\xe3\x81C\xb4\xe2\xf8\x1b\x87N\xb7\xed\xb3\x8e\xad\x97\x1a~\xb9\xa4d\xc3\xff\x84\xe9\x03\xf4Ug\x16\'\a\xe4\xccw\xaa\\'}, 0x30) r1 = socket$inet6(0xa, 0x4, 0x81) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@local, 0x8, 0x2, 0x3, 0x5, 0x8a14, 0x3}, 0x20) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x1ba0, 0x0, &(0x7f0000000400)="07e80284cafbc8e3a6c36c329e29d2a22d3014fd25926043e55328c274a43a7dc7269c48d3e889e6065fca133cbcc99b683295e3c3f9983f9e72e46184f947bc64130bd5d791dab44ac2c1ad538e5b46a9757cb0453784238e24fb18d22e2fcd14a15aafdcecf830fbb9e79d38c442d90ca90260233f8ce4a16623051ec9c334b0be9b60ea90a215b4438f5ce86d1be4c48a932abd9c519e737aa922351042a91fe69cbe3c71f404b0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) (rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000200d0120d0108000000b7c60000000100000a12000300686173683a6e65742c706f7274000400050001000700000005000500020000000900020073797a300000000005000400000000000c0007800800134000000006"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) 2.527993146s ago: executing program 4 (id=3440): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000), 0x0) clock_gettime(0xb, &(0x7f0000000980)) 2.394210117s ago: executing program 7 (id=3442): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8deb010018000000000000000c0000000c00000003000000010000000000000506000000005f00"], 0x0, 0x27, 0x0, 0x1}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) write$cgroup_subtree(r6, &(0x7f0000000240)={[{0x2b, 'devices'}, {0x2d, 'net'}, {0x2b, 'devices'}, {0x2d, 'rlimit'}]}, 0x1f) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_rx_ntuple={0x35, {0xd, @udp_ip4_spec={@broadcast, @empty, 0x4e21, 0x4e22, 0xf8}, @ether_spec={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="d638df3ef83e", 0x3}, 0x2, 0x1, 0xffff, 0x1, 0xfffffffffffffffe}}}) 2.393442738s ago: executing program 2 (id=3443): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3e, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x5}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x10, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe4e}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xc, @void}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x24) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) 2.349615183s ago: executing program 4 (id=3444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x12, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x4}, 0x10) 2.317390704s ago: executing program 5 (id=3445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) splice(r3, &(0x7f0000000140)=0x7, r2, &(0x7f0000000180)=0x247, 0x2, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 2.110489363s ago: executing program 2 (id=3446): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7fff, 0xaa65, 0xed}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@private2}}, {{@in=@multicast1}}}, &(0x7f0000000180)=0xe8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) 2.108854012s ago: executing program 4 (id=3447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) 2.014577771s ago: executing program 2 (id=3448): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40480}, 0x4008855) (async) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40480}, 0x4008855) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x30}, {r2, 0x4214}, {r1, 0x8c}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x16]}, 0x8) 1.986393265s ago: executing program 4 (id=3449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r6, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040040) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000000000000080000eefb7b04b0837bf80001c26a2fc3e5ee2dd07987b6bab259931a27b6b53f232d7dab9c4d2002c999bb97c51120323a27419676a6be8004f4679a6949365e4fe00e349960bc", @ANYRES32=r10, @ANYBLOB="0b000080976b64087c603000"], 0x24}], 0x1}, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="000200003e000100fcff07000400000001000000d40135800800db00", @ANYRES32=r7, @ANYBLOB="0d01928006000d002e00000008001800", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.766141561s ago: executing program 2 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xfffffffffffffdd7}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) (async) socket(0x848000000015, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async, rerun: 64) r2 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 64) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008855) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000003c0), &(0x7f0000000440)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f00000012c0)={r9, @in={{0x2, 0x4e20, @empty}}}, 0xff6b) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="717deb75", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf2505000000200001800d0001007564703a73797a32000000000c0002800800020008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 1.730945438s ago: executing program 3 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="010a05000101040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r8) write(r7, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x1144, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_cgroup={{0xb}, {0x110c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_POLICE={0x1034, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa5f1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x8, 0x74, 0x800, 0x6, 0x10, 0x8d, 0xa000000, 0xfffffffe, 0x9, 0x0, 0x9, 0x4, 0x4a, 0x7, 0xfffff814, 0x8, 0xffffffc7, 0x7, 0xd, 0x1, 0x0, 0xf, 0x2, 0x5a, 0x7, 0x1, 0xd5, 0x0, 0x2cc0, 0x7, 0x6, 0x8001, 0x2, 0x7f, 0x6, 0x2, 0x10, 0x8000, 0x3, 0x6, 0x9, 0xdc15, 0x8, 0x81, 0x0, 0x1, 0x81, 0x7c05, 0x5, 0x2fd6, 0x6, 0x40, 0x5, 0xff, 0x0, 0x4, 0x6, 0x2, 0x1, 0x101, 0x4, 0x4, 0xd3e6, 0x3a8, 0x8b, 0x9, 0x4, 0x7, 0xfffffff7, 0x4a1, 0x65, 0x8000, 0x80000000, 0x419b, 0x9, 0x7, 0x39, 0x9c, 0x10001, 0x951d, 0x0, 0xa, 0x7fff, 0x4, 0x2d, 0xf3, 0x6, 0x0, 0x4, 0x9, 0x0, 0x9, 0x3f, 0x8, 0x789, 0x7, 0x67b2da66, 0x8, 0x0, 0x3, 0x5, 0x4, 0x80000001, 0x7fff, 0x3, 0x6, 0x1000, 0x800, 0xffffff46, 0x4, 0xf, 0x2, 0x101, 0x4, 0xff, 0x1, 0x7f, 0xa0, 0x800, 0x9, 0x1, 0x4, 0x150, 0x9f, 0xb, 0x7, 0x3, 0xf3e, 0xc5e0, 0x4, 0x2, 0x800, 0x1, 0x7f, 0xd43c, 0x4, 0x40, 0xffffffff, 0x2, 0xe8a, 0x8, 0x0, 0x1, 0x5, 0x3, 0x6000, 0x5, 0x4, 0x2, 0x6, 0xf7, 0xffffffff, 0x3, 0x3, 0x9, 0x800, 0x6, 0x0, 0x8, 0xc, 0x5, 0x2, 0xf7b9, 0x8000000, 0x8, 0x1ff, 0x7, 0x7, 0x87, 0xcc, 0x7, 0x4, 0x400, 0x4f1, 0x85, 0x1, 0x1, 0xfa, 0xffffff80, 0x5, 0xa7, 0x1, 0xf, 0xe, 0x3, 0x1, 0x3, 0x40, 0x221c, 0x6, 0xfffffcbb, 0x3, 0x0, 0x4, 0x52, 0x100, 0x8000, 0x1, 0x94, 0x9, 0x3, 0x9, 0x81, 0x4, 0x52, 0xd0e, 0x800, 0x1ff, 0x1a260, 0x2, 0x5f, 0x7, 0xfffffffe, 0x3, 0x4c, 0x1, 0x7, 0x2, 0x8000, 0x18, 0x8, 0x4, 0x9acc, 0x7c, 0xec5c, 0x35, 0xfffffffa, 0x7, 0x200, 0x8, 0x0, 0x8, 0x8001, 0x2, 0x1, 0x64f, 0x9, 0x0, 0x0, 0x5, 0x800, 0x9, 0xffff0001, 0x7, 0xca8a8c2, 0x8, 0x0, 0x2, 0x7, 0x8, 0x3, 0x200, 0x0, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x223, 0x80000001, 0x3, 0x35, 0xd8, 0x9, 0x6c, 0x2, 0x9, 0x7, 0x5, 0x1ff, 0xae, 0x3, 0xffff09f5, 0x80000001, 0x0, 0x10, 0x2, 0x735, 0x2, 0x3, 0xfd3, 0x8dc, 0x5, 0x0, 0x5, 0x0, 0x2, 0x7f, 0x4ed9, 0x44ca0c5d, 0x800, 0x8, 0x6, 0x7fff, 0xe, 0x4, 0x6, 0x7ff, 0x100, 0xf7a, 0x6, 0x3ff, 0x1, 0xa, 0x9, 0x9f4, 0x2, 0x40000, 0x4, 0xe7, 0x74000000, 0x728, 0x3, 0xfffffffc, 0xa6, 0xa97, 0xb, 0x3, 0x7, 0x5, 0x2, 0x4, 0x596, 0x3, 0xd53, 0x3, 0x5, 0xfffff800, 0x7, 0x0, 0xfffffff7, 0x13f2, 0xffe, 0x5, 0x3, 0x200, 0x0, 0x7fff, 0x58f, 0x3328, 0x5, 0x10, 0x80000001, 0x9, 0x8, 0xfffffe82, 0x9, 0x5, 0x3, 0x3, 0x8, 0x8, 0xfff, 0x7, 0x9, 0x0, 0x6, 0x8000, 0x6, 0x1, 0xbe1, 0x8001, 0xffffffd6, 0x7ff00000, 0xb, 0x80, 0x7, 0x10001, 0x2, 0x80000001, 0x3, 0x8, 0x10001, 0x6, 0x8000, 0x0, 0xfffffa16, 0x1, 0x1, 0x5, 0x720, 0x5, 0x4, 0x8, 0x9, 0xffff, 0x80, 0x3ff, 0xfffffffc, 0x4, 0x6, 0x9, 0x2, 0x6, 0x4000, 0x4, 0x80000000, 0x3fe6, 0x7, 0x6, 0x0, 0x9, 0xd1, 0x5, 0x5, 0x5, 0x1, 0x4, 0x0, 0xa, 0x3, 0xe, 0x0, 0x9, 0x4, 0x1, 0x1000, 0x7fffffff, 0x9, 0xd3b7, 0x0, 0x5589, 0x6c, 0xc0b80000, 0x9378, 0x3, 0x380000, 0x8, 0x6, 0x7ad, 0x6, 0x2, 0xffffffff, 0x5, 0x6, 0xfdd, 0x5, 0x7, 0x9, 0x3, 0x0, 0x4, 0xb, 0x7, 0xd, 0x6f35, 0x3, 0x2, 0xb3d9, 0x7fffffff, 0x1, 0x10001, 0xd, 0x45, 0x10000, 0x0, 0x1, 0x0, 0x81, 0x8, 0x0, 0x1, 0x81, 0x1d8, 0x101, 0xa0, 0xd, 0x80000000, 0xeb, 0x4a0, 0x0, 0x6, 0x9, 0xfea, 0x543e, 0x10, 0x1, 0x7, 0x9, 0x401, 0x800, 0x4, 0x4, 0x5, 0x200, 0x0, 0xff, 0xb5, 0xd471, 0x4000, 0x7, 0x2, 0x4, 0x52fc, 0x8, 0x8, 0xd, 0x4, 0xa, 0x0, 0x0, 0x7fffffff, 0xff, 0x7d73, 0x7, 0xc, 0x8, 0xb, 0x10, 0x10, 0x1, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffffd, 0x5, 0x400, 0x3, 0xc42b, 0x2, 0xffff8000, 0x3, 0x1, 0xe5, 0x7, 0x0, 0x8, 0x4, 0x3, 0x3ff, 0x4, 0xffffff7c, 0x3, 0x1, 0xfff, 0x246, 0xa44, 0x4, 0x8, 0x707, 0x5, 0xc, 0x3, 0xa, 0x0, 0x1, 0x80, 0x4, 0xb0f2, 0x5, 0xfffffffb, 0x6, 0xffffc05e, 0x6, 0x8001, 0x9, 0x40, 0x1, 0x8, 0x80000000, 0x9, 0x7, 0x8, 0x1000000, 0x8, 0x15, 0x81, 0x2b7a8178, 0x3ff, 0x2, 0x8, 0x5, 0x8bd5, 0x5, 0x7, 0x0, 0x2, 0xf, 0x7, 0x2, 0x7fff, 0xf3bd, 0x0, 0x5, 0xf9, 0x3, 0x362, 0xc4, 0x6, 0x8, 0x9, 0x1ff, 0xc361, 0x2, 0x6d79, 0xe0, 0xf, 0x24311511, 0x2, 0x8000, 0x0, 0x101, 0x7, 0x7, 0x6, 0x2, 0x8, 0x596, 0x6, 0x7f, 0x3, 0x5, 0xffff8001, 0x458c, 0x6, 0x6, 0xf3, 0x0, 0x200, 0x10000, 0x7, 0x401, 0x3ff, 0xffffffff, 0xfffffffb, 0x2, 0x2, 0x8, 0x3, 0x6, 0x1, 0x5, 0x100, 0x1, 0x8, 0x9, 0xfffffffc, 0xd, 0x5, 0xb, 0x11, 0x5, 0x4071, 0x0, 0x9, 0x6, 0xfffffff4, 0x3, 0x4, 0x8ddf000, 0x7b91, 0x8, 0x7, 0x4, 0xffff, 0x4, 0xf58b, 0x80000000, 0x9, 0xb341, 0x6, 0x4, 0x1ec, 0x81, 0x6, 0x3, 0x80000000, 0x25, 0x8, 0x7, 0x1, 0x0, 0x5, 0x8, 0x5, 0x1, 0x6, 0x5, 0xfffffffb, 0x8, 0x59, 0x0, 0x8, 0x1fc, 0x0, 0xffff, 0x1, 0x900d, 0x30000000, 0x8, 0xffffffff, 0x100, 0x6, 0x401, 0xb25, 0x5, 0xd21, 0x0, 0xe, 0x2, 0x3f, 0x6, 0x8e8, 0x1, 0x4, 0x3, 0x0, 0x8, 0xbfe1, 0x15c5, 0x9509, 0x10001, 0xffffffdb, 0x7fff, 0x8, 0x7, 0x8, 0x5, 0x400, 0xf, 0x1, 0x200, 0xfffffff9, 0x2, 0x800, 0x8, 0x6, 0xfffffff8, 0x10, 0x1400000, 0x2, 0x10000, 0x3, 0x9, 0xc2, 0x0, 0x6, 0x4, 0x8, 0x7, 0x8, 0x6, 0x800, 0x4, 0x800, 0x5, 0xfffffffe, 0x2, 0x815d, 0x400, 0x81, 0x9, 0x401, 0xc31, 0x4, 0x3892, 0x100, 0x4e78, 0x7ff, 0x9, 0x4, 0xfffffffe, 0x1, 0xfff, 0xfffffffb, 0x1, 0xffffffff, 0x9, 0xa]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x7, 0x7f, 0x3, 0xf0, 0x0, 0x401, 0x90a, 0xfffffff3, 0x3, 0x32, 0x2, 0x4, 0x1, 0x3, 0x6, 0x40, 0x8000, 0x5, 0x1, 0x12418e9a, 0x7, 0x7, 0x2, 0x5, 0xc, 0x963, 0x8000, 0x7, 0xfffffffb, 0x3, 0x6, 0x5, 0x7, 0x4, 0x4, 0x3, 0x10000, 0xff, 0xd11f, 0x4e8d, 0x9, 0x8, 0x95f, 0xf, 0x906b, 0xe, 0x7, 0x3ff, 0x8000, 0x180000, 0x1, 0xb, 0x76, 0x7, 0x2, 0x1, 0x2da75d4b, 0x8, 0x3ff, 0x14a, 0x1, 0x0, 0x6, 0x7ff, 0x2, 0x8, 0x30000, 0xfffffff3, 0x100, 0x7, 0xffffffff, 0x7fff, 0x8, 0x7ff, 0x0, 0x800, 0x0, 0x7, 0x5, 0x4, 0x8, 0xfffffff8, 0x2, 0x4, 0x6, 0x0, 0x100, 0x4, 0x1, 0x5473, 0x5, 0x6, 0x8, 0x952, 0x7f, 0x4, 0x1ff, 0xfffffffd, 0xc, 0x9, 0x2, 0x7, 0x1, 0x4, 0x0, 0x7e, 0x1, 0x6, 0x0, 0xd, 0xc, 0x8, 0x8, 0x1, 0xc, 0xa19, 0xc, 0x7, 0x0, 0x10000, 0xffffffd2, 0x7, 0x7, 0x0, 0x3800, 0x5, 0x3, 0xc67, 0x245, 0x9, 0x3ff, 0xfffffffe, 0x85, 0x7d, 0x6, 0x4, 0x8, 0x14000, 0x8, 0xfff, 0x9, 0x4a58, 0x2, 0x3ff, 0x6, 0x1c3, 0x8000, 0x6, 0x1, 0xa, 0x1, 0x6, 0x0, 0x5, 0x9, 0x1, 0x9, 0xfff, 0xc3db, 0x5718e43f, 0xd19, 0x8, 0x1, 0xf, 0x4, 0x8, 0x80000001, 0x13f, 0x3, 0x7, 0x7, 0x3fef5314, 0xffffffff, 0x6, 0x800, 0x9, 0x4, 0x9, 0x2, 0x200, 0x3, 0x0, 0x5, 0x100, 0x9, 0x16, 0x7fff, 0x4, 0x1, 0x401, 0x1, 0xb, 0xfffffff8, 0x2, 0xfffffffd, 0x100000, 0x69a, 0x10000, 0x0, 0x1, 0x8000, 0x0, 0x26cd, 0xa1f9, 0x5, 0x200, 0x6926bef9, 0x2, 0x3, 0x2, 0x80000001, 0xfffffffb, 0x0, 0xaed5, 0x0, 0x9, 0x1, 0x3, 0x8, 0x2, 0x0, 0xba9, 0x10, 0xa5, 0x3, 0x4, 0xff, 0x7, 0x40, 0xb17, 0x70, 0x8, 0x1db, 0x7, 0x6, 0x6, 0x4, 0x81, 0x1, 0x4, 0xee, 0xfffffffa, 0x6, 0x9, 0x4, 0x6, 0x7, 0x1, 0x7, 0x9, 0x1000, 0x29, 0x1, 0x7, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}]}, @TCA_CGROUP_POLICE={0x68, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x2, 0x1df3, 0x1, 0x8, {0x4, 0x1, 0x7fff, 0x5, 0x2, 0xf5}, {0x5, 0x1, 0x40, 0x3ff, 0x8}, 0x3, 0x2, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x586f}, @TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_POLICE={0x58, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa552}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x0, 0x8, 0x9, 0x1, {0x5, 0x1, 0x7, 0x9, 0x6, 0x9}, {0x9, 0x0, 0xf7, 0xd, 0x3, 0x6}, 0x4, 0x1, 0x1000}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x1144}}, 0x0) 792.203071ms ago: executing program 2 (id=3452): mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) sendto$inet6(r3, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) shutdown(r3, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 790.979312ms ago: executing program 4 (id=3453): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x11, &(0x7f0000000700)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x0, 0xa, 0x7, 0x8, 0xe4, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x81, 0x0, 0xd, 0x5, 0xffff3ad5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xe6, 0x7, 0x3, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x2}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r3, &(0x7f0000000400)={0x22, 0x4d, 0x1, 0x5a, 0xf}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r2, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000004000000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000020000300"/28], 0x50) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x2, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc060}, 0x4008000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x101, [{0xf, 0x5, 0x3}]}]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x3e]}}, &(0x7f0000000280)=""/251, 0x43, 0xfb, 0x9, 0xf}, 0x28) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x501, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fddbdf2505000000200001800d0001007564703a73797a32"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008000) close(0x3) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$l2tp6(r13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x3, 0x100, 0x2040, r4, 0x7, '\x00', r7, r8, 0x4, 0x5, 0x5, 0x8}, 0x50) 789.038798ms ago: executing program 7 (id=3454): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000240)={{0x87, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'lblcr\x00', 0x0, 0xffffffff, 0x2}, {@remote, 0x4e22, 0x10000, 0x7f, 0x3, 0x8165}}, 0x44) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) unshare(0x26020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) r5 = accept4$alg(r3, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$alg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55) socket$tipc(0x1e, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) close(0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket(0x15, 0x5, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x10, 0x12, 0x200, 0x70bd25}, 0x10}}, 0x20040810) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) 711.027792ms ago: executing program 5 (id=3455): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES64=r2], 0x24}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1c6, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x190, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x5c, 0x10, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}]}, @hopopts={0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @dstopts={0x84, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0xfd}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0xff, 0x21c3, [0x7, 0x5, 0x3, 0x9, 0x6, 0x5, 0x3ff]}}]}, @srh={0x3a, 0xc, 0x4, 0x6, 0x2, 0x78, 0x2, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, @private1, @private0, @mcast2]}, @routing={0x89, 0x2, 0x1, 0xff, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x9, 0xf989, "45ee4f42ed"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xa8}}, 0x0) (async, rerun: 32) sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'nicvf0\x00'}) 519.038057ms ago: executing program 3 (id=3456): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0xd8}}, 0x20000040) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x815}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f00000002c0)={0x7, 'ip6tnl0\x00', {0x7}, 0x400}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 309.560065ms ago: executing program 7 (id=3457): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0xdc, 0x24, 0xf1d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x6, 0x69e, 0x2, 0x1, 0x8, 0x7}}, {0x12, 0x2, [0xfffc, 0xffff, 0x3, 0x401, 0xa8, 0x6a, 0x8]}}, {{0x1c, 0x1, {0x2, 0x7f, 0x6, 0x4, 0x2, 0x4, 0xe, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}, {{0x1c, 0x1, {0x2, 0x32, 0x7, 0x5, 0x0, 0x7, 0x800, 0x4}}, {0xc, 0x2, [0x2, 0x8cc9, 0x9, 0xb]}}, {{0x1c, 0x1, {0xc, 0x3, 0x2, 0x20000000, 0x2, 0x0, 0x1, 0x2}}, {0x8, 0x2, [0x0, 0x5]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x9}}}]}, 0xdc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000380), 0x4) 222.38303ms ago: executing program 4 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x79e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe121}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (rerun: 32) 160.795688ms ago: executing program 2 (id=3459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffe}]}, 0x48}}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe}, 0x20}, 0x1, 0x4801000000000000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 7 (id=3460): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3}, 0x12100) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000240)={0x1}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x7}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0x10200000, @loopback, 0xfffffff9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r2, 0x8, 0xd16, 0xfff, 0x6, 0x9, 0x4768, 0x39, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x25f, 0x0, 0x7f, 0x6, 0x66}}, &(0x7f0000000400)=0xb0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a31000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): [ 266.187026][T12573] netlink: ct family unspecified [ 266.192093][T12573] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.202235][T12573] netlink: 'syz.2.1936': attribute type 2 has an invalid length. [ 267.004317][T12616] bond2: (slave veth5): Releasing active interface [ 267.024237][T12616] bond3: (slave geneve3): Releasing backup interface [ 267.050735][T12622] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 267.100265][T12625] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 267.134749][T12625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 267.622484][T12660] __nla_validate_parse: 69 callbacks suppressed [ 267.622505][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 267.766779][T12662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1963'. [ 268.020788][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 268.047158][T12672] netlink: 'syz.3.1965': attribute type 20 has an invalid length. [ 268.146851][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 268.158524][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 268.175633][T12672] netlink: 'syz.3.1965': attribute type 20 has an invalid length. [ 268.185733][T12664] netlink: 'syz.2.1964': attribute type 5 has an invalid length. [ 268.193730][T12664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'. [ 268.236485][T12664] geneve3: entered promiscuous mode [ 268.241811][T12664] geneve3: entered allmulticast mode [ 268.252913][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 268.291985][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 268.311348][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 268.325613][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 268.332506][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 268.465148][T12686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 268.569272][T12689] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1971'. [ 268.723489][T12699] nbd: must specify a size in bytes for the device [ 268.813537][T12703] tipc: Enabling of bearer rejected, already enabled [ 268.824922][T12703] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 268.834244][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1976'. [ 268.918392][T12712] gretap1: entered promiscuous mode [ 268.932834][T12712] gretap1: entered allmulticast mode [ 269.090859][T12719] Bluetooth: MGMT ver 1.23 [ 269.184050][T12721] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 269.931789][T12772] netlink: 'syz.5.2001': attribute type 1 has an invalid length. [ 270.019496][T12777] tipc: Resetting bearer [ 270.079107][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 270.117138][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 270.134647][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 270.151369][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 270.735143][T12821] syzkaller1: entered promiscuous mode [ 270.747661][T12821] syzkaller1: entered allmulticast mode [ 271.110303][T12849] netlink: 'syz.2.2021': attribute type 2 has an invalid length. [ 271.442823][T12869] block nbd0: reconnected socket [ 271.456398][T12873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.524486][ T5864] block nbd0: Receive control failed (result -32) [ 272.230010][T12927] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 272.290545][T12927] 8021q: adding VLAN 0 to HW filter on device bond15 [ 272.340845][T12929] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 272.376185][T12933] bond15: (slave geneve4): making interface the new active one [ 272.397559][T12933] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 272.486530][T12939] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.501848][T12939] bond9: (slave bond10): making interface the new active one [ 272.510007][T12939] bond9: (slave bond10): Enslaving as an active interface with an up link [ 272.526047][ T5864] Bluetooth: hci3: command 0x0405 tx timeout [ 272.640100][T12948] netlink: 'syz.2.2054': attribute type 1 has an invalid length. [ 272.880252][T12965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.070638][T12974] __nla_validate_parse: 16 callbacks suppressed [ 273.070657][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 273.224665][T12978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.713316][T12995] dvmrp0: entered allmulticast mode [ 274.763822][T12999] netlink: 'syz.5.2069': attribute type 1 has an invalid length. [ 274.773148][T12999] netlink: 'syz.5.2069': attribute type 1 has an invalid length. [ 274.818345][T13004] º: renamed from veth1_vlan (while UP) [ 275.041309][T13013] netlink: 'syz.4.2075': attribute type 10 has an invalid length. [ 275.053567][T13013] team0: Port device dummy0 added [ 275.063590][T13013] netlink: 'syz.4.2075': attribute type 10 has an invalid length. [ 275.093891][T13013] team0: Failed to send options change via netlink (err -105) [ 275.102050][T13013] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 275.111842][T13013] team0: Port device dummy0 removed [ 275.278462][T13025] netlink: 'syz.4.2080': attribute type 1 has an invalid length. [ 275.288835][T13025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2080'. [ 275.376275][T13030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2082'. [ 275.421141][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 275.485176][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 275.537447][T13035] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 275.546832][T13035] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 275.798913][T13057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2087'. [ 275.950506][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2090'. [ 276.022504][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 276.153094][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2093'. [ 276.172645][T13074] tipc: Enabled bearer , priority 0 [ 276.634091][T13093] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2099'. [ 276.854138][T13101] syzkaller1: entered promiscuous mode [ 276.860104][T13101] syzkaller1: entered allmulticast mode [ 276.972364][T13073] tipc: Disabling bearer [ 277.123378][T13114] ªªªªªª: renamed from vlan0 [ 277.266483][ T59] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 277.287090][T13125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.303279][T13125] netlink: 'syz.3.2113': attribute type 4 has an invalid length. [ 277.579481][T13138] tipc: Enabling of bearer rejected, failed to enable media [ 277.856489][T13153] netlink: 'syz.2.2122': attribute type 3 has an invalid length. [ 277.985117][T13157] netlink: 'syz.5.2124': attribute type 21 has an invalid length. [ 277.995542][T13157] bond0: entered promiscuous mode [ 278.000779][T13157] bond_slave_0: entered promiscuous mode [ 278.009131][T13157] bond_slave_1: entered promiscuous mode [ 278.015132][T13157] bond0: entered allmulticast mode [ 278.020497][T13157] bond_slave_0: entered allmulticast mode [ 278.035745][T13157] bond_slave_1: entered allmulticast mode [ 278.047150][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.065977][T13159] pim6reg1: entered promiscuous mode [ 278.071400][T13159] pim6reg1: entered allmulticast mode [ 278.385601][ T49] tipc: Subscription rejected, illegal request [ 278.456648][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.474829][T13184] bridge_slave_1: left allmulticast mode [ 278.481393][ T30] audit: type=1107 audit(1758196534.081:6): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 278.486259][T13184] bridge_slave_1: left promiscuous mode [ 278.505702][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.514948][T13187] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.528807][T13184] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 278.664015][T13196] __nla_validate_parse: 5 callbacks suppressed [ 278.664036][T13196] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2138'. [ 278.853434][T13209] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2142'. [ 278.865991][T13209] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2142'. [ 278.875859][T13209] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2142'. [ 278.901383][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2143'. [ 279.012577][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 279.050158][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 279.207455][T13232] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2150'. [ 279.411502][ T25] block nbd1: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 90 seconds [ 279.422486][ T25] block nbd1: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 90 seconds [ 279.434047][ T25] block nbd1: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 90 seconds [ 279.445200][ T25] block nbd1: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 90 seconds [ 279.472442][T13248] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2154'. [ 279.482345][T13248] nbd: must specify at least one socket [ 279.560224][ T5942] hid-generic 0005:0007:0008.0001: item fetching failed at offset 0/1 [ 279.570714][ T5942] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 279.593423][T13251] batadv0: entered promiscuous mode [ 279.600976][T13251] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 279.614084][T13251] hsr1: entered allmulticast mode [ 279.620060][T13251] batadv0: entered allmulticast mode [ 279.626449][T13251] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 279.744727][T13263] 8021q: VLANs not supported on lo [ 279.750721][T13264] 8021q: VLANs not supported on lo [ 279.814583][T13266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.180083][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2168'. [ 280.565414][T13304] validate_nla: 7 callbacks suppressed [ 280.565432][T13304] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 280.687005][ T25] block nbd2: Possible stuck request ffff888025395080: control (read@0,1024B). Runtime 90 seconds [ 280.698125][ T25] block nbd2: Possible stuck request ffff888025395240: control (read@1024,1024B). Runtime 90 seconds [ 280.709631][ T25] block nbd2: Possible stuck request ffff888025395400: control (read@2048,1024B). Runtime 90 seconds [ 280.721000][ T25] block nbd2: Possible stuck request ffff8880253955c0: control (read@3072,1024B). Runtime 90 seconds [ 280.747155][T13304] 8021q: adding VLAN 0 to HW filter on device bond11 [ 280.811528][T13306] bond11: (slave gretap2): making interface the new active one [ 280.899705][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.910799][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.919194][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.927751][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.950668][T13306] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 280.979907][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.931341][T13314] chnl_net:caif_netlink_parms(): no params data found [ 282.197432][T13314] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.204679][T13314] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.217916][T13314] bridge_slave_0: entered allmulticast mode [ 282.225817][T13314] bridge_slave_0: entered promiscuous mode [ 282.246508][T13314] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.253733][T13314] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.265502][T13314] bridge_slave_1: entered allmulticast mode [ 282.273272][T13314] bridge_slave_1: entered promiscuous mode [ 282.445096][T13314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.497034][T13314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.660855][T13314] team0: Port device team_slave_0 added [ 282.688015][T13314] team0: Port device team_slave_1 added [ 282.781487][T13382] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 282.809282][T13314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.816985][T13314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.853224][T13314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.901955][T13314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.911836][T13314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.942147][T13314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.962289][T13399] tipc: Enabled bearer , priority 0 [ 283.005499][ T5864] Bluetooth: hci5: command tx timeout [ 283.073151][T13399] tipc: Disabling bearer [ 283.161403][T13405] ip6gre1: entered allmulticast mode [ 283.202174][T13314] hsr_slave_0: entered promiscuous mode [ 283.209938][T13314] hsr_slave_1: entered promiscuous mode [ 283.221192][T13314] debugfs: 'hsr0' already exists in 'hsr' [ 283.227401][T13314] Cannot create hsr debugfs directory [ 283.301324][T13415] tipc: Enabled bearer , priority 0 [ 283.446733][T13426] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 283.493333][T13415] tipc: Disabling bearer [ 283.758893][T13437] tipc: Enabled bearer , priority 0 [ 283.785392][T13442] __nla_validate_parse: 9 callbacks suppressed [ 283.785410][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 283.812989][T13437] syzkaller0: entered promiscuous mode [ 283.835192][T13437] syzkaller0: entered allmulticast mode [ 283.908494][T13437] tipc: Resetting bearer [ 283.941357][T13433] tipc: Resetting bearer [ 283.978226][T13433] tipc: Disabling bearer [ 284.183284][T13456] tipc: Enabled bearer , priority 0 [ 284.260640][T13448] syzkaller0: entered promiscuous mode [ 284.274989][T13448] syzkaller0: entered allmulticast mode [ 284.310804][T13314] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.325967][T13314] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 284.352098][T13314] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 284.397105][T13432] infiniband !yz!: set down [ 284.402275][T13432] infiniband !yz!: added team_slave_0 [ 284.404091][T13448] tipc: Resetting bearer [ 284.474320][T13314] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 284.504799][T13432] RDS/IB: !yz!: added [ 284.517740][T13432] smc: adding ib device !yz! with port count 1 [ 284.524144][T13447] tipc: Resetting bearer [ 284.532958][T13432] smc: ib device !yz! port 1 has pnetid [ 284.572897][T13447] tipc: Disabling bearer [ 284.700434][T13475] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2221'. [ 284.726719][T13314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.813466][T13314] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.879611][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.886812][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.921020][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.928218][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.976865][T13483] tipc: Enabling of bearer rejected, failed to enable media [ 285.015744][T13487] tipc: Enabling of bearer rejected, failed to enable media [ 285.085655][ T5864] Bluetooth: hci5: command tx timeout [ 285.111178][T13314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.199478][T13490] netlink: 'syz.2.2227': attribute type 30 has an invalid length. [ 285.234111][ T7570] IPVS: starting estimator thread 0... [ 285.345404][T13498] IPVS: using max 29 ests per chain, 69600 per kthread [ 285.644674][T13506] syzkaller0: entered promiscuous mode [ 285.686329][T13506] syzkaller0: entered allmulticast mode [ 285.721468][T13518] ip6gre2: entered allmulticast mode [ 285.829151][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 287.165510][ T5864] Bluetooth: hci5: command tx timeout [ 287.468117][T13314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.726880][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 287.932430][T13557] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2242'. [ 288.007058][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.466185][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.551142][T13568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2244'. [ 288.764380][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.818360][T13575] netlink: 'syz.2.2245': attribute type 4 has an invalid length. [ 288.931416][T13574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.962598][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.071565][T13314] veth0_vlan: entered promiscuous mode [ 289.118125][T13314] veth1_vlan: entered promiscuous mode [ 289.191570][T13589] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 289.245762][ T5864] Bluetooth: hci5: command tx timeout [ 289.358736][T13314] veth0_macvtap: entered promiscuous mode [ 289.424453][T13314] veth1_macvtap: entered promiscuous mode [ 289.456272][ T36] bridge_slave_1: left allmulticast mode [ 289.485788][ T36] bridge_slave_1: left promiscuous mode [ 289.492984][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.523184][ T36] bridge_slave_0: left allmulticast mode [ 289.541754][ T36] bridge_slave_0: left promiscuous mode [ 289.558679][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.643112][T13606] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2252'. [ 289.666474][T13606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.733547][T13610] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 289.752437][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 289.771457][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2254'. [ 289.899504][ T36] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 290.169871][ T36] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 290.178324][ T36] bridge2 (unregistering): left promiscuous mode [ 290.387260][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.400492][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.412419][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 290.428594][ T36] bond0 (unregistering): Released all slaves [ 290.537952][ T36] bond1 (unregistering): Released all slaves [ 290.644541][ T36] bond2 (unregistering): Released all slaves [ 290.666479][T13616] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 290.672746][T13610] geneve3: entered promiscuous mode [ 290.679913][T13610] geneve3: entered allmulticast mode [ 290.682904][T13616] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2256'. [ 290.726126][T13614] veth0_to_team: entered promiscuous mode [ 290.739168][T13614] veth0_to_team: entered allmulticast mode [ 290.764366][T13615] netlink: 'syz.2.2256': attribute type 3 has an invalid length. [ 290.787791][T13615] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2256'. [ 290.839134][ T36] tipc: Left network mode [ 290.842910][T13314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.908288][T13314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.976960][T13235] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.996602][ T9576] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.012979][ T9576] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.131009][ T9576] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.687103][T13235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.712832][T13235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.795987][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.825427][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.161855][T13650] sctp: [Deprecated]: syz.3.2264 (pid 13650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.161855][T13650] Use struct sctp_sack_info instead [ 292.398464][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 292.572514][T13670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2268'. [ 292.618266][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 292.991622][T13684] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 293.019106][T13684] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2271'. [ 293.051694][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 293.640343][T13710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.895916][T13712] macvlan0: entered promiscuous mode [ 293.904803][T13712] batadv_slave_0: entered promiscuous mode [ 293.913287][T13712] debugfs: 'hsr1' already exists in 'hsr' [ 293.934711][T13712] Cannot create hsr debugfs directory [ 293.973128][ T36] hsr_slave_0: left promiscuous mode [ 293.983418][ T36] hsr_slave_1: left promiscuous mode [ 294.000453][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.017228][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.028817][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.042100][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.085957][ T36] veth1_macvtap: left promiscuous mode [ 294.092430][ T36] veth0_macvtap: left promiscuous mode [ 294.098881][ T36] veth1_vlan: left promiscuous mode [ 294.106050][ T36] veth0_vlan: left promiscuous mode [ 294.613360][ T36] team0 (unregistering): Port device team_slave_1 removed [ 294.658355][ T36] team0 (unregistering): Port device team_slave_0 removed [ 294.685423][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.315425][T13731] sch_fq: defrate 0 ignored. [ 295.322144][T13733] __nla_validate_parse: 8 callbacks suppressed [ 295.322163][T13733] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2285'. [ 295.349227][T13733] netlink: zone id is out of range [ 295.354414][T13733] netlink: get zone limit has 8 unknown bytes [ 295.373978][T13733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.442793][T13743] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2289'. [ 295.525217][T13750] netlink: 'syz.7.2292': attribute type 1 has an invalid length. [ 295.540524][T13752] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 295.567512][T13750] netlink: 'syz.7.2292': attribute type 3 has an invalid length. [ 295.603876][T13750] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2292'. [ 295.630124][T13750] NCSI netlink: No device for ifindex 813332851 [ 295.699512][T13750] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 295.728064][T13762] netlink: 'syz.4.2294': attribute type 1 has an invalid length. [ 295.752138][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 295.792062][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2296'. [ 296.174435][T13791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2303'. [ 296.180065][T13793] netlink: 'syz.7.2304': attribute type 21 has an invalid length. [ 296.201069][T13793] netlink: 'syz.7.2304': attribute type 22 has an invalid length. [ 296.213629][T13793] netlink: 'syz.7.2304': attribute type 23 has an invalid length. [ 296.224825][T13793] netlink: 'syz.7.2304': attribute type 25 has an invalid length. [ 296.254478][T13793] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2304'. [ 296.284202][T13800] netlink: 'syz.2.2307': attribute type 29 has an invalid length. [ 296.400219][T13801] netlink: 'syz.2.2307': attribute type 29 has an invalid length. [ 296.537416][T13812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2312'. [ 296.547094][T13812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2312'. [ 296.553651][T13815] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 296.564204][T13816] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 297.265167][T13860] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2326'. [ 297.345671][ T36] IPVS: stop unused estimator thread 0... [ 297.570947][ T5864] Bluetooth: hci5: command tx timeout [ 297.699263][T13872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.250394][T13904] IPVS: Error connecting to the multicast addr [ 298.394684][T13911] geneve2: entered promiscuous mode [ 299.315618][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.389910][T13975] netlink: set zone limit has 8 unknown bytes [ 299.433226][T13975] block nbd0: NBD_DISCONNECT [ 299.441348][T13975] block nbd0: Send disconnect failed -32 [ 299.449234][T13978] xt_l2tp: missing protocol rule (udp|l2tpip) [ 299.464396][T13975] block nbd0: shutting down sockets [ 299.744528][T13997] tipc: Started in network mode [ 299.760786][T13997] tipc: Node identity 080211, cluster identity 4711 [ 299.795201][T13997] tipc: Enabled bearer , priority 0 [ 299.967654][T14018] gretap0: entered allmulticast mode [ 300.059885][T14024] team0: Device vti0 is of different type [ 300.513639][T14048] __nla_validate_parse: 19 callbacks suppressed [ 300.513657][T14048] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2386'. [ 300.704379][T14041] openvswitch: netlink: IP tunnel dst address not specified [ 300.714326][T14041] validate_nla: 10 callbacks suppressed [ 300.714344][T14041] netlink: 'syz.5.2384': attribute type 13 has an invalid length. [ 300.729294][T14041] netlink: 'syz.5.2384': attribute type 17 has an invalid length. [ 300.740352][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2384'. [ 300.915426][ T5961] tipc: Node number set to 134353152 [ 303.655547][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.486096][ T25] block nbd1: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 120 seconds [ 309.496970][ T25] block nbd1: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 120 seconds [ 309.508004][ T25] block nbd1: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 120 seconds [ 309.519370][ T25] block nbd1: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 120 seconds [ 310.770341][ T25] block nbd2: Possible stuck request ffff888025395080: control (read@0,1024B). Runtime 120 seconds [ 310.781135][ T25] block nbd2: Possible stuck request ffff888025395240: control (read@1024,1024B). Runtime 120 seconds [ 310.792624][ T25] block nbd2: Possible stuck request ffff888025395400: control (read@2048,1024B). Runtime 120 seconds [ 310.803778][ T25] block nbd2: Possible stuck request ffff8880253955c0: control (read@3072,1024B). Runtime 120 seconds [ 312.055864][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.167835][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.949905][T14069] netlink: 'syz.3.2392': attribute type 24 has an invalid length. [ 320.022682][T14075] IPv6: Can't replace route, no match found [ 320.352839][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'. [ 320.503660][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 320.625632][T14101] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2402'. [ 320.780415][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2405'. [ 320.932333][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 320.952915][T14127] netlink: 'syz.3.2409': attribute type 8 has an invalid length. [ 321.015206][T14125] hsr_slave_0 (unregistering): left promiscuous mode [ 321.164151][T14136] netlink: 'syz.4.2413': attribute type 3 has an invalid length. [ 321.302568][T14153] veth1_to_bond: entered allmulticast mode [ 321.431506][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 321.441327][T14157] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 321.561737][T14157] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 321.578121][T14157] gretap2: entered promiscuous mode [ 321.597410][T14157] gretap2: entered allmulticast mode [ 321.770546][T14161] veth1_to_bond (unregistering): left allmulticast mode [ 321.800558][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2422'. [ 321.841447][T14180] netlink: 'syz.5.2425': attribute type 28 has an invalid length. [ 321.852077][T14180] netlink: 'syz.5.2425': attribute type 3 has an invalid length. [ 321.911498][T14180] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2425'. [ 321.952633][T14184] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 321.980829][T14186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2427'. [ 322.242419][T14197] bond17: entered promiscuous mode [ 322.252880][T14197] bond17: entered allmulticast mode [ 322.271520][T14197] 8021q: adding VLAN 0 to HW filter on device bond17 [ 322.332844][T14205] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2434'. [ 322.383203][T14211] sit1: entered promiscuous mode [ 322.405289][T14211] sit1: entered allmulticast mode [ 322.581785][T14233] nbd: must specify at least one socket [ 322.993419][T14256] netlink: 'syz.5.2440': attribute type 1 has an invalid length. [ 323.094535][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.102114][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.437603][T14230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.465402][T14230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.713555][T14241] tipc: Started in network mode [ 323.718839][T14241] tipc: Node identity 523fb9ff606a, cluster identity 4711 [ 323.739967][T14241] tipc: Enabled bearer , priority 0 [ 323.761460][T14245] syzkaller0: entered promiscuous mode [ 323.767362][T14245] syzkaller0: entered allmulticast mode [ 323.835584][T14251] tipc: Resetting bearer [ 323.881084][ T49] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.904912][ T49] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.940000][T14228] tipc: Resetting bearer [ 324.029908][T14228] tipc: Disabling bearer [ 324.064552][ T49] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.172119][ T49] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.621663][T14306] bridge_slave_0: left allmulticast mode [ 324.643169][T14306] bridge_slave_0: left promiscuous mode [ 324.656383][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.673097][T14306] bond0: (slave bridge_slave_1): Releasing backup interface [ 324.693724][T14306] bond0: (slave bond_slave_0): Releasing backup interface [ 324.712469][T14306] bond0: (slave bond_slave_1): Releasing backup interface [ 324.744579][T14306] team0: Port device team_slave_0 removed [ 324.773488][T14306] team0: Port device team_slave_1 removed [ 324.817851][T14306] bond3: (slave bond4): Releasing backup interface [ 324.852380][T14306] bond9: (slave vlan2): Releasing active interface [ 324.865163][T14306] batadv1: left allmulticast mode [ 324.871168][T14306] batadv1: left promiscuous mode [ 324.876878][T14306] bridge0: port 3(batadv1) entered disabled state [ 324.887587][T14306] bond10: (slave wireguard0): Releasing backup interface [ 324.894765][T14306] wireguard0: left promiscuous mode [ 324.908797][T14306] bond14: (slave veth3): Releasing backup interface [ 324.926415][T14306] bond15: (slave geneve4): Releasing active interface [ 325.311835][T14354] netlink: 'syz.4.2473': attribute type 11 has an invalid length. [ 325.334739][T14354] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 325.404623][T14361] __nla_validate_parse: 2 callbacks suppressed [ 325.404645][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 325.461866][T14361] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2474'. [ 325.504277][T14361] syzkaller1: entered promiscuous mode [ 325.517007][T14361] syzkaller1: entered allmulticast mode [ 325.791965][T14380] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2480'. [ 325.885998][T14384] netlink: 'syz.3.2482': attribute type 11 has an invalid length. [ 325.900250][T14384] netlink: 'syz.3.2482': attribute type 11 has an invalid length. [ 325.916224][T14384] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2482'. [ 325.986698][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2485'. [ 326.104670][T14397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2486'. [ 326.157404][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 326.190924][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 326.320241][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 326.568288][T14418] netlink: 'syz.5.2496': attribute type 1 has an invalid length. [ 326.628080][T14418] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.902890][T14446] netlink: 'syz.2.2504': attribute type 10 has an invalid length. [ 326.998355][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.028428][T14446] bond0: (slave team0): Enslaving as an active interface with an up link [ 327.139761][T14457] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 327.151560][T14457] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2508'. [ 328.045412][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 328.115211][T14513] FAULT_INJECTION: forcing a failure. [ 328.115211][T14513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.141253][T14513] CPU: 0 UID: 0 PID: 14513 Comm: syz.4.2525 Not tainted syzkaller #0 PREEMPT(full) [ 328.141280][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.141302][T14513] Call Trace: [ 328.141310][T14513] [ 328.141339][T14513] dump_stack_lvl+0x189/0x250 [ 328.141369][T14513] ? __pfx____ratelimit+0x10/0x10 [ 328.141390][T14513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.141414][T14513] ? __pfx__printk+0x10/0x10 [ 328.141454][T14513] should_fail_ex+0x414/0x560 [ 328.141490][T14513] _copy_to_user+0x31/0xb0 [ 328.141519][T14513] simple_read_from_buffer+0xe1/0x170 [ 328.141554][T14513] proc_fail_nth_read+0x1b3/0x220 [ 328.141580][T14513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.141612][T14513] ? rw_verify_area+0x2a6/0x4d0 [ 328.141636][T14513] ? __lock_acquire+0xab9/0xd20 [ 328.141662][T14513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.141686][T14513] vfs_read+0x200/0xa30 [ 328.141710][T14513] ? fdget_pos+0x247/0x320 [ 328.141732][T14513] ? __pfx___mutex_lock+0x10/0x10 [ 328.141756][T14513] ? __pfx_vfs_read+0x10/0x10 [ 328.141783][T14513] ? __fget_files+0x2a/0x420 [ 328.141805][T14513] ? __fget_files+0x3a0/0x420 [ 328.141821][T14513] ? __fget_files+0x2a/0x420 [ 328.141848][T14513] ksys_read+0x145/0x250 [ 328.141877][T14513] ? __pfx_ksys_read+0x10/0x10 [ 328.141908][T14513] ? do_syscall_64+0xbe/0x3b0 [ 328.141935][T14513] do_syscall_64+0xfa/0x3b0 [ 328.141955][T14513] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.141974][T14513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.141994][T14513] ? clear_bhb_loop+0x60/0xb0 [ 328.142018][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.142037][T14513] RIP: 0033:0x7f980d18d5bc [ 328.142055][T14513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.142073][T14513] RSP: 002b:00007f980e03d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.142095][T14513] RAX: ffffffffffffffda RBX: 00007f980d3d5fa0 RCX: 00007f980d18d5bc [ 328.142113][T14513] RDX: 000000000000000f RSI: 00007f980e03d0a0 RDI: 0000000000000005 [ 328.142126][T14513] RBP: 00007f980e03d090 R08: 0000000000000000 R09: 0000000000000000 [ 328.142138][T14513] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 328.142151][T14513] R13: 00007f980d3d6038 R14: 00007f980d3d5fa0 R15: 00007ffea07cf078 [ 328.142184][T14513] [ 328.719816][T14530] netlink: 'syz.4.2530': attribute type 10 has an invalid length. [ 328.763284][T14536] netlink: 'syz.2.2529': attribute type 30 has an invalid length. [ 329.342412][T14562] veth0_virt_wifi: entered promiscuous mode [ 329.394757][T14555] veth0_virt_wifi: left promiscuous mode [ 329.553489][T14569] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 329.619199][T14572] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 329.698388][T14576] syz.5.2541 (14576) used obsolete PPPIOCDETACH ioctl [ 329.781255][ T9576] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.802962][ T9576] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.829083][ T9576] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.846315][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.450794][T14600] __nla_validate_parse: 16 callbacks suppressed [ 330.450815][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'. [ 330.814200][T14606] gre2: entered promiscuous mode [ 330.837395][T14606] gre2: entered allmulticast mode [ 330.989177][T14624] atomic_op ffff888028142198 conn xmit_atomic 0000000000000000 [ 330.995843][T14625] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2558'. [ 331.126449][T14630] tipc: Enabled bearer , priority 10 [ 331.164176][T14630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2560'. [ 331.261965][T14639] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 331.273675][T14639] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2562'. [ 331.395659][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2564'. [ 331.522576][T14653] tipc: Failed to remove unknown binding: 66,1,1/0:3371977280/3371977282 [ 331.579973][T14650] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2564'. [ 331.601084][T14658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.668626][T14647] IPVS: Error connecting to the multicast addr [ 332.128382][T14695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.235881][ T7570] tipc: Node number set to 2019681266 [ 332.735193][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2581'. [ 332.771186][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'. [ 333.882545][T14762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.998995][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'. [ 334.198311][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2607'. [ 334.819962][T14841] delete_channel: no stack [ 335.360743][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.373223][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.385438][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.394614][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.403625][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.478958][T14877] __nla_validate_parse: 13 callbacks suppressed [ 335.478977][T14877] netlink: 1988 bytes leftover after parsing attributes in process `syz.2.2627'. [ 335.673082][ T5968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.712573][ T5968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.836279][T14890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.003769][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2635'. [ 336.007912][ T5968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.053055][ T5968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.321514][ T5968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.335143][ T5968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.513931][ T5968] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.548180][ T5968] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.897478][T14933] netlink: 'syz.7.2646': attribute type 1 has an invalid length. [ 336.914667][T14933] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2646'. [ 337.429306][T14953] IPVS: length: 182 != 8 [ 337.445861][T14954] netlink: 'syz.2.2651': attribute type 21 has an invalid length. [ 337.488444][ T5864] Bluetooth: hci0: command tx timeout [ 337.551210][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2652'. [ 337.631687][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2653'. [ 337.681848][ T5968] dvmrp0 (unregistering): left allmulticast mode [ 337.730474][ T5968] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 338.190940][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.202252][ T5968] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 338.212848][ T5968] bond0 (unregistering): Released all slaves [ 338.226610][ T5968] bond1 (unregistering): Released all slaves [ 338.240836][ T5968] bond2 (unregistering): Released all slaves [ 338.254338][ T5968] bond3 (unregistering): Released all slaves [ 338.372122][ T5968] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 338.380666][ T5968] wireguard0: left promiscuous mode [ 338.388977][ T5968] bond4 (unregistering): Released all slaves [ 338.403608][ T5968] bond5 (unregistering): Released all slaves [ 338.417524][ T5968] bond6 (unregistering): Released all slaves [ 338.429994][ T5968] bond7 (unregistering): Released all slaves [ 338.442888][ T5968] bond8 (unregistering): Released all slaves [ 338.461328][ T5968] bond9 (unregistering): Released all slaves [ 338.586050][ T5968] bond10 (unregistering): Released all slaves [ 338.809465][ T5968] tipc: Disabling bearer [ 338.836368][ T5968] tipc: Left network mode [ 339.277014][T14996] nbd: device at index 5 is going down [ 339.430139][T14870] chnl_net:caif_netlink_parms(): no params data found [ 339.526501][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2664'. [ 339.546558][T15006] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 339.575981][ T51] Bluetooth: hci0: command tx timeout [ 339.598699][ T25] block nbd1: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 150 seconds [ 339.609625][ T25] block nbd1: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 150 seconds [ 339.620820][ T25] block nbd1: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 150 seconds [ 339.632024][ T25] block nbd1: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 150 seconds [ 339.668442][T15009] netlink: 'syz.5.2665': attribute type 10 has an invalid length. [ 339.744022][T15009] geneve1: entered promiscuous mode [ 339.750672][T15009] geneve1: entered allmulticast mode [ 339.759014][T15009] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 339.788179][T15013] netlink: 'syz.2.2666': attribute type 2 has an invalid length. [ 339.801033][ T9584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.808643][T15013] netlink: 'syz.2.2666': attribute type 8 has an invalid length. [ 339.819198][ T9584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.829381][T15013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2666'. [ 339.863108][T15013] netlink: 'syz.2.2666': attribute type 3 has an invalid length. [ 339.884354][T15013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2666'. [ 339.893429][ T9584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.893509][ T9584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.916054][T15016] netlink: 'syz.7.2667': attribute type 23 has an invalid length. [ 339.938237][T15018] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 340.000601][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2666'. [ 340.034072][T14870] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.050258][T14870] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.070221][T14870] bridge_slave_0: entered allmulticast mode [ 340.083147][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 340.091590][T14870] bridge_slave_0: entered promiscuous mode [ 340.237648][T14870] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.253707][T14870] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.273812][T14870] bridge_slave_1: entered allmulticast mode [ 340.306186][T14870] bridge_slave_1: entered promiscuous mode [ 340.459297][T15036] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 340.492608][T15039] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2672'. [ 340.507836][T14870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.518262][T15039] netlink: 'syz.7.2672': attribute type 11 has an invalid length. [ 340.531218][T15039] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2672'. [ 340.556866][ T5968] hsr_slave_0: left promiscuous mode [ 340.571112][ T5968] hsr_slave_1: left promiscuous mode [ 340.578327][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.586364][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.599911][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.607804][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.648560][ T5968] veth1_macvtap: left promiscuous mode [ 340.654170][ T5968] veth0_macvtap: left promiscuous mode [ 340.661360][ T5968] º: left promiscuous mode [ 340.666794][ T5968] veth0_vlan: left promiscuous mode [ 340.700415][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2674'. [ 340.856102][ T25] block nbd2: Possible stuck request ffff888025395080: control (read@0,1024B). Runtime 150 seconds [ 340.868317][ T25] block nbd2: Possible stuck request ffff888025395240: control (read@1024,1024B). Runtime 150 seconds [ 340.879709][ T25] block nbd2: Possible stuck request ffff888025395400: control (read@2048,1024B). Runtime 150 seconds [ 340.891138][ T25] block nbd2: Possible stuck request ffff8880253955c0: control (read@3072,1024B). Runtime 150 seconds [ 341.313670][ T5968] team0 (unregistering): Port device team_slave_1 removed [ 341.354235][ T5968] team0 (unregistering): Port device team_slave_0 removed [ 341.645554][ T51] Bluetooth: hci0: command tx timeout [ 341.712294][ T5968] vcan0 (unregistering): left allmulticast mode [ 341.731351][T15036] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 341.736297][T14870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.839396][T15058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2675'. [ 341.873078][T14870] team0: Port device team_slave_0 added [ 341.958187][T14870] team0: Port device team_slave_1 added [ 342.018226][T15061] bond12: entered promiscuous mode [ 342.023386][T15061] bond12: entered allmulticast mode [ 342.032197][T15061] 8021q: adding VLAN 0 to HW filter on device bond12 [ 342.278489][T15061] bond12 (unregistering): Released all slaves [ 342.334363][T15082] netlink: 'syz.7.2681': attribute type 30 has an invalid length. [ 342.458079][T14870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.470778][T14870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.497379][T14870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.565113][T14870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.587648][T14870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.622866][T14870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.639334][T15090] IPVS: Error connecting to the multicast addr [ 342.828406][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'. [ 342.846369][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'. [ 342.899731][T14870] hsr_slave_0: entered promiscuous mode [ 342.916620][T14870] hsr_slave_1: entered promiscuous mode [ 343.163131][T15110] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20002 [ 343.196396][T15115] netlink: 'syz.4.2692': attribute type 10 has an invalid length. [ 343.240813][T15115] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 343.243444][T15127] sctp: [Deprecated]: syz.2.2690 (pid 15127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.243444][T15127] Use struct sctp_sack_info instead [ 343.308567][T15115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.362686][ T9] IPVS: starting estimator thread 0... [ 343.375839][T15129] IPVS: nq: FWM 3 0x00000003 - no destination available [ 343.465617][T15132] IPVS: using max 37 ests per chain, 88800 per kthread [ 343.589453][T15143] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 343.613896][T15143] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2698'. [ 343.725772][ T51] Bluetooth: hci0: command tx timeout [ 343.993221][T15165] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2706'. [ 344.016860][T15165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.032772][T14870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.065127][T14870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.083969][T14870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.098154][T14870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.148021][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2709'. [ 344.192485][T15176] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2709'. [ 344.472223][T15197] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 344.556535][T14870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.639851][T14870] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.663326][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.670568][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.711038][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.718254][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.936279][T15215] syzkaller0: entered promiscuous mode [ 344.949690][T15215] syzkaller0: entered allmulticast mode [ 345.488699][T15247] netlink: 'syz.2.2731': attribute type 1 has an invalid length. [ 345.519520][T15247] netlink: 'syz.2.2731': attribute type 3 has an invalid length. [ 345.528708][T14870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.560887][T15247] __nla_validate_parse: 4 callbacks suppressed [ 345.560905][T15247] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2731'. [ 345.731148][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'. [ 345.807834][T14870] veth0_vlan: entered promiscuous mode [ 345.839262][T15264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2736'. [ 345.864420][T14870] veth1_vlan: entered promiscuous mode [ 345.963417][T14870] veth0_macvtap: entered promiscuous mode [ 345.986106][T14870] veth1_macvtap: entered promiscuous mode [ 346.016683][T14870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.061438][T14870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.104429][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.127404][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.155106][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.181941][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.387767][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.408990][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.474723][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.496145][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.600592][T15282] netlink: 'syz.5.2743': attribute type 1 has an invalid length. [ 346.636829][T15282] netlink: 'syz.5.2743': attribute type 4 has an invalid length. [ 346.646159][T15282] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2743'. [ 346.927198][T15299] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 347.392967][T15312] netlink: 186732 bytes leftover after parsing attributes in process `syz.4.2749'. [ 347.424016][T15312] netlink: 186732 bytes leftover after parsing attributes in process `syz.4.2749'. [ 347.429004][T15311] IPv6: sit1: Disabled Multicast RS [ 347.484203][T15311] sit1: entered allmulticast mode [ 347.926722][T15335] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2757'. [ 348.063458][T15343] netlink: 'syz.5.2760': attribute type 1 has an invalid length. [ 348.089027][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2760'. [ 348.159774][T15348] netlink: 'syz.7.2762': attribute type 4 has an invalid length. [ 348.169654][T15345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 348.186643][T15352] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 348.207863][T15352] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 348.531683][T15374] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2769'. [ 348.541392][T15373] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2769'. [ 349.540951][T15420] netlink: 'syz.3.2785': attribute type 15 has an invalid length. [ 349.567322][T15420] netlink: 'syz.3.2785': attribute type 15 has an invalid length. [ 349.567618][ T5968] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.585316][ T5968] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.597590][ T5968] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.631320][ T5968] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.794533][T15434] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.506979][T15469] team0: Cannot enslave team device to itself [ 350.672927][T15483] __nla_validate_parse: 7 callbacks suppressed [ 350.672946][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2805'. [ 350.788013][T15487] gretap0: left promiscuous mode [ 350.949501][ T2897] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967286. macoff=82 [ 350.988115][T15487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.997620][T15487] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.015017][T15487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.244266][T15522] xt_HMARK: spi-set and port-set can't be combined [ 351.396535][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2816'. [ 351.722056][T15556] netlink: 'syz.3.2824': attribute type 1 has an invalid length. [ 351.854050][T15530] mpoa:mpoad_close: () going down [ 352.209261][T15573] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 352.224764][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 352.239191][T15577] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2832'. [ 352.473482][T15587] bond0: entered promiscuous mode [ 352.631411][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2839'. [ 352.724272][T15604] FAULT_INJECTION: forcing a failure. [ 352.724272][T15604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.762055][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.5.2841 Not tainted syzkaller #0 PREEMPT(full) [ 352.762104][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.762125][T15604] Call Trace: [ 352.762133][T15604] [ 352.762142][T15604] dump_stack_lvl+0x189/0x250 [ 352.762168][T15604] ? __pfx____ratelimit+0x10/0x10 [ 352.762189][T15604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.762211][T15604] ? __pfx__printk+0x10/0x10 [ 352.762238][T15604] ? __might_fault+0xb0/0x130 [ 352.762275][T15604] should_fail_ex+0x414/0x560 [ 352.762309][T15604] _copy_from_user+0x2d/0xb0 [ 352.762335][T15604] ___sys_sendmsg+0x158/0x2a0 [ 352.762364][T15604] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.762426][T15604] ? __fget_files+0x2a/0x420 [ 352.762442][T15604] ? __fget_files+0x3a0/0x420 [ 352.762470][T15604] __x64_sys_sendmsg+0x19b/0x260 [ 352.762498][T15604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.762532][T15604] ? __pfx_ksys_write+0x10/0x10 [ 352.762554][T15604] ? rcu_is_watching+0x15/0xb0 [ 352.762579][T15604] ? do_syscall_64+0xbe/0x3b0 [ 352.762604][T15604] do_syscall_64+0xfa/0x3b0 [ 352.762624][T15604] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.762643][T15604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.762680][T15604] ? clear_bhb_loop+0x60/0xb0 [ 352.762704][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.762723][T15604] RIP: 0033:0x7fb80458eba9 [ 352.762740][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.762757][T15604] RSP: 002b:00007fb805377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.762777][T15604] RAX: ffffffffffffffda RBX: 00007fb8047d5fa0 RCX: 00007fb80458eba9 [ 352.762791][T15604] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 352.762804][T15604] RBP: 00007fb805377090 R08: 0000000000000000 R09: 0000000000000000 [ 352.762816][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.762828][T15604] R13: 00007fb8047d6038 R14: 00007fb8047d5fa0 R15: 00007ffcf12035f8 [ 352.762861][T15604] [ 353.147685][T15619] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 353.480765][T15636] tipc: Enabled bearer , priority 0 [ 353.488730][T15634] syzkaller0: entered promiscuous mode [ 353.494375][T15634] syzkaller0: entered allmulticast mode [ 353.612220][T15634] tipc: Resetting bearer [ 353.677314][T15634] tipc: Disabling bearer [ 354.567472][T15671] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 354.670955][T15681] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 354.679450][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2861'. [ 354.778002][T15691] netlink: 'syz.4.2866': attribute type 1 has an invalid length. [ 354.786067][T15691] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2866'. [ 354.833824][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2864'. [ 354.893951][T15699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2867'. [ 354.957645][T15699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 355.042640][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2870'. [ 355.789651][T15730] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 356.132693][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2882'. [ 356.630122][T15773] veth0: entered promiscuous mode [ 356.637442][T15771] veth0: left promiscuous mode [ 356.667539][T15772] netlink: 'syz.3.2885': attribute type 7 has an invalid length. [ 356.691274][T15777] syz.4.2888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 356.748232][T15777] CPU: 1 UID: 0 PID: 15777 Comm: syz.4.2888 Not tainted syzkaller #0 PREEMPT(full) [ 356.748261][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.748274][T15777] Call Trace: [ 356.748282][T15777] [ 356.748292][T15777] dump_stack_lvl+0x189/0x250 [ 356.748324][T15777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.748350][T15777] ? __pfx__printk+0x10/0x10 [ 356.748378][T15777] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 356.748402][T15777] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 356.748436][T15777] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 356.748464][T15777] warn_alloc+0x214/0x310 [ 356.748496][T15777] ? stack_depot_save_flags+0x40/0x860 [ 356.748529][T15777] ? __pfx_warn_alloc+0x10/0x10 [ 356.748562][T15777] ? kasan_save_track+0x4f/0x80 [ 356.748588][T15777] ? xskq_create+0x56/0x170 [ 356.748605][T15777] ? xsk_init_queue+0xb0/0x110 [ 356.748621][T15777] ? xsk_setsockopt+0x4dc/0x8d0 [ 356.748647][T15777] ? do_sock_setsockopt+0x179/0x1b0 [ 356.748669][T15777] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 356.748691][T15777] ? do_syscall_64+0xfa/0x3b0 [ 356.748711][T15777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.748739][T15777] __vmalloc_node_range_noprof+0x125/0x12f0 [ 356.748803][T15777] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.748839][T15777] ? __kasan_kmalloc+0x93/0xb0 [ 356.748869][T15777] vmalloc_user_noprof+0xad/0xf0 [ 356.748898][T15777] ? xskq_create+0xbf/0x170 [ 356.748919][T15777] xskq_create+0xbf/0x170 [ 356.748942][T15777] xsk_init_queue+0xb0/0x110 [ 356.748964][T15777] xsk_setsockopt+0x4dc/0x8d0 [ 356.748997][T15777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.749028][T15777] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.749064][T15777] ? aa_sock_opt_perm+0xff/0x1b0 [ 356.749089][T15777] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 356.749112][T15777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.749146][T15777] do_sock_setsockopt+0x179/0x1b0 [ 356.749177][T15777] __x64_sys_setsockopt+0x13f/0x1b0 [ 356.749208][T15777] do_syscall_64+0xfa/0x3b0 [ 356.749229][T15777] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.749250][T15777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.749271][T15777] ? clear_bhb_loop+0x60/0xb0 [ 356.749297][T15777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.749316][T15777] RIP: 0033:0x7f980d18eba9 [ 356.749335][T15777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.749353][T15777] RSP: 002b:00007f980e03d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.749373][T15777] RAX: ffffffffffffffda RBX: 00007f980d3d5fa0 RCX: 00007f980d18eba9 [ 356.749389][T15777] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 356.749401][T15777] RBP: 00007f980d211e19 R08: 0000000000000004 R09: 0000000000000000 [ 356.749414][T15777] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.749437][T15777] R13: 00007f980d3d6038 R14: 00007f980d3d5fa0 R15: 00007ffea07cf078 [ 356.749471][T15777] [ 356.749506][T15777] Mem-Info: [ 356.778756][T15787] tls_set_device_offload: netdev not found [ 356.918733][T15777] active_anon:5183 inactive_anon:0 isolated_anon:0 [ 356.918733][T15777] active_file:2899 inactive_file:39961 isolated_file:0 [ 356.918733][T15777] unevictable:768 dirty:55 writeback:0 [ 356.918733][T15777] slab_reclaimable:13232 slab_unreclaimable:119452 [ 356.918733][T15777] mapped:30300 shmem:1358 pagetables:1139 [ 356.918733][T15777] sec_pagetables:0 bounce:0 [ 356.918733][T15777] kernel_misc_reclaimable:0 [ 356.918733][T15777] free:1295495 free_pcp:15328 free_cma:0 [ 356.946547][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2891'. [ 356.947512][T15777] Node 0 active_anon:20944kB inactive_anon:0kB active_file:11596kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121148kB dirty:216kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15528kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.147673][T15777] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.235538][T15777] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.249193][T15799] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2892'. [ 357.290249][ T7567] IPVS: starting estimator thread 0... [ 357.293040][T15777] lowmem_reserve[]: [ 357.298216][T15801] IPVS: ip_vs_edit_dest(): server weight less than zero [ 357.300967][T15777] 0 2497 2499 2499 2499 [ 357.327155][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.334977][T15801] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.349831][T15803] netlink: 'syz.5.2894': attribute type 1 has an invalid length. [ 357.371853][T15777] Node 0 DMA32 free:1296112kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20696kB inactive_anon:0kB active_file:11596kB inactive_file:158080kB unevictable:1536kB writepending:212kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:46184kB local_pcp:18256kB free_cma:0kB [ 357.427687][T15811] Bluetooth: MGMT ver 1.23 [ 357.441252][T15777] lowmem_reserve[]: 0 0 1 1 1 [ 357.446499][T15804] IPVS: using max 29 ests per chain, 69600 per kthread [ 357.476323][T15777] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 357.496733][T15815] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2897'. [ 357.539261][T15777] lowmem_reserve[]: 0 0 0 0 0 [ 357.544060][T15777] Node 1 Normal free:3892428kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13460kB local_pcp:6212kB free_cma:0kB [ 357.587623][T15777] lowmem_reserve[]: 0 0 0 0 0 [ 357.595861][T15777] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.665182][T15777] Node 0 DMA32: 448*4kB (UME) 72*8kB (UME) 68*16kB (UME) 287*32kB (UME) 120*64kB (UME) 85*128kB (UME) 76*256kB (UM) 36*512kB (UME) 6*1024kB (U) 4*2048kB (UME) 296*4096kB (M) = 1295840kB [ 357.702580][T15821] syzkaller1: entered promiscuous mode [ 357.708579][T15821] syzkaller1: entered allmulticast mode [ 357.713802][T15777] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 357.753989][T15777] Node 1 Normal: 201*4kB (UME) 53*8kB (UME) 38*16kB (UME) 117*32kB (UME) 34*64kB (UME) 13*128kB (UME) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3892428kB [ 357.781718][T15777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.792853][T15777] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.814734][T15777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.816625][ T7586] hid (null): unknown global tag 0xe [ 357.824499][T15777] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.840053][T15777] 44989 total pagecache pages [ 357.844748][T15777] 0 pages in swap cache [ 357.848978][T15777] Free swap = 124996kB [ 357.853206][T15777] Total swap = 124996kB [ 357.857623][T15777] 2097051 pages RAM [ 357.859465][ T7586] hid (null): nested delimiters [ 357.861428][T15777] 0 pages HighMem/MovableOnly [ 357.861440][T15777] 425670 pages reserved [ 357.861448][T15777] 0 pages cma reserved [ 358.244114][T15847] netlink: 'syz.5.2904': attribute type 33 has an invalid length. [ 358.292365][T15847] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2904'. [ 358.323474][ T30] audit: type=1800 audit(1758196613.911:7): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2902" name="memory.events" dev="tmpfs" ino=2911 res=0 errno=0 [ 358.707894][T15855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2907'. [ 358.935342][T15862] netlink: 'syz.5.2910': attribute type 1 has an invalid length. [ 359.009458][T15867] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2909'. [ 359.156020][T15872] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2910'. [ 359.178934][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2910'. [ 359.366005][T15862] bond8: entered promiscuous mode [ 359.373512][T15862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.416873][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 359.452656][T15868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.469340][T15868] bond8: (slave bond9): making interface the new active one [ 359.480804][T15868] bond9: entered promiscuous mode [ 359.487945][T15868] bond8: (slave bond9): Enslaving as an active interface with an up link [ 359.864536][T15897] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2915'. [ 360.014558][T15900] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 360.048922][T15903] netlink: 'syz.2.2921': attribute type 1 has an invalid length. [ 360.124452][T15900] 8021q: adding VLAN 0 to HW filter on device bond12 [ 360.148028][T15900] vlan0: entered allmulticast mode [ 360.153339][T15900] bond12: entered allmulticast mode [ 360.251071][ T7586] hid-generic 0005:0D45:1012.0002: unknown global tag 0xe [ 360.282122][ T7586] hid-generic 0005:0D45:1012.0002: item 0 2 1 14 parsing failed [ 360.306941][ T7586] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 361.291279][T15955] veth0_macvtap: entered allmulticast mode [ 361.404636][T15958] veth0: entered promiscuous mode [ 361.699083][T15957] veth0: left promiscuous mode [ 361.712036][T15983] openvswitch: netlink: Flow key attr not present in new flow. [ 361.831740][T15994] __nla_validate_parse: 3 callbacks suppressed [ 361.831758][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2950'. [ 361.846840][T15996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2949'. [ 361.860357][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 362.571695][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2956'. [ 363.003593][T16052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2964'. [ 363.061562][T16055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2964'. [ 363.072630][T16052] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 363.098887][T16061] sctp: [Deprecated]: syz.2.2966 (pid 16061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.098887][T16061] Use struct sctp_sack_info instead [ 363.116822][T16063] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2965'. [ 363.136039][T16056] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2965'. [ 363.324808][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2970'. [ 363.352215][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 363.386687][ T2897] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 363.402824][ T2897] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 363.413786][ T2897] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 363.425361][ T2897] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 363.601062][T16090] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.645830][T16090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.683420][T16093] siw: device registration error -23 [ 363.724856][T16096] block nbd0: not configured, cannot reconfigure [ 363.797722][T16102] tls_set_device_offload_rx: netdev not found [ 363.855041][T16104] xt_bpf: check failed: parse error [ 364.628616][T16119] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 364.660540][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.670314][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.680488][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.689857][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.697888][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.965428][T16134] FAULT_INJECTION: forcing a failure. [ 364.965428][T16134] name failslab, interval 1, probability 0, space 0, times 0 [ 365.045468][T16134] CPU: 0 UID: 0 PID: 16134 Comm: syz.7.2990 Not tainted syzkaller #0 PREEMPT(full) [ 365.045496][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.045512][T16134] Call Trace: [ 365.045520][T16134] [ 365.045528][T16134] dump_stack_lvl+0x189/0x250 [ 365.045556][T16134] ? __pfx____ratelimit+0x10/0x10 [ 365.045578][T16134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.045599][T16134] ? __pfx__printk+0x10/0x10 [ 365.045631][T16134] ? __pfx___might_resched+0x10/0x10 [ 365.045647][T16134] ? fs_reclaim_acquire+0x7d/0x100 [ 365.045669][T16134] should_fail_ex+0x414/0x560 [ 365.045699][T16134] should_failslab+0xa8/0x100 [ 365.045729][T16134] __kmalloc_node_noprof+0xd1/0x4e0 [ 365.045753][T16134] ? crypto_create_tfm_node+0x83/0x3f0 [ 365.045784][T16134] crypto_create_tfm_node+0x83/0x3f0 [ 365.045818][T16134] crypto_alloc_tfm_node+0x172/0x3f0 [ 365.045868][T16134] tipc_crypto_key_init+0x143/0x870 [ 365.045913][T16134] tipc_nl_node_set_key+0x680/0x9a0 [ 365.045944][T16134] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 365.045978][T16134] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 365.046015][T16134] genl_family_rcv_msg_doit+0x212/0x300 [ 365.046050][T16134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 365.046093][T16134] ? stack_trace_save+0x9c/0xe0 [ 365.046123][T16134] genl_rcv_msg+0x60e/0x790 [ 365.046157][T16134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.046181][T16134] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 365.046220][T16134] netlink_rcv_skb+0x208/0x470 [ 365.046238][T16134] ? __lock_acquire+0xab9/0xd20 [ 365.046267][T16134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.046295][T16134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.046338][T16134] ? down_read+0x1ad/0x2e0 [ 365.046365][T16134] genl_rcv+0x28/0x40 [ 365.046388][T16134] netlink_unicast+0x82f/0x9e0 [ 365.046429][T16134] ? __pfx_netlink_unicast+0x10/0x10 [ 365.046461][T16134] ? netlink_sendmsg+0x642/0xb30 [ 365.046483][T16134] ? skb_put+0x11b/0x210 [ 365.046510][T16134] netlink_sendmsg+0x805/0xb30 [ 365.046543][T16134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.046569][T16134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 365.046591][T16134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.046612][T16134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.046635][T16134] __sock_sendmsg+0x21c/0x270 [ 365.046668][T16134] ____sys_sendmsg+0x505/0x830 [ 365.046699][T16134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.046735][T16134] ? import_iovec+0x74/0xa0 [ 365.046765][T16134] ___sys_sendmsg+0x21f/0x2a0 [ 365.046793][T16134] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.046866][T16134] ? __fget_files+0x2a/0x420 [ 365.046883][T16134] ? __fget_files+0x3a0/0x420 [ 365.046913][T16134] __x64_sys_sendmsg+0x19b/0x260 [ 365.046941][T16134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.046977][T16134] ? __pfx_ksys_write+0x10/0x10 [ 365.047000][T16134] ? rcu_is_watching+0x15/0xb0 [ 365.047026][T16134] ? do_syscall_64+0xbe/0x3b0 [ 365.047052][T16134] do_syscall_64+0xfa/0x3b0 [ 365.047072][T16134] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.047091][T16134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.047110][T16134] ? clear_bhb_loop+0x60/0xb0 [ 365.047135][T16134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.047158][T16134] RIP: 0033:0x7f2ec2b8eba9 [ 365.047176][T16134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.047194][T16134] RSP: 002b:00007f2ec39b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.047214][T16134] RAX: ffffffffffffffda RBX: 00007f2ec2dd5fa0 RCX: 00007f2ec2b8eba9 [ 365.047229][T16134] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 365.047242][T16134] RBP: 00007f2ec39b9090 R08: 0000000000000000 R09: 0000000000000000 [ 365.047254][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.047266][T16134] R13: 00007f2ec2dd6038 R14: 00007f2ec2dd5fa0 R15: 00007ffe02713838 [ 365.047300][T16134] [ 365.927874][T16152] tipc: Enabling of bearer rejected, failed to enable media [ 366.177203][T16160] netlink: 'syz.7.2996': attribute type 11 has an invalid length. [ 366.765586][ T51] Bluetooth: hci2: command tx timeout [ 367.131157][T16192] __nla_validate_parse: 12 callbacks suppressed [ 367.131177][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'. [ 367.158845][T16195] ªªªªªª: renamed from vlan0 (while UP) [ 367.209678][T16197] netem: incorrect gi model size [ 367.215010][T16197] netem: change failed [ 367.677789][T16124] chnl_net:caif_netlink_parms(): no params data found [ 367.894298][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.901879][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.909181][T16124] bridge_slave_0: entered allmulticast mode [ 367.917596][T16124] bridge_slave_0: entered promiscuous mode [ 367.925450][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.932592][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.940110][T16124] bridge_slave_1: entered allmulticast mode [ 367.947866][T16124] bridge_slave_1: entered promiscuous mode [ 367.983801][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.996259][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.029742][T16124] team0: Port device team_slave_0 added [ 368.038448][T16124] team0: Port device team_slave_1 added [ 368.074244][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.081449][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.107802][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.120772][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.128683][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.154740][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.201770][T16124] hsr_slave_0: entered promiscuous mode [ 368.208259][T16124] hsr_slave_1: entered promiscuous mode [ 368.214428][T16124] debugfs: 'hsr0' already exists in 'hsr' [ 368.220279][T16124] Cannot create hsr debugfs directory [ 368.328062][T16124] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.452801][T16124] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.497592][T16227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3015'. [ 368.644340][T16124] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.696729][T16242] tipc: Enabling of bearer rejected, failed to enable media [ 368.758341][T16240] netlink: 'syz.5.3018': attribute type 1 has an invalid length. [ 368.777776][T16240] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3018'. [ 368.799242][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3018'. [ 368.846063][ T51] Bluetooth: hci2: command tx timeout [ 368.921848][T16124] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.034923][T16262] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3023'. [ 369.262633][T16124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.304996][T16124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.340699][T16124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.364666][T16124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.655376][ T25] block nbd1: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 180 seconds [ 369.668921][ T25] block nbd1: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 180 seconds [ 369.680196][ T25] block nbd1: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 180 seconds [ 369.692366][ T25] block nbd1: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 180 seconds [ 369.781842][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.854456][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.884960][T16303] tipc: Enabled bearer , priority 0 [ 369.912836][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.920046][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.958074][T16303] bond10: entered allmulticast mode [ 369.963660][T16303] 8021q: adding VLAN 0 to HW filter on device bond10 [ 369.973320][T16303] bridge0: port 3(bond10) entered blocking state [ 369.980020][T16303] bridge0: port 3(bond10) entered disabled state [ 369.991858][T16303] bond10: entered promiscuous mode [ 370.007183][T16308] vlan2: entered allmulticast mode [ 370.012426][T16308] hsr0: entered allmulticast mode [ 370.018095][T16308] hsr_slave_0: entered allmulticast mode [ 370.023802][T16308] hsr_slave_1: entered allmulticast mode [ 370.053665][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.060900][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.073014][T16303] syzkaller0: entered promiscuous mode [ 370.079072][T16303] syzkaller0: entered allmulticast mode [ 370.114718][T16312] tipc: Resetting bearer [ 370.183433][T16302] tipc: Resetting bearer [ 370.230243][T16317] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3039'. [ 370.242996][T16302] tipc: Disabling bearer [ 370.250863][T16317] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3039'. [ 370.260205][T16317] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3039'. [ 370.628602][T16338] netlink: 'syz.7.3046': attribute type 1 has an invalid length. [ 370.762349][T16338] bond3: entered promiscuous mode [ 370.771954][T16338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.830219][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 370.893937][T16350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.905080][T16350] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 370.916467][T16350] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 370.925756][ T51] Bluetooth: hci2: command tx timeout [ 370.931423][ T25] block nbd2: Possible stuck request ffff888025395080: control (read@0,1024B). Runtime 180 seconds [ 370.944511][ T25] block nbd2: Possible stuck request ffff888025395240: control (read@1024,1024B). Runtime 180 seconds [ 370.950728][T16350] bond3: (slave wireguard0): making interface the new active one [ 370.955890][ T25] block nbd2: Possible stuck request ffff888025395400: control (read@2048,1024B). Runtime 180 seconds [ 370.955948][ T25] block nbd2: Possible stuck request ffff8880253955c0: control (read@3072,1024B). Runtime 180 seconds [ 371.018507][T16350] wireguard0: entered promiscuous mode [ 371.029717][T16350] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 371.079658][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.146442][T16366] netlink: 'syz.5.3052': attribute type 1 has an invalid length. [ 371.154396][T16366] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3052'. [ 371.586528][T16370] sit1: entered promiscuous mode [ 371.591711][T16370] sit1: entered allmulticast mode [ 371.842751][T16400] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 371.968153][T16409] bond1: (slave bridge1): making interface the new active one [ 371.978485][T16409] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 372.123867][T16124] veth0_vlan: entered promiscuous mode [ 372.132857][T16419] IPVS: Unknown mcast interface: veth0_virt_wifi [ 372.146072][T16419] syz_tun: entered allmulticast mode [ 372.170233][T16419] syz_tun: left allmulticast mode [ 372.186615][T16124] veth1_vlan: entered promiscuous mode [ 372.258406][T16124] veth0_macvtap: entered promiscuous mode [ 372.271990][T16427] __nla_validate_parse: 2 callbacks suppressed [ 372.272008][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 372.274043][T16124] veth1_macvtap: entered promiscuous mode [ 372.310762][T16427] IPVS: Error joining to the multicast group [ 372.331038][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.364260][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.401166][ T2897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.412961][ T2897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.425534][T16434] netlink: 'syz.3.3070': attribute type 1 has an invalid length. [ 372.446931][ T2897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.463018][ T2897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.582266][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3071'. [ 372.600572][T16437] netlink: 'syz.5.3071': attribute type 10 has an invalid length. [ 372.637208][T16437] team0: Port device dummy0 added [ 372.673646][ T9576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.706012][T16442] netlink: 'syz.3.3073': attribute type 33 has an invalid length. [ 372.708825][ T9576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.733350][T16442] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3073'. [ 372.809756][ T9584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.821963][ T9584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.000450][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2984'. [ 373.014352][ T51] Bluetooth: hci2: command tx timeout [ 373.034726][T16453] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 373.061468][T16461] netlink: 'syz.7.3078': attribute type 1 has an invalid length. [ 373.094152][T16453] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 373.132252][T16461] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3078'. [ 373.235788][T16466] netlink: 'syz.7.3078': attribute type 1 has an invalid length. [ 373.285930][T16466] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3078'. [ 373.438010][T16478] xt_bpf: check failed: parse error [ 373.742309][T16483] openvswitch: netlink: Actions may not be safe on all matching packets [ 373.827961][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.837667][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.847079][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.868471][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.900664][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.009976][T16498] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 374.283356][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 374.296955][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 374.313893][T16513] netlink: 'syz.5.3095': attribute type 8 has an invalid length. [ 374.343235][T16510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.397000][T16510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3094'. [ 374.533369][T16522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3097'. [ 374.741291][T16529] netem: incorrect gi model size [ 374.754963][T16529] netem: change failed [ 375.086312][ T51] Bluetooth: hci2: command tx timeout [ 375.101917][T16491] chnl_net:caif_netlink_parms(): no params data found [ 375.358503][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.373693][T16491] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.381234][T16491] bridge_slave_0: entered allmulticast mode [ 375.389614][T16491] bridge_slave_0: entered promiscuous mode [ 375.403587][T16491] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.416192][T16491] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.425641][T16491] bridge_slave_1: entered allmulticast mode [ 375.433648][T16491] bridge_slave_1: entered promiscuous mode [ 375.517309][T16574] netlink: 'syz.4.3112': attribute type 1 has an invalid length. [ 375.527810][T16574] netlink: 'syz.4.3112': attribute type 11 has an invalid length. [ 375.530619][T16491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.550663][T16491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.627738][T16491] team0: Port device team_slave_0 added [ 375.642041][T16491] team0: Port device team_slave_1 added [ 375.743601][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.752169][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.778663][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.792908][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.815474][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.849927][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.965702][ T51] Bluetooth: hci1: command tx timeout [ 375.986980][T16491] hsr_slave_0: entered promiscuous mode [ 375.993882][T16491] hsr_slave_1: entered promiscuous mode [ 376.010338][T16491] debugfs: 'hsr0' already exists in 'hsr' [ 376.029559][T16491] Cannot create hsr debugfs directory [ 376.631714][T16610] netlink: 'syz.7.3122': attribute type 1 has an invalid length. [ 377.070552][T16491] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.108212][T16491] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.129263][T16491] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 377.196129][T16638] netlink: 'syz.4.3132': attribute type 18 has an invalid length. [ 377.231497][T16640] IPVS: length: 8 != 1152 [ 377.258099][T16491] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.269621][T16638] netlink: 'syz.4.3132': attribute type 18 has an invalid length. [ 377.285815][T16491] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.298311][T16638] __nla_validate_parse: 6 callbacks suppressed [ 377.298329][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 377.324652][T16491] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 377.352137][ T9584] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.362261][T16643] netlink: 'syz.7.3135': attribute type 32 has an invalid length. [ 377.370919][ T9584] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.381040][ T9584] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.385799][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3135'. [ 377.403514][ T9584] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.447373][T16491] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.464485][T16491] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.485594][T16491] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 377.519992][T16643] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 377.570812][T16651] tipc: Started in network mode [ 377.582254][T16651] tipc: Node identity aebf9cacff76, cluster identity 4711 [ 377.600981][T16651] tipc: Enabled bearer , priority 0 [ 377.622867][T16491] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.641863][T16491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.664406][T16491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 377.707492][T16651] syzkaller0: entered promiscuous mode [ 377.720324][T16651] syzkaller0: entered allmulticast mode [ 377.732743][T16661] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 377.792136][T16651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.804609][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3141'. [ 377.857590][T16651] tipc: Resetting bearer [ 377.924618][T16672] netlink: 'syz.5.3142': attribute type 1 has an invalid length. [ 377.940839][T16671] netlink: 'syz.5.3142': attribute type 1 has an invalid length. [ 377.961015][T16649] tipc: Resetting bearer [ 377.997898][T16649] tipc: Disabling bearer [ 378.035069][T16491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.046282][ T51] Bluetooth: hci1: command tx timeout [ 378.058895][T16491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.099399][T16491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.128509][T16491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.214862][T16695] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3147'. [ 378.243639][T16690] xt_l2tp: missing protocol rule (udp|l2tpip) [ 378.418821][T16702] netlink: 'syz.7.3149': attribute type 1 has an invalid length. [ 378.447062][T16707] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 378.491778][T16707] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 378.500576][T16491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.614111][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.627090][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.642697][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.649898][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.685683][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.692892][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.766014][T16725] netlink: 'syz.7.3155': attribute type 1 has an invalid length. [ 378.804455][T16725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 378.836359][T16732] netlink: 'syz.5.3156': attribute type 8 has an invalid length. [ 378.881175][T16731] syzkaller0: entered promiscuous mode [ 378.887579][T16731] syzkaller0: entered allmulticast mode [ 378.916760][T16725] bond5: (slave gretap2): making interface the new active one [ 378.925944][T16725] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 380.128488][ T51] Bluetooth: hci1: command tx timeout [ 381.204869][T16761] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 381.215551][T16761] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 381.353815][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 381.375927][T16491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.483460][T16794] : renamed from bridge_slave_0 [ 381.600182][T16491] veth0_vlan: entered promiscuous mode [ 381.630690][T16491] veth1_vlan: entered promiscuous mode [ 381.713674][T16491] veth0_macvtap: entered promiscuous mode [ 381.723537][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 381.746842][T16491] veth1_macvtap: entered promiscuous mode [ 381.785755][T16491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.814618][T16491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.839293][ T2897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.848507][ T2897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.864762][ T2897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.880274][ T2897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.990432][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.007855][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.062879][ T9584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.077906][ T9584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.116730][T16814] netlink: 212352 bytes leftover after parsing attributes in process `syz.5.3179'. [ 382.215875][ T51] Bluetooth: hci1: command tx timeout [ 382.393511][T16830] netlink: 212172 bytes leftover after parsing attributes in process `syz.5.3182'. [ 382.414769][T16835] netlink: 'syz.4.3184': attribute type 1 has an invalid length. [ 382.449015][T16835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3184'. [ 382.499786][T16838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3185'. [ 382.524372][T16841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3185'. [ 382.711736][T16848] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3189'. [ 382.736323][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'. [ 382.757950][T16848] netlink: 'syz.3.3189': attribute type 1 has an invalid length. [ 382.783074][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 382.804146][T16850] tipc: Enabled bearer , priority 0 [ 382.823338][T16850] syzkaller0: entered promiscuous mode [ 382.841803][T16850] syzkaller0: entered allmulticast mode [ 382.857983][T16857] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3191'. [ 382.907732][T16850] tipc: Resetting bearer [ 382.923411][T16849] tipc: Resetting bearer [ 382.994781][T16849] tipc: Disabling bearer [ 383.056689][T16866] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 383.141215][T16864] netlink: 'syz.2.3193': attribute type 11 has an invalid length. [ 383.217380][T16873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.335136][T16884] netlink: 'syz.5.3199': attribute type 39 has an invalid length. [ 383.410022][T16880] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 383.858399][T16898] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3203'. [ 383.955381][T16898] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 384.049923][T16905] tipc: Cannot configure node identity twice [ 384.295666][ T51] Bluetooth: hci1: command tx timeout [ 384.310756][T16919] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 384.502900][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3215'. [ 384.724080][T16941] netlink: 'syz.7.3222': attribute type 1 has an invalid length. [ 384.729952][T16942] netlink: 'syz.7.3222': attribute type 1 has an invalid length. [ 385.013106][T16960] netlink: 'syz.7.3227': attribute type 1 has an invalid length. [ 385.103438][T16967] netlink: 'syz.3.3229': attribute type 1 has an invalid length. [ 385.112851][T16967] netlink: 'syz.3.3229': attribute type 11 has an invalid length. [ 385.308902][T16977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.348078][T16977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.386813][T16977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.398258][T16977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.473856][T16991] netlink: 'syz.5.3236': attribute type 11 has an invalid length. [ 386.011695][T17021] gre3: entered promiscuous mode [ 386.021986][T17021] gre3: entered allmulticast mode [ 386.701332][T17065] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 386.842219][T17068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.979607][T17067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.995054][T17067] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 387.018773][T17067] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 387.266838][T17097] vlan0: entered promiscuous mode [ 387.272089][T17097] vlan0: entered allmulticast mode [ 387.295726][T17097] hsr_slave_1: entered allmulticast mode [ 387.320491][T17105] lo: entered allmulticast mode [ 387.416532][T17088] lo: left allmulticast mode [ 387.442153][T17116] __nla_validate_parse: 14 callbacks suppressed [ 387.442174][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 387.459362][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3276'. [ 387.500452][T17120] validate_nla: 3 callbacks suppressed [ 387.500470][T17120] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 387.955785][T17153] veth1_to_bond: entered allmulticast mode [ 387.971085][T17153] veth1_to_bond: left allmulticast mode [ 388.005792][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3288'. [ 388.146047][T17164] netlink: 'syz.2.3290': attribute type 1 has an invalid length. [ 388.260985][T17169] tipc: Enabled bearer , priority 0 [ 388.296009][T17169] tipc: Resetting bearer [ 388.338971][T17173] ipvlan2: entered promiscuous mode [ 388.354152][T17168] tipc: Disabling bearer [ 388.581453][T17179] pimreg: entered allmulticast mode [ 388.598739][T17179] pimreg: left allmulticast mode [ 388.664336][T17194] sch_fq: defrate 0 ignored. [ 388.959447][T17208] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3304'. [ 389.046284][T17211] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3303'. [ 389.257105][T17216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3305'. [ 389.502628][T17188] netlink: 'syz.7.3300': attribute type 1 has an invalid length. [ 389.516136][T17188] netlink: 'syz.7.3300': attribute type 3 has an invalid length. [ 389.526934][T17188] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3300'. [ 389.563688][T17188] NCSI netlink: No device for ifindex 0 [ 389.637476][T17218] netlink: 'syz.5.3306': attribute type 10 has an invalid length. [ 389.685478][T17218] bridge0: port 4(team0) entered blocking state [ 389.691898][T17218] bridge0: port 4(team0) entered disabled state [ 389.740347][T17209] netlink: 'syz.4.3303': attribute type 1 has an invalid length. [ 389.775568][T17218] team0: entered allmulticast mode [ 389.802721][T17218] team_slave_0: entered allmulticast mode [ 389.814879][T17209] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3303'. [ 389.835790][T17218] team_slave_1: entered allmulticast mode [ 389.853004][T17218] dummy0: entered allmulticast mode [ 389.904416][T17218] team0: entered promiscuous mode [ 389.926707][T17218] team_slave_0: entered promiscuous mode [ 389.932668][T17218] team_slave_1: entered promiscuous mode [ 389.952528][T17218] dummy0: entered promiscuous mode [ 389.987849][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3308'. [ 390.111751][T17223] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3308'. [ 390.121245][T17228] rose0: entered allmulticast mode [ 390.572680][T17252] tipc: Enabled bearer , priority 0 [ 390.612617][T17234] tipc: Resetting bearer [ 391.605475][ T7570] tipc: Node number set to 844478975 [ 392.431328][T17234] tipc: Disabling bearer [ 392.489789][T17268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.571472][T17284] __nla_validate_parse: 1 callbacks suppressed [ 392.571491][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3325'. [ 392.610768][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3325'. [ 392.669354][T17268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.923106][T17268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.129945][T17268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.442237][ T5968] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.541992][ T5968] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.575577][T17339] tipc: Started in network mode [ 393.580489][T17339] tipc: Node identity 9232c1ee1a81, cluster identity 4711 [ 393.599583][T17339] tipc: Enabled bearer , priority 0 [ 393.622582][ T5968] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.642848][T17342] ipvlan2: entered promiscuous mode [ 393.653883][T17339] syzkaller0: MTU too low for tipc bearer [ 393.659851][T17339] tipc: Disabling bearer [ 393.678311][ T5968] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.700870][T17342] netlink: 'syz.7.3344': attribute type 2 has an invalid length. [ 393.893976][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3350'. [ 393.908683][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3348'. [ 393.930682][T17358] macvtap1: entered promiscuous mode [ 393.936485][T17358] vlan0: entered promiscuous mode [ 393.942071][T17358] macvtap1: entered allmulticast mode [ 393.948528][T17358] vlan0: entered allmulticast mode [ 393.949774][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3350'. [ 393.959752][T17358] veth0_vlan: entered allmulticast mode [ 393.977857][T17362] : renamed from hsr0 [ 394.009341][T17359] macvtap2: entered promiscuous mode [ 394.014871][T17359] macvtap2: entered allmulticast mode [ 394.032747][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3350'. [ 394.050097][T17356] tipc: Started in network mode [ 394.055169][T17356] tipc: Node identity bac9742a8f5c, cluster identity 4711 [ 394.063595][T17356] tipc: Enabled bearer , priority 0 [ 394.071568][T17354] bridge_slave_0: left allmulticast mode [ 394.078671][T17354] bridge_slave_0: left promiscuous mode [ 394.084862][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.111043][T17354] bridge_slave_1: left allmulticast mode [ 394.117092][T17354] bridge_slave_1: left promiscuous mode [ 394.122976][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.144436][T17354] bond0: (slave bond_slave_0): Releasing backup interface [ 394.180700][T17354] bond0: (slave bond_slave_1): Releasing backup interface [ 394.195136][T17354] team0: Port device team_slave_0 removed [ 394.207166][T17354] team0: Port device team_slave_1 removed [ 394.213535][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.234720][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.251689][T17354] bond3: (slave wireguard0): Releasing backup interface [ 394.274597][T17354] wireguard0: left promiscuous mode [ 394.298705][T17354] bond5: (slave gretap2): Releasing active interface [ 394.318804][T17366] syzkaller0: entered promiscuous mode [ 394.329376][T17366] syzkaller0: entered allmulticast mode [ 394.388271][T17375] tipc: Resetting bearer [ 394.421363][T17351] tipc: Resetting bearer [ 394.511447][T17351] tipc: Disabling bearer [ 394.583984][T17388] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3356'. [ 394.760775][T17391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.146005][T17437] netlink: 'syz.3.3370': attribute type 1 has an invalid length. [ 395.319897][ T30] audit: type=1107 audit(1758196650.931:8): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 395.429375][T17454] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 395.535291][ T30] audit: type=1800 audit(1758196651.141:9): pid=17442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3371" name="memory.events" dev="tmpfs" ino=204 res=0 errno=0 [ 395.675950][T17460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 395.981882][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3382'. [ 396.034067][T17477] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3384'. [ 396.054274][T17475] netlink: zone id is out of range [ 396.067331][T17475] netlink: zone id is out of range [ 396.073250][T17475] netlink: zone id is out of range [ 396.083009][T17475] netlink: zone id is out of range [ 396.097648][T17475] netlink: zone id is out of range [ 396.102877][T17475] netlink: get zone limit has 8 unknown bytes [ 396.259551][T17487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.300739][T17487] netlink: zone id is out of range [ 396.334368][T17487] netlink: zone id is out of range [ 396.492967][T17499] block nbd2: NBD_DISCONNECT [ 396.497699][T17499] block nbd2: Send disconnect failed -32 [ 396.503356][T17499] block nbd2: shutting down sockets [ 396.529118][ C1] blk_print_req_error: 138 callbacks suppressed [ 396.529138][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.544531][ C1] buffer_io_error: 138 callbacks suppressed [ 396.544549][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 396.558311][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.567397][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 396.575220][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.584259][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 396.592087][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.601160][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 396.621188][ T8227] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.655678][ T8227] Buffer I/O error on dev nbd2, logical block 0, async page read [ 396.663609][ T8227] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.682778][ T8227] Buffer I/O error on dev nbd2, logical block 1, async page read [ 396.704890][ T8227] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.725028][ T8227] Buffer I/O error on dev nbd2, logical block 2, async page read [ 396.765751][ T8227] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.787114][ T8227] Buffer I/O error on dev nbd2, logical block 3, async page read [ 396.804674][ T8227] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.846933][ T8227] Buffer I/O error on dev nbd2, logical block 0, async page read [ 396.886925][ T8227] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.904022][T17520] vlan1: entered allmulticast mode [ 396.915348][T17520] veth0_vlan: entered allmulticast mode [ 396.923146][ T8227] Buffer I/O error on dev nbd2, logical block 1, async page read [ 396.968263][ T8227] ldm_validate_partition_table(): Disk read failed. [ 396.998804][ T8227] Dev nbd2: unable to read RDB block 0 [ 397.021353][ T8227] nbd2: unable to read partition table [ 397.059150][ T8227] ldm_validate_partition_table(): Disk read failed. [ 397.109564][ T8227] Dev nbd2: unable to read RDB block 0 [ 397.132636][ T8227] nbd2: unable to read partition table [ 397.138050][T17531] tipc: Enabled bearer , priority 0 [ 397.156792][T17531] syzkaller0: entered promiscuous mode [ 397.162307][T17531] syzkaller0: entered allmulticast mode [ 397.225157][T17538] tipc: Resetting bearer [ 397.251745][ T8227] udevd[8227]: failed to send result of seq 13392 to main daemon: Connection refused [ 397.433126][ T2897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.465455][ T2897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.593230][ T2897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.621501][ T2897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.634035][T17548] netlink: 'syz.3.3404': attribute type 1 has an invalid length. [ 397.738359][ T2897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.761016][T17546] can: request_module (can-proto-0) failed. [ 397.775950][ T2897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.824753][T17538] tipc: Resetting bearer [ 397.876779][T17538] tipc: Disabling bearer [ 397.948549][ T2897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.964186][ T2897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.986473][T17551] __nla_validate_parse: 10 callbacks suppressed [ 397.986493][T17551] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3405'. [ 398.336922][T17566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3410'. [ 398.383300][T17570] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3411'. [ 398.404279][T17570] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 398.416309][ T2897] bridge_slave_0: left allmulticast mode [ 398.422707][ T2897] bridge_slave_0: left promiscuous mode [ 398.440763][T17570] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 398.446080][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.480064][T17574] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3412'. [ 398.490777][T17570] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3411'. [ 399.509540][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.520199][ T2897] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 399.531127][ T2897] bond0 (unregistering): Released all slaves [ 399.637060][ T2897] bond1 (unregistering): Released all slaves [ 399.650841][ T2897] bond2 (unregistering): Released all slaves [ 399.663651][ T2897] bond3 (unregistering): Released all slaves [ 399.681126][ T2897] bond4 (unregistering): Released all slaves [ 399.697446][ T2897] bond5 (unregistering): Released all slaves [ 399.729081][ T25] block nbd1: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 210 seconds [ 399.731407][ T2897] bond6 (unregistering): Released all slaves [ 399.741725][ T25] block nbd1: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 210 seconds [ 399.757195][ T25] block nbd1: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 210 seconds [ 399.768356][ T25] block nbd1: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 210 seconds [ 400.019723][T17625] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 400.071327][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 400.214283][T17633] netlink: 'syz.2.3427': attribute type 10 has an invalid length. [ 400.237282][T17635] netlink: 'syz.2.3427': attribute type 10 has an invalid length. [ 400.245126][T17635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3427'. [ 400.254274][T17633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3427'. [ 400.266182][T17625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.434723][T17635] team0: Port device geneve0 added [ 400.544135][T17640] vxcan1: tx address claim with different name [ 400.750649][T17650] net_ratelimit: 31 callbacks suppressed [ 400.750667][T17650] netlink: set zone limit has 8 unknown bytes [ 400.919281][T17655] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3433'. [ 401.545264][ T2897] hsr_slave_0: left promiscuous mode [ 401.590119][ T2897] hsr_slave_1: left promiscuous mode [ 401.613334][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.646346][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.699142][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.724634][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.799034][ T2897] veth1_macvtap: left promiscuous mode [ 401.827219][ T2897] veth0_macvtap: left promiscuous mode [ 401.843071][ T2897] veth1_vlan: left promiscuous mode [ 401.851628][ T2897] veth0_vlan: left promiscuous mode [ 402.211696][T17720] openvswitch: netlink: IP tunnel dst address not specified [ 402.498427][ T2897] team0 (unregistering): Port device team_slave_1 removed [ 402.544789][ T2897] team0 (unregistering): Port device team_slave_0 removed [ 402.940349][T17722] tc_dump_action: action bad kind [ 403.004342][T17724] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.011598][T17724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.019160][T17724] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.026376][T17724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.104415][T17724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.156079][T17734] IPVS: set_ctl: invalid protocol: 135 172.30.1.8:20003 [ 403.171955][T17735] __nla_validate_parse: 6 callbacks suppressed [ 403.171972][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.214603][T17740] tipc: New replicast peer: 255.255.255.255 [ 403.250627][T17740] tipc: Enabled bearer , priority 10 [ 403.257441][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.279915][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.286489][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3453'. [ 403.331681][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.401488][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.451945][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.524207][T17750] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 403.537671][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.544553][T17750] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 403.580369][T17750] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 403.588847][T17750] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 403.600075][T17749] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3456'. [ 403.626006][T17750] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 403.633935][T17750] netlink: 'syz.3.3456': attribute type 3 has an invalid length. [ 403.645653][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 403.908597][T17764] [ 403.911137][T17764] ====================================================== [ 403.918249][T17764] WARNING: possible circular locking dependency detected [ 403.925275][T17764] syzkaller #0 Not tainted [ 403.929678][T17764] ------------------------------------------------------ [ 403.936675][T17764] syz.2.3459/17764 is trying to acquire lock: [ 403.942721][T17764] ffff888142b7de38 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 403.952106][T17764] [ 403.952106][T17764] but task is already holding lock: [ 403.959449][T17764] ffff888142b7d8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 403.969619][T17764] [ 403.969619][T17764] which lock already depends on the new lock. [ 403.969619][T17764] [ 403.980019][T17764] [ 403.980019][T17764] the existing dependency chain (in reverse order) is: [ 403.989021][T17764] [ 403.989021][T17764] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 403.997623][T17764] lock_acquire+0x120/0x360 [ 404.002646][T17764] blk_alloc_queue+0x538/0x620 [ 404.007925][T17764] __blk_mq_alloc_disk+0x15c/0x340 [ 404.013632][T17764] nbd_dev_add+0x46c/0xae0 [ 404.018557][T17764] nbd_init+0x168/0x1f0 [ 404.023230][T17764] do_one_initcall+0x233/0x820 [ 404.028507][T17764] do_initcall_level+0x104/0x190 [ 404.033951][T17764] do_initcalls+0x59/0xa0 [ 404.038786][T17764] kernel_init_freeable+0x334/0x4b0 [ 404.044489][T17764] kernel_init+0x1d/0x1d0 [ 404.049344][T17764] ret_from_fork+0x436/0x7d0 [ 404.054453][T17764] ret_from_fork_asm+0x1a/0x30 [ 404.059733][T17764] [ 404.059733][T17764] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 404.066939][T17764] lock_acquire+0x120/0x360 [ 404.071961][T17764] fs_reclaim_acquire+0x72/0x100 [ 404.077493][T17764] __kmalloc_cache_node_noprof+0x44/0x3d0 [ 404.083724][T17764] create_worker+0x112/0x720 [ 404.088823][T17764] workqueue_prepare_cpu+0xe4/0x170 [ 404.094538][T17764] cpuhp_invoke_callback+0x442/0x860 [ 404.100333][T17764] _cpu_up+0x2c9/0x580 [ 404.104909][T17764] cpu_up+0x1d2/0x220 [ 404.109397][T17764] cpuhp_bringup_mask+0xb2/0x1a0 [ 404.114850][T17764] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 404.121199][T17764] bringup_nonboot_cpus+0x17/0x30 [ 404.126745][T17764] smp_init+0x32/0x110 [ 404.131335][T17764] kernel_init_freeable+0x316/0x4b0 [ 404.137041][T17764] kernel_init+0x1d/0x1d0 [ 404.141883][T17764] ret_from_fork+0x436/0x7d0 [ 404.146983][T17764] ret_from_fork_asm+0x1a/0x30 [ 404.152259][T17764] [ 404.152259][T17764] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 404.159985][T17764] lock_acquire+0x120/0x360 [ 404.165012][T17764] cpus_read_lock+0x42/0x160 [ 404.170139][T17764] static_key_slow_inc+0x12/0x30 [ 404.175598][T17764] nbd_genl_reconfigure+0xf24/0x1870 [ 404.181395][T17764] genl_family_rcv_msg_doit+0x212/0x300 [ 404.187467][T17764] genl_rcv_msg+0x60e/0x790 [ 404.192484][T17764] netlink_rcv_skb+0x208/0x470 [ 404.197756][T17764] genl_rcv+0x28/0x40 [ 404.202250][T17764] netlink_unicast+0x82f/0x9e0 [ 404.207528][T17764] netlink_sendmsg+0x805/0xb30 [ 404.212802][T17764] __sock_sendmsg+0x21c/0x270 [ 404.217993][T17764] ____sys_sendmsg+0x505/0x830 [ 404.223266][T17764] ___sys_sendmsg+0x21f/0x2a0 [ 404.228454][T17764] __x64_sys_sendmsg+0x19b/0x260 [ 404.233902][T17764] do_syscall_64+0xfa/0x3b0 [ 404.238910][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.245306][T17764] [ 404.245306][T17764] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 404.252949][T17764] lock_acquire+0x120/0x360 [ 404.257965][T17764] __mutex_lock+0x187/0x1350 [ 404.263179][T17764] nbd_queue_rq+0x257/0xf10 [ 404.268191][T17764] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 404.274250][T17764] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 404.281259][T17764] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 404.287831][T17764] blk_mq_run_hw_queue+0x348/0x4f0 [ 404.293451][T17764] blk_mq_dispatch_list+0xd0c/0xe00 [ 404.299165][T17764] blk_mq_flush_plug_list+0x469/0x550 [ 404.305042][T17764] __blk_flush_plug+0x3d3/0x4b0 [ 404.310407][T17764] __submit_bio+0x2d3/0x5a0 [ 404.315423][T17764] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 404.321561][T17764] block_read_full_folio+0x599/0x830 [ 404.327359][T17764] filemap_read_folio+0x114/0x380 [ 404.332898][T17764] do_read_cache_folio+0x350/0x590 [ 404.338516][T17764] read_part_sector+0xb6/0x2b0 [ 404.343792][T17764] adfspart_check_ICS+0xa4/0xa50 [ 404.349235][T17764] bdev_disk_changed+0x75f/0x14b0 [ 404.354865][T17764] blkdev_get_whole+0x380/0x510 [ 404.360226][T17764] bdev_open+0x31e/0xd30 [ 404.364969][T17764] blkdev_open+0x457/0x600 [ 404.369891][T17764] do_dentry_open+0x953/0x13f0 [ 404.375160][T17764] vfs_open+0x3b/0x340 [ 404.379734][T17764] path_openat+0x2ee5/0x3830 [ 404.384836][T17764] do_filp_open+0x1fa/0x410 [ 404.389853][T17764] do_sys_openat2+0x121/0x1c0 [ 404.395033][T17764] __x64_sys_openat+0x138/0x170 [ 404.400389][T17764] do_syscall_64+0xfa/0x3b0 [ 404.405414][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.411813][T17764] [ 404.411813][T17764] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 404.419016][T17764] lock_acquire+0x120/0x360 [ 404.424037][T17764] __mutex_lock+0x187/0x1350 [ 404.429139][T17764] nbd_queue_rq+0xc8/0xf10 [ 404.434064][T17764] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 404.440122][T17764] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 404.446960][T17764] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 404.453444][T17764] blk_mq_run_hw_queue+0x348/0x4f0 [ 404.459069][T17764] blk_mq_dispatch_list+0xd0c/0xe00 [ 404.464773][T17764] blk_mq_flush_plug_list+0x469/0x550 [ 404.470659][T17764] __blk_flush_plug+0x3d3/0x4b0 [ 404.476014][T17764] __submit_bio+0x2d3/0x5a0 [ 404.481222][T17764] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 404.487359][T17764] block_read_full_folio+0x599/0x830 [ 404.493152][T17764] filemap_read_folio+0x114/0x380 [ 404.498680][T17764] do_read_cache_folio+0x350/0x590 [ 404.504297][T17764] read_part_sector+0xb6/0x2b0 [ 404.509584][T17764] adfspart_check_ICS+0xa4/0xa50 [ 404.515040][T17764] bdev_disk_changed+0x75f/0x14b0 [ 404.520596][T17764] blkdev_get_whole+0x380/0x510 [ 404.525964][T17764] bdev_open+0x31e/0xd30 [ 404.530716][T17764] blkdev_open+0x457/0x600 [ 404.535638][T17764] do_dentry_open+0x953/0x13f0 [ 404.540906][T17764] vfs_open+0x3b/0x340 [ 404.545487][T17764] path_openat+0x2ee5/0x3830 [ 404.550592][T17764] do_filp_open+0x1fa/0x410 [ 404.555701][T17764] do_sys_openat2+0x121/0x1c0 [ 404.560890][T17764] __x64_sys_openat+0x138/0x170 [ 404.566245][T17764] do_syscall_64+0xfa/0x3b0 [ 404.571256][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.577654][T17764] [ 404.577654][T17764] -> #1 (set->srcu){.+.+}-{0:0}: [ 404.585027][T17764] lock_sync+0xba/0x160 [ 404.589692][T17764] __synchronize_srcu+0x96/0x3a0 [ 404.595182][T17764] elevator_switch+0x12b/0x640 [ 404.600450][T17764] elevator_change+0x2d4/0x450 [ 404.605719][T17764] elevator_set_default+0x186/0x260 [ 404.611426][T17764] blk_register_queue+0x34e/0x3f0 [ 404.617076][T17764] __add_disk+0x677/0xd50 [ 404.622010][T17764] add_disk_fwnode+0xfc/0x480 [ 404.627193][T17764] nbd_dev_add+0x717/0xae0 [ 404.632116][T17764] nbd_init+0x168/0x1f0 [ 404.636789][T17764] do_one_initcall+0x233/0x820 [ 404.642074][T17764] do_initcall_level+0x104/0x190 [ 404.647608][T17764] do_initcalls+0x59/0xa0 [ 404.652526][T17764] kernel_init_freeable+0x334/0x4b0 [ 404.658317][T17764] kernel_init+0x1d/0x1d0 [ 404.663166][T17764] ret_from_fork+0x436/0x7d0 [ 404.668375][T17764] ret_from_fork_asm+0x1a/0x30 [ 404.673675][T17764] [ 404.673675][T17764] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 404.681482][T17764] validate_chain+0xb9b/0x2140 [ 404.686752][T17764] __lock_acquire+0xab9/0xd20 [ 404.691943][T17764] lock_acquire+0x120/0x360 [ 404.696958][T17764] __mutex_lock+0x187/0x1350 [ 404.702052][T17764] elevator_change+0x19b/0x450 [ 404.707414][T17764] elevator_set_none+0x42/0xb0 [ 404.712770][T17764] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 404.719092][T17764] nbd_start_device+0x17f/0xb10 [ 404.724466][T17764] nbd_genl_connect+0x135b/0x18f0 [ 404.730003][T17764] genl_family_rcv_msg_doit+0x212/0x300 [ 404.736233][T17764] genl_rcv_msg+0x60e/0x790 [ 404.741247][T17764] netlink_rcv_skb+0x208/0x470 [ 404.746513][T17764] genl_rcv+0x28/0x40 [ 404.751002][T17764] netlink_unicast+0x82f/0x9e0 [ 404.756280][T17764] netlink_sendmsg+0x805/0xb30 [ 404.761725][T17764] __sock_sendmsg+0x21c/0x270 [ 404.766917][T17764] ____sys_sendmsg+0x505/0x830 [ 404.772189][T17764] ___sys_sendmsg+0x21f/0x2a0 [ 404.777376][T17764] __x64_sys_sendmsg+0x19b/0x260 [ 404.782828][T17764] do_syscall_64+0xfa/0x3b0 [ 404.787836][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.794442][T17764] [ 404.794442][T17764] other info that might help us debug this: [ 404.794442][T17764] [ 404.804655][T17764] Chain exists of: [ 404.804655][T17764] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 404.804655][T17764] [ 404.818382][T17764] Possible unsafe locking scenario: [ 404.818382][T17764] [ 404.825817][T17764] CPU0 CPU1 [ 404.831162][T17764] ---- ---- [ 404.836512][T17764] lock(&q->q_usage_counter(io)#49); [ 404.841873][T17764] lock(fs_reclaim); [ 404.848367][T17764] lock(&q->q_usage_counter(io)#49); [ 404.856295][T17764] lock(&q->elevator_lock); [ 404.860871][T17764] [ 404.860871][T17764] *** DEADLOCK *** [ 404.860871][T17764] [ 404.868992][T17764] 6 locks held by syz.2.3459/17764: [ 404.874169][T17764] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 404.882347][T17764] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 404.891305][T17764] #2: ffff888025149188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 404.902691][T17764] #3: ffff8880251490d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 404.913669][T17764] #4: ffff888142b7d8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 404.924276][T17764] #5: ffff888142b7d930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 404.935238][T17764] [ 404.935238][T17764] stack backtrace: [ 404.941116][T17764] CPU: 1 UID: 0 PID: 17764 Comm: syz.2.3459 Not tainted syzkaller #0 PREEMPT(full) [ 404.941137][T17764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.941147][T17764] Call Trace: [ 404.941154][T17764] [ 404.941162][T17764] dump_stack_lvl+0x189/0x250 [ 404.941184][T17764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.941202][T17764] ? __pfx__printk+0x10/0x10 [ 404.941224][T17764] ? print_lock_name+0xde/0x100 [ 404.941246][T17764] print_circular_bug+0x2ee/0x310 [ 404.941265][T17764] check_noncircular+0x134/0x160 [ 404.941285][T17764] validate_chain+0xb9b/0x2140 [ 404.941310][T17764] __lock_acquire+0xab9/0xd20 [ 404.941336][T17764] ? elevator_change+0x19b/0x450 [ 404.941349][T17764] lock_acquire+0x120/0x360 [ 404.941371][T17764] ? elevator_change+0x19b/0x450 [ 404.941391][T17764] __mutex_lock+0x187/0x1350 [ 404.941408][T17764] ? elevator_change+0x19b/0x450 [ 404.941424][T17764] ? xa_find_after+0xae/0x430 [ 404.941446][T17764] ? xa_find_after+0x402/0x430 [ 404.941465][T17764] ? elevator_change+0x19b/0x450 [ 404.941479][T17764] ? xa_find_after+0xae/0x430 [ 404.941498][T17764] ? __pfx___mutex_lock+0x10/0x10 [ 404.941518][T17764] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 404.941539][T17764] elevator_change+0x19b/0x450 [ 404.941554][T17764] ? elevator_set_none+0x37/0xb0 [ 404.941570][T17764] elevator_set_none+0x42/0xb0 [ 404.941586][T17764] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 404.941612][T17764] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 404.941638][T17764] ? sysfs_add_file_mode_ns+0x259/0x300 [ 404.941666][T17764] nbd_start_device+0x17f/0xb10 [ 404.941684][T17764] ? device_create_file+0xf4/0x1c0 [ 404.941703][T17764] nbd_genl_connect+0x135b/0x18f0 [ 404.941722][T17764] ? __pfx_nbd_genl_connect+0x10/0x10 [ 404.941742][T17764] ? __nla_parse+0x40/0x60 [ 404.941759][T17764] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 404.941786][T17764] genl_family_rcv_msg_doit+0x212/0x300 [ 404.941810][T17764] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.941837][T17764] ? stack_trace_save+0x9c/0xe0 [ 404.941858][T17764] genl_rcv_msg+0x60e/0x790 [ 404.941881][T17764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.941901][T17764] ? __pfx_nbd_genl_connect+0x10/0x10 [ 404.941921][T17764] netlink_rcv_skb+0x208/0x470 [ 404.941936][T17764] ? __lock_acquire+0xab9/0xd20 [ 404.941959][T17764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.941983][T17764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.942006][T17764] ? down_read+0x1ad/0x2e0 [ 404.942025][T17764] genl_rcv+0x28/0x40 [ 404.942044][T17764] netlink_unicast+0x82f/0x9e0 [ 404.942070][T17764] ? __pfx_netlink_unicast+0x10/0x10 [ 404.942094][T17764] ? netlink_sendmsg+0x642/0xb30 [ 404.942110][T17764] ? skb_put+0x11b/0x210 [ 404.942137][T17764] netlink_sendmsg+0x805/0xb30 [ 404.942157][T17764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.942175][T17764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 404.942191][T17764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.942208][T17764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.942225][T17764] __sock_sendmsg+0x21c/0x270 [ 404.942249][T17764] ____sys_sendmsg+0x505/0x830 [ 404.942270][T17764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.942293][T17764] ? import_iovec+0x74/0xa0 [ 404.942314][T17764] ___sys_sendmsg+0x21f/0x2a0 [ 404.942334][T17764] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.942366][T17764] ? __fget_files+0x2a/0x420 [ 404.942380][T17764] ? __fget_files+0x3a0/0x420 [ 404.942397][T17764] __x64_sys_sendmsg+0x19b/0x260 [ 404.942417][T17764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.942441][T17764] ? rcu_is_watching+0x15/0xb0 [ 404.942458][T17764] ? do_syscall_64+0xbe/0x3b0 [ 404.942477][T17764] do_syscall_64+0xfa/0x3b0 [ 404.942493][T17764] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.942509][T17764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.942525][T17764] ? clear_bhb_loop+0x60/0xb0 [ 404.942542][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.942557][T17764] RIP: 0033:0x7f5dd998eba9 [ 404.942571][T17764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.942586][T17764] RSP: 002b:00007f5dda8f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.942603][T17764] RAX: ffffffffffffffda RBX: 00007f5dd9bd5fa0 RCX: 00007f5dd998eba9 [ 404.942615][T17764] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 404.942626][T17764] RBP: 00007f5dd9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 404.942636][T17764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.942646][T17764] R13: 00007f5dd9bd6038 R14: 00007f5dd9bd5fa0 R15: 00007fffd6d40e88 [ 404.942664][T17764] [ 405.390350][ T7586] tipc: Node number set to 2293481966 [ 405.435576][ T5968] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.446477][ T5968] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.499510][T17764] nbd0: detected capacity change from 0 to 127 [ 405.506503][ T5864] block nbd0: Receive control failed (result -32) [ 405.508682][ T5868] block nbd0: Receive control failed (result -32) [ 405.945891][ T2897] bond0 (unregistering): (slave team0): Releasing backup interface [ 405.955103][ T2897] bond0 (unregistering): Released all slaves [ 405.963962][ T2897] bond1 (unregistering): Released all slaves [ 405.973192][ T2897] bond2 (unregistering): Released all slaves [ 405.982613][ T2897] bond3 (unregistering): Released all slaves [ 406.077314][ T2897] bond4 (unregistering): Released all slaves [ 406.086449][ T2897] bond5 (unregistering): Released all slaves [ 406.095074][ T2897] bond6 (unregistering): Released all slaves [ 406.192726][ T2897] bond7 (unregistering): Released all slaves [ 406.201588][ T2897] bond8 (unregistering): Released all slaves [ 406.210346][ T2897] bond9 (unregistering): Released all slaves [ 406.304130][ T2897] bond10 (unregistering): Released all slaves [ 406.313012][ T2897] bond11 (unregistering): Released all slaves [ 406.407797][ T2897] bond12 (unregistering): Released all slaves [ 406.416857][ T2897] bond13 (unregistering): Released all slaves [ 406.516991][ T2897] bond14 (unregistering): Released all slaves [ 406.610815][ T2897] bond15 (unregistering): Released all slaves [ 406.619690][ T2897] bond16 (unregistering): Released all slaves [ 406.714556][ T2897] bond17 (unregistering): Released all slaves [ 406.722931][ T5968] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.732998][ T5968] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.741964][T17766] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 406.808184][ T2897] tipc: Left network mode [ 407.070889][ T2897] macvlan0: left promiscuous mode [ 407.100367][ T2897] hsr_slave_0: left promiscuous mode [ 407.106769][ T2897] hsr_slave_1: left promiscuous mode [ 407.115638][ T2897] veth0_macvtap: left allmulticast mode [ 407.121325][ T2897] veth1_vlan: left promiscuous mode [ 407.126847][ T2897] veth0_vlan: left promiscuous mode [ 407.238986][ T5968] smc: removing ib device syz2 [ 407.407362][T17774] Bluetooth: hci3: command 0x0405 tx timeout [ 407.978841][ T2897] IPVS: stop unused estimator thread 0...