last executing test programs: 26.340569428s ago: executing program 0 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) pipe(&(0x7f0000000600)) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000500)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) (async) pipe(&(0x7f0000000600)) (async) socket$igmp(0x2, 0x3, 0x2) (async) pipe(&(0x7f0000000500)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 26.139572907s ago: executing program 2 (id=676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "c0"}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 25.905424328s ago: executing program 0 (id=679): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0xb, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000100)={@loopback, @loopback, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x78, 0x16, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x78, 0x30, 0x0, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8a}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x0, 0x2f, 0x10}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44005}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x404c000) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00', 0x0, [0x3, 0x9, 0x3, 0xfffffff7, 0x7f]}, &(0x7f0000000440)=0x54) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={0x0, @rand_addr, @initdev}, &(0x7f0000000540)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={&(0x7f00000004c0), 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x15c, 0x24, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x8}, {0x10, 0xf}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7f}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x100, 0x8, 0xdcc, 0x200, 0xffffff01}, 0x1, 0x0, 0x9, 0x8000, 0x1, 0x1a, 0x17, 0xe, 0x6, 0x3, {0x78, 0x1, 0x2, 0x200, 0x7, 0x3ff}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xc, 0x10, 0x8a4, 0x0, 0x1, 0x7, 0x6}}, {0x10, 0x2, [0xe511, 0x5, 0x8, 0x81, 0x811f, 0x803]}}, {{0x1c, 0x1, {0x7, 0xf7, 0x8, 0x10000, 0x2, 0x7ff, 0xf65}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x9, 0x6, 0x9, 0x0, 0x5, 0x8, 0x8}}, {0x14, 0x2, [0x5, 0x4f0e, 0xa8d, 0x2, 0x6, 0x8, 0x10, 0x1]}}, {{0x1c, 0x1, {0x80, 0x18, 0x3, 0x1, 0x2, 0x6, 0x2, 0x4}}, {0xc, 0x2, [0x0, 0x5, 0x4, 0x8001]}}, {{0x1c, 0x1, {0x0, 0x5, 0x9, 0x8, 0x0, 0x780000, 0x7ff, 0x2}}, {0x8, 0x2, [0x7, 0xfff7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'wg2\x00'}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r7, 0x720, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x32}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000900), &(0x7f0000000940)=0x8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x170, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x150, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf64d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbadf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r9, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000d40)) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'rose0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4040004) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000000ec0)={'bridge_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x18}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001040)={0x0, 0x8000, 0x30, 0xcd1f, 0x3}, &(0x7f0000001080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000011c0)={r11, 0xcc, &(0x7f00000010c0)=[@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @private0, 0x1}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e24, 0x101, @mcast2, 0xe4aa}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e21, 0x7, @local, 0x2}]}, &(0x7f0000001200)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001240)={r12, 0x1000}, 0x8) 25.890126822s ago: executing program 2 (id=680): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000540c8910d1cef93719f6265c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00Z\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050007000000"], 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f00000a2000)={0x7, &(0x7f0000000200)=[{0x8001, 0x5, 0x9, 0x7}, {0x6, 0x6, 0x4, 0x4}, {0x8001, 0x81, 0x6, 0x80000001}, {0x5, 0x2, 0xe, 0xba1}, {0xffff, 0x5, 0x9, 0x1ff}, {0x0, 0x3a, 0x4, 0x1}, {0x5d, 0x83, 0xb5, 0x100}]}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000680)={&(0x7f0000000240), 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@newtclass={0x6c, 0x28, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf, 0x1}, {0xfff3, 0x7}, {0xf, 0x15}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x1, 0xfa}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) 25.602058836s ago: executing program 0 (id=685): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x3}, 0x20) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = socket$isdn(0x22, 0x3, 0x23) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 32) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 25.338936026s ago: executing program 2 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ffffffb703000008000000b70400000000000085000000450000009500"/72], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000002c0)={'dummy0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.258782205s ago: executing program 2 (id=690): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000001600)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500264bc3a9948563a3b7077ca87c02defa07d2efdca8b4a98800dcfebcb80fb025af723d746a5f105a6f12f5c76b738e8e0c180d593cac9afa58cf96cfbf4cbfd14141a8a2834237ad091cf88927dc7622f80385a6ef53bc00da51f229a86b69c016a4b01e7df00e35ee140c79684f45ae", @ANYRES32=r4, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x4008840}, 0x48094) 25.123943057s ago: executing program 0 (id=691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x0, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0xffffffffffffffb7, 0x19, "265edb0b93237d9f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x0, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0xffffffffffffffb7, 0x19, "265edb0b93237d9f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) (async) 24.972448106s ago: executing program 2 (id=692): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1}}, 0x2e) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff3d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 24.847405941s ago: executing program 2 (id=693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xfffffff9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x14000c08) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ec0)=0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000809}, 0x40004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200025bd7000ffdbdf250300000005002e000000000008003a000100000008000300", @ANYRES32=r0, @ANYBLOB="060028000000000001002d000000000028002b000532ca00553a8ef42a55beb6ffbfd99e96f3ba342cd74a333fa188df7f3dd3531704df62bf20c982be76262c60f491789baca7e467cb03a79a4723415305cc20c50f4a0c4208c1869fb234ba7d2eefb4af74afbf358db2d9879bab"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="114000000000edff0000000000000000000000000000100000400000000000120d45f217e698fd12deecac2cc2c726228175f001bf3d01387fe5f911e7147c0933de48f77b38577dfa979eab48d78f9714e33bc5d8caeb4b214ae3db39baaf60634d4f616d1806d6273b4315b96c6b8e9c005655b464f245c29920c3f60fb0d4a93f4b02c216378c61e061b608b7262b4d193fa89583f71b4ae72d67383425121c654e3a639ea1d40829a04cccfb500aabced8d3a2450bdee681b2843c779f098c90285209ff86147bae403629d970d61ac10b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r12, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r11, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 24.394921406s ago: executing program 0 (id=695): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1f8}}, 0x0) 24.364304199s ago: executing program 0 (id=697): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, r2, 0x31, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '['}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '{%'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000400}, 0x40000) listen(r0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01482dbd7000fcdbdf2507000000000000004724902cd520fccfa98870973f1b4f6ac220c41aa1c35973b280c9337365a85669ee2398b55ec089119329f58fdb5f0f3631c7d9e8a8d33704c20d9ee1a3d6d9d1d6b14fa8ee5e96e000"/107, @ANYRES32=r14, @ANYBLOB="0a001800030303030303000008006b0014000000"], 0x30}}, 0x24000054) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "803476"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r15, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r15, &(0x7f0000000140)) r17 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r17, 0x29, 0x22, &(0x7f0000000300)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @remote}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) 21.763350899s ago: executing program 1 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010000100020002000000060000000000", @ANYRES32=0x0, @ANYBLOB="0000eb2ce74a040008001b000000000004001d80f4861e6e7d2f3e2cde08213204aff8641c0d385c3991d25ec6d49d5ce87205afca4ccb000000"], 0x2c}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1}, 0x4) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newtfilter={0x488, 0x2c, 0x400, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_POLICE={0x450, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x36, 0xff, 0x0, 0xf15, 0x686, 0x3, 0x2, 0x6, 0x5, 0x5, 0x0, 0x7, 0x5, 0x1, 0x2, 0x6, 0x2, 0x2, 0x8, 0xffff, 0x0, 0x6, 0x8, 0x200, 0x6, 0x2, 0xe01, 0xd, 0x200, 0x6, 0x8, 0x4, 0x9, 0x8, 0x8, 0x1f1, 0x4, 0x0, 0x8001, 0xffffff01, 0x10000, 0x1000, 0x5, 0x2, 0x80000000, 0x1, 0xfffffffb, 0x5, 0x6, 0x10001, 0x25, 0xfb, 0x3b81, 0xf9e, 0xf2, 0x10001, 0x0, 0x0, 0xa, 0x2, 0x9, 0x2, 0x6e9a6be7, 0x8, 0x2, 0x4, 0x6c, 0x12, 0x200, 0x10, 0x1e1, 0x7, 0x1, 0x9, 0x5, 0x0, 0xffff0000, 0x5, 0x7ff, 0x6, 0x4d, 0x4, 0x4, 0x6, 0x7e9, 0x8, 0xb, 0x3, 0x9, 0x800, 0x9, 0xdbde, 0x6a6, 0x4, 0xfffffff7, 0x6, 0x2, 0x1, 0x9, 0x3, 0x1ff, 0x3, 0x27, 0x9, 0x3, 0x4, 0x1, 0x1, 0x8, 0x7, 0x9, 0x4, 0xc1d, 0x2, 0xa, 0x7, 0x7, 0x1688, 0x1, 0x8, 0x3, 0x9, 0xffffffff, 0x6, 0x4, 0x1000000, 0x7fff, 0x6, 0x6f9, 0x4, 0x8, 0x1, 0x6, 0x645, 0x1ea1, 0x8, 0x0, 0xfffffff7, 0x81, 0x9, 0x3, 0x4, 0x4, 0x920, 0x4, 0x40, 0x5, 0x6, 0xad40, 0x4, 0x100, 0x12, 0x7, 0x200, 0x1, 0x8f81, 0x4, 0x1, 0x10001, 0x8, 0x7, 0x9, 0x0, 0x0, 0x6, 0x4, 0x3fca, 0xa, 0xfffffeff, 0xfffffffc, 0x9, 0x3, 0xc3, 0x1, 0x0, 0x4, 0x672, 0x80000001, 0x9, 0x81, 0x8, 0x81, 0x800, 0x7f, 0x0, 0x8, 0x80000001, 0x200, 0x4, 0xd6d, 0x50b0, 0x2, 0x8, 0x9, 0x9, 0x4, 0x1, 0x7f, 0xe, 0x4, 0x0, 0x4ab, 0x6, 0x4, 0x1000, 0x1, 0x5, 0x401, 0x2, 0x8000, 0x0, 0xb5a8d8b, 0x0, 0x100, 0x6, 0xb, 0x40, 0x6, 0xfffffff8, 0x7, 0xfff, 0x5b, 0x7, 0x7, 0x8, 0xc, 0x9, 0x1, 0x0, 0x2, 0x7, 0x5, 0x8, 0x6, 0x352, 0xd9, 0xf59, 0xe, 0x2, 0x8da, 0x3, 0x8, 0x4, 0x9, 0x499, 0x5, 0x7, 0x7, 0x903, 0x80, 0x4, 0x3, 0x4, 0x44e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x33, 0x3, 0x4, {0xae, 0x0, 0x6, 0x7, 0x2, 0x7}, {0xfd, 0x2, 0x1, 0xefea, 0xc0, 0x9}, 0x6, 0x6, 0x9}}]}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) splice(r2, &(0x7f0000000040)=0xfffffffffffffffc, r1, 0x0, 0x800000000ff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x3, 0x4}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x1, 0x34}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) 21.391754057s ago: executing program 1 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x28, 0x19, 0x200, 0x0, 0x0, {0x1c, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0xa}}]}, 0x28}}, 0x0) 21.219748412s ago: executing program 1 (id=721): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@getqdisc={0x0, 0x26, 0x8, 0x70bd2d, 0x6, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0xa, 0x4}, {0xc, 0xfff3}}, [{}, {}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x27dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff49, 0x1, {0x1000, 0x1a9, 0x9b, 0x8, 0x4, 0xfbf, 0x7, 0x1, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x400d0, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x14, 0x14, 0x119, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x4, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="dfcfcb0c19f31e54df74d41d8231d17b7d17ac3b34ba5b29c457006efe55cd8168bbdb6ae84f553d04d5e0910c91977f57b336e2cb694f7e3239addde7bc482fa3cc0e579de5757c7e757662e2e1aedde8eae17657979f649ab9a09d446a0f346eb812225f9bac9c364cc523a8a5314fa6a0293a88ecaaca9ca9f4efee404136b9a9df3fac44872bc3c0d470e20e52f2871fd1edd90e309da598c352a843af72531e52ff393ac249eb799ba708821e465f2fee7b707f5b6c3b8ec55ec3e323f0041cc79686111a216a5e22427e8e0a1925c4c4d4b0fa279a40b5dbaa970175a3a75d5165db2e0f593c8614c6635f4b6aa8"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4810) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r9, &(0x7f0000000800)="468ea009", 0x0}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=@newtaction={0x18, 0x30, 0x7, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20.791705958s ago: executing program 1 (id=725): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f300000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x4000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)='4', 0x1) (async) tee(r3, r2, 0xffffffffffffffff, 0x2) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2b4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xb, 0x0, 0x5}, [@NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x200}]}, @NFQA_PAYLOAD={0x72, 0xa, "1f3f2c7138565ec8300c0cade20f146d35a6e29b0ac6fa724da53a8bfbab61fdfcde746deca5b16b5bdc37ec36bfa4930d2f253649738c74b9f19ab066157631d430423a7a8d0ef5194baa466e73d5877f772759834160f14a357a521c08c66920fbc7b189ac99e84c6f0e992cfa"}, @NFQA_CT={0x180, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3540}, @CTA_TUPLE_MASTER={0xf8, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7f}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xdc}]}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x744}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x20000}}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffa}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8040}, 0x20040) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1411, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 20.783744939s ago: executing program 4 (id=726): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r0, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x7ed, 0x219, 0x2, 0xfff, r2}, 0x10) sendto$inet(r1, &(0x7f0000000100)="f4", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4, 0x1, 0xe9c, 0x4, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}}, 0x9, 0xfffffff7, 0xfffffffd, 0xc1, 0xfb}}, &(0x7f0000000140)=0xb0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2004880c) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) 20.555059958s ago: executing program 4 (id=727): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x5) recvmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/193, 0xc1}], 0x4, &(0x7f00000003c0)=""/10, 0xa}, 0x5}, {{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001600)=""/89, 0x59}, {&(0x7f0000001680)=""/166, 0xa6}, {&(0x7f0000001740)=""/196, 0xc4}, {&(0x7f0000001840)=""/161, 0xa1}, {&(0x7f0000001900)=""/183, 0xb7}, {&(0x7f00000019c0)=""/11, 0xb}, {&(0x7f0000001a00)=""/172, 0xac}, {&(0x7f0000001ac0)=""/194, 0xc2}, {&(0x7f0000001bc0)=""/50, 0x32}, {&(0x7f0000001c00)=""/112, 0x70}], 0xa, &(0x7f0000001d40)=""/158, 0x9e}, 0x4}, {{&(0x7f0000001e00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000001e80)=""/246, 0xf6}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)=""/233, 0xe9}, {&(0x7f00000020c0)=""/165, 0xa5}, {&(0x7f0000002180)=""/79, 0x4f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/251, 0xfb}, {&(0x7f0000004300)=""/210, 0xd2}, {&(0x7f0000004400)=""/75, 0x4b}], 0xa}, 0x2}, {{&(0x7f0000004540)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000004900)=[{&(0x7f00000045c0)=""/99, 0x63}, {&(0x7f0000004640)=""/209, 0xd1}, {&(0x7f0000004740)=""/234, 0xea}, {&(0x7f0000004840)=""/183, 0xb7}], 0x4, &(0x7f0000004940)=""/129, 0x81}, 0xfffffffd}, {{&(0x7f0000004a00)=@caif=@util, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004a80)=""/25, 0x19}, {&(0x7f0000004ac0)=""/88, 0x58}], 0x2, &(0x7f0000004b80)=""/67, 0x43}, 0x2}, {{&(0x7f0000004c00)=@ax25={{0x3, @netrom}, [@bcast, @default, @default, @remote, @null, @netrom, @null, @default]}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004c80)=""/220, 0xdc}], 0x1, &(0x7f0000004dc0)=""/50, 0x32}}], 0x7, 0x10120, &(0x7f0000004fc0)={0x0, 0x989680}) recvmsg$can_j1939(r0, &(0x7f0000006440)={&(0x7f0000005000)=@nl, 0x80, &(0x7f0000006380)=[{&(0x7f0000005080)=""/168, 0xa8}, {&(0x7f0000005140)=""/47, 0x2f}, {&(0x7f0000005180)=""/238, 0xee}, {&(0x7f0000005280)=""/248, 0xf8}, {&(0x7f0000005380)=""/4096, 0x1000}], 0x5, &(0x7f0000006400)=""/20, 0x14}, 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f00000067c0)={&(0x7f0000006480)=@ll={0x11, 0x15, r1, 0x1, 0x3, 0x6, @multicast}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006500)="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", 0xfb}, {&(0x7f0000006600)="de28714294281a78a115413a1439b0b426149cea858b19150ee09463605deef0f04b673e219ff583a7480425211355e56cfa8cc42cd743660e0bba22310deea5de22bd8713592212a062e5e0f2b923c65891f8f83acb13f5b892ff1d2d06dc5d9832aee333da2e552dab2b03fdc457d67fc0ebdf5b47e3d3c6e49f5da129a310bf1f93e07b1c0da4bc45f83f24dac7641d20a359dc533c498292eef92ad0c43e189048681291f2719fc6f8", 0xab}, {&(0x7f00000066c0)="1bebf2bd2bd29daf32c4cacff31a5552fc63a99db8a584b14508d20e3234a9e7f2496d037bcb7d4618b90d0f572c47431707fadd8a3af12fb93237b0fe6ecb01c2d4ffbf47010c0ed885678b2fff0ffb64a82f6d2176ff53630616039bd620d47b776fca7a70e972a3abeb9363c39a5f83e509b73b545678ca033329a83c7e0d8d5709de6c883779be9a467a4d190d2b3cae3c62b34d494625b9bf", 0x9b}], 0x3}, 0x801) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000006800)=0xfff) syz_emit_ethernet(0x56, &(0x7f0000006840)={@remote, @local, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x23, 0x0, 0x0, 0x0, "86bfd62b0aa23664465eaa0941d84f255880d089587e5df0ce0daa2782c906f9551f7984d1772d9fc149bbbc41d11f1716c376966bb9739058b6b370abfb4ff5"}}}}, &(0x7f00000068c0)={0x0, 0x3, [0x1d8, 0x23f, 0xe06, 0xf0]}) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000006900), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000006940)={0x0, 0x7}, &(0x7f0000006980)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000069c0)={r4, 0x4000000}, 0x8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000006a00)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000006a40), &(0x7f0000006a80)=0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000006b00), r2) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000006c80)={&(0x7f0000006ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006c40)={&(0x7f0000006b40)={0xd0, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc801) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000006d00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000006cc0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2e4f}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010102, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @empty, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$kcm(r0, &(0x7f00000084c0)={&(0x7f0000007140)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f00000071c0)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000007200)=[{0x110, 0x109, 0x30, "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"}, {0xe8, 0x112, 0x80000, "1a9414d7f33d0d9bf46155e442888d4817f1e50ed000f529193f3d5a5ab646d9ef76c9bea2f16d63a8b71179125ccda3513b253e92bea1eccd6fd5fb5f2ea3e57215817dc1e1216c2c97797529205343e0eea94ae4b4656c7e6a359be37b8cbb3fe46b01aed615d68970bd507afb147227ef729f40e1694ffbe912890bb31ddb590de9b5808cf006914cfe8273c1b1683be908b751e8a428546562b1545e24dd7e581e2fe14af28dfcc6136b93e25b0a28eb56b80067b44a5b0d7d2be29398ea0ca76a96a254260442ccbfd7e2c9a61a732762"}, {0x1010, 0x10d, 0x7, "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"}, {0x80, 0x81, 0x3c00, "15e855d2a5a4de451cea0c598808cbe2d1adac5a9f76dc509fb0803fbd7c53f2c56aa7a4c3c4959b4554d228a8b554523b9c323a17deaea4b922dd94bd8a5c70621b93e555d12c43172d3893a8c265fe9997bd6a3504506a5bca067f7b6165b54ed21b5e8b5a31fd7003"}], 0x1288}, 0x4008800) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000008500)="c3112f4660103fac486dcfa0b4f398caa77a63bd48c9b5c442ad6b128734adc15860523b20eb090d44973fc0eb868fdc5f6f7a4a37a7a802a1") ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000008540)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000085c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000008680)={&(0x7f0000008580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000008640)={&(0x7f0000008600)={0x3c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x5, 0x6, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x8041) socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000008700), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000087c0)={&(0x7f00000086c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008780)={&(0x7f0000008740)={0x1c, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4080) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008840), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000008940)={&(0x7f0000008800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008900)={&(0x7f0000008880)={0x70, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000008a40)={&(0x7f0000008980), 0xc, &(0x7f0000008a00)={&(0x7f00000089c0)=@newtclass={0x2c, 0x28, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {0x12, 0x7}, {0x7, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000008a80)={'filter\x00', 0x0, [0xf94e, 0x1, 0x8]}, &(0x7f0000008b00)=0x44) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) 20.466724669s ago: executing program 4 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x61, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4009857}, 0x8004) socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x224, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40810) 19.287701452s ago: executing program 4 (id=730): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x1, @remote}, {0x2, 0x0, @broadcast}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r5, 0x25, 0x0, @void}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x7, 0x30, 0x10}]}, &(0x7f0000000340)='syzkaller\x00', 0x8001, 0xb0, &(0x7f00000005c0)=""/176, 0x41100, 0x1, '\x00', r5, @cgroup_sysctl=0x12, r6, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x7, 0xfffffffa, 0x8}, 0x10, 0x0, r7, 0xa, 0x0, &(0x7f0000000700)=[{0x0, 0x1, 0x8, 0x3}, {0x4, 0x3, 0x4}, {0x5, 0x3, 0xb, 0xb}, {0x5, 0x1, 0xb, 0xa}, {0x2, 0x5, 0xf, 0x1}, {0x0, 0x3, 0xe, 0x5}, {0x5, 0x2, 0x8, 0x6}, {0x0, 0x3, 0xe}, {0x4, 0x5, 0xf, 0x1}, {0x2, 0x2, 0xd, 0x9}], 0x10, 0x7fff}, 0x94) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="8112a2219dbc423f56ad3acb617525a5dc6a14b4737e05a79b067c476e90f3cdc9575b7bfe2284ce49bc805bc41344a94578f2b2a1ab1427dbfa86303d28f35bf716dc1fa86ff485f17a150b253fe16db8223ccda12a268a1aacf169481ccd2753b57d5a9a380cb00548", 0x6a, 0x20000804, &(0x7f0000000180)={0x2, 0x0, @local, 0x2}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r11 = socket(0x18, 0x3, 0xb) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r12}, 0x38) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x990) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="430000002f0afc01c154001aa0b9e8b1adec924cbc13f28b076500000000", @ANYRES32=0x0, @ANYBLOB="000000009002010008001c00", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4008001) 19.183280489s ago: executing program 4 (id=732): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x4, @private1, 0x3}}, 0x9, 0x10000, 0x9, 0x40, 0x8}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0xd53}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000140)={0x0, 0x3ff, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8068f1c6b72b5447}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2b0, r4, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0xd}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9341d91bd09b"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x1}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9e3603fe1cb2"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SUPP_RATES={0x254, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3b, 0x1, "e65edbf73d88d2e96e66c8a1ae9c771eb87b1ffcb9345621f5215210f532cbf765e8579f7962957b3a3abd8aa1e3b0ec5d79cf97d50919"}, @NL80211_BAND_5GHZ={0xec, 0x1, "d74d8c21b1e6112dc0cf05dffcd20b82345b8518b3825efebccdfb2ae23986206f99c93db5730f801aaf38c8d50c92bc3413fc1912b992cb8a0cf30c955c7d99e1069faabaa048a80e5077589a43f2c116c8f98dc6641c2fc980bdf3e041acac1a32e19419395daab92f97b46648fdaa0d5f3827b3c12c939525a068e28dbab694ed0f8af248ccff36888f4ae5a9a12c4edc36f2d5fc68970f4649f4317be73eb3e9090f1a40d20cc271bd179c20882cb154a0afae8afa561a96181a7c0258ba837e751db26a5d38e12ccb9c51631c2a695e8320b04d380a92d5467b6c0e55afc75fa797b1083a8b"}, @NL80211_BAND_5GHZ={0x5b, 0x1, "375e0861620e3dc6c295b2197e23983c51839f7a2e4f5b6c529bbc1d5ef0baae6b5e33a50f2174763b9bf3c1f3e73572ef2486f4d52da9ad17628f8fd0f0f4c59a95dbe2252141da8f52bbc038dfc7d6931ccebc74c0b5"}, @NL80211_BAND_60GHZ={0xb0, 0x2, "3ba94b64edbda8a6a4e2cc483def1953ac8a9cc11fef69a75cc5ffad85d9f894032f8d5b8d819b1e3792fc70e43b7585fd4f83be2cca000f103c1695b7e14ebaf8a5ac98726090b1e5f531f2443195f7689388dfb0bee7da5e344d782faf2ba1473ffa85cf3f6e5713ef1784592e0feedd97948020c781896d931c0c059fdb705b25a87baaf91c70f4f3d608c9cfdf852aceba323a38b79cef736720276b60e74968c7433eb25ba080b382a3"}, @NL80211_BAND_5GHZ={0x19, 0x1, "41a8c08d9622c8a404187541b62b83b58e16f0b9a3"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x258, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe567}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2a7c, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc23}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd05}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c42}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a9}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x4050) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000008c0), &(0x7f0000000900)=0x4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000e40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000980)={0x454, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_PEER_MEASUREMENTS={0x42c, 0x111, 0x0, 0x1, {0x428, 0x5, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x73}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x65f6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x111}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x226}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe36d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x82}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x454}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan1\x00'}) socketpair(0x23, 0x5, 0x1, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000f00)={r2, 0x6, 0x40, 0x8000, 0x1, 0x1, 0x9f, 0xf0000000, {r2, @in={{0x2, 0x4e22, @multicast2}}, 0xb87f, 0x8, 0x0, 0x3}}, &(0x7f0000000fc0)=0xb0) r10 = accept(r5, &(0x7f0000001000)=@sco={0x1f, @fixed}, &(0x7f0000001080)=0x80) setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f00000010c0)=0x30, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000001180)={r9, 0x68, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, @in6={0xa, 0x4e23, 0x4c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f00000011c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000001200)={0x0, 0x3, 0x71e7, 0x7, 0x7, 0x8001, 0x8, 0x0, {r8, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}, 0x6, 0x80, 0x1, 0x2}}, &(0x7f00000012c0)=0xb0) r11 = accept(r1, &(0x7f0000001300)=@tipc=@name, &(0x7f0000001380)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000013c0)={r9, 0x6b, "d53cfbbbf2a68b8847368cb510507f0211401b37c2250083135b9dd78879a178cb1fd5321d79d7818cccbb1724baa4b55289dc2171906d946b78d91d37d7abc46e610ae060ee42bae3315a52976fc1dbb4df429daec29f4431eec84b08f8a0907cae6f98281b4d29e1a675"}, &(0x7f0000001440)=0x73) bind$l2tp6(r11, &(0x7f0000001480)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x20) getpeername(r0, &(0x7f00000014c0)=@ax25={{0x3, @netrom}, [@default, @rose, @default, @remote, @default, @netrom, @netrom, @default]}, &(0x7f0000001540)=0x80) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000001580)=0xfffffc00, 0x4) connect$inet(r7, &(0x7f00000015c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair(0xa, 0x800, 0x1, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r10, 0x0, 0x12, &(0x7f0000001700)={@dev, @remote, 0x0}, &(0x7f0000001740)=0xc) sendto$packet(r12, &(0x7f0000001640)="4526eff1e357b3cf6a9b97fd0bbf8d1994c27c7dfc03b5a60ff40e0facdb534a5efe3e3fb2f0a7bf15d264aa4bdb00d1bc89a7cfb30258fb5371b4dee778e661c5daa223c9284cf29676219dc3ac6238bb5e3b769e7eab91e61563326062e01d3c7d53f7caa98348b5f6828d6a6946045523dd7653c002764ef716347c5ef0d20910c0a27ed9192a2df360ea6fb89ed1fc6f9d77ff284a5c4442b117630612af7fabc6f8e7385b6eb2257b79b66347050e89ce30df20f64cad863e2f", 0xbc, 0x820, &(0x7f0000001780)={0x11, 0x1, r13, 0x1, 0x8, 0x6, @broadcast}, 0x14) bind$netlink(r12, &(0x7f00000017c0)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) 18.891709892s ago: executing program 4 (id=733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000580)={0x1d, r2}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x62}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5d2e81a8bd6dbd4e}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xc6}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x7a4e86203cec54db, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="04002cbd7000fddbdf251c000000ebff0100559a0785936e657464657673696d0000000f0002006e65746465fcbb0f3ba99006ed977673696d30000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000) 17.564146877s ago: executing program 1 (id=738): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000000)) 17.513043697s ago: executing program 1 (id=739): r0 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r2, 0x0) socketpair(0x5, 0x1, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f00000001c0)={r5, 0x40, 0x8}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x7}, &(0x7f0000000100)=0x8) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r7, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 15.568594045s ago: executing program 3 (id=752): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x1000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)="e9436d200a16b6ffa2b02bf66eff0dfdb01dcbaf41ae4964ff9ee4d83a7c4f76d78464cbf1bd61e5472a1cc73549d3fe77defba843c992cd9902c2d532b46d4110d12d662810190e0de9763fcb8f3805a648f40795a145a1040a29fc678cef94485cf8b6d4bdfa09d668ca33f55a1920cd0323eedd65e8d5f54525b9fad04422518347474903eadb24ef9da7275737c7cb0af6765ab7c56b5fccef1a32cb49a036e8de24d040a22ea0e4d831b78ec358b31e1d4f38171b688f52733acf8d772a5b09ac8d447400ee4a9b1d86d86e1995a7ca14b8c51afc8534294b9e8710112632556d729c016b4cfa6a59e7049f2880d04cfe", 0xfffffc5d}, {&(0x7f00000040c0)="ed348677c231c22f59308a0b5af40717b90dfa71fe44164d15b0dd79b8250286d6441d9473e9e3b867376858ae2dd68739b5ccdc481088e18573a9c01512c96cd93a078c0ba7be2086df6060a14b89b193729fbe9885daf9e82329f27b53864b5358cdd05c325a1f94c048a0df2a4b2fb5d3f6cfa43bfc49d3879885027f843adcec4726d0aa25d00f1d0858fbd977b29d3ac50fe7ba3e457bc6b51c21995cab9179e3d3551d784b0908569ebac20859e95737c97122d11f4b56e6ee81030a275f27bdd105c7a167f3c38927ea52518aea49bb0a5c2a0e5e3d6d99aaff1b99e721044b963d607f1ca19018e43257b49a6e229e4e748992fa1aed5b4b438e3455f4def9c0c351443e05e0840b0aa27381eb47909eb1456fb771ac61bfc0e844cfd46c66ab73615a7e478cd985b0165e1846ad10dcd036871ce76e6b3baa8b947f5ab36930c76a69b766b8a9ede7b91a102279a7a9e3bae66868b894a55f10708cb4979bd610b9b08decd267961286693d4bf509f9c7cb32681d45dd145021d89594b572dba7deb74cbfab0bfc50f43de51f231763ee06f3f9cf86fb03013ea30a7f373c88e51a6eac878c98e38249aa75ba9e63591221adb151b0504aa650634dfbee6161c5d8afc0b394b3dfa456c0043035908704fb21bb87c1c6ac16c8b7395fdf8fe0c456fb53818ff0e1f1491e84c345f4e83e64b7b6e46c9b0e5b8c0e7a05cdef8d68a655dc9b51d53a7013ced68495c2d2f27bdf0796b8ffa25b42ba8eea7a9904d980d3e7e2ccb60e4c045d44be1f0883314ccf7414ef57ee3e76305b9d7ad65b7b5847994219c3d9ad478c00cb541ec218cb0991383604a82ac9850845a8f069daa6ea4098f3c4ef9a67272a99af08991b2607c53dc94c1fbc150c4081688a7de2aa839aa0859e8b4226a8124a6091bbeb30bf3cbf686b200f1960162026af230bac267ad82fe79c4f8af0367c1ff6d50ebf1357cfb07e14370995fdce876fbf8c6d4042729a512f75f17f1921f1bd059cc22183474c19b55e28909cf1785c60312acb31d89019c2868d7a557425ef779b029c771a37ab127b4ef5b0fda6184906b7b0c1be3b0b55d063e6f8d13d9661b039c6a132813f563d7a3a2efe4267c89993e2d3cb20e0e9f4accda5d8a585f62fe7df11547c76b629e6ec7e4809b645e3b16971042cd38946f3109f7e3cc94ae50e5262869d650767e29d81dec515e2145c0a0e72bd420f4a9d4b7050d547a2ae4a5d5bedfab285d8df36fc97005a7cfb75a54f51174ffc361a2e53ed91445ab469c76b090cc14816d7a502c6b491582555e826f5695652da292a8290c7d093ddf1158f336dd546adbf17a5ce17f6068ebe4d002a3747919aa146e0f3d780378abfd65e874fafa1504e8713ce94cd65e4540fe12e534869aa9b0eafc009db4a6625249ab8d3931b012a97fa8cb1add49109ae2303b21b2e5c25c4af4f60002b6bb36902720f86b1a534b1e1e6329e5c3a5ffa7a35e560e4acfd7f6b648ec96bc3bb4f6a9491cdf6b1abe52d8468854a4d2a3b60a0455d68ff486bb0c43df2f4aa9b674ddea03b2e15546d156c6dc931f03aeaedb35bd7d51a36b82117a197075df464a1c7715f9d52052c36ebeada202282313f27a309ff8a3523f51ba0848cc9cbe9ba3ea9068e726775cccec4edbfb2fc030985cce56f8fa3d77156e577aa242fe7215dfa11801c5f32702b8130aa39c732ad82f75d70add5eab154d6b1112c96838bca765603a6a7e1c7487d5562e20e5976e425dbf2c8f860d1746050b895a390cf4a9a7457830ab22ed66f2ce7f68d9ffcca9f70e2a5f261131a8286bb94a5617ed481c65237f1229236be208d98abf6db9dc33ffba3254dd3d3a3383a1f5be342c64f9bbe0c3d9a70e3c0effb968fed27faad5453842c01595274df204ce9a155984c58d8b7f4f86856dd87f9ac5b5d2689e9f60c92fc4d3e5303cf7a6bb7db1c6ef2b2154f5564b7637e69319b3fc72fc1a85a534920aa04db71e00908019386bb9e5932e677b36cffd1e5683d323ceee612324c818206f308970ed2cd045e89a7ead44d512d25b5366cc78b072f3e59de9f0a5c1d68cf82467223dff597221fa8357d354fe4d181b2af53ac87d2e5d5a31a738c1dd5facf598dd709cca9796282a56ef2c96efb278506b9760e7eca8638a1ec4e81ae8d43f6a60309d90c1cd26a9fe61da2bd972f2b10881479e2a68bb51b1260f37dd1156ab7f6ab4c6e0a7d2b4d658f492a391c67a0091c8e2e3d12960fb9455a1bed5a7abf0b5620ba2aa5fb8dc9557d1b268d0a0049712afb0ca408b37bb4fd7ba348c95708f2ac165dcf360f9a9c4043de3471f16009da66311002cfd65f13cec1c9452dea2deceaa95bc18e9e0cff2e4d2f6d61bb2d34436134cc1907597b512778a9f1c69004a5801a8e224148a1ee987361d2c9ff0cb8f111e57fbfee830a4e3c57ce7324806bd005cb3d3d5d61499ebb6c2093456227d74ac3b135076b72d9ed21363b1c77708c247ea9a8e5f393a1c993464d8a05cfb3ff2f6815fe96a0df520cfdb0dda5f59f27804a2209adb41eb9c427513dd10bba9fcac71093f38c6eec06dc22b5abfd6d70020c1eb908d4451a93bf1ad8b9a6e5eea3063f2d88aafbad7cb8599ec01ffd88ac0a673c500d4ac3caa6a702e3c0b7f4446b706e47de2f410f90bcde168c79e126ce05b2a5200eda06eae4a09ea3f2fa92750b3dc18e16b2d8aa2c7f65bda9f7609e8ee39cae3fa58a352880bcd911a30915e222380088a0a34c820716d599fa8024f1be4d74ba7e5530ea73eb61cc0a04842ed344ef2deb77304c35b6e8d4600498940f43e8c1b2bac1ff0e63479a92ad2590867d0c4e7a2c4d299b46f5ae93e91ce41b7e1eded8bf079f784fb45f7336b0f62a68fa87aa60a2181b8e63595ae903b5662bbb5616bed488b80de34f7dc78ba640727d37642be70646d4f42a62d447fd5f78c50e209c5989a98790d2108b76983c8e02a49ea86ac9e7823309679412f9089c84d181b4352e681d8ba536299958e9ebde50406aceb0800eff9322942a89132bdf0e5b5197a536c0bc182ffc382ff93077357892fd95310ea8201d47f7055467faab7e53e1c6baaea3cf3f0619e4e8ff8909b964958b493be77f0d31d26a603e5f8d93a1edbdad02237aa1adfcd8ef39f1bc84d55d229789493102199e206f1623239eddd73a269be7f8d72fdbf7a7de05b107dfa4eeebf80da35b204c3290b5cb3bbcdbe77b5edfa82a7aacf075606ca59688ca8697a31dd0cfed9577f89819016de97c2aa225d380753fd9a9f238707af7ade431f80923dde91abb04e808891038a485bf2d696dac3fed14094e68d152b22f57d776011a14b450ba335c8ccf30cc37e4f5f5ceb7353239d0a9108fa97cd6de7e6513d35dbcb226804ba2069d0a971468bc0c818cc89f5deaa4be7ca09acc1438744c50332d2d1b3b1af137ce7692c938add54fd7f496c42487258efe63a82736ac8087daab2b7b496d5634f6494dd3600c986f09f3dbc479a241b23f6da19c245dcbd4397c04a16fb3af7e0f47cbc36ebafec13a7c44c37825dbe2fd2dd5fc4809579fe345df5876bdbf94551daa3b3c0825abc50ab0ad71036f6b903e6cde085eef913378a3ab9f9eaec3d42723ecb8b5fa8304eadad372c44a3d8746ece41ac95f590da8e079d76db83621312cb26fe3405c51be6f96404c8a6514d88b64f1af5a745f1c3f280af825cd87b02b7236f650c5b57987eb01b05ec48656db2cd9fd10833210901c3d850f3c4a009295b2071d20b7ac3a7ab1268b1583d56fc3fc6f03e076b62b73a4e7043742aeba686ec11dd4e1053eb891d456803a72143a3401945882e15c2bd61d8fc213d0e45c5d64159d137fe15514a2564113468ab8a2108ca66e9d1670ef02b56d924dc9f334c9938b9152ab01d99facdff645c05ec004eb0d695b9a8cbb7e7943dca8ac28dd0fc30542b384e5725aa6be1e5ed70fd1c85261924417e27fdb64aecb1ed10dcbc60bf2b5ae1950a7788de8b491abf949db4c83cd35ecf47193336160abe4cabc54effb40067f0f54ce15963bd2380c575dcf3969f41a90e372dc40314f94674b6c0d391d8996eb19805991721e38f5f9ce996e9684671d62f94877c5f43f57577b22e403a74f69c52fbe80b642ae77c7ab1041fea0c6f57e992f1526bb79f4822ad8718db5a43f7df350d589f4de1240e4c237e89656f8eced6126b106a9f93029d04b8eb51a2cd4e7ad393eeaaf63c17138725ac5a662a0b7a9f44caa5bf275ae92186f0dfa0015ad7f56075e620167811ac6b9be6de71bcbd77b56880ef80b9653c3010020be13e10c78a785d0e2d55e979db06d2ece53c88f9c076c32371b69375c556e089085c18ea31b6cbbf56a979a456eba4f890456f69d2f805419b3479c870011f965194d75318f35a72dd313f3d340205ff6cd13626bb4e50e75157d0995431aa18b9453de6d7e9d2e9dc53afe41b2c0343589c7432db8960af1abf3529e587057dae1ad37d0bdb2d95921b7d52f8ce42027d77d66dfb1e3f51d5a070761ff6e37064209ff43eeb1206ba4dd9e378dccddaf38a3c0d886b567150890aa78b1708157a94ab2e77d8c3383f640ac025c1ed157b2e423f839d07f626bdf92ef1f944057892ccc2cc9bb6e5861788f08cf9a819fe819e5c105c2c7d0c28455fcccf776febb724b11ed6bc242fa9feed6a55d2bf6dca3a31f498be12e47eafbaa1d92c34371aa0aa2e39224d548a810a6f96bdff7933b2f20f1e55fefbffd222c971abc2928b136ece2f0de151d9f5406e39a9db5e3939152da3b5e853c96183686c506d15073d281ca8bf4e03d67df9bda5afd2167f801a98b50aafa63d02db4f0cb11dcae17b0f8bf648f54cdf7771fd34565c96d150e977ba27c95ae10b216350cf475f5ed14a1b2eaf04c7b2a4071561afe1a791e4a309383186cd8b117bcc023b8f62f913433f7beaa60e4a2ff40fd188ee351f2c277dcbde48aff1925b0aaac8896877064d93ae747460d7b209090e68abef1b842f2e842b0f08239e91cbd74d9ff9239ef6eb6e3d507b485bb3e9222f063ec1c99fd189764f26bcbeb7d8bbf8900dd8adce109f9efa39f805d5670c4f463fb1a9e564d3f859983dac17fb4f36bf4a51391377f54e6c770dac4dbea0402d8f4ff2c8c75f1e9eaab716356060359b196f00b38d8ab1e33e3d334c9a4b5945999df10d9edfdc30f4975c4340ae3eb82e3f69c1d1647451591fe169b6f3f541532a4b4e078137d439c697f7731cdaa7e16e3479ecd23cf4fa8a2e3f3369502c1895859c887c16005ca84bf848bf8a6936e578cc8cdc120dda7d7f3c97df55942be73bfedca01b05554364057b154f2709188c2802ab5170541d449b195cbd36014ed5016bc2f05a24e15dd20fec7edccc8f0fb30a308ae55ce217176e99b2311a2531176231ef8dd985ffe6daf13799aad9e0416894c1b5b3318ce489b5d173be4018216b2895b5a8231707deab01b7d90c7476712bb97e61213e391193693530e8ad596fa4624a84bc6d690d36103be4b40111af73834e4899a4708b332fa3554390f55c4b9d9661edf7e525b67f90504a382f36c12d20cb85a1bbd9fe9da7ebd12168e0276360513b42aadb62b697dc7689197d057299be3f1706211ce828d12a73621d92ba80ce6c0d86ab93c6653355bd924547ba19d6da9209adf881a0e8b6f01181878bc84aed48ce3948ed107596e6b7e5159567d4dcb56149d161d6085a0203e22a74ac5", 0x1000}, {&(0x7f0000003180)="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", 0xf0e}], 0x3, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'gretap0\x00', {0x78}, 0x8}) 15.420018087s ago: executing program 3 (id=753): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) 15.419163532s ago: executing program 3 (id=754): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x1, &(0x7f00000002c0)=@raw=[@exit], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x7a1, 0x4}, 0x10, 0x87ab, 0xffffffffffffffff, 0x2, &(0x7f0000000680), &(0x7f0000000000)=[{0x3, 0x1, 0x6, 0x3}, {0x3, 0x1, 0x1, 0x3}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40), 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 15.305867728s ago: executing program 3 (id=755): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r3, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$ax25(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001b00)=""/4096, &(0x7f00000000c0)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r7 = socket(0x29, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=r1, @ANYBLOB="642ec8587675f1f76dda077049616d00e5f0c8cc0ab20a6b40581833836c23a1deaf310d16e5436ad582533855dedf69e55051e3bfd470"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 15.233379845s ago: executing program 3 (id=756): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000012c0), 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0x890) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x18) 15.147877581s ago: executing program 3 (id=757): socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket(0x10, 0x80002, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="e2a17e32eee372a09a498206ffe4", @ANYRES16=r1, @ANYBLOB="b5e729bd7000fbdbdf25040000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 9.12338433s ago: executing program 32 (id=697): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, r2, 0x31, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '['}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '{%'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000400}, 0x40000) listen(r0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01482dbd7000fcdbdf2507000000000000004724902cd520fccfa98870973f1b4f6ac220c41aa1c35973b280c9337365a85669ee2398b55ec089119329f58fdb5f0f3631c7d9e8a8d33704c20d9ee1a3d6d9d1d6b14fa8ee5e96e000"/107, @ANYRES32=r14, @ANYBLOB="0a001800030303030303000008006b0014000000"], 0x30}}, 0x24000054) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "803476"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r15, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r15, &(0x7f0000000140)) r17 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r17, 0x29, 0x22, &(0x7f0000000300)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @remote}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) 9.078657713s ago: executing program 33 (id=693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xfffffff9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x14000c08) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ec0)=0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000809}, 0x40004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200025bd7000ffdbdf250300000005002e000000000008003a000100000008000300", @ANYRES32=r0, @ANYBLOB="060028000000000001002d000000000028002b000532ca00553a8ef42a55beb6ffbfd99e96f3ba342cd74a333fa188df7f3dd3531704df62bf20c982be76262c60f491789baca7e467cb03a79a4723415305cc20c50f4a0c4208c1869fb234ba7d2eefb4af74afbf358db2d9879bab"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="114000000000edff0000000000000000000000000000100000400000000000120d45f217e698fd12deecac2cc2c726228175f001bf3d01387fe5f911e7147c0933de48f77b38577dfa979eab48d78f9714e33bc5d8caeb4b214ae3db39baaf60634d4f616d1806d6273b4315b96c6b8e9c005655b464f245c29920c3f60fb0d4a93f4b02c216378c61e061b608b7262b4d193fa89583f71b4ae72d67383425121c654e3a639ea1d40829a04cccfb500aabced8d3a2450bdee681b2843c779f098c90285209ff86147bae403629d970d61ac10b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r12, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r11, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.051274835s ago: executing program 34 (id=733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000580)={0x1d, r2}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x62}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5d2e81a8bd6dbd4e}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xc6}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x7a4e86203cec54db, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="04002cbd7000fddbdf251c000000ebff0100559a0785936e657464657673696d0000000f0002006e65746465fcbb0f3ba99006ed977673696d30000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000) 2.031369045s ago: executing program 35 (id=739): r0 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104d000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r2, 0x0) socketpair(0x5, 0x1, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f00000001c0)={r5, 0x40, 0x8}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x7}, &(0x7f0000000100)=0x8) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r7, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 0s ago: executing program 36 (id=757): socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket(0x10, 0x80002, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="e2a17e32eee372a09a498206ffe4", @ANYRES16=r1, @ANYBLOB="b5e729bd7000fbdbdf25040000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 82.085421][ T5820] cgroup: Unknown subsys name 'net' [ 82.237681][ T5820] cgroup: Unknown subsys name 'cpuset' [ 82.247378][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.008647][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.550548][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.563322][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.583805][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.591237][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.600335][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.608122][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.616747][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.633109][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.658933][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.666685][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.773875][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.781906][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.790434][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.798988][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.808047][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.865820][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.877194][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.885869][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.886346][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.901599][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.901811][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.917614][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.917851][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.936335][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.944023][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.526994][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.657007][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.750044][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.914405][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.962305][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.969630][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.978159][ T5835] bridge_slave_0: entered allmulticast mode [ 87.985590][ T5835] bridge_slave_0: entered promiscuous mode [ 87.994801][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.027270][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.034604][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.041932][ T5835] bridge_slave_1: entered allmulticast mode [ 88.049433][ T5835] bridge_slave_1: entered promiscuous mode [ 88.153342][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.160504][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.168051][ T5830] bridge_slave_0: entered allmulticast mode [ 88.176350][ T5830] bridge_slave_0: entered promiscuous mode [ 88.217258][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.224921][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.232306][ T5844] bridge_slave_0: entered allmulticast mode [ 88.240418][ T5844] bridge_slave_0: entered promiscuous mode [ 88.249059][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.256327][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.264488][ T5830] bridge_slave_1: entered allmulticast mode [ 88.271747][ T5830] bridge_slave_1: entered promiscuous mode [ 88.287048][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.307628][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.314838][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.322020][ T5844] bridge_slave_1: entered allmulticast mode [ 88.329452][ T5844] bridge_slave_1: entered promiscuous mode [ 88.364677][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.487858][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.497809][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.505440][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.512639][ T5841] bridge_slave_0: entered allmulticast mode [ 88.520033][ T5841] bridge_slave_0: entered promiscuous mode [ 88.531398][ T5835] team0: Port device team_slave_0 added [ 88.537684][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.544931][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.552198][ T5843] bridge_slave_0: entered allmulticast mode [ 88.559835][ T5843] bridge_slave_0: entered promiscuous mode [ 88.568278][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.575804][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.583192][ T5843] bridge_slave_1: entered allmulticast mode [ 88.590465][ T5843] bridge_slave_1: entered promiscuous mode [ 88.599869][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.611381][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.647722][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.654936][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.662088][ T5841] bridge_slave_1: entered allmulticast mode [ 88.669653][ T5841] bridge_slave_1: entered promiscuous mode [ 88.678265][ T5835] team0: Port device team_slave_1 added [ 88.693782][ T5836] Bluetooth: hci1: command tx timeout [ 88.703031][ T5836] Bluetooth: hci0: command tx timeout [ 88.708953][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.744103][ T5830] team0: Port device team_slave_0 added [ 88.791935][ T5844] team0: Port device team_slave_0 added [ 88.799890][ T5830] team0: Port device team_slave_1 added [ 88.835865][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.846712][ T5844] team0: Port device team_slave_1 added [ 88.853716][ T5836] Bluetooth: hci2: command tx timeout [ 88.856777][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.883794][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.894276][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.901243][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.927879][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.981082][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.991057][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.998249][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.013475][ T5834] Bluetooth: hci3: command tx timeout [ 89.025463][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.030345][ T5836] Bluetooth: hci4: command tx timeout [ 89.075832][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.082819][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.108930][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.147485][ T5841] team0: Port device team_slave_0 added [ 89.154421][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.161389][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.187752][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.201205][ T5843] team0: Port device team_slave_0 added [ 89.208544][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.215707][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.242846][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.256668][ T5841] team0: Port device team_slave_1 added [ 89.276211][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.283347][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.309882][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.322935][ T5843] team0: Port device team_slave_1 added [ 89.411553][ T5835] hsr_slave_0: entered promiscuous mode [ 89.418477][ T5835] hsr_slave_1: entered promiscuous mode [ 89.443716][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.450677][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.476852][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.488594][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.496186][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.522292][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.571940][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.579034][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.605797][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.618048][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.625191][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.651142][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.680169][ T5844] hsr_slave_0: entered promiscuous mode [ 89.686871][ T5844] hsr_slave_1: entered promiscuous mode [ 89.693544][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 89.699368][ T5844] Cannot create hsr debugfs directory [ 89.760627][ T5830] hsr_slave_0: entered promiscuous mode [ 89.767704][ T5830] hsr_slave_1: entered promiscuous mode [ 89.774056][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 89.779803][ T5830] Cannot create hsr debugfs directory [ 89.886156][ T5841] hsr_slave_0: entered promiscuous mode [ 89.892726][ T5841] hsr_slave_1: entered promiscuous mode [ 89.900132][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 89.906096][ T5841] Cannot create hsr debugfs directory [ 89.950415][ T5843] hsr_slave_0: entered promiscuous mode [ 89.956912][ T5843] hsr_slave_1: entered promiscuous mode [ 89.963263][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 89.969100][ T5843] Cannot create hsr debugfs directory [ 90.481638][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.494492][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.513156][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.524327][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.604450][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.616146][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.628705][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.639272][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.745578][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.767530][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.777036][ T5836] Bluetooth: hci0: command tx timeout [ 90.782534][ T5836] Bluetooth: hci1: command tx timeout [ 90.810867][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.826114][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.901611][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.920127][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.931188][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.938104][ T5836] Bluetooth: hci2: command tx timeout [ 90.951935][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.965825][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.057831][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.093604][ T5836] Bluetooth: hci4: command tx timeout [ 91.094681][ T5834] Bluetooth: hci3: command tx timeout [ 91.127987][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.135546][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.154345][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.166103][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.179462][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.197385][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.205536][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.218278][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.225563][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.291950][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.325676][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.332980][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.357292][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.364495][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.402679][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.476301][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.503824][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.511225][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.550720][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.557912][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.658751][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.768256][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.831216][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.838480][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.906758][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.922218][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.929461][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.970918][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.038418][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.062108][ T1210] cfg80211: failed to load regulatory.db [ 92.070162][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.077357][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.148276][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.155491][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.185586][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.241278][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.440265][ T5844] veth0_vlan: entered promiscuous mode [ 92.500410][ T5844] veth1_vlan: entered promiscuous mode [ 92.576212][ T5843] veth0_vlan: entered promiscuous mode [ 92.622071][ T5843] veth1_vlan: entered promiscuous mode [ 92.676303][ T5844] veth0_macvtap: entered promiscuous mode [ 92.712632][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.725412][ T5844] veth1_macvtap: entered promiscuous mode [ 92.760707][ T5843] veth0_macvtap: entered promiscuous mode [ 92.812429][ T5843] veth1_macvtap: entered promiscuous mode [ 92.825262][ T5835] veth0_vlan: entered promiscuous mode [ 92.836701][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.849673][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.858533][ T5834] Bluetooth: hci0: command tx timeout [ 92.863283][ T5836] Bluetooth: hci1: command tx timeout [ 92.896268][ T3500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.906004][ T3500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.920759][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.931249][ T3500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.941645][ T3500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960266][ T5830] veth0_vlan: entered promiscuous mode [ 92.969685][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.980101][ T5835] veth1_vlan: entered promiscuous mode [ 92.998178][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.013247][ T5836] Bluetooth: hci2: command tx timeout [ 93.032221][ T5830] veth1_vlan: entered promiscuous mode [ 93.048623][ T1101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.061097][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.103588][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.112355][ T1101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173402][ T5836] Bluetooth: hci4: command tx timeout [ 93.174379][ T5834] Bluetooth: hci3: command tx timeout [ 93.198940][ T5835] veth0_macvtap: entered promiscuous mode [ 93.206994][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.217054][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.238604][ T5830] veth0_macvtap: entered promiscuous mode [ 93.269856][ T5830] veth1_macvtap: entered promiscuous mode [ 93.279553][ T5835] veth1_macvtap: entered promiscuous mode [ 93.298495][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.307123][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.361465][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.363106][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.386451][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.398684][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.426424][ T5841] veth0_vlan: entered promiscuous mode [ 93.457454][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.466513][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.518094][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.528184][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.532095][ T5841] veth1_vlan: entered promiscuous mode [ 93.548897][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.552483][ T3500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.591683][ T3500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.617916][ T3500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.644262][ T3500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682064][ T3500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.785536][ T3500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840967][ T3500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.883502][ T5841] veth0_macvtap: entered promiscuous mode [ 93.906223][ T3500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.957771][ T5841] veth1_macvtap: entered promiscuous mode [ 94.045922][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.078849][ T5957] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6'. [ 94.112120][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.122360][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.144956][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.216117][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.228748][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.241072][ T5957] bond0 (unregistering): Released all slaves [ 94.280728][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.289852][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.321861][ T1101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.341525][ T1101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.377888][ T1101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397464][ T1101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.452250][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.466469][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.616666][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.624793][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.667961][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.724073][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.731944][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.901522][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.935103][ T5834] Bluetooth: hci1: command tx timeout [ 94.940565][ T5834] Bluetooth: hci0: command tx timeout [ 94.957633][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.093182][ T5834] Bluetooth: hci2: command tx timeout [ 95.254149][ T5834] Bluetooth: hci4: command tx timeout [ 95.256016][ T5836] Bluetooth: hci3: command tx timeout [ 95.315266][ T5979] delete_channel: no stack [ 95.430663][ T5984] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 95.444998][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.453427][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.525049][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 95.549237][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 95.838255][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 96.570787][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14'. [ 96.828377][ T6050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'. [ 96.917907][ T6047] syzkaller0: entered promiscuous mode [ 96.930784][ T6047] syzkaller0: entered allmulticast mode [ 96.950656][ T6056] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 96.973797][ T6056] Zero length message leads to an empty skb [ 96.981014][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 97.092517][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 98.292066][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.337844][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.351238][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.364336][ T6089] openvswitch: netlink: Message has 2712 unknown bytes. [ 98.366192][ T6056] bond0 (unregistering): Released all slaves [ 98.371862][ T6087] openvswitch: netlink: Message has 2712 unknown bytes. [ 98.417830][ T6070] ip6gre1: entered allmulticast mode [ 98.479763][ T6088] gretap0: entered promiscuous mode [ 98.495523][ T6088] vlan2: entered promiscuous mode [ 98.599235][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 98.776838][ T5836] Bluetooth: hci1: command tx timeout [ 98.827248][ T6104] netlink: 56 bytes leftover after parsing attributes in process `syz.2.45'. [ 98.833461][ T6106] sch_fq: defrate 0 ignored. [ 98.838759][ T6102] netlink: 'syz.3.42': attribute type 23 has an invalid length. [ 99.088709][ T6119] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.126235][ T6119] Cannot find add_set index 0 as target [ 99.381082][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.434709][ T6134] bridge1: entered promiscuous mode [ 99.461014][ T6134] bridge1: entered allmulticast mode [ 99.512248][ T6134] team0: Port device bridge1 added [ 99.538340][ T6136] bridge0: port 3(team0) entered blocking state [ 99.578190][ T6136] bridge0: port 3(team0) entered disabled state [ 99.610799][ T6136] team0: entered allmulticast mode [ 99.613919][ T6146] __nla_validate_parse: 1 callbacks suppressed [ 99.613939][ T6146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.56'. [ 99.631898][ T6136] team_slave_0: entered allmulticast mode [ 99.647005][ T6136] team_slave_1: entered allmulticast mode [ 99.666268][ T6136] team0: entered promiscuous mode [ 99.673873][ T6136] team_slave_0: entered promiscuous mode [ 99.706084][ T6136] team_slave_1: entered promiscuous mode [ 99.731241][ T6136] bridge0: port 3(team0) entered blocking state [ 99.737868][ T6136] bridge0: port 3(team0) entered forwarding state [ 99.828517][ T6146] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 99.847486][ T6146] bond2 (unregistering): Released all slaves [ 100.130997][ T6167] netlink: 64 bytes leftover after parsing attributes in process `syz.2.59'. [ 100.215759][ T6168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.59'. [ 100.242031][ T6172] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 100.395756][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 100.419895][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 100.450497][ T6184] netlink: 'syz.0.66': attribute type 3 has an invalid length. [ 100.470926][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 100.549105][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 100.606622][ T6187] netlink: 104 bytes leftover after parsing attributes in process `syz.2.68'. [ 100.728164][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 100.757452][ T5907] IPVS: starting estimator thread 0... [ 100.768027][ T6198] tipc: Started in network mode [ 100.785566][ T6198] tipc: Node identity ac1414aa, cluster identity 4711 [ 100.812158][ T6198] tipc: Enabled bearer , priority 10 [ 100.863176][ T6199] IPVS: using max 26 ests per chain, 62400 per kthread [ 100.909155][ T6208] pimreg: entered allmulticast mode [ 101.083608][ T6214] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 101.190096][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.75'. [ 101.341705][ T6223] macvlan2: entered promiscuous mode [ 101.351658][ T6223] macvlan2: entered allmulticast mode [ 101.358163][ T6223] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 101.674694][ T6232] syzkaller1: entered promiscuous mode [ 101.680765][ T6232] syzkaller1: entered allmulticast mode [ 101.817534][ T6249] netlink: 'syz.0.88': attribute type 39 has an invalid length. [ 101.987257][ T6255] syzkaller0: entered promiscuous mode [ 101.992792][ T6255] syzkaller0: entered allmulticast mode [ 102.001083][ T1210] tipc: Node number set to 2886997162 [ 102.135407][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.143376][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.276763][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.292199][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.435837][ T6264] tipc: Started in network mode [ 102.440895][ T6264] tipc: Node identity 2e4f58886de9, cluster identity 4711 [ 102.448671][ T6264] tipc: Enabled bearer , priority 3 [ 102.470702][ T6263] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 102.488592][ T6268] geneve2: entered promiscuous mode [ 102.515235][ T6268] geneve2: entered allmulticast mode [ 102.578244][ T6250] tipc: Resetting bearer [ 102.728475][ T6250] tipc: Disabling bearer [ 102.735205][ T5832] IPVS: starting estimator thread 0... [ 102.744196][ T6280] Bluetooth: MGMT ver 1.23 [ 102.825976][ T6284] IPVS: using max 34 ests per chain, 81600 per kthread [ 103.044918][ T6291] bridge1: entered promiscuous mode [ 103.064003][ T6291] bridge1: entered allmulticast mode [ 103.079274][ T6291] team0: Port device bridge1 added [ 103.158604][ T6295] bridge0: port 3(team0) entered blocking state [ 103.211249][ T6295] bridge0: port 3(team0) entered disabled state [ 103.218386][ T6295] team0: entered allmulticast mode [ 103.224236][ T6295] team_slave_0: entered allmulticast mode [ 103.230002][ T6295] team_slave_1: entered allmulticast mode [ 103.255628][ T6295] team0: entered promiscuous mode [ 103.263395][ T6295] team_slave_0: entered promiscuous mode [ 103.289866][ T6295] team_slave_1: entered promiscuous mode [ 103.324809][ T6291] netlink: 'syz.1.98': attribute type 9 has an invalid length. [ 103.568290][ T6329] syzkaller0: entered promiscuous mode [ 103.603033][ T6329] syzkaller0: entered allmulticast mode [ 103.818218][ T6345] tipc: Started in network mode [ 103.827883][ T6345] tipc: Node identity 6293bece5ad, cluster identity 4711 [ 103.848770][ T6345] tipc: Enabled bearer , priority 10 [ 103.876695][ T6327] tipc: Resetting bearer [ 103.996439][ T6327] tipc: Disabling bearer [ 104.485356][ T6369] warning: `syz.2.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.898164][ T6394] macsec1: entered promiscuous mode [ 105.075789][ T6404] syzkaller0: entered promiscuous mode [ 105.091627][ T6404] syzkaller0: entered allmulticast mode [ 105.140846][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.246020][ T6412] __nla_validate_parse: 9 callbacks suppressed [ 105.246041][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.293048][ T6412] team0: left allmulticast mode [ 105.298083][ T6412] team_slave_0: left allmulticast mode [ 105.321431][ T6412] team_slave_1: left allmulticast mode [ 105.332587][ T6412] team0: left promiscuous mode [ 105.337637][ T6412] team_slave_0: left promiscuous mode [ 105.344700][ T6412] team_slave_1: left promiscuous mode [ 105.350945][ T6412] bridge0: port 3(team0) entered disabled state [ 105.365068][ T6416] netlink: 68 bytes leftover after parsing attributes in process `syz.4.135'. [ 105.383443][ T6416] netlink: 80 bytes leftover after parsing attributes in process `syz.4.135'. [ 105.398675][ T6412] bridge_slave_1: left allmulticast mode [ 105.405181][ T6412] bridge_slave_1: left promiscuous mode [ 105.411100][ T6418] netlink: 52 bytes leftover after parsing attributes in process `syz.0.136'. [ 105.411172][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.435899][ T6412] bridge_slave_0: left allmulticast mode [ 105.444173][ T6412] bridge_slave_0: left promiscuous mode [ 105.450121][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.475566][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 105.532276][ T6413] syzkaller0: entered promiscuous mode [ 105.541230][ T6413] syzkaller0: entered allmulticast mode [ 105.626906][ T6426] sctp: [Deprecated]: syz.0.137 (pid 6426) Use of int in maxseg socket option. [ 105.626906][ T6426] Use struct sctp_assoc_value instead [ 105.928432][ T6437] netlink: 'syz.0.142': attribute type 9 has an invalid length. [ 105.949018][ T6437] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.142'. [ 105.997319][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.144'. [ 106.029354][ T6439] unsupported nlmsg_type 40 [ 106.184976][ T6447] syzkaller0: entered promiscuous mode [ 106.205965][ T6447] syzkaller0: entered allmulticast mode [ 107.016202][ T6489] syzkaller0: entered promiscuous mode [ 107.041674][ T6489] syzkaller0: entered allmulticast mode [ 107.069305][ T6495] xt_hashlimit: size too large, truncated to 1048576 [ 107.086050][ T6494] netlink: 240 bytes leftover after parsing attributes in process `syz.3.160'. [ 107.120219][ T6495] syz.0.159: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.158650][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT(full) [ 107.158680][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.158700][ T6495] Call Trace: [ 107.158708][ T6495] [ 107.158717][ T6495] dump_stack_lvl+0x189/0x250 [ 107.158761][ T6495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.158789][ T6495] ? __pfx__printk+0x10/0x10 [ 107.158810][ T6495] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.158839][ T6495] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.158869][ T6495] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 107.158901][ T6495] warn_alloc+0x214/0x310 [ 107.158939][ T6495] ? __pfx_warn_alloc+0x10/0x10 [ 107.158980][ T6495] ? __get_vm_area_node+0x28f/0x300 [ 107.159010][ T6495] ? htable_create+0x101/0x7a0 [ 107.159041][ T6495] __vmalloc_node_range_noprof+0x690/0x12d0 [ 107.159099][ T6495] ? alloc_pages_mpol+0x3cd/0x4a0 [ 107.159122][ T6495] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.159156][ T6495] ? rcu_is_watching+0x15/0xb0 [ 107.159181][ T6495] ? htable_create+0x101/0x7a0 [ 107.159208][ T6495] __kvmalloc_node_noprof+0x674/0x910 [ 107.159240][ T6495] ? htable_create+0x101/0x7a0 [ 107.159264][ T6495] ? hashlimit_pernet+0x23/0x240 [ 107.159291][ T6495] ? hashlimit_pernet+0x23/0x240 [ 107.159315][ T6495] ? hashlimit_pernet+0x23/0x240 [ 107.159348][ T6495] htable_create+0x101/0x7a0 [ 107.159383][ T6495] hashlimit_mt_check_common+0x719/0xa10 [ 107.159422][ T6495] xt_check_match+0x3d1/0xab0 [ 107.159454][ T6495] ? __pfx_xt_check_match+0x10/0x10 [ 107.159482][ T6495] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 107.159530][ T6495] ? xt_find_match+0x1f7/0x250 [ 107.159563][ T6495] translate_table+0x1553/0x2040 [ 107.159619][ T6495] ? __pfx_translate_table+0x10/0x10 [ 107.159652][ T6495] ? __might_fault+0xb0/0x130 [ 107.159703][ T6495] ? _copy_from_user+0x94/0xb0 [ 107.159735][ T6495] do_ip6t_set_ctl+0x970/0xce0 [ 107.159771][ T6495] ? rcu_is_watching+0x15/0xb0 [ 107.159795][ T6495] ? trace_contention_end+0x39/0x120 [ 107.159820][ T6495] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 107.159877][ T6495] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.159914][ T6495] ? file_init_path+0x3b/0x590 [ 107.159941][ T6495] ? __lock_acquire+0xab9/0xd20 [ 107.159966][ T6495] nf_setsockopt+0x26f/0x290 [ 107.159999][ T6495] rawv6_setsockopt+0x23b/0x5b0 [ 107.160024][ T6495] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 107.160044][ T6495] ? aa_sock_opt_perm+0xff/0x1b0 [ 107.160077][ T6495] ? sock_common_setsockopt+0x36/0xc0 [ 107.160106][ T6495] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.160142][ T6495] do_sock_setsockopt+0x17c/0x1b0 [ 107.160169][ T6495] __x64_sys_setsockopt+0x13f/0x1b0 [ 107.160196][ T6495] do_syscall_64+0xfa/0xfa0 [ 107.160224][ T6495] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.160251][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.160270][ T6495] ? clear_bhb_loop+0x60/0xb0 [ 107.160294][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.160313][ T6495] RIP: 0033:0x7efe0ff8f6c9 [ 107.160343][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.160357][ T6495] RSP: 002b:00007efe10df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.160378][ T6495] RAX: ffffffffffffffda RBX: 00007efe101e5fa0 RCX: 00007efe0ff8f6c9 [ 107.160391][ T6495] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 107.160403][ T6495] RBP: 00007efe10011f91 R08: 0000000000000588 R09: 0000000000000000 [ 107.160414][ T6495] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 107.160426][ T6495] R13: 00007efe101e6038 R14: 00007efe101e5fa0 R15: 00007ffd16bf0018 [ 107.160459][ T6495] [ 107.527095][ T6495] Mem-Info: [ 107.532004][ T6495] active_anon:5640 inactive_anon:0 isolated_anon:0 [ 107.532004][ T6495] active_file:2372 inactive_file:39876 isolated_file:0 [ 107.532004][ T6495] unevictable:768 dirty:402 writeback:0 [ 107.532004][ T6495] slab_reclaimable:10358 slab_unreclaimable:94572 [ 107.532004][ T6495] mapped:29226 shmem:1356 pagetables:1148 [ 107.532004][ T6495] sec_pagetables:0 bounce:0 [ 107.532004][ T6495] kernel_misc_reclaimable:0 [ 107.532004][ T6495] free:1334708 free_pcp:18121 free_cma:0 [ 107.581091][ T6495] Node 0 active_anon:22560kB inactive_anon:0kB active_file:9488kB inactive_file:159296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116904kB dirty:1592kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11888kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.612985][ T6495] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.643101][ T6495] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.682835][ T6495] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 107.688736][ T6495] Node 0 DMA32 free:1436532kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22360kB inactive_anon:0kB active_file:9488kB inactive_file:159296kB unevictable:1536kB writepending:1592kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:53032kB local_pcp:32356kB free_cma:0kB [ 107.723972][ T6495] lowmem_reserve[]: 0 0 0 0 0 [ 107.728796][ T6495] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.758716][ T6495] lowmem_reserve[]: 0 0 0 0 0 [ 107.764091][ T6495] Node 1 Normal free:3887460kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19104kB local_pcp:11232kB free_cma:0kB [ 107.798128][ T6495] lowmem_reserve[]: 0 0 0 0 0 [ 107.803077][ T6495] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.816247][ T6495] Node 0 DMA32: 97*4kB (UM) 333*8kB (UM) 94*16kB (UM) 77*32kB (UME) 14*64kB (UE) 5*128kB (M) 4*256kB (UM) 5*512kB (UME) 1*1024kB (M) 3*2048kB (ME) 346*4096kB (UM) = 1436524kB [ 107.834002][ T6495] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.845978][ T6495] Node 1 Normal: 217*4kB (UE) 64*8kB (UME) 38*16kB (UME) 61*32kB (UME) 30*64kB (UME) 7*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887460kB [ 107.864166][ T6495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.873807][ T6495] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.884564][ T6495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.894408][ T6495] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.903776][ T6495] 43600 total pagecache pages [ 107.908491][ T6495] 0 pages in swap cache [ 107.912665][ T6495] Free swap = 124996kB [ 107.926579][ T6495] Total swap = 124996kB [ 107.930882][ T6495] 2097051 pages RAM [ 107.954137][ T6495] 0 pages HighMem/MovableOnly [ 107.958867][ T6495] 424119 pages reserved [ 107.982998][ T6495] 0 pages cma reserved [ 108.233348][ T6520] syzkaller0: entered promiscuous mode [ 108.265770][ T6520] syzkaller0: entered allmulticast mode [ 108.293722][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 108.347287][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 108.396175][ T6520] tipc: Enabled bearer , priority 10 [ 108.479000][ T6518] tipc: Resetting bearer [ 108.562673][ T6543] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 108.578916][ T6518] tipc: Disabling bearer [ 109.329276][ T6557] tipc: Enabled bearer , priority 0 [ 109.534034][ T6557] syzkaller0: entered promiscuous mode [ 109.539643][ T6557] syzkaller0: entered allmulticast mode [ 109.546263][ T6557] tipc: Resetting bearer [ 109.635076][ T6556] tipc: Resetting bearer [ 110.746840][ T6556] tipc: Disabling bearer [ 110.801146][ T6564] tipc: Enabling of bearer rejected, failed to enable media [ 110.868375][ T5894] tipc: Node number set to 943963854 [ 111.415309][ T6611] __nla_validate_parse: 2 callbacks suppressed [ 111.415327][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 112.133722][ T6652] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 112.201352][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 112.217954][ T6656] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 112.569930][ T6672] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 112.657565][ T6679] netlink: 'syz.0.206': attribute type 21 has an invalid length. [ 112.671008][ T6679] netlink: 'syz.0.206': attribute type 22 has an invalid length. [ 112.680057][ T6679] netlink: 'syz.0.206': attribute type 23 has an invalid length. [ 112.688359][ T6679] netlink: 'syz.0.206': attribute type 25 has an invalid length. [ 112.700615][ T6679] netlink: 'syz.0.206': attribute type 26 has an invalid length. [ 112.702659][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 112.712695][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 112.719686][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 113.221104][ T6702] No such timeout policy "syz0" [ 113.589285][ T6717] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 114.031694][ T6717] veth1_macvtap: left promiscuous mode [ 114.203947][ T6737] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 114.327975][ T6737] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.607199][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 114.728476][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 114.824421][ T6768] netlink: 64 bytes leftover after parsing attributes in process `syz.3.233'. [ 114.911574][ T6768] nbd: couldn't find a device at index 0 [ 115.014540][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 115.150970][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 115.177087][ T6788] vlan2: entered promiscuous mode [ 115.190116][ T6788] erspan0: entered promiscuous mode [ 115.233110][ T5894] IPVS: starting estimator thread 0... [ 115.323006][ T6795] IPVS: using max 25 ests per chain, 60000 per kthread [ 115.762546][ T6818] netlink: 'syz.4.248': attribute type 13 has an invalid length. [ 115.931810][ T2952] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.958637][ T2952] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.988482][ T2952] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.016723][ T2952] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.474906][ T6848] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 116.696623][ T6869] __nla_validate_parse: 4 callbacks suppressed [ 116.696644][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 116.864556][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 116.878943][ T6876] 8021q: VLANs not supported on ip6tnl0 [ 117.042229][ T6885] xt_hashlimit: size too large, truncated to 1048576 [ 117.164327][ T6896] trusted_key: syz.4.266 sent an empty control message without MSG_MORE. [ 117.568462][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 117.722505][ T6923] netlink: 'syz.4.272': attribute type 15 has an invalid length. [ 117.847727][ T6931] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 118.128156][ T6942] syzkaller0: entered promiscuous mode [ 118.171033][ T6942] syzkaller0: entered allmulticast mode [ 119.131534][ T6976] netlink: 'syz.1.290': attribute type 7 has an invalid length. [ 119.320689][ T6985] Cannot find add_set index 0 as target [ 119.490586][ T6990] netlink: 112 bytes leftover after parsing attributes in process `syz.1.293'. [ 119.583511][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 119.653885][ T1210] IPVS: starting estimator thread 0... [ 119.754667][ T7000] IPVS: using max 26 ests per chain, 62400 per kthread [ 119.897100][ T7013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.001121][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 120.013850][ T7018] netlink: 'syz.0.303': attribute type 23 has an invalid length. [ 120.184016][ T7023] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 120.995789][ T7044] netlink: 'syz.0.313': attribute type 21 has an invalid length. [ 121.019821][ T7044] netlink: 156 bytes leftover after parsing attributes in process `syz.0.313'. [ 121.098103][ T7050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.392773][ T7070] netlink: 'syz.2.320': attribute type 10 has an invalid length. [ 121.405551][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 121.417617][ T7070] batadv0: entered promiscuous mode [ 121.426106][ T7070] batadv0: entered allmulticast mode [ 121.437875][ T7070] bridge0: port 3(batadv0) entered blocking state [ 121.462238][ T7070] bridge0: port 3(batadv0) entered disabled state [ 121.512081][ T7070] bridge0: port 3(batadv0) entered blocking state [ 121.518798][ T7070] bridge0: port 3(batadv0) entered forwarding state [ 121.521577][ T7078] netlink: 104 bytes leftover after parsing attributes in process `syz.3.321'. [ 121.863254][ T63] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 121.873240][ T63] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 122.688750][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 122.717558][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 122.899968][ T7102] tipc: Enabling of bearer rejected, failed to enable media [ 122.912480][ T7107] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.330'. [ 122.937012][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 123.366635][ T7129] pim6reg: entered allmulticast mode [ 123.883749][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 124.140719][ T7172] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 124.686681][ T7181] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 124.699658][ T7183] netlink: 108 bytes leftover after parsing attributes in process `syz.4.345'. [ 124.719201][ T7183] netlink: 'syz.4.345': attribute type 3 has an invalid length. [ 125.026466][ T7197] netlink: 48 bytes leftover after parsing attributes in process `syz.3.351'. [ 125.112249][ T7200] netlink: 14 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.780379][ T7200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.790772][ T7200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.853806][ T7200] bond0 (unregistering): Released all slaves [ 125.885486][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.352'. [ 126.100937][ T7222] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 126.675155][ T7240] syzkaller0: entered promiscuous mode [ 126.680868][ T7240] syzkaller0: entered allmulticast mode [ 126.815926][ T7254] netlink: 'syz.0.370': attribute type 27 has an invalid length. [ 126.824095][ T7254] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 126.834361][ T7254] netlink: 144 bytes leftover after parsing attributes in process `syz.0.370'. [ 128.891049][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 128.986667][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 129.017309][ T7286] syzkaller0: entered promiscuous mode [ 129.022845][ T7286] syzkaller0: entered allmulticast mode [ 129.053565][ T7285] macsec1: entered promiscuous mode [ 129.061053][ T7285] macsec1: entered allmulticast mode [ 129.067814][ T7285] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 129.090683][ T7279] bpq0: entered promiscuous mode [ 129.169190][ T7284] syzkaller0: entered promiscuous mode [ 129.223496][ T7284] syzkaller0: entered allmulticast mode [ 129.329094][ T7284] tipc: Started in network mode [ 129.334874][ T7284] tipc: Node identity b6474dcea24a, cluster identity 4711 [ 129.347463][ T7284] tipc: Enabled bearer , priority 10 [ 129.381287][ T7300] netlink: 'syz.0.386': attribute type 3 has an invalid length. [ 129.401816][ T7300] netlink: 666 bytes leftover after parsing attributes in process `syz.0.386'. [ 129.443108][ T7281] tipc: Resetting bearer [ 129.558635][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.387'. [ 130.169507][ T7281] tipc: Disabling bearer [ 130.624162][ T7325] netlink: 96 bytes leftover after parsing attributes in process `syz.0.391'. [ 130.734084][ T7330] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.816866][ T7336] syzkaller0: entered promiscuous mode [ 130.831292][ T7336] syzkaller0: entered allmulticast mode [ 131.142634][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 131.234773][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 131.394205][ T7367] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 131.596638][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 132.481064][ T7384] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.695847][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.411'. [ 132.737353][ T7404] netlink: 232 bytes leftover after parsing attributes in process `syz.1.414'. [ 132.863498][ T7403] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 132.908217][ T7403] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 132.918575][ T7403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.987036][ T7414] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 133.014640][ T7414] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 133.054382][ T7414] batadv0: entered promiscuous mode [ 133.060732][ T7414] batadv0: entered allmulticast mode [ 133.070063][ T7414] bridge0: port 3(batadv0) entered blocking state [ 133.103737][ T7414] bridge0: port 3(batadv0) entered disabled state [ 133.660458][ T2936] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 133.670165][ T2936] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 134.033377][ T7452] gre2: entered promiscuous mode [ 134.038392][ T7452] gre2: entered allmulticast mode [ 134.081739][ T7455] __nla_validate_parse: 6 callbacks suppressed [ 134.081758][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 134.093711][ T7456] pim6reg: entered allmulticast mode [ 134.141103][ T7452] pim6reg: left allmulticast mode [ 134.353898][ T7464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.610004][ T7472] bond0: Removing last arp target with arp_interval on [ 134.777685][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 134.825604][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 135.047944][ T7499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.443'. [ 135.251784][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.446'. [ 135.251967][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.446'. [ 135.302632][ T7508] netlink: 5 bytes leftover after parsing attributes in process `syz.4.447'. [ 135.322177][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 135.364968][ T7511] syzkaller0: entered promiscuous mode [ 135.370528][ T7511] syzkaller0: entered allmulticast mode [ 135.379913][ T7516] tap0: tun_chr_ioctl cmd 1074025676 [ 135.393154][ T7516] tap0: owner set to 0 [ 135.471978][ T7511] tipc: Enabled bearer , priority 0 [ 135.513468][ T7509] tipc: Resetting bearer [ 135.532576][ T7522] sctp: [Deprecated]: syz.2.451 (pid 7522) Use of int in max_burst socket option. [ 135.532576][ T7522] Use struct sctp_assoc_value instead [ 135.549306][ T7509] tipc: Disabling bearer [ 136.088568][ T7558] veth0: entered promiscuous mode [ 136.126647][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 136.251271][ T7558] veth0 (unregistering): left promiscuous mode [ 136.586805][ T7582] syzkaller0: entered promiscuous mode [ 136.592348][ T7582] syzkaller0: entered allmulticast mode [ 136.600700][ T7584] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 136.619459][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.464'. [ 136.698274][ T7584] geneve0: entered promiscuous mode [ 136.718312][ T7584] geneve0: entered allmulticast mode [ 136.730188][ T7584] team0: Port device geneve0 added [ 136.740543][ T7582] tipc: Enabled bearer , priority 0 [ 136.783680][ T7581] tipc: Resetting bearer [ 136.940330][ T7581] tipc: Disabling bearer [ 137.071484][ T7611] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 137.226811][ T7614] bond2: (slave bridge0): making interface the new active one [ 137.235988][ T7614] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 137.968898][ T7647] syzkaller0: entered promiscuous mode [ 137.992236][ T7647] syzkaller0: entered allmulticast mode [ 138.032101][ T7647] tipc: Enabled bearer , priority 0 [ 138.065023][ T7645] tipc: Resetting bearer [ 138.140467][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.147921][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.178205][ T7657] x_tables: unsorted underflow at hook 3 [ 138.195861][ T7658] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.205186][ T7645] tipc: Disabling bearer [ 138.211545][ T7658] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.236318][ T7658] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 138.495508][ T7660] xt_CT: No such helper "syz1" [ 138.534098][ T7665] xt_CT: No such helper "syz1" [ 138.990324][ T7690] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 139.369913][ T7706] syzkaller0: entered promiscuous mode [ 139.400529][ T7706] syzkaller0: entered allmulticast mode [ 139.491750][ T7710] veth0: entered promiscuous mode [ 139.507903][ T7713] bridge_slave_1: entered promiscuous mode [ 139.535653][ T7709] veth0: left promiscuous mode [ 139.541823][ T7706] tipc: Enabled bearer , priority 0 [ 139.574252][ T7705] tipc: Resetting bearer [ 139.679191][ T7719] __nla_validate_parse: 6 callbacks suppressed [ 139.679210][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 139.703919][ T7705] tipc: Disabling bearer [ 139.800256][ T7724] netlink: 'syz.1.508': attribute type 26 has an invalid length. [ 139.843637][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.509'. [ 139.869285][ T7734] bpq0: left promiscuous mode [ 139.977642][ T7739] batman_adv: batadv0: Adding interface: dummy0 [ 139.984803][ T7739] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.011093][ T7739] batman_adv: batadv0: Interface activated: dummy0 [ 140.122213][ T7743] batadv0: mtu less than device minimum [ 140.149453][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.161710][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.173712][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.185719][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.197713][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.209689][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.221663][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.233694][ T7743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.741475][ T7775] syzkaller0: entered promiscuous mode [ 140.760888][ T7775] syzkaller0: entered allmulticast mode [ 140.838930][ T7784] netlink: 96 bytes leftover after parsing attributes in process `syz.3.522'. [ 140.861615][ T7775] tipc: Started in network mode [ 140.878491][ T7775] tipc: Node identity 76b8eade5bcd, cluster identity 4711 [ 140.907568][ T7775] tipc: Enabled bearer , priority 0 [ 140.965880][ T7774] tipc: Resetting bearer [ 141.018600][ T7795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.524'. [ 141.078744][ T7774] tipc: Disabling bearer [ 141.310401][ T7805] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 142.017877][ T7847] syzkaller0: entered promiscuous mode [ 142.051789][ T7847] syzkaller0: entered allmulticast mode [ 142.106741][ T7847] tipc: Enabled bearer , priority 0 [ 142.116180][ T7846] tipc: Resetting bearer [ 142.278195][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 142.348935][ T7846] tipc: Disabling bearer [ 142.616077][ T7869] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.625681][ T7869] syzkaller0: entered promiscuous mode [ 142.631201][ T7869] syzkaller0: entered allmulticast mode [ 142.652086][ T7869] netlink: 'syz.0.546': attribute type 11 has an invalid length. [ 142.727608][ T7878] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 142.797514][ T7878] bond0: (slave veth3): Enslaving as an active interface with a down link [ 142.811896][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 142.864323][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 142.946794][ T7885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.552'. [ 143.297469][ T7897] IPv6: sit1: Disabled Multicast RS [ 143.319335][ T7897] sit1: entered allmulticast mode [ 143.534488][ T7902] syzkaller0: entered promiscuous mode [ 143.540021][ T7902] syzkaller0: entered allmulticast mode [ 143.574985][ T7902] tipc: Enabled bearer , priority 0 [ 143.584810][ T7901] tipc: Resetting bearer [ 143.649183][ T7901] tipc: Disabling bearer [ 143.724769][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'. [ 143.753156][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'. [ 144.002691][ T7925] bridge0: port 3(batadv0) entered disabled state [ 144.427316][ T7925] bridge_slave_1: left allmulticast mode [ 144.443382][ T7925] bridge_slave_1: left promiscuous mode [ 144.457235][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.486966][ T7925] bridge_slave_0: left allmulticast mode [ 144.508225][ T7925] bridge_slave_0: left promiscuous mode [ 144.539248][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.818622][ T7944] __nla_validate_parse: 2 callbacks suppressed [ 144.818639][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 144.853685][ T7943] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 144.996507][ T7954] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 145.159493][ T7965] ip6t_REJECT: ECHOREPLY is not supported [ 146.485651][ T8012] IPVS: ip_vs_add_dest(): server weight less than zero [ 146.495531][ T1210] IPVS: starting estimator thread 0... [ 146.593250][ T8014] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.689719][ T8017] syzkaller0: entered promiscuous mode [ 146.696636][ T8017] syzkaller0: entered allmulticast mode [ 147.802304][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 147.847456][ T8028] macvtap1: entered allmulticast mode [ 147.853101][ T8028] veth0_macvtap: entered allmulticast mode [ 147.887257][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 147.904027][ T8048] netlink: 'syz.2.590': attribute type 10 has an invalid length. [ 148.163395][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 148.381390][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.599'. [ 149.179610][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 149.190282][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 149.201375][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 149.799160][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 149.976200][ T8124] netlink: 'syz.1.612': attribute type 8 has an invalid length. [ 150.093522][ T1210] vxcan1 speed is unknown, defaulting to 1000 [ 150.099924][ T8098] infiniband syz2: set active [ 150.115070][ T8098] infiniband syz2: added vxcan1 [ 150.122248][ T8098] syz2: rxe_create_cq: returned err = -12 [ 150.161346][ T8098] infiniband syz2: Couldn't create ib_mad CQ [ 150.169552][ T8098] infiniband syz2: Couldn't open port 1 [ 150.243785][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.616'. [ 150.270072][ T8134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.616'. [ 150.287345][ T8098] RDS/IB: syz2: added [ 150.303516][ T8133] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 150.304552][ T8098] smc: adding ib device syz2 with port count 1 [ 150.325096][ T8098] smc: ib device syz2 port 1 has no pnetid [ 150.742308][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 150.812781][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 151.087538][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 151.124985][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 151.153284][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 151.174816][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 151.186372][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 151.201872][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 151.391814][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 151.439730][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 151.778568][ T8184] bridge0: port 3(batadv0) entered blocking state [ 151.785338][ T8184] bridge0: port 3(batadv0) entered forwarding state [ 151.815289][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.878500][ T8184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 152.210988][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 152.588500][ T8211] syz.2.640 (8211) used greatest stack depth: 17832 bytes left [ 152.723637][ T8222] syzkaller0: entered promiscuous mode [ 152.735861][ T8222] syzkaller0: entered allmulticast mode [ 152.979402][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 154.657131][ T8098] vxcan1 speed is unknown, defaulting to 1000 [ 154.871551][ T8277] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 155.046698][ T8277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.209918][ T8277] bond1: (slave geneve2): making interface the new active one [ 155.234283][ T8277] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 155.959433][ T8329] netlink: 'syz.4.669': attribute type 29 has an invalid length. [ 156.152763][ T8338] __nla_validate_parse: 2 callbacks suppressed [ 156.152782][ T8338] netlink: 76 bytes leftover after parsing attributes in process `syz.3.672'. [ 156.180861][ T8338] net_ratelimit: 11 callbacks suppressed [ 156.180881][ T8338] 0: reclassify loop, rule prio 0, protocol 800 [ 157.153557][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'. [ 157.346880][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 157.476692][ T8390] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 157.640042][ T8409] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 157.781591][ T8409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.808144][ T8415] netlink: 'syz.1.688': attribute type 12 has an invalid length. [ 157.817653][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 157.849051][ T8407] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 157.870740][ T8409] macvlan3: entered promiscuous mode [ 157.877806][ T8409] macvlan3: entered allmulticast mode [ 157.884257][ T8409] bond3: entered allmulticast mode [ 157.889582][ T8409] bond3: entered promiscuous mode [ 157.897943][ T8409] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 157.907292][ T8415] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 157.921288][ T8409] team0: Port device macvlan3 added [ 157.929268][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 157.939008][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 158.306274][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.697'. [ 158.385408][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.699'. [ 158.411005][ T8436] Cannot find del_set index 0 as target [ 158.434664][ T8455] netlink: 92 bytes leftover after parsing attributes in process `syz.4.699'. [ 158.455454][ T8443] IPVS: persistence engine module ip_vs_pe_À not found [ 158.837965][ T8474] syzkaller1: entered allmulticast mode [ 158.991890][ T8481] tc_dump_action: action bad kind [ 159.000770][ T8481] syzkaller0: entered promiscuous mode [ 159.006858][ T8481] syzkaller0: entered allmulticast mode [ 159.486819][ T8500] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 159.669255][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 159.808359][ T8506] syzkaller1: entered promiscuous mode [ 159.860392][ T8506] syzkaller1: entered allmulticast mode [ 159.891620][ T8506] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 160.073425][ T8518] hsr_slave_0: left promiscuous mode [ 160.326299][ T8518] hsr_slave_1: left promiscuous mode [ 160.534834][ T8433] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 160.542610][ T8433] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 160.555344][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.742332][ T8543] tap0: tun_chr_ioctl cmd 2148553947 [ 161.090204][ T8433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.106802][ T8564] netlink: 'syz.1.718': attribute type 29 has an invalid length. [ 161.117681][ T8433] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 161.156274][ T8433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.167966][ T8433] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 161.233671][ T8433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.254737][ T8433] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 161.308687][ T8433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.402358][ T8433] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 161.574744][ T8558] infiniband !yz!: set active [ 161.593881][ T8558] infiniband !yz!: added team_slave_0 [ 161.778718][ T8558] RDS/IB: !yz!: added [ 161.784722][ T8558] smc: adding ib device !yz! with port count 1 [ 161.791813][ T8558] smc: ib device !yz! port 1 has no pnetid [ 161.800772][ T8586] syzkaller0: entered promiscuous mode [ 161.819093][ T8586] syzkaller0: entered allmulticast mode [ 162.139205][ T8605] __nla_validate_parse: 2 callbacks suppressed [ 162.139234][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 162.160321][ T8599] netlink: 165 bytes leftover after parsing attributes in process `syz.4.726'. [ 162.316045][ T8609] x_tables: duplicate underflow at hook 1 [ 163.770617][ T8655] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 163.793547][ T8655] netlink: 'syz.3.731': attribute type 4 has an invalid length. [ 163.813364][ T8655] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.731'. [ 163.819379][ T8601] infiniband syû: set active [ 163.848682][ T8601] infiniband syû: added bond_slave_0 [ 163.866776][ T8601] syû: rxe_create_cq: returned err = -12 [ 163.872524][ T8601] infiniband syû: Couldn't create ib_mad CQ [ 163.888639][ T8601] infiniband syû: Couldn't open port 1 [ 163.970133][ T8601] RDS/IB: syû: added [ 163.979135][ T8601] smc: adding ib device syû with port count 1 [ 163.993611][ T8601] smc: ib device syû port 1 has no pnetid [ 164.028026][ T8665] netlink: 9044 bytes leftover after parsing attributes in process `syz.3.734'. [ 164.051247][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 164.295493][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 164.561402][ T8686] IPVS: length: 239 != 24 [ 165.551142][ T8712] vxcan1 speed is unknown, defaulting to 1000 [ 166.099541][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.743'. [ 166.574170][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 166.728877][ T8738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.435785][ T8745] openvswitch: netlink: Duplicate key (type 1). [ 167.473437][ T8745] v: renamed from vlan0 (while UP) [ 167.481083][ T8745] veth0_vlan: left promiscuous mode [ 167.555366][ T8748] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 167.576207][ T8748] x_tables: duplicate underflow at hook 4 [ 199.579960][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.586555][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.016908][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.023641][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.093689][ T31] INFO: task kworker/0:2:1210 blocked for more than 143 seconds. [ 307.101501][ T31] Not tainted syzkaller #0 [ 307.107883][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.116727][ T31] task:kworker/0:2 state:D stack:24648 pid:1210 tgid:1210 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 307.129179][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 307.136123][ T31] Call Trace: [ 307.139422][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.142359][ T31] __schedule+0x1798/0x4cc0 [ 307.148013][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.154196][ T31] ? __pfx___schedule+0x10/0x10 [ 307.159133][ T31] ? schedule+0x91/0x360 [ 307.165045][ T31] schedule+0x165/0x360 [ 307.169270][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.180272][ T31] __mutex_lock+0x7e6/0x1350 [ 307.202949][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.207808][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 307.231896][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.237580][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 307.245100][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 307.251277][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 307.259369][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 307.265487][ T31] process_scheduled_works+0xae1/0x17b0 [ 307.271371][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.278134][ T31] worker_thread+0x8a0/0xda0 [ 307.282832][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.289210][ T31] ? __kthread_parkme+0x7b/0x200 [ 307.294267][ T31] kthread+0x711/0x8a0 [ 307.298372][ T31] ? __pfx_worker_thread+0x10/0x10 [ 307.303643][ T31] ? __pfx_kthread+0x10/0x10 [ 307.308281][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.313719][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.318958][ T31] ? __pfx_kthread+0x10/0x10 [ 307.323612][ T31] ret_from_fork+0x4bc/0x870 [ 307.328227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.333516][ T31] ? __switch_to_asm+0x39/0x70 [ 307.338428][ T31] ? __switch_to_asm+0x33/0x70 [ 307.343304][ T31] ? __pfx_kthread+0x10/0x10 [ 307.347936][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.352730][ T31] [ 307.356115][ T31] INFO: task syz.2.693:8428 blocked for more than 143 seconds. [ 307.363841][ T31] Not tainted syzkaller #0 [ 307.368800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.379866][ T31] task:syz.2.693 state:D stack:25608 pid:8428 tgid:8428 ppid:5841 task_flags:0x400040 flags:0x00080003 [ 307.391920][ T31] Call Trace: [ 307.395325][ T31] [ 307.398278][ T31] __schedule+0x1798/0x4cc0 [ 307.402869][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.407750][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.412602][ T31] ? __pfx___schedule+0x10/0x10 [ 307.418088][ T31] ? schedule+0x91/0x360 [ 307.422360][ T31] schedule+0x165/0x360 [ 307.426624][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.432133][ T31] __mutex_lock+0x7e6/0x1350 [ 307.436915][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.441823][ T31] ? rfkill_unregister+0xc8/0x220 [ 307.446945][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.452082][ T31] ? __pfx_device_del+0x10/0x10 [ 307.457096][ T31] rfkill_unregister+0xc8/0x220 [ 307.462096][ T31] nfc_unregister_device+0x96/0x2a0 [ 307.467412][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 307.473280][ T31] virtual_ncidev_close+0x56/0x90 [ 307.478343][ T31] __fput+0x44c/0xa70 [ 307.482402][ T31] task_work_run+0x1d4/0x260 [ 307.487105][ T31] ? __pfx_task_work_run+0x10/0x10 [ 307.492272][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 307.497868][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 307.503268][ T31] do_syscall_64+0x2bd/0xfa0 [ 307.507891][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.514078][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.520275][ T31] ? clear_bhb_loop+0x60/0xb0 [ 307.525057][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.530995][ T31] RIP: 0033:0x7f9da0d8f6c9 [ 307.535481][ T31] RSP: 002b:00007ffd32471f58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 307.543994][ T31] RAX: 0000000000000000 RBX: 00007f9da0fe7da0 RCX: 00007f9da0d8f6c9 [ 307.551991][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 307.560103][ T31] RBP: 00007f9da0fe7da0 R08: 000000000000024c R09: 0000001e3247224f [ 307.568184][ T31] R10: 00007f9da0fe7cb0 R11: 0000000000000246 R12: 0000000000026c92 [ 307.576261][ T31] R13: 00007f9da0fe6090 R14: ffffffffffffffff R15: 00007ffd32472070 [ 307.584323][ T31] [ 307.587385][ T31] INFO: task syz.2.693:8433 blocked for more than 143 seconds. [ 307.595106][ T31] Not tainted syzkaller #0 [ 307.600062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.608790][ T31] task:syz.2.693 state:D stack:24248 pid:8433 tgid:8428 ppid:5841 task_flags:0x400140 flags:0x00080003 [ 307.621089][ T31] Call Trace: [ 307.624425][ T31] [ 307.627368][ T31] __schedule+0x1798/0x4cc0 [ 307.632327][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.637298][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.642183][ T31] ? __pfx___schedule+0x10/0x10 [ 307.647131][ T31] ? schedule+0x91/0x360 [ 307.651407][ T31] schedule+0x165/0x360 [ 307.655798][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.661304][ T31] __mutex_lock+0x7e6/0x1350 [ 307.666089][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.670899][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 307.676326][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.681402][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.686713][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 307.692652][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.699078][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 307.704878][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 307.710037][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 307.715922][ T31] rfkill_set_block+0x1d2/0x440 [ 307.720848][ T31] rfkill_fop_write+0x44b/0x570 [ 307.725802][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 307.731240][ T31] ? security_kernfs_init_security+0x250/0x290 [ 307.739357][ T31] ? rw_verify_area+0x255/0x4d0 [ 307.744837][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.749722][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 307.755272][ T31] vfs_write+0x27e/0xb30 [ 307.759619][ T31] ? __pfx_vfs_write+0x10/0x10 [ 307.764477][ T31] ? __fget_files+0x2a/0x420 [ 307.769094][ T31] ? __fget_files+0x2a/0x420 [ 307.773839][ T31] ? __fget_files+0x3a0/0x420 [ 307.778867][ T31] ? __fget_files+0x2a/0x420 [ 307.783577][ T31] ksys_write+0x145/0x250 [ 307.787951][ T31] ? __pfx_ksys_write+0x10/0x10 [ 307.792984][ T31] ? do_syscall_64+0xbe/0xfa0 [ 307.797815][ T31] do_syscall_64+0xfa/0xfa0 [ 307.802351][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.807656][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.813842][ T31] ? clear_bhb_loop+0x60/0xb0 [ 307.818572][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.824746][ T31] RIP: 0033:0x7f9da0d8f6c9 [ 307.829203][ T31] RSP: 002b:00007f9d9eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.837796][ T31] RAX: ffffffffffffffda RBX: 00007f9da0fe5fa0 RCX: 00007f9da0d8f6c9 [ 307.845884][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 307.854020][ T31] RBP: 00007f9da0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 307.862022][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.870133][ T31] R13: 00007f9da0fe6038 R14: 00007f9da0fe5fa0 R15: 00007ffd32471df8 [ 307.878208][ T31] [ 307.881258][ T31] INFO: task syz.0.697:8437 blocked for more than 144 seconds. [ 307.889023][ T31] Not tainted syzkaller #0 [ 307.894016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.902719][ T31] task:syz.0.697 state:D stack:25960 pid:8437 tgid:8437 ppid:5843 task_flags:0x400040 flags:0x00080003 [ 307.914866][ T31] Call Trace: [ 307.918194][ T31] [ 307.921228][ T31] __schedule+0x1798/0x4cc0 [ 307.925923][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.930821][ T31] ? __lock_acquire+0xab9/0xd20 [ 307.935743][ T31] ? __pfx___schedule+0x10/0x10 [ 307.940654][ T31] ? schedule+0x91/0x360 [ 307.945023][ T31] schedule+0x165/0x360 [ 307.949237][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.954776][ T31] __mutex_lock+0x7e6/0x1350 [ 307.959415][ T31] ? __mutex_lock+0x5bb/0x1350 [ 307.964365][ T31] ? rfkill_unregister+0xc8/0x220 [ 307.969459][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.974744][ T31] ? __pfx_device_del+0x10/0x10 [ 307.979632][ T31] rfkill_unregister+0xc8/0x220 [ 307.984564][ T31] nfc_unregister_device+0x96/0x2a0 [ 307.989787][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 307.995609][ T31] virtual_ncidev_close+0x56/0x90 [ 308.000681][ T31] __fput+0x44c/0xa70 [ 308.004768][ T31] task_work_run+0x1d4/0x260 [ 308.009405][ T31] ? __pfx_task_work_run+0x10/0x10 [ 308.014688][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 308.020186][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 308.025566][ T31] do_syscall_64+0x2bd/0xfa0 [ 308.030194][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.035488][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.041590][ T31] ? clear_bhb_loop+0x60/0xb0 [ 308.046333][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.052255][ T31] RIP: 0033:0x7efe0ff8f6c9 [ 308.057210][ T31] RSP: 002b:00007ffd16bf0178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 308.065713][ T31] RAX: 0000000000000000 RBX: 00007efe101e7da0 RCX: 00007efe0ff8f6c9 [ 308.073769][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 308.081774][ T31] RBP: 00007efe101e7da0 R08: 0000000000000208 R09: 0000001e16bf046f [ 308.089824][ T31] R10: 00000000003ffbd4 R11: 0000000000000246 R12: 0000000000026cfd [ 308.097851][ T31] R13: 00007ffd16bf0270 R14: ffffffffffffffff R15: 00007ffd16bf0290 [ 308.105923][ T31] [ 308.109005][ T31] [ 308.109005][ T31] Showing all locks held in the system: [ 308.116786][ T31] 1 lock held by khungtaskd/31: [ 308.121735][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 308.131664][ T31] 3 locks held by kworker/0:2/1210: [ 308.136906][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.147966][ T31] #1: ffffc900042afba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.161536][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 308.172974][ T31] 1 lock held by klogd/5192: [ 308.177596][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 308.187600][ T31] 2 locks held by getty/5593: [ 308.192288][ T31] #0: ffff88814e3a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 308.202288][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 308.212550][ T31] 2 locks held by syz.2.693/8428: [ 308.217812][ T31] #0: ffff888056818100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 308.227680][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 308.239034][ T31] 2 locks held by syz.2.693/8433: [ 308.244445][ T31] #0: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 308.254942][ T31] #1: ffff88807c064100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 308.264847][ T31] 2 locks held by syz.0.697/8437: [ 308.269892][ T31] #0: ffff88807c064100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 308.279696][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 308.289962][ T31] 3 locks held by syz.4.733/8666: [ 308.296130][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.304665][ T31] #1: ffff888054cb0100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 308.314325][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 308.324338][ T31] 1 lock held by syz.1.739/8699: [ 308.329275][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.337792][ T31] 1 lock held by syz.3.757/8753: [ 308.342751][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.351305][ T31] 1 lock held by syz-executor/8758: [ 308.356602][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.365265][ T31] 1 lock held by syz-executor/8759: [ 308.370494][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.379233][ T31] 1 lock held by syz-executor/8761: [ 308.384493][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.393123][ T31] 1 lock held by syz-executor/8763: [ 308.398358][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.406905][ T31] 1 lock held by syz-executor/8765: [ 308.412217][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.420861][ T31] 1 lock held by syz-executor/8772: [ 308.426104][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.434610][ T31] 1 lock held by syz-executor/8773: [ 308.439831][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.448398][ T31] 1 lock held by syz-executor/8775: [ 308.454007][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.462698][ T31] 1 lock held by syz-executor/8777: [ 308.467984][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.476570][ T31] 1 lock held by syz-executor/8779: [ 308.481795][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.490514][ T31] 1 lock held by syz-executor/8786: [ 308.495877][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.504457][ T31] 1 lock held by syz-executor/8787: [ 308.509683][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.518190][ T31] 1 lock held by syz-executor/8789: [ 308.523447][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.531963][ T31] 1 lock held by syz-executor/8791: [ 308.537261][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.545853][ T31] 1 lock held by syz-executor/8793: [ 308.551064][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 308.559620][ T31] [ 308.561965][ T31] ============================================= [ 308.561965][ T31] [ 308.570466][ T31] NMI backtrace for cpu 0 [ 308.570486][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 308.570506][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.570518][ T31] Call Trace: [ 308.570526][ T31] [ 308.570534][ T31] dump_stack_lvl+0x189/0x250 [ 308.570569][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.570596][ T31] ? __pfx__printk+0x10/0x10 [ 308.570628][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 308.570655][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 308.570681][ T31] ? __pfx__printk+0x10/0x10 [ 308.570706][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.570743][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 308.570770][ T31] watchdog+0xf60/0xfa0 [ 308.570796][ T31] ? watchdog+0x1e2/0xfa0 [ 308.570823][ T31] kthread+0x711/0x8a0 [ 308.570856][ T31] ? __pfx_watchdog+0x10/0x10 [ 308.570876][ T31] ? __pfx_kthread+0x10/0x10 [ 308.570906][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.570933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.570960][ T31] ? __pfx_kthread+0x10/0x10 [ 308.570989][ T31] ret_from_fork+0x4bc/0x870 [ 308.571013][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 308.571043][ T31] ? __switch_to_asm+0x39/0x70 [ 308.571059][ T31] ? __switch_to_asm+0x33/0x70 [ 308.571075][ T31] ? __pfx_kthread+0x10/0x10 [ 308.571104][ T31] ret_from_fork_asm+0x1a/0x30 [ 308.571138][ T31] [ 308.571146][ T31] Sending NMI from CPU 0 to CPUs 1: [ 308.717175][ C1] NMI backtrace for cpu 1 [ 308.717206][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 308.717225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.717235][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 308.717265][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 308.717279][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 308.717295][ C1] RAX: a19c72bf65c8d100 RBX: ffffffff81967b47 RCX: a19c72bf65c8d100 [ 308.717308][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 308.717319][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 308.717332][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce870 [ 308.717345][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003950b58 [ 308.717356][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 308.717369][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.717380][ C1] CR2: 0000555c6a8a6000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 308.717395][ C1] Call Trace: [ 308.717403][ C1] [ 308.717409][ C1] default_idle+0x13/0x20 [ 308.717433][ C1] default_idle_call+0x73/0xb0 [ 308.717450][ C1] do_idle+0x1e7/0x510 [ 308.717469][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 308.717487][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.717511][ C1] ? __pfx_do_idle+0x10/0x10 [ 308.717534][ C1] ? do_idle+0x4ed/0x510 [ 308.717553][ C1] cpu_startup_entry+0x44/0x60 [ 308.717571][ C1] start_secondary+0x101/0x110 [ 308.717585][ C1] common_startup_64+0x13e/0x147 [ 308.717617][ C1]