last executing test programs: 4m57.422138933s ago: executing program 1 (id=2573): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e25, 0x9, @mcast2, 0x3}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m56.458162485s ago: executing program 1 (id=2580): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e24, @multicast1}, 'macvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newqdisc={0x140, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x1}, {0xffe0, 0xa}, {0x1, 0x10}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x7f, 0x0, 0x3, 0xc, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x7]}}, {{0x1c, 0x1, {0x6, 0x5, 0x4, 0x100, 0x1, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0xe7a]}}, {{0x1c, 0x1, {0xf8, 0x6, 0x6, 0x8674, 0x0, 0x7fffffff, 0x8392, 0x2}}, {0x8, 0x2, [0x1, 0x9d16]}}, {{0x1c, 0x1, {0x8, 0x8, 0x9, 0xcb, 0x0, 0x0, 0x484, 0xa}}, {0x18, 0x2, [0x98c, 0xfb, 0x9, 0x3ff, 0x0, 0xfff8, 0x8, 0x6, 0x9f6, 0x9]}}, {{0x1c, 0x1, {0x78, 0x3b, 0x91, 0x1, 0x2, 0x7, 0xba3, 0x7}}, {0x12, 0x2, [0xd8e5, 0xfff, 0x0, 0x79, 0xd6, 0x5, 0x8]}}, {{0x1c, 0x1, {0x2b, 0xe, 0x9, 0x8, 0x0, 0x6, 0x80000001, 0x4}}, {0xc, 0x2, [0xffc0, 0x5, 0x1, 0xfd85]}}, {{0x1c, 0x1, {0xf7, 0x1, 0x3, 0x1, 0x0, 0x9, 0x3}}, {0x4}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES64, @ANYRES64=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRESHEX=r1], 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x20000085) socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f0ac6bd0000000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18) r4 = accept(0xffffffffffffffff, &(0x7f0000000480)=@phonet, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, 0xffffffffffffffff, 0x0, 0xfffe}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000000000b01000000020000000000000c01000000030000000000000804000000100000000000000b0500000000616161613e5f5f300000000000"], &(0x7f0000001f00)=""/176, 0x52, 0xb0, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000020c0)) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000008c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x2a4, [0x200000000b80, 0x0, 0x0, 0x200000000bb0, 0x200000000cb6], 0x0, &(0x7f0000000040), &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]}, 0x37f) accept(r6, 0x0, 0x0) 4m55.291097981s ago: executing program 1 (id=2591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf2503000000050003000800000005000200060000000500050002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xe}, {0x5, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 4m54.945866921s ago: executing program 1 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x3}, 0x28) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x11, 0x80a, 0x0) bind$inet6(r3, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x0, 0x6, {{0x1a, 0x4, 0x1, 0x3c, 0x68, 0x64, 0x0, 0xfe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010102, {[@cipso={0x86, 0x3f, 0x0, [{0x2, 0xd, "3377a0a77627b70d6d262e"}, {0x7, 0xf, "19ddd6c1c17f87028d2c457ad4"}, {0x1, 0xd, "d8ecc5d043e11f6dd8fa29"}, {0x5, 0x10, "09eefed453ea880f02c9fd4dce15"}]}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x2, [0x2ae6, 0x1, 0x9, 0x4]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x13, 0x300, 0x70bd26, 0x25dfdbfd, {0x27, 0x2, 0x81, 0x1, {0x4e24, 0x4e23, [0x5, 0x2, 0x8, 0xffffffff], [0x6, 0xd, 0x4, 0x400], r4, [0x2, 0x3]}, 0x7, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "e935a85b1ccae862ae50e8a8071eadeefea7789571aea549236a3e81ddf19a33c8c9e006df458912e304bd587fc57af49793b989d4415025673c2793e31f2e270c5846c30333d05277aec3e5d0ba35c0f05c3fa7db6aea26cbf08c23b2890690591706189caf0dba910b1ca3a2fb83652507ef052e019cf326149378dd3ab6cf6163c9dfb40e2363f664adaa6f15cfc24435359e8def9a5190"}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 4m54.706507906s ago: executing program 1 (id=2596): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x39d6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000001000000000000000000013180000000400000000000000070000008510000005000000186400000300000000000000020000009500000000000000503c454ffc53af651d9f48fa94f6e13c02e55e90afaa7ee61f07a93d89ec943d64dc1fa5e93b8d76f0153c8c79a0bf1064ee95058df94d4d70b28b044be58fb0a034b7109d4994f6148ac542858ec8b08dc14ba684f5d29ce66bb33164"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000001000000000000000000013180000000400000000000000070000008510000005000000186400000300000000000000020000009500000000000000503c454ffc53af651d9f48fa94f6e13c02e55e90afaa7ee61f07a93d89ec943d64dc1fa5e93b8d76f0153c8c79a0bf1064ee95058df94d4d70b28b044be58fb0a034b7109d4994f6148ac542858ec8b08dc14ba684f5d29ce66bb33164"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) 4m54.636705122s ago: executing program 1 (id=2598): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async) writev(r3, 0x0, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) (async) shutdown(r3, 0x1) (async, rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000000029040000000000000200000000000000000000000000000002000100000000000000ff0d00000000030005000000000002000000000000000000de7e48dc6f78b860d6e12376747fcfe2442552dddaae32382d0b1bccb8494b52bcfb4da33bd081"], 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x20) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400000000000000b4ce770000000000d16ef45fb7149b455b8b2a536521bc6d1f6d6bc9bbe906f5a0684658f9628ba6f70080000094c65cee3ea0485bb3038702e6c2b27f1568c25bf78cec4a724a0a5bf692bcab1c71f7a4188de49c537d54fd02e7296399a7f9833173a3f2f92547271336e89343008963585833df912c95d5340150312080438a8d5e0f16a5cf4596a590e8769858f685e78f08d62c37113b1135aa3d862b8e78dd67df98b9f4329ebf46e624a0f82c4d5f4237584050db5e6649ffb5b2ad5b9a8a61d03e9d744ac5d33ccab4a989f348b7f01600f00f7ed858f90762a8a623f995b84e2769a8388afb162961249df0668dcb07327b8bc1b62a5f3856210d6f79d28ae09c04b3474f4024e711433d11d7a074a71595d84ab5f7bc6eae24475d352530d4622d40df54cb67ee647bd5b7e95f7a41f9adb15e2b7105228d837cf4c715e53b9d5dca65bb838eb6ae1dc3eb7b22f437cd22218feacb279207f3", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m38.785697584s ago: executing program 32 (id=2598): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async) writev(r3, 0x0, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) (async) shutdown(r3, 0x1) (async, rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000000029040000000000000200000000000000000000000000000002000100000000000000ff0d00000000030005000000000002000000000000000000de7e48dc6f78b860d6e12376747fcfe2442552dddaae32382d0b1bccb8494b52bcfb4da33bd081"], 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x20) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400000000000000b4ce770000000000d16ef45fb7149b455b8b2a536521bc6d1f6d6bc9bbe906f5a0684658f9628ba6f70080000094c65cee3ea0485bb3038702e6c2b27f1568c25bf78cec4a724a0a5bf692bcab1c71f7a4188de49c537d54fd02e7296399a7f9833173a3f2f92547271336e89343008963585833df912c95d5340150312080438a8d5e0f16a5cf4596a590e8769858f685e78f08d62c37113b1135aa3d862b8e78dd67df98b9f4329ebf46e624a0f82c4d5f4237584050db5e6649ffb5b2ad5b9a8a61d03e9d744ac5d33ccab4a989f348b7f01600f00f7ed858f90762a8a623f995b84e2769a8388afb162961249df0668dcb07327b8bc1b62a5f3856210d6f79d28ae09c04b3474f4024e711433d11d7a074a71595d84ab5f7bc6eae24475d352530d4622d40df54cb67ee647bd5b7e95f7a41f9adb15e2b7105228d837cf4c715e53b9d5dca65bb838eb6ae1dc3eb7b22f437cd22218feacb279207f3", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21.222364892s ago: executing program 3 (id=3966): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0000001000000000000000", @ANYRES32, @ANYBLOB="63db64e21ae8001d34a4390f084e92eadee290e3e6458e02a33c615e4354698ee68e622f5f7354369c13b75ddc58d95511f4dc7252521d1f748fcb13fc6339017ad16acc7c736f438af17a45928d597337a623fd162e05259e85fffdf6eaa51b815993ef0db0", @ANYRES64=0x0], 0x20) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="2bc7b0ab6f6e37bd07000000100001800c000700ffffffff0900000008001b0000000000"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 20.933661907s ago: executing program 2 (id=3970): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002300)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES8, @ANYRESOCT=r0, @ANYRES32=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) (async) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) (async) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000028c0b6398d0000000000000000000500010007000000050004000000000009862200020073797acf00000000000000006861736800"/68], 0x44}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x4c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) (rerun: 32) 20.828029969s ago: executing program 2 (id=3971): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010625bd7000fbcbdf250a00000000f3ffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2504000000100001800c0001006574683a9f116f2b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r3, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) 20.542373893s ago: executing program 4 (id=3972): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r4, 0x5450) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000040)={0x7, 'macvlan1\x00', {0x8}, 0x3d6e}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0x5, 0x7fff, 0x6, 0x7, 0x1, 0x1a, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="006169f21900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x4, 0x1}, {0x0, 0xc}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000003, 0x8, 0xe, 0x4, {0xc, 0x2, 0x6, 0x3, 0x8, 0x5}, {0x7, 0x1, 0x0, 0x1ff, 0x4, 0x80}, 0xc8be, 0x857, 0xc}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x921, 0x9, 0x3, 0x10100, 0xffffffffffffffff, 0x2, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r13}, &(0x7f0000000280), &(0x7f00000002c0)='%pK \x00'}, 0x20) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x5, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 20.478518234s ago: executing program 2 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x30000000}) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r3) recvmsg$can_bcm(r2, &(0x7f00000006c0)={&(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/111, 0x6f}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000000280)=""/42, 0x2a}], 0x7}, 0x40000100) shutdown(r2, 0x0) close(r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r7 = syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/user\x00') unshare(0x6a040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRESOCT=r7], 0x40}}, 0x0) 19.927882248s ago: executing program 4 (id=3975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121081, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88e5}, @val={0x1, 0x1, 0x3, 0x200, 0x8, 0x5}, @ipv4=@gre={{0x6, 0x4, 0x0, 0x19, 0x299, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6e, 0x2, [], "2c9e321ffb49bd672d5dc97de374f7dc1564d3e23afeff0abecf0af758f665dccfa6c8663102a5cc501c9ad21da2321dbd5ab1891e5bd348b53b496d03538bf69eb2aed9f3dfb5cb30ff89ba069a80529a838c607b14485c52a06daaa013e3833990f9a85ba65094c6d69ed8bab1"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "1293505bcd8dc1d6518e5bae479dedf3ae82b793a2fcdcc4f1e8a241c17d9f89197d549c68c9caecb10c715ce4dd6374fcc3b0663c2824e29fab5ed0b248fc46cee507c20f6736b6c3ae83edd0df113c544e"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0x81, 0x0], "6944c86661e66b8f614f81b87ddfb55848633d8f1400500890b08441ebcb053550901c617aa6f3ceadbeba5cc667149c032636aa26751e42fd115341c48e23962adfcac9cd2a87f771d41eb195efae8972ab3a415d3471dd78d45ec21b2191b11f47d9c73f6a2167fc0cb21b186dcfb895fee38f8a6ba68079d4963771002499e498d62628569d37508fb3f024175974a3e99f85f0382b65069142fb296337341990be4b52315fd7559d66b5ac2e339b69ec03b38bd2b7b85f3a4d8f429f8919197f09b2568b263923e7d8d18248c76e65fb87f3ceb09a14fbd0b4c7e932b52be5c66a90e1c6c75dd2ac5e5f22d0"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xc, 0x1, 0x0, 0x0, 0x6, 0x80}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x4, {{0x2, 0x2, 0x8, 0x2, 0x1, 0x1, 0x0, 0x9}, 0x2, {0x7, 0x8, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "968f1049e51d68e11e8d8975655083cbef2dd7dcf33fadff0828ce23ee54eb62d193573416cf5472bee1c480e1a050ff464fb45ad6e6c76ab22b07fd8fd7de576d4f2d81cd1ef54d7fc8d42f0958cce5eea32522c2a912286559a620ec10c2bf928355dc2baae742682f065e811cab7507d97c8211f8738841e1702175a57099510ea4883c293bd120"}}}}, 0x2a7) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3f8, 0x110, 0x200, 0x200, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000300), {[{{@arp={@rand_addr=0x64010102, @multicast1, 0xff, 0xff, 0x5, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x3, 0x10, 0x9, 0x3, 0x55, 0x9, 'pimreg1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @private=0xa010101, @private=0xa010102, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x5, 0x2, 0x2}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x18}, 0xff0000ff, 0x0, 0x6, 0x0, {@mac=@random="4776120c2546", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x3ff, 0x101, 0x7a, 0xdec, 0x7, 0x9, 'wg1\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x2, 0x5, 0x800}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000880)={r4, @in6={{0xa, 0x4e22, 0xa9, @private1}}, 0x13, 0x1, 0x9, 0x2, 0x62, 0x0, 0x8}, &(0x7f0000000940)=0x9c) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000980)={{0x6c, @loopback, 0x4e20, 0x2, 'wrr\x00', 0x20, 0x0, 0x24}, {@private=0xa010101, 0x4e21, 0x10000, 0x5, 0x9, 0x7}}, 0x44) sendto$inet6(r3, &(0x7f0000000a00)="3d16131ae0547bcbafacd43d723e23a175aa672847d85d50ba1b663d62d8da39f59ce9ea2c4f971546be48996b2d38f48fb66c42aa0682a03ea631191db889ca88f25435caba20c547d8e0ccf4df16abf969283b432e12ccd83d7bab37c9511e37c84951e2c692027c521a654db8dd06d90e47e95acb274067d9ee237d6512a5736daab2e1741f2d2d700f5693b5b3be2dd24c47f038", 0x96, 0x0, &(0x7f0000000ac0)={0xa, 0x4e23, 0x7, @local, 0xfffffffa}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000b00)={r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}]}, 0x70}}, 0xc811) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000cc0)={0x0, 'ipvlan0\x00', {}, 0x5}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000d00)={'veth1_virt_wifi\x00', 0x400}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r3) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r9, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2a1f, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x81}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x34}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044813}, 0x24000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040041}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000010c0)={0x4, {{0xa, 0x4e20, 0xe1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x9}}}, 0x88) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000001280)={r5, 0x9}, 0x8) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$sock(r10, &(0x7f0000001440)={&(0x7f00000012c0)=@vsock={0x28, 0x0, 0xffffd8ef}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001340)="5699713fb83bd07c99408c0cff2a45d41e2b0457cbae593f29", 0x19}], 0x1, &(0x7f00000013c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4003}}], 0x78}, 0x8841) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r3) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001500)={0x170, r11, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @private0, 0xfffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x33d8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x101, @mcast1, 0x5}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000000}, 0x4004810) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001700)={0x0, 0x1, 0x6, @random="6841f2941f9b"}, 0x10) 19.813355596s ago: executing program 3 (id=3976): getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (async) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {0x0, 0xe80}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e4, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "f5cfd0972ad23677ec61f2b094c2256a4ae105a7dc2d4fcac2a0d81ec07385a24ae9d1a1c2b55619c714d31694fd197cad1ec4a150dc5bc8482fff975ea96d8749aecc5050800cf36b170ba0b0e453b39b3776bbd9644f8a5296c93d6dd97d8d7dd8"}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "263973ddec8e5146bddd2eaa750e2864d3a23085a30860b4284877d23a575fec736b5e471f40a09e418166ecaa92d5ba43a83dbae384bc1ca4eb1fbe2c8dd021d25f67d7896f97fa"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "74022b840c02b453c03319b563cf42bebfaa69454f8c01eabd9891f4105a643f9c277bf13841c7107557024704596ba25ef14e946030a593de06dd38d0498822308e0a63a8894c9e2a4173a90d34795adab903cd2198e5bc8a844d0b84292d04203bb66c08b41adca7d46c6d5715e5318d13f06233d1f1b8aaea0783f37e7461a6b2ce147130cd18da50543d19f1de48918e78ebc3e3e1c1d079e37ee56675f46e4c98e89ed217"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '+-$.-.,*]@![\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':$\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '$[)@{\t#-/]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{*@,.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'\'/\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4800}, 0x44050) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e4, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "f5cfd0972ad23677ec61f2b094c2256a4ae105a7dc2d4fcac2a0d81ec07385a24ae9d1a1c2b55619c714d31694fd197cad1ec4a150dc5bc8482fff975ea96d8749aecc5050800cf36b170ba0b0e453b39b3776bbd9644f8a5296c93d6dd97d8d7dd8"}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "263973ddec8e5146bddd2eaa750e2864d3a23085a30860b4284877d23a575fec736b5e471f40a09e418166ecaa92d5ba43a83dbae384bc1ca4eb1fbe2c8dd021d25f67d7896f97fa"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "74022b840c02b453c03319b563cf42bebfaa69454f8c01eabd9891f4105a643f9c277bf13841c7107557024704596ba25ef14e946030a593de06dd38d0498822308e0a63a8894c9e2a4173a90d34795adab903cd2198e5bc8a844d0b84292d04203bb66c08b41adca7d46c6d5715e5318d13f06233d1f1b8aaea0783f37e7461a6b2ce147130cd18da50543d19f1de48918e78ebc3e3e1c1d079e37ee56675f46e4c98e89ed217"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '+-$.-.,*]@![\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':$\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '$[)@{\t#-/]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{*@,.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'\'/\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4800}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r13) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 19.658673127s ago: executing program 4 (id=3977): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x100b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r6, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r7, 0x0) recvfrom(r6, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020467, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x7f) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read(r9, &(0x7f0000000340)=""/209, 0xd1) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000040)=0xfa, 0x1) 19.562161196s ago: executing program 3 (id=3979): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003e00)={'ip_vti0\x00', &(0x7f0000003d40)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x800, 0x2, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0xf4, 0x2f, 0x0, @empty, @empty}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x81, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x2}, {0x6e, 0x4}, {0xfd, 0x6}], "22a2a1b5c21eb18a"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xea}, {0x6, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x3, 0x6}, {0x9, 0x6}], "d8f842fc09194cc1"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xc8, 0x5}, {0x8, 0x7}], "409ca3b717fd9c9f"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x2d}, {0x4, 0x6}, {0x60, 0x6}, {0x1, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x90}, {0x40, 0x1}, {0xfd, 0x6}, {0x4, 0x5}, {0x9, 0x7}, {0x3, 0x2}, {0x40, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x7}, {0xdb, 0x1}, {0x1}], "9250a9554c068aba"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x0, 0x1}, {0x9, 0x2}, {0x6, 0x6}, {0x6, 0x7}, {0x4}, {0x5, 0x6}, {0x7f, 0x6}, {0x9, 0x4}], "3ac37e1f3c9ee541"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x6, 0x5}, {0x1}], "e3e05e3eecbb7fa0"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c0b811a6bd0748a7"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.5083008s ago: executing program 0 (id=3980): socketpair(0x5, 0x80000, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0x1, &(0x7f00000000c0)="354fa1cc82ad40bb93f3a7a384d084b96a74964b6dc0d46744a9b176e5931ff561fe54b80ab537b283a99ef9098827ecd9a33dcd861e05d5b9", &(0x7f0000000100)=""/255}, 0x20) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) (async) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x167) 19.434609428s ago: executing program 3 (id=3981): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) close(0x4) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000012f4a16cef"], 0x14}}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1b, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e24, 0x300d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x21}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x82, &(0x7f0000000740)={0x0, 0x1006}, 0x8) recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19.38765509s ago: executing program 0 (id=3982): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfffb, 0x90}, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000500)=0xb8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r5, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000104000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="0002070040040000200012800b00010065727370616e000010000280050013000100000004001200"], 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r7) 19.240035584s ago: executing program 0 (id=3983): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000900)=""/248, 0x200105d0}], 0x0, 0x0, 0x8000000000000001}, 0xc0000f40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000088000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="25d1c2bbefd45ecfe7e891304ed0", 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='workqueue_execute_start\x00', r4, 0x0, 0x2797}, 0x18) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a80648c251b0908b5e9d1", 0x14}], 0x1}, 0x40000) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/212, 0xd4}], 0x1}, 0x3ff}], 0x4000300, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)={0xf8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7188765a}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x88}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x801) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@initdev, @in=@broadcast}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f0000000280)="40c08ca7b60f26987a59d61bc8e5deabec7aff300744963a13a5c0bff835420f509969367110f251780d91ad964979faf14b7453f1ea74a8eaa5d79eac1e4265b09c50f0fa7f8cd6d0f6779d35b4592f23d597c4e1bc116d859b7da0643596f35f2828ebf57b1a4d657e6147fde0f1bf993b2198f8d184e3b17f87d815d01efafda5046b0d23648805e5a0448f23dd0839146306c377513522f6ccb9ba3c7c2f152e2f5a6a749881efdf2914ffc610e68a07d07ff3087fccee46be167b7632695c3be4873ae2cb2c16ee25300babc208c394a0b0aae90a03f0f8", &(0x7f00000005c0)=""/161}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 18.790181176s ago: executing program 2 (id=3985): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002d0001410000001800170000000f0000e68969623a766574683100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000001300)=""/4096, 0x33, 0x1000, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x40, 0xc6, &(0x7f0000000480)=""/198, 0x41100, 0x40, '\x00', r3, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0x5, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r8, r9, r10, r11], 0x0, 0x10, 0xffffff0b}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x5, 0x2, {{0x6, 0x1, 0x3, 0x0, 0x8}, 0x7, 0x0, 0x5, 0xffffffff, 0x2, 0x1, 0x12, 0x19, 0xfd, 0x87, {0x7, 0x7, 0x2, 0x0, 0xe9ac, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 18.750998221s ago: executing program 4 (id=3986): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) (async) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="0033ad09", 0x4}], 0x2}}], 0x1, 0x4000040) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x7e8345b59393f61e, 0x0) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="d44f69c1a01d0ddf18d307e61ebafea62b21e6cbafaad51c2c1290104b75beb50a5a50e9285eb3e9a9e3aa78cae1085eea0843ba33064af1e06e1ff3dfaac0b2aa2d279a79aad234518986ec90", 0x4d}], 0x1) (async) shutdown(r0, 0x1) (async) socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket(0x28, 0x5, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) (async) getsockopt$inet_mptcp_buf(r3, 0x6, 0x2, 0xfffffffffffffffd, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) close(0x3) 18.700228269s ago: executing program 2 (id=3987): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0000001000000000000000", @ANYRES32, @ANYBLOB="63db64e21ae8001d34a4390f084e92eadee290e3e6458e02a33c615e4354698ee68e622f5f7354369c13b75ddc58d95511f4dc7252521d1f748fcb13fc6339017ad16acc7c736f438af17a45928d597337a623fd162e05259e85fffdf6eaa51b815993ef0db0", @ANYRES64=0x0], 0x20) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="2bc7b0ab6f6e37bd07000000100001800c000700ffffffff0900000008001b0000000000"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 18.590179991s ago: executing program 4 (id=3988): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001000)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r1, 0x1) socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x9, 0x10000, {{0x9, 0x4, 0x2, 0x19, 0x24, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0xd, "745414f6f102c3ef0d8a33"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x8, 0x40, 0x7, 0x7, {{0x2b, 0x4, 0x0, 0x7, 0xac, 0x66, 0x0, 0x2, 0x2d, 0x0, @broadcast, @remote, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0x2, [{0x5, 0xc, "28b8e81246cee8a1b4bd"}, {0x6, 0x6, "9f6019fa"}, {0x1, 0x2}, {0x2, 0x5, "97538b"}, {0x2, 0x7, "f2f1a16943"}, {0x2, 0x11, "b0f92219b8d97775181ce54cd36d1e"}]}, @cipso={0x86, 0x44, 0x3, [{0x5, 0x8, "2d65289c7529"}, {0x0, 0x7, "7721be3a6f"}, {0x7, 0xc, "ba49f8ac4c4fb603c4d0"}, {0x7, 0xa, "5f8dd645621387e3"}, {0x5, 0xb, "ed7c4463a75ebb3a96"}, {0x1, 0xe, "dd494b2ef25dd8456a54fab6"}]}, @timestamp={0x44, 0x18, 0x48, 0x0, 0x0, [0x4, 0x2, 0x6, 0x2, 0xf203]}]}}}}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0x26}, &(0x7f0000000ec0)=0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000f00)={r7, @in={{0x2, 0x4e20, @broadcast}}, 0x1, 0x6}, 0x90) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="000029bd7000fcdb664e0725020000000c0001800800", @ANYRES32=r5, @ANYBLOB="0c00018008000300020000000c00018008000100", @ANYRES32=r6, @ANYBLOB="4800018008000100", @ANYRESHEX=r1, @ANYBLOB="140002006c6f000000000000000000000000000014000200627269646765300000000000000000001400020076657468315f6d616376746170000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000840)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="380000001114100026bd7000fedbdf2508003e000200000008004a000000000008004a000008004b0043000000"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4008010) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="380000001114100026bd7000fedbdf2508003e000200000008004a000000000008004a000008004b0043000000"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4008010) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000100)="b9ff033168640372b89e14f00800fefc4c2c1b8a", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000100)="b9ff033168640372b89e14f00800fefc4c2c1b8a", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r3) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=r10, @ANYRESDEC=r2, @ANYBLOB="000425bd7000fcdbdf25590000000c0099000e0000004e000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=r10, @ANYRESDEC=r2, @ANYBLOB="000425bd7000fcdbdf25590000000c0099000e0000004e000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x44) r11 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$inet6(r11, &(0x7f0000001840)={&(0x7f0000000100)={0xa, 0x9, 0x6, @private0, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000024000000000000002900000032000000fefc"], 0x40}, 0x44058) (async) sendmsg$inet6(r11, &(0x7f0000001840)={&(0x7f0000000100)={0xa, 0x9, 0x6, @private0, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000024000000000000002900000032000000fefc"], 0x40}, 0x44058) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x25, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 18.55574369s ago: executing program 3 (id=3989): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x17c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x168, 0x1, [@m_connmark={0x164, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x3, 0x800, 0x65}, 0x116}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x20000000, 0x79e, 0xffffffff}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0xf, 0x3, 0x5, 0x8}, 0x1000}}]}, {0xdf, 0x6, "8168b6aaf1562025c6f512c71319efe68913bb4d6948e5f1f2ab15799c6d072e40de11d7886df85ec0cf5b6509276182d6e888ba3b7816e3b0153cb30ff8f81da435b5d0411b2d83cf9c42d21b22f7d5f6c75dd5a2025d4b4a3243536c6e0e81551c6ba7c0105be14e003e5e9e599df44684dce0daa1bb3c4d9a6993ecb5f13001bae6105c4cd2d2340c1111d5e2cb9a1c784ef7abab69965117081f2cb7f4106b48621f826238dc47799d180ebc66d79f75fb77d66e85fe3967d7db1ffc284f06d90b53714055e1964a44e15d1fe2463957efa2185e5eaa77569e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x17c}}, 0x0) 18.306467566s ago: executing program 4 (id=3990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xd}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffc0000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 18.203449924s ago: executing program 0 (id=3991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9200000000000056080000018004008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.139322015s ago: executing program 3 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x28}}], 0x1, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x15}, @void, @val={0xc, 0x99, {0x3, 0x39}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x100) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "b9cef9364a6519b7311e3fe638ef7fed459cdc8476c834b9f83163fd32e7609e", "0f8949d3bc5fdd0004e271d783a5b1a9529b10440b6e8c4a02e236c313e61cc0", "4824926b07b0288b2ec2f76ce570fa08ccf99c0e2417b3d8b2394782d8c4ec2d", "0b124b2bfd28323fbfc5dab518d908dc46dfad90043666847b3f7085b22a2d73", "3e392e205953c20c1e85c70628f1263a715da0987e29366cc3cbdd8bc36a6f88", "677c5987afa652e04be3baef", 0x4, 0x10000000, 0x200, 0x6, 0x57c7}}) bind$rxrpc(r5, &(0x7f0000000380)=@in4={0x21, 0x204b, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) write$cgroup_int(r9, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$ppp(r9, &(0x7f0000001fc0)="3750a56c6adf0da29f0253f7f409a361873d295f5e1f1ef9e2737f5c5d5de3310f15e8e4cfa1f74a8f6be707622eb58f4d0eadf6911325c4354fde5d1f603ed67b4caea58fef2fb9b11e567367747284a8323b3250938e9b6ae751403ee894c1b3c328f129bc48ba19c98b39dac659a6bb6e5ed9c67b64bce28f08a83636f8babc1285542420637d00922df9b4a24d849b6b0de3e161340c8443cf8e558a5b54a418b498e8368afbadba6a7cedad894275526085ae056afc817dbe3094ea6dccdfdf273f0e45c7bc29c6c63d1a22c7b67d14fe2746e5abbf30e6840d850d19ab5cb0e8891f390405b59d3b0616d73efee7958c3074fdfa1d94f8bd7389474808356cf0a6f707720ac814828b9d4afa4a2f5ca1df10c4a9e599fdaedfa34e44afa53fdd44152eafa5ecf1572dbecacfae95457701186fc022bd69f10e299c592db6cfb4d36424cac8349d7aba9e024504c7c22e54428d8317da0da8a010fd898998300a066993b24379aef62d8509c4e8e9e9c9008f8786a3afb4231b24936b93d095dcbea082e80223cdeb21dfe6ab44885f5d2eae319c7433d5b752d54a04348ba079e2c3f8d439a42c1e69924717ccb7026d67de243b368853c64fd050d2c8ce27a722c1b815f550807201029c5d7b56841dfa050b29dedadc73889d2962b27a6800a630a5fdf54e76bfeff5582c5e3d31b37fe30a7accef60fad443fdab10832f56d33d1437c9dcddb619c7444a31f8b5791861e3dec565184c09911d2542bc6445f432ecb9c5dde826941c2153e520a1dc30c56c46a28cee445c9f681de2dbebfd04738eeb7c240fc3c9288aa8e5949a8c45e8e6192acd85ad586f7a907c546d2e9833502f221a2d059ca9b35e10c7c1906925888d95b6f80b538a683bd3fdd1cd99a286d1150e97bc864ada23b8a27d8b6dd1c6471e51022a0a811ebc26913704ed1ddeea4e9289481fc747cead66c7d2ca7551933e20f56d5c512609ca90dff3962427de5500138da11629f68e372d016d9e2574f8855929a838fb56198edbd8421b68882a7107d5272aeaaefd1e884ce20764b181391d04157950add177f2c99cb66e0627865adde781cc402163e4b505d8a810b8479b0e4a043510291120f5875d29a0078c2b56672c59d4a357bb8c8bdadeabeaab62f6aca236cdaf96092afb6aca71fc40c8f55a33de670477681b71016dac7f74e2824d117193dd518441844c5af1e23f50114aa26ac5bfd9f64d3f5ddd35c820c80da9ebee630450a406a597d52d79860d26ca1d5a16d01874d3e60962a98f7f00a5e523a408da885751ef919c8f7cbccbbcc90dc72384e9bf8b477aa1f6c45c3b2a591d51d166dd71ce3c5d28950ded1623f265160ef3b459e0831eaaca8e09232fb13482bdc72313eca2f0872797c6707b098fe340df79eb098773b7ddbbff285aab712f1e399d976b10dbdb9e56ae5786965c911c64d3e459a7c1f2a58f7a4caaad3854950f480b0776bdee9d6139b99d11e761b167ad2e1bfa9387077ae3ffb3f3908f0b4f0b5861bc31d8d3f9606b51ec04ce950ae049880e06e496615c3a9c3858deeeeb34ce3b59853936885d2bfb4a925ba38c93cb9da3672a2056fb8b59a268c7ad81241eeb7f2b17a213b1475d29ca3ed483a52cd5cb11de78ba68ca69c6333b3cf2bc15794675f4dece9e43cace70cb8a9c74149c39d6aac75d016a232c449e4477f11858bf97a9c410f261d7d40d7c6298286ddaf4c4eabd4c05f96aad5ba1ea0cc482f2820af0c0d925c5aa7a8c583b6045ae80be6838a67899f17bfc274b0ad1177ed927655e066f45484722f240dc85017062e1626f1abf4b1bb3d8bd665cac44c67b7ecea047a5a308edc0d72fe2cc3d4979a69c31e722ba6362d50d3e7b3f42867036631bb17882b927dede3e8d29d8583a6821e3590c176580cb3cb29f0cfcaae63f7c0d0b1cbb3a221d0598ff52d0e9d4130196f17d246b760080a284b4ad8853fbcc0731ac8151f286fb3d6b043cb0aac55dd6024e76a8f3ff6098ee6a8cd0273f9682dab8825e259ca49a3fb45ad7877bb4217353b02190db4003a9dc21b698e994c78c06ad12b4c596095d1d6e3e57b69dcd72e5d9ff0ac2c37080b23c2e1272c9f26444592bc38808717103809869fce4b37f40dacbabcd1f9432c3b7969e115af8b4634455bb89c44ad0f491a2c553c95c2362aa6fa16573c4a7baf7cfacbf0af77c08d56e0e19efcc591006244a9a28992e51c8d2ba224294f605df29eb6a2ec4c9ad93356cf1b94e1df42b4c0ee4ee40d7b1a1dc64990efd782bc144681644bf3908649dfbdd5c591772f15651a731219c866965e75b729aa7475ed75f91019ff72b37c17d5d61320a32e2c883e683d48215ac35458315078c765c9e6ddc9e31d062b9c795f8cef5a3cfb415de2e232ce337f31e967e7b9385738295310cb4eaaad17eab6c2237e3903ca7bf590014b51d879107b41d8d438a823c5abe82cd3fe1242c3629d50197f425de12fa245141accc0fc3f1f6c344632e19fadfdef0c3811e83a49a1b98a931a7d854d074bc2256b6cd6781002708c2c10cea625dfd8d6c15c38244aee1d55cd028d1c471a9c7438101401c69bad9d81e93f9a7548ae9735316734d467b7ef53bb45fe754a2d43c629f0e32943dc31f357304747442f4b01cf9e9fe57d9ea837a9b2325ca855f7e85231776b943b8065b396dd4204778c63f8f5726bf8a5467e491d77efcc3e8c2b28e9a968b9bdd724cb953ffe601354c04ced31423c2a23165cf97068ebff73ee7c83a93d1ab6d01a0799a545b3b2f499f71163c9c167ae5555c56a832a3a668ce3cf4acecc5bc973dc5faba260746619fd9848db05af847c733e7201c59cf8e57cd2036896def0181f6065190a72bfa2e2a3560969002f9be06a07593ff6416323f1480da1f4285525d713d643c482803c8822d18098525310063a0ff2a70724515ce45071f618899fe3a448d630d0b9dadc5c825da2cdc59b7fcf58b0809294d1fc2406cdaae41acd25371424d573781b85b98f6de0db8b1d838583dd065575b8c9b4e721b81a57a4a48e32fc1026854f4323166859dc90c808307fdba76c98f12497a6953815a460d7c41acc08c9655e8fb8b50d9b9d29d99c738ee27d9e6eee0336c22213bcdf3a937ad4b4df800a385c417ef2bc2e0f2f6cb42857cd8b6b2055971ae37bdc2432dbce8aad29bd1a08fba510d1ecfee7a0648e03dfa895b0ed51e08a3b7e76fa465a0c3be4e2932481f6219057e10beb696d53475bc8a63ed4cc1b3db2916767b5337ad297ea93594deab37b7beb07e2d11b771521a59d0ba0b7d9fba5c9408628bbfe66e3f0b949f7c3fa3469e148766abf95f95cf0fda1a619fbb8b6a3e5af65396dae64e8a27adf1b9ddd9160b551901a2c82d64a30d04e83a5bbfffa1cfc49b3a9655ca3c7b1addd14a2f487751cd4c0eb98cf705846a94109bec3f5ebc5c0527d891e62dcae002608ff5e748bd0fa6f5d0e380fdef36641b8fc914f8ee45a20d3c7ae3d7f6e0d7df8a460da4b56917cf0133abcc7d24bbfc7d5ba8311e1960cbeb8afe4317450a2b18fc039ea2531babb8ac93944e603a2645eceb911ca8ce062fe272468e2ae2e942cb46e84c3e3b6c2e82b68d11fb82b234c47380b03751eb3070a4062ad504885dc9560f6cd3d2fc6a51d0e67872898a98fd7355ed4327ccdd79987cf9a93e992ef9b3a45c3b49acdc403ecd6361c0b2c91136a0957d6dfd8906c1ca3d0550c2354c8e63fc6196c829d94a65bc67c17294fd1b9c5eb38a3e0704758da7d6871652654525d2d0283b3ac0c63d8291e922d86991d0114f08909c1c9a03a2312f5d3676191cb77358fbb3e09b0f7ae9a243cc6aa328f58f6217381e3bb87ea791fc116ed6cca9c67efb4b0ce03a32837b2652a5c7b21e00b2faffc33513217156ec6202f8713e9f9d67c9a500c7d22a8e84946c7e5de4b0d05c5878392aea365cc6771fa6bd2eb67006f456bb59356e5d4f0b630614dcf675e9b87c7bb63096bf99a15f865373a7039370ad485ab82f2e7537958718529990bba73ceca287072dda98b7cd62d0f48c080ad702f38acec8473de5e12248c2db0c6a2a6a711582c3d9b84822f4572c53a272469024b88ac6039e5e6204df509844f2a78380f99a13f82952ad9ac9706afc91215d4647b25326d0aefa4d875e8f0faa79cc5addfed08d69777e1837bd4967256c2c741e03d1eae8a0b474120a0933e1026bc3bc6ca3801de376f942f6322a449dc148bd66e1ecbc110fa5904501145115485c551054c6559b1d187f6a0e6b86f6c8b97db582f1d8a160b4ce44c676f9afd3caa8d58a1e7a7bb53b6d8ba6a140d97628604f51eb8f8b179402d1c4ac81d72db2390c4ee7951807bc7df3c6771d6348f9daeb923cf44a91a56dd373ee1d6ff0609fc35a46723a332a6c6e4549683bd13a03c12e73c78348e90a9efabbeb7d1e911e6cb70a1283ce2e60842e098f20b77b6c9734f89e2bc8d32ca8178312164cbbf9bc1324cdf46dced8b24c0295c28efbf38224abf59da89bdef13d4875299d57f0864c812083525688d00a6b4fe84630bc9eb19a9f9f181396a5bad26de6366a796ec506377703b1d5a9d3330d2c67272a7ede377e397fd4accd35392eba2a681e447c34510236e176b9803bd51753caed3e322c2fe66b2f6887fbab8820f96bebac13b867f1be1828273f7a5695bf4db44b1957881ea4aacbcfa2debf7b91f4cff14c63596657c15b80cc0fb861115f35b533a18d5dcb26bc30edc53b5377696b30d8f43fedbccf440b3b3c941e37c38a2e47efb3f19818da3cca9dc2a165bc715f88a6926d4077a07ba5ef11a7d653ff7bbbc36e1997aa25d66de7860bd7e8112c31d657257e3b7b2f3b88315a7105ea28324ab9540dc068686df43f82651503205dbc62c3ff788f6afa471f781d2825b8cd896701a69b1864dd7596b95a5cb2807869e2c1946f40e9472c19fe0beef440716465997be2026dedc6da90ad61c13d7708892cd3494517c9c65b8c00711b726a4de24c4fbd4006c82ab4a27131c9becb9ca4adffa3ecb1ee2017b595176fbc97fb581c65d123315a217dc2587bb957cb363afe17e7a1fdfae67c80c44f5bb0de0874680ce8065d951d2501bd676f897c883cab764b91cb9b74bc040cf51fee22b096a0a28a140b8134eb68e9df99154cc16b682c05a380dd0b7638c9c60bc34a1831aa024348642726c63e5910604e6251dc76d5159deb4e8b4ace04b2d3a4682620e9caec0fee1e59f822bb11c8456ea484ed7f792fadb1d52f11bc68d732932540abac0a178a26e5c43e093b94dcc3e00d3630071f476e6d954e34c6f4e7781694aa95c117576c594365b905aa07643e58d36854944e708389698ba0e4e6e86ca531c7b23a825f3ff0f8e4f1f767f48bd135a2d88e4a721813fbd22ecf7a586a3bbcc19549a6845c074d1f0e8635c3ce725cce3b7af664674ee5e982fa988e4a70bad3c3b4d73629a0a7e8e293d7e4300bab4a82a287996a3479ccaba5a2b6ab6fa8dadfd28c762494b56ff8a232a78aa255b8cab25486d8c9aab59d2ab26cd5df1013f7d5455f9c86082c98b75726a47e896b5ec41574e088d89e8ec693f0f0aea79c91458bb089dec23870e3ab98a814dcb80ef74a2ab3782fe6453f103422951c0559b5f94b737694cd2ec75fd8259381224d86bc79378c9b9109b650a031f9a5e155dd8d2ef4786d3646f225bdd03b13e610f053e09eb4b46ba32ddc521e936594d1bc02", 0x1000) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="95b9477d196a1aed944ad1b2c6b5313ffda4da055a58c9991bb050774a7e4d5048647b05e1970ce1f6586296eaa0162267d96725f9ffc0a7f353d07bda64ebfe3a6be1ad9ad3855665cf50946d9ab4d20fe70c4d56"], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x4040) r11 = socket(0x22, 0x2, 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x8810}, 0x4000410) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x6) 17.968584741s ago: executing program 0 (id=3994): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffd6e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(r1) 17.753742619s ago: executing program 5 (id=3995): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 17.557097421s ago: executing program 0 (id=3996): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/pid_for_children\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) write$rfkill(r3, &(0x7f00000001c0)={0x4, 0x7, 0x1, 0x0, 0x1}, 0x8) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000200)={0x10, 0x0, "be8c1c6ce0d36b534b85287838aa5a15"}) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)=""/176, &(0x7f0000000300)=0xb0) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0xc}, 0x90) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x324, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e30}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3053}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xef}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x300000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0xee7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcf}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5706}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x583646b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x150}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xda90}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x8000}, 0x4004841) socketpair(0x66261f81ee9e74a7, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r8, 0xd) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000880)=0x4046, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000940)={@empty, 0x0}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x5, 0x8, 0x48, @loopback, @loopback, 0x7800, 0x40, 0xb, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'erspan0\x00', 0x0, 0x10, 0x7818, 0x9, 0x8, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x2c, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x2b, 0x0, 0xd, [0x9, 0x2, 0x3]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x0, 0xc, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x5, 0x0, 0xcd, 0x4, 0x0, @loopback, @private=0xa010101, {[@end, @generic={0x82, 0xa, "67fa30c131e50bda"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000ec0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x184, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4040040}, 0x8004) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0xc8d4) tee(r7, r7, 0xffffffff, 0xd) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}]}, {0x0, [0x5f, 0x2e, 0x30]}}, &(0x7f0000001180)=""/191, 0x2d, 0xbf, 0x0, 0xfb36, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xf, 0x0, &(0x7f0000001000), &(0x7f0000001040)='syzkaller\x00', 0x80000000, 0xac, &(0x7f0000001080)=""/172, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2f, r16, 0x8, &(0x7f0000001280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x3, 0xc, 0xb4}, 0x10, r17, 0xffffffffffffffff, 0x4, &(0x7f0000001780)=[0x1, 0xffffffffffffffff], &(0x7f00000017c0)=[{0x4, 0x4, 0x1, 0x8}, {0x4, 0x2, 0x10, 0x4}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x4, 0x4, 0x5}]}, 0x94) 17.509554644s ago: executing program 2 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x400, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4400}, [@IFLA_EVENT={0x8, 0x2c, 0x7fffffff}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xffe0, 0xa}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40095}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000002d813f3da4ceeb6500040007c00c00020000000000000000000c0004000900000000000000"], 0x30}}, 0x0) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x1ff, @any, 0xa}, 0xfffffe91) (async) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x1ff, @any, 0xa}, 0xfffffe91) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r10, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) ioctl$SIOCAX25DELUID(r10, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x5, 0xa) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x5, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xb9}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 16.823267427s ago: executing program 5 (id=3998): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240)=""/89, &(0x7f0000000040)=0x59) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x28, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r7, 0x6}, &(0x7f00000000c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r10 = accept4$alg(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000002180)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5ddc1e30", 0x4}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000380)={r11}, &(0x7f0000000340)=0x8) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 16.742525599s ago: executing program 5 (id=3999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000000000000000006a7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 15.862674365s ago: executing program 5 (id=4000): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) connect$netrom(r1, &(0x7f0000000040)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$FIONCLEX(r1, 0x5450) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f00000001c0)="a2186722cf7a4f26ef9b942bcffe788ac44f24c97508c8038bedf99b8454545885c41b1413ce6f281f3c8adf3368c476ea9e75c76efa510999519125ec26f519edbd76b34b1023017cfb1b52ad97b6a79f6893161b3a920d7f647b7da7d33e5f74deebd97caeb44e635f3b56596639030e3f36cc0e5addcbb0a7ed5859b27383452293a613bee135e8c6be3fa10efa1789e2981940b1f633185fb1828b6d7a7d565901bcee095521aa195568eace68", &(0x7f0000000280)=""/26, &(0x7f00000002c0)="667818cbcb", &(0x7f0000000300)="6c8cdfa560a5381d47b14e2a3653eb6d2c9b1ff9f63c41dff784f226090ed828d54157cfabe93e12b107d92ea474f00529c3e5036b78788a9bc60227f3ec0d8f2862e713fb9654492f981515c406dbf326e35349bdbef245d1f255e64b982b8dfc747c27254b0b915a353f68b1b2b4e4b72c6575dffae22368ee280725091cdc097dac0c1978cfef98354f86543ed47941f21518d84e89818ebee431cd1d80ae848bfcb44772446853c72f9333bddf891163d5156233dc23de9a449ff65a7a0398419a005721a12a17dca21e9af565a04dde1c04f6ff9f30de06475b65", 0x541, r3}, 0x38) r4 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ethernet={0x0, @local}, &(0x7f0000000500)=0x80, 0x80000) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfff9, 0x5ba}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000740)={r6, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000800)=0x84) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x2010, r4, 0x180000000) connect$tipc(r2, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x3}}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000880)=r3, 0x4) getpeername$packet(r4, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r9, &(0x7f0000000940)={{0x3, @bcast}, [@default, @default, @default, @netrom, @rose, @remote, @bcast, @rose]}, &(0x7f00000009c0)=0x48, 0x80800) r10 = accept(r4, &(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000a80)=0x80) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000ac0)={r7, 0x10}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xcc, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x29}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x5b}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x172c9616}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbf87}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xcc}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x1412, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) r12 = socket$inet_sctp(0x2, 0x2, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r12, 0x84, 0x77, &(0x7f0000000dc0)={r6, 0x3ff, 0x3, [0x400, 0x64ca, 0x0]}, &(0x7f0000000e00)=0xe) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000ec0)={'tunl0\x00', &(0x7f0000000e40)={'gre0\x00', r5, 0x7800, 0x7800, 0x1000, 0x85, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x65, 0x0, 0x74, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x7, 0xdd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x27, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x34, [@local, @broadcast, @multicast2, @broadcast, @local]}, @end]}}}}}) ioctl$SIOCNRDECOBS(r11, 0x89e2) recvfrom$ax25(r10, &(0x7f0000000f00)=""/8, 0x8, 0x0, &(0x7f0000000f40)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000fc0)=0x43a6ecdd, 0x4) 15.739549551s ago: executing program 5 (id=4001): openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @multicast2}, &(0x7f00000000c0)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@mcast1, r4}, 0x14) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.51361829s ago: executing program 5 (id=4002): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80000001, 0x4d8, 0x4, 0x200, r0, 0xa, '\x00', 0x0, r0, 0x1, 0x5, 0x0, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000f70000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000008500000090000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="050003"], 0x28}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r12 = socket(0x11, 0xa, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r13, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r12}, 0x20) sendmsg$802154_dgram(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="aac6be871dce2eed972d42d881527588f18d37f46ab7a1b4fd76884ea282d46de5c480c0998752db22f01a6527b389aa3d9283ea8bb1e03d1e3a28015a5196e65d529563d1e9015d427f059f5be5896b4e010a95fe8a804985412c", 0x5b}, 0x1, 0x0, 0x0, 0x1000}, 0x140) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r13, 0x40049366, &(0x7f00000002c0)=0x1) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x118, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xdb, 0x8, "dfd284314ac48ad89398a577c8e8c10b379a2f97879a672625860ef5cb02a7fff19b2969b4d6e0375b13ee1f2f989a272bb014d537f07303740c0daecbdc12d8e0051e91f165564c0609e1364ba51b762bfe48745400dac8e3e6e23d7f437cbb2d07a7acf15f8a933a0fb44a4a21779acd350cfab722115595b66c6ef0d2577d5434ceea004791d8a91e3902d2817a0d2e66ef160abef051aa420f5e3affb393007925a0e49b48e6ce35f6d87b0dcdb29288964fd3179c4f8cd3b6fad3aaf3dfa7023ea4bc10c16210b5ed1acfb95b3c92daacae88c39b"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, 0x0, 0x0) 3.015745502s ago: executing program 33 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x28}}], 0x1, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x15}, @void, @val={0xc, 0x99, {0x3, 0x39}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x100) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "b9cef9364a6519b7311e3fe638ef7fed459cdc8476c834b9f83163fd32e7609e", "0f8949d3bc5fdd0004e271d783a5b1a9529b10440b6e8c4a02e236c313e61cc0", "4824926b07b0288b2ec2f76ce570fa08ccf99c0e2417b3d8b2394782d8c4ec2d", "0b124b2bfd28323fbfc5dab518d908dc46dfad90043666847b3f7085b22a2d73", "3e392e205953c20c1e85c70628f1263a715da0987e29366cc3cbdd8bc36a6f88", "677c5987afa652e04be3baef", 0x4, 0x10000000, 0x200, 0x6, 0x57c7}}) bind$rxrpc(r5, &(0x7f0000000380)=@in4={0x21, 0x204b, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) write$cgroup_int(r9, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$ppp(r9, &(0x7f0000001fc0)="3750a56c6adf0da29f0253f7f409a361873d295f5e1f1ef9e2737f5c5d5de3310f15e8e4cfa1f74a8f6be707622eb58f4d0eadf6911325c4354fde5d1f603ed67b4caea58fef2fb9b11e567367747284a8323b3250938e9b6ae751403ee894c1b3c328f129bc48ba19c98b39dac659a6bb6e5ed9c67b64bce28f08a83636f8babc1285542420637d00922df9b4a24d849b6b0de3e161340c8443cf8e558a5b54a418b498e8368afbadba6a7cedad894275526085ae056afc817dbe3094ea6dccdfdf273f0e45c7bc29c6c63d1a22c7b67d14fe2746e5abbf30e6840d850d19ab5cb0e8891f390405b59d3b0616d73efee7958c3074fdfa1d94f8bd7389474808356cf0a6f707720ac814828b9d4afa4a2f5ca1df10c4a9e599fdaedfa34e44afa53fdd44152eafa5ecf1572dbecacfae95457701186fc022bd69f10e299c592db6cfb4d36424cac8349d7aba9e024504c7c22e54428d8317da0da8a010fd898998300a066993b24379aef62d8509c4e8e9e9c9008f8786a3afb4231b24936b93d095dcbea082e80223cdeb21dfe6ab44885f5d2eae319c7433d5b752d54a04348ba079e2c3f8d439a42c1e69924717ccb7026d67de243b368853c64fd050d2c8ce27a722c1b815f550807201029c5d7b56841dfa050b29dedadc73889d2962b27a6800a630a5fdf54e76bfeff5582c5e3d31b37fe30a7accef60fad443fdab10832f56d33d1437c9dcddb619c7444a31f8b5791861e3dec565184c09911d2542bc6445f432ecb9c5dde826941c2153e520a1dc30c56c46a28cee445c9f681de2dbebfd04738eeb7c240fc3c9288aa8e5949a8c45e8e6192acd85ad586f7a907c546d2e9833502f221a2d059ca9b35e10c7c1906925888d95b6f80b538a683bd3fdd1cd99a286d1150e97bc864ada23b8a27d8b6dd1c6471e51022a0a811ebc26913704ed1ddeea4e9289481fc747cead66c7d2ca7551933e20f56d5c512609ca90dff3962427de5500138da11629f68e372d016d9e2574f8855929a838fb56198edbd8421b68882a7107d5272aeaaefd1e884ce20764b181391d04157950add177f2c99cb66e0627865adde781cc402163e4b505d8a810b8479b0e4a043510291120f5875d29a0078c2b56672c59d4a357bb8c8bdadeabeaab62f6aca236cdaf96092afb6aca71fc40c8f55a33de670477681b71016dac7f74e2824d117193dd518441844c5af1e23f50114aa26ac5bfd9f64d3f5ddd35c820c80da9ebee630450a406a597d52d79860d26ca1d5a16d01874d3e60962a98f7f00a5e523a408da885751ef919c8f7cbccbbcc90dc72384e9bf8b477aa1f6c45c3b2a591d51d166dd71ce3c5d28950ded1623f265160ef3b459e0831eaaca8e09232fb13482bdc72313eca2f0872797c6707b098fe340df79eb098773b7ddbbff285aab712f1e399d976b10dbdb9e56ae5786965c911c64d3e459a7c1f2a58f7a4caaad3854950f480b0776bdee9d6139b99d11e761b167ad2e1bfa9387077ae3ffb3f3908f0b4f0b5861bc31d8d3f9606b51ec04ce950ae049880e06e496615c3a9c3858deeeeb34ce3b59853936885d2bfb4a925ba38c93cb9da3672a2056fb8b59a268c7ad81241eeb7f2b17a213b1475d29ca3ed483a52cd5cb11de78ba68ca69c6333b3cf2bc15794675f4dece9e43cace70cb8a9c74149c39d6aac75d016a232c449e4477f11858bf97a9c410f261d7d40d7c6298286ddaf4c4eabd4c05f96aad5ba1ea0cc482f2820af0c0d925c5aa7a8c583b6045ae80be6838a67899f17bfc274b0ad1177ed927655e066f45484722f240dc85017062e1626f1abf4b1bb3d8bd665cac44c67b7ecea047a5a308edc0d72fe2cc3d4979a69c31e722ba6362d50d3e7b3f42867036631bb17882b927dede3e8d29d8583a6821e3590c176580cb3cb29f0cfcaae63f7c0d0b1cbb3a221d0598ff52d0e9d4130196f17d246b760080a284b4ad8853fbcc0731ac8151f286fb3d6b043cb0aac55dd6024e76a8f3ff6098ee6a8cd0273f9682dab8825e259ca49a3fb45ad7877bb4217353b02190db4003a9dc21b698e994c78c06ad12b4c596095d1d6e3e57b69dcd72e5d9ff0ac2c37080b23c2e1272c9f26444592bc38808717103809869fce4b37f40dacbabcd1f9432c3b7969e115af8b4634455bb89c44ad0f491a2c553c95c2362aa6fa16573c4a7baf7cfacbf0af77c08d56e0e19efcc591006244a9a28992e51c8d2ba224294f605df29eb6a2ec4c9ad93356cf1b94e1df42b4c0ee4ee40d7b1a1dc64990efd782bc144681644bf3908649dfbdd5c591772f15651a731219c866965e75b729aa7475ed75f91019ff72b37c17d5d61320a32e2c883e683d48215ac35458315078c765c9e6ddc9e31d062b9c795f8cef5a3cfb415de2e232ce337f31e967e7b9385738295310cb4eaaad17eab6c2237e3903ca7bf590014b51d879107b41d8d438a823c5abe82cd3fe1242c3629d50197f425de12fa245141accc0fc3f1f6c344632e19fadfdef0c3811e83a49a1b98a931a7d854d074bc2256b6cd6781002708c2c10cea625dfd8d6c15c38244aee1d55cd028d1c471a9c7438101401c69bad9d81e93f9a7548ae9735316734d467b7ef53bb45fe754a2d43c629f0e32943dc31f357304747442f4b01cf9e9fe57d9ea837a9b2325ca855f7e85231776b943b8065b396dd4204778c63f8f5726bf8a5467e491d77efcc3e8c2b28e9a968b9bdd724cb953ffe601354c04ced31423c2a23165cf97068ebff73ee7c83a93d1ab6d01a0799a545b3b2f499f71163c9c167ae5555c56a832a3a668ce3cf4acecc5bc973dc5faba260746619fd9848db05af847c733e7201c59cf8e57cd2036896def0181f6065190a72bfa2e2a3560969002f9be06a07593ff6416323f1480da1f4285525d713d643c482803c8822d18098525310063a0ff2a70724515ce45071f618899fe3a448d630d0b9dadc5c825da2cdc59b7fcf58b0809294d1fc2406cdaae41acd25371424d573781b85b98f6de0db8b1d838583dd065575b8c9b4e721b81a57a4a48e32fc1026854f4323166859dc90c808307fdba76c98f12497a6953815a460d7c41acc08c9655e8fb8b50d9b9d29d99c738ee27d9e6eee0336c22213bcdf3a937ad4b4df800a385c417ef2bc2e0f2f6cb42857cd8b6b2055971ae37bdc2432dbce8aad29bd1a08fba510d1ecfee7a0648e03dfa895b0ed51e08a3b7e76fa465a0c3be4e2932481f6219057e10beb696d53475bc8a63ed4cc1b3db2916767b5337ad297ea93594deab37b7beb07e2d11b771521a59d0ba0b7d9fba5c9408628bbfe66e3f0b949f7c3fa3469e148766abf95f95cf0fda1a619fbb8b6a3e5af65396dae64e8a27adf1b9ddd9160b551901a2c82d64a30d04e83a5bbfffa1cfc49b3a9655ca3c7b1addd14a2f487751cd4c0eb98cf705846a94109bec3f5ebc5c0527d891e62dcae002608ff5e748bd0fa6f5d0e380fdef36641b8fc914f8ee45a20d3c7ae3d7f6e0d7df8a460da4b56917cf0133abcc7d24bbfc7d5ba8311e1960cbeb8afe4317450a2b18fc039ea2531babb8ac93944e603a2645eceb911ca8ce062fe272468e2ae2e942cb46e84c3e3b6c2e82b68d11fb82b234c47380b03751eb3070a4062ad504885dc9560f6cd3d2fc6a51d0e67872898a98fd7355ed4327ccdd79987cf9a93e992ef9b3a45c3b49acdc403ecd6361c0b2c91136a0957d6dfd8906c1ca3d0550c2354c8e63fc6196c829d94a65bc67c17294fd1b9c5eb38a3e0704758da7d6871652654525d2d0283b3ac0c63d8291e922d86991d0114f08909c1c9a03a2312f5d3676191cb77358fbb3e09b0f7ae9a243cc6aa328f58f6217381e3bb87ea791fc116ed6cca9c67efb4b0ce03a32837b2652a5c7b21e00b2faffc33513217156ec6202f8713e9f9d67c9a500c7d22a8e84946c7e5de4b0d05c5878392aea365cc6771fa6bd2eb67006f456bb59356e5d4f0b630614dcf675e9b87c7bb63096bf99a15f865373a7039370ad485ab82f2e7537958718529990bba73ceca287072dda98b7cd62d0f48c080ad702f38acec8473de5e12248c2db0c6a2a6a711582c3d9b84822f4572c53a272469024b88ac6039e5e6204df509844f2a78380f99a13f82952ad9ac9706afc91215d4647b25326d0aefa4d875e8f0faa79cc5addfed08d69777e1837bd4967256c2c741e03d1eae8a0b474120a0933e1026bc3bc6ca3801de376f942f6322a449dc148bd66e1ecbc110fa5904501145115485c551054c6559b1d187f6a0e6b86f6c8b97db582f1d8a160b4ce44c676f9afd3caa8d58a1e7a7bb53b6d8ba6a140d97628604f51eb8f8b179402d1c4ac81d72db2390c4ee7951807bc7df3c6771d6348f9daeb923cf44a91a56dd373ee1d6ff0609fc35a46723a332a6c6e4549683bd13a03c12e73c78348e90a9efabbeb7d1e911e6cb70a1283ce2e60842e098f20b77b6c9734f89e2bc8d32ca8178312164cbbf9bc1324cdf46dced8b24c0295c28efbf38224abf59da89bdef13d4875299d57f0864c812083525688d00a6b4fe84630bc9eb19a9f9f181396a5bad26de6366a796ec506377703b1d5a9d3330d2c67272a7ede377e397fd4accd35392eba2a681e447c34510236e176b9803bd51753caed3e322c2fe66b2f6887fbab8820f96bebac13b867f1be1828273f7a5695bf4db44b1957881ea4aacbcfa2debf7b91f4cff14c63596657c15b80cc0fb861115f35b533a18d5dcb26bc30edc53b5377696b30d8f43fedbccf440b3b3c941e37c38a2e47efb3f19818da3cca9dc2a165bc715f88a6926d4077a07ba5ef11a7d653ff7bbbc36e1997aa25d66de7860bd7e8112c31d657257e3b7b2f3b88315a7105ea28324ab9540dc068686df43f82651503205dbc62c3ff788f6afa471f781d2825b8cd896701a69b1864dd7596b95a5cb2807869e2c1946f40e9472c19fe0beef440716465997be2026dedc6da90ad61c13d7708892cd3494517c9c65b8c00711b726a4de24c4fbd4006c82ab4a27131c9becb9ca4adffa3ecb1ee2017b595176fbc97fb581c65d123315a217dc2587bb957cb363afe17e7a1fdfae67c80c44f5bb0de0874680ce8065d951d2501bd676f897c883cab764b91cb9b74bc040cf51fee22b096a0a28a140b8134eb68e9df99154cc16b682c05a380dd0b7638c9c60bc34a1831aa024348642726c63e5910604e6251dc76d5159deb4e8b4ace04b2d3a4682620e9caec0fee1e59f822bb11c8456ea484ed7f792fadb1d52f11bc68d732932540abac0a178a26e5c43e093b94dcc3e00d3630071f476e6d954e34c6f4e7781694aa95c117576c594365b905aa07643e58d36854944e708389698ba0e4e6e86ca531c7b23a825f3ff0f8e4f1f767f48bd135a2d88e4a721813fbd22ecf7a586a3bbcc19549a6845c074d1f0e8635c3ce725cce3b7af664674ee5e982fa988e4a70bad3c3b4d73629a0a7e8e293d7e4300bab4a82a287996a3479ccaba5a2b6ab6fa8dadfd28c762494b56ff8a232a78aa255b8cab25486d8c9aab59d2ab26cd5df1013f7d5455f9c86082c98b75726a47e896b5ec41574e088d89e8ec693f0f0aea79c91458bb089dec23870e3ab98a814dcb80ef74a2ab3782fe6453f103422951c0559b5f94b737694cd2ec75fd8259381224d86bc79378c9b9109b650a031f9a5e155dd8d2ef4786d3646f225bdd03b13e610f053e09eb4b46ba32ddc521e936594d1bc02", 0x1000) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="95b9477d196a1aed944ad1b2c6b5313ffda4da055a58c9991bb050774a7e4d5048647b05e1970ce1f6586296eaa0162267d96725f9ffc0a7f353d07bda64ebfe3a6be1ad9ad3855665cf50946d9ab4d20fe70c4d56"], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x4040) r11 = socket(0x22, 0x2, 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x8810}, 0x4000410) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x6) 2.982889755s ago: executing program 34 (id=3990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xd}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffc0000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1.926016547s ago: executing program 35 (id=3996): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/pid_for_children\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) write$rfkill(r3, &(0x7f00000001c0)={0x4, 0x7, 0x1, 0x0, 0x1}, 0x8) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000200)={0x10, 0x0, "be8c1c6ce0d36b534b85287838aa5a15"}) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)=""/176, &(0x7f0000000300)=0xb0) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0xc}, 0x90) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x324, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e30}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3053}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xef}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x300000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0xee7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcf}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5706}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x583646b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x150}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xda90}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x8000}, 0x4004841) socketpair(0x66261f81ee9e74a7, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r8, 0xd) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000880)=0x4046, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000940)={@empty, 0x0}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x5, 0x8, 0x48, @loopback, @loopback, 0x7800, 0x40, 0xb, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'erspan0\x00', 0x0, 0x10, 0x7818, 0x9, 0x8, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x2c, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x2b, 0x0, 0xd, [0x9, 0x2, 0x3]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x0, 0xc, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x5, 0x0, 0xcd, 0x4, 0x0, @loopback, @private=0xa010101, {[@end, @generic={0x82, 0xa, "67fa30c131e50bda"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000ec0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x184, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4040040}, 0x8004) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0xc8d4) tee(r7, r7, 0xffffffff, 0xd) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}]}, {0x0, [0x5f, 0x2e, 0x30]}}, &(0x7f0000001180)=""/191, 0x2d, 0xbf, 0x0, 0xfb36, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xf, 0x0, &(0x7f0000001000), &(0x7f0000001040)='syzkaller\x00', 0x80000000, 0xac, &(0x7f0000001080)=""/172, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2f, r16, 0x8, &(0x7f0000001280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x3, 0xc, 0xb4}, 0x10, r17, 0xffffffffffffffff, 0x4, &(0x7f0000001780)=[0x1, 0xffffffffffffffff], &(0x7f00000017c0)=[{0x4, 0x4, 0x1, 0x8}, {0x4, 0x2, 0x10, 0x4}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x4, 0x4, 0x5}]}, 0x94) 1.876760749s ago: executing program 36 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x400, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4400}, [@IFLA_EVENT={0x8, 0x2c, 0x7fffffff}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xffe0, 0xa}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40095}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000002d813f3da4ceeb6500040007c00c00020000000000000000000c0004000900000000000000"], 0x30}}, 0x0) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x1ff, @any, 0xa}, 0xfffffe91) (async) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x1ff, @any, 0xa}, 0xfffffe91) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r10, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) ioctl$SIOCAX25DELUID(r10, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x5, 0xa) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x5, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xb9}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 0s ago: executing program 37 (id=4002): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80000001, 0x4d8, 0x4, 0x200, r0, 0xa, '\x00', 0x0, r0, 0x1, 0x5, 0x0, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000f70000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000008500000090000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="050003"], 0x28}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r12 = socket(0x11, 0xa, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r13, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r12}, 0x20) sendmsg$802154_dgram(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="aac6be871dce2eed972d42d881527588f18d37f46ab7a1b4fd76884ea282d46de5c480c0998752db22f01a6527b389aa3d9283ea8bb1e03d1e3a28015a5196e65d529563d1e9015d427f059f5be5896b4e010a95fe8a804985412c", 0x5b}, 0x1, 0x0, 0x0, 0x1000}, 0x140) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r13, 0x40049366, &(0x7f00000002c0)=0x1) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x118, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xdb, 0x8, "dfd284314ac48ad89398a577c8e8c10b379a2f97879a672625860ef5cb02a7fff19b2969b4d6e0375b13ee1f2f989a272bb014d537f07303740c0daecbdc12d8e0051e91f165564c0609e1364ba51b762bfe48745400dac8e3e6e23d7f437cbb2d07a7acf15f8a933a0fb44a4a21779acd350cfab722115595b66c6ef0d2577d5434ceea004791d8a91e3902d2817a0d2e66ef160abef051aa420f5e3affb393007925a0e49b48e6ce35f6d87b0dcdb29288964fd3179c4f8cd3b6fad3aaf3dfa7023ea4bc10c16210b5ed1acfb95b3c92daacae88c39b"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, 0x0, 0x0) kernel console output (not intermixed with test programs): T12] bond5 (unregistering): Released all slaves [ 627.739736][ T12] bond6 (unregistering): Released all slaves [ 627.751816][ T12] bond7 (unregistering): Released all slaves [ 627.764343][ T12] bond8 (unregistering): Released all slaves [ 627.778334][ T12] bond9 (unregistering): Released all slaves [ 627.791380][T17782] wg1 speed is unknown, defaulting to 1000 [ 627.806634][T17737] ip6_vti0 speed is unknown, defaulting to 1000 [ 627.903953][ T12] tipc: Disabling bearer [ 627.922479][ T12] tipc: Left network mode [ 628.090731][T17793] wg1 speed is unknown, defaulting to 1000 [ 628.319330][T17782] ip6_vti0 speed is unknown, defaulting to 1000 [ 628.485666][T17737] chnl_net:caif_netlink_parms(): no params data found [ 628.736729][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.743971][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.751749][T17737] bridge_slave_0: entered allmulticast mode [ 628.762764][T17737] bridge_slave_0: entered promiscuous mode [ 628.772923][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.780288][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.788496][T17737] bridge_slave_1: entered allmulticast mode [ 628.796839][T17737] bridge_slave_1: entered promiscuous mode [ 629.108321][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.147095][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.293531][T17737] team0: Port device team_slave_0 added [ 629.310084][T17737] team0: Port device team_slave_1 added [ 629.358096][T17793] ip6_vti0 speed is unknown, defaulting to 1000 [ 629.415903][T17737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.423012][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.450246][T17737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.463839][T17737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.471540][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.534391][T17737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.651054][T17737] hsr_slave_0: entered promiscuous mode [ 629.665645][T17737] hsr_slave_1: entered promiscuous mode [ 629.672138][T17737] debugfs: 'hsr0' already exists in 'hsr' [ 629.685806][T17811] netlink: 'syz.3.3138': attribute type 25 has an invalid length. [ 629.694260][T17737] Cannot create hsr debugfs directory [ 629.715407][ T5835] Bluetooth: hci0: command tx timeout [ 629.935411][T17761] IPVS: starting estimator thread 0... [ 630.024382][T17818] IPVS: using max 26 ests per chain, 62400 per kthread [ 630.291899][T17823] netlink: 'syz.3.3142': attribute type 29 has an invalid length. [ 630.371418][T17824] netlink: 'syz.3.3142': attribute type 1 has an invalid length. [ 630.379514][T17824] __nla_validate_parse: 5 callbacks suppressed [ 630.383897][T17824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3142'. [ 630.402690][T17824] NCSI netlink: No device for ifindex 0 [ 630.431203][T17822] netlink: 'syz.3.3142': attribute type 66 has an invalid length. [ 630.665999][T17826] netlink: set zone limit has 4 unknown bytes [ 630.853885][ T12] hsr_slave_0: left promiscuous mode [ 630.860422][ T12] hsr_slave_1: left promiscuous mode [ 630.874717][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.648034][ T12] team0 (unregistering): Port device 76žÿ removed [ 631.686505][ T12] team0 (unregistering): Port device team_slave_0 removed [ 631.794430][ T5835] Bluetooth: hci0: command tx timeout [ 631.943238][ T12] team0 (unregistering): Port device dummy0 removed [ 632.400952][T17844] netlink: 'syz.4.3148': attribute type 1 has an invalid length. [ 633.161884][T17866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.243536][T17858] wg1 speed is unknown, defaulting to 1000 [ 633.452298][T17737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 633.631545][T17737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 633.736919][T17737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 633.805660][T17737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 633.843816][ T12] IPVS: stop unused estimator thread 0... [ 634.309187][T17737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.362505][T17737] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.385536][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.392730][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.439941][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.447291][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.510887][T17858] ip6_vti0 speed is unknown, defaulting to 1000 [ 634.893621][T17737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.963446][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062a73800: rx timeout, send abort [ 634.971791][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ab04400: rx timeout, send abort [ 634.980251][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062a73800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 634.994640][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ab04400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 635.063269][T17737] veth0_vlan: entered promiscuous mode [ 635.091280][T17737] veth1_vlan: entered promiscuous mode [ 635.176721][T17908] netlink: 'syz.0.3161': attribute type 1 has an invalid length. [ 635.194491][T17908] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3161'. [ 635.247764][T17737] veth0_macvtap: entered promiscuous mode [ 635.267433][T17737] veth1_macvtap: entered promiscuous mode [ 635.339774][T17737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.381866][T17737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.398586][T17911] netlink: 'syz.4.3164': attribute type 3 has an invalid length. [ 635.427339][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.445333][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.473620][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.490583][ T6539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.609544][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.634637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.738508][ T6539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.746863][ T6539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.903751][T17923] wg1 speed is unknown, defaulting to 1000 [ 636.011302][T17926] xt_TCPMSS: Only works on TCP SYN packets [ 636.031054][T17929] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3168'. [ 636.046376][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 636.113307][T17923] ip6_vti0 speed is unknown, defaulting to 1000 [ 636.279807][T17925] wg1 speed is unknown, defaulting to 1000 [ 636.286301][T17924] siw: device registration error -23 [ 636.502558][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 636.660957][T17943] syzkaller0: entered promiscuous mode [ 636.667071][T17943] syzkaller0: entered allmulticast mode [ 636.698310][T17941] bridge_slave_1: left allmulticast mode [ 636.705706][T17941] bridge_slave_1: left promiscuous mode [ 636.711974][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.741416][T17941] bridge_slave_0: left allmulticast mode [ 636.750302][T17941] bridge_slave_0: left promiscuous mode [ 636.760909][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.857931][T17925] ip6_vti0 speed is unknown, defaulting to 1000 [ 637.406128][T17956] netlink: 'syz.0.3175': attribute type 1 has an invalid length. [ 638.713906][T17954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.879481][T17960] tipc: Enabling of bearer rejected, failed to enable media [ 638.924330][T17967] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3179'. [ 639.075757][T17976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3179'. [ 639.097672][T17976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3179'. [ 639.602229][T17997] ªªªªªª: renamed from wg2 (while UP) [ 639.832249][T18008] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3192'. [ 639.895358][T18009] netlink: 'syz.4.3191': attribute type 62 has an invalid length. [ 640.020742][T18016] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 640.023099][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 640.044677][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 640.054929][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 640.077891][T18014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.096332][T18013] netlink: 'syz.3.3193': attribute type 7 has an invalid length. [ 640.110929][T18013] netlink: 'syz.3.3193': attribute type 8 has an invalid length. [ 640.513709][T18033] openvswitch: netlink: IP tunnel dst address not specified [ 640.640136][T18037] wg1 speed is unknown, defaulting to 1000 [ 640.865076][T18048] wg1 speed is unknown, defaulting to 1000 [ 641.029730][T18037] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.347897][T18048] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.565996][T18064] __nla_validate_parse: 23 callbacks suppressed [ 641.566013][T18064] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3209'. [ 641.708795][T18068] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3210'. [ 642.194976][T18080] netlink: 'syz.4.3213': attribute type 16 has an invalid length. [ 642.211047][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.219875][T18080] netlink: 'syz.4.3213': attribute type 17 has an invalid length. [ 642.235453][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.501685][T18080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.633503][T18094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3218'. [ 643.131736][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 643.180036][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 643.188891][T18123] siw: device registration error -23 [ 643.189249][T18116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3226'. [ 643.212556][T18116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 643.228083][T18123] xt_TCPMSS: Only works on TCP SYN packets [ 643.266262][T18116] vlan2: entered allmulticast mode [ 643.271484][T18116] dummy0: entered allmulticast mode [ 643.306460][T18116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3226'. [ 643.767628][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3233'. [ 644.135972][T18150] Cannot find del_set index 2 as target [ 644.538308][T18176] netlink: 'syz.5.3242': attribute type 16 has an invalid length. [ 644.539314][T18171] netlink: 'syz.2.3243': attribute type 4 has an invalid length. [ 644.573829][T18176] netlink: 'syz.5.3242': attribute type 17 has an invalid length. [ 644.613085][T18178] netlink: 'syz.4.3246': attribute type 2 has an invalid length. [ 644.621305][T18178] netlink: 'syz.4.3246': attribute type 8 has an invalid length. [ 644.629308][T18178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3246'. [ 644.644830][T18179] siw: device registration error -23 [ 644.670471][T18179] xt_TCPMSS: Only works on TCP SYN packets [ 644.767991][T18176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.955757][T18186] syzkaller1: entered promiscuous mode [ 644.962010][T18186] syzkaller1: entered allmulticast mode [ 645.051047][T18190] : renamed from bond_slave_0 (while UP) [ 645.261851][T18206] netlink: 'syz.5.3252': attribute type 1 has an invalid length. [ 645.298149][T18210] syzkaller1: entered promiscuous mode [ 645.303847][T18210] syzkaller1: entered allmulticast mode [ 645.922178][T18228] syzkaller1: entered promiscuous mode [ 645.933893][T18228] syzkaller1: entered allmulticast mode [ 645.998781][T18230] bond0: (slave bond_slave_0): Releasing backup interface [ 646.161870][T18230] bond0: (slave bond_slave_1): Releasing backup interface [ 646.190539][T18230] team0: Port device team_slave_0 removed [ 646.227661][T18230] team0: Port device team_slave_1 removed [ 646.248022][T18230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.261126][T18230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.290901][T18230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 646.497872][T18249] siw: device registration error -23 [ 646.508352][T18249] xt_TCPMSS: Only works on TCP SYN packets [ 646.519629][T18248] netlink: 'syz.4.3266': attribute type 15 has an invalid length. [ 646.879657][T18264] __nla_validate_parse: 6 callbacks suppressed [ 646.879675][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 646.973875][T18266] wg1 speed is unknown, defaulting to 1000 [ 647.102656][T18276] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 647.505216][T18266] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.543473][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3275'. [ 647.607609][T18285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3277'. [ 647.793481][T18293] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3278'. [ 648.067104][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3278'. [ 648.112693][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3278'. [ 648.510849][T18287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.647521][T18287] netlink: 'syz.3.3276': attribute type 3 has an invalid length. [ 648.660783][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3276'. [ 651.876896][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 210 seconds [ 651.887667][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 210 seconds [ 651.898664][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 210 seconds [ 651.909658][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 210 seconds [ 667.394422][T15833] Bluetooth: hci5: command 0x0406 tx timeout [ 681.956849][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 240 seconds [ 681.967682][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 240 seconds [ 681.978712][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 240 seconds [ 681.989695][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 240 seconds [ 685.797420][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 707.137437][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3279'. [ 707.154841][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 707.177233][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 707.207675][T18305] netlink: 'syz.2.3281': attribute type 12 has an invalid length. [ 707.240499][T18303] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 707.282585][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.507687][T18322] xt_cgroup: invalid path, errno=-2 [ 707.514992][T18310] team_slave_0: left promiscuous mode [ 707.521959][T18310] team_slave_1: left promiscuous mode [ 707.628121][T18310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.655671][T18310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.800249][T18310] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 707.854876][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.877134][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.924108][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.964277][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.011001][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.023489][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.042411][T18336] netlink: 'syz.2.3286': attribute type 4 has an invalid length. [ 708.054620][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.094358][T18337] netlink: 'syz.2.3286': attribute type 4 has an invalid length. [ 708.118978][T18336] netlink: 'syz.2.3286': attribute type 6 has an invalid length. [ 708.168770][T18336] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.387859][T18350] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3290'. [ 708.942017][T18355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'. [ 708.954257][T18355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'. [ 708.987393][T18348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.007809][T18348] netlink: 'syz.2.3289': attribute type 3 has an invalid length. [ 709.015846][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 709.283780][T18365] bond1: Unable to set down delay as MII monitoring is disabled [ 709.357070][T18365] bond1 (unregistering): Released all slaves [ 709.518282][T18374] wg1 speed is unknown, defaulting to 1000 [ 709.857758][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 710.141505][T18374] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.177886][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 710.258024][T18398] wg1 speed is unknown, defaulting to 1000 [ 710.351302][T18406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'. [ 710.526318][T18403] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 710.697839][T18403] bond1 (unregistering): Released all slaves [ 711.059933][T18398] ip6_vti0 speed is unknown, defaulting to 1000 [ 711.143252][T18421] netlink: 'syz.4.3309': attribute type 16 has an invalid length. [ 711.184251][T18421] netlink: 'syz.4.3309': attribute type 17 has an invalid length. [ 711.229765][T18421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 711.260157][T18422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.302707][T18416] netlink: 'syz.3.3307': attribute type 3 has an invalid length. [ 711.380256][T18423] sctp: [Deprecated]: syz.2.3308 (pid 18423) Use of int in max_burst socket option deprecated. [ 711.380256][T18423] Use struct sctp_assoc_value instead [ 711.609626][T18431] FAULT_INJECTION: forcing a failure. [ 711.609626][T18431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.624524][T18431] CPU: 0 UID: 0 PID: 18431 Comm: syz.3.3312 Not tainted syzkaller #0 PREEMPT(full) [ 711.624548][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.624558][T18431] Call Trace: [ 711.624564][T18431] [ 711.624571][T18431] dump_stack_lvl+0x189/0x250 [ 711.624596][T18431] ? __pfx____ratelimit+0x10/0x10 [ 711.624612][T18431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.624630][T18431] ? __pfx__printk+0x10/0x10 [ 711.624644][T18431] ? __might_fault+0xb0/0x130 [ 711.624672][T18431] should_fail_ex+0x414/0x560 [ 711.624697][T18431] _copy_from_user+0x2d/0xb0 [ 711.624715][T18431] __sys_connect+0x123/0x440 [ 711.624731][T18431] ? __fget_files+0x3a0/0x420 [ 711.624745][T18431] ? __pfx___sys_connect+0x10/0x10 [ 711.624770][T18431] ? __pfx_ksys_write+0x10/0x10 [ 711.624794][T18431] __x64_sys_connect+0x7a/0x90 [ 711.624810][T18431] do_syscall_64+0xfa/0xfa0 [ 711.624825][T18431] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.624842][T18431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.624855][T18431] ? clear_bhb_loop+0x60/0xb0 [ 711.624872][T18431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.624885][T18431] RIP: 0033:0x7f1f1fd8f749 [ 711.624898][T18431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.624911][T18431] RSP: 002b:00007f1f20b7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 711.624927][T18431] RAX: ffffffffffffffda RBX: 00007f1f1ffe5fa0 RCX: 00007f1f1fd8f749 [ 711.624938][T18431] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 711.624947][T18431] RBP: 00007f1f20b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 711.624956][T18431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.624964][T18431] R13: 00007f1f1ffe6038 R14: 00007f1f1ffe5fa0 R15: 00007ffc58d55d08 [ 711.624995][T18431] [ 712.114040][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 270 seconds [ 712.115149][T18440] bridge0: entered promiscuous mode [ 712.124881][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 270 seconds [ 712.141050][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 270 seconds [ 712.152984][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 270 seconds [ 712.196353][T18438] __nla_validate_parse: 5 callbacks suppressed [ 712.196373][T18438] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3314'. [ 712.225450][T18440] ip6gretap0: entered promiscuous mode [ 712.255202][T18440] debugfs: 'hsr1' already exists in 'hsr' [ 712.260994][T18440] Cannot create hsr debugfs directory [ 712.281192][T18442] sock: sock_set_timeout: `syz.4.3315' (pid 18442) tries to set negative timeout [ 712.301848][T18438] vlan2: entered allmulticast mode [ 712.334224][T18438] erspan0: entered allmulticast mode [ 712.530546][T18447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3318'. [ 712.727342][T18452] wg1 speed is unknown, defaulting to 1000 [ 712.908442][T18460] netlink: 'syz.5.3320': attribute type 16 has an invalid length. [ 712.918404][T18460] netlink: 'syz.5.3320': attribute type 17 has an invalid length. [ 712.994069][T18460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.015675][T18460] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.034565][T18460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 713.197792][T18462] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3321'. [ 713.295657][T18452] ip6_vti0 speed is unknown, defaulting to 1000 [ 713.337832][T18466] vlan2: entered promiscuous mode [ 713.420416][T18469] netlink: 'syz.5.3323': attribute type 1 has an invalid length. [ 713.542346][T18469] bond1 (unregistering): Released all slaves [ 713.572238][T18473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3325'. [ 713.617494][T18473] --map-set only usable from mangle table [ 713.715365][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3323'. [ 713.716517][T18464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.806113][T18464] netlink: 'syz.3.3322': attribute type 3 has an invalid length. [ 713.814001][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 714.166960][T18489] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 714.393510][T18500] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.418419][T18507] netlink: 'syz.3.3331': attribute type 16 has an invalid length. [ 714.430718][T18500] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.439104][T18507] netlink: 'syz.3.3331': attribute type 17 has an invalid length. [ 714.483462][T18501] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3330'. [ 714.548429][T18507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.642504][T18510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3333'. [ 714.861824][T18514] pimreg: entered allmulticast mode [ 714.896936][T18516] macvlan1: entered promiscuous mode [ 714.905262][T18516] ipvlan0: entered promiscuous mode [ 714.923485][T18516] ipvlan0: left promiscuous mode [ 714.931921][T18516] macvlan1: left promiscuous mode [ 714.934520][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3337'. [ 714.953096][T18519] pimreg: left allmulticast mode [ 714.955475][T18522] netlink: 6908 bytes leftover after parsing attributes in process `syz.2.3339'. [ 714.968702][T18522] openvswitch: netlink: Message has 8 unknown bytes. [ 715.128689][T18531] wg1 speed is unknown, defaulting to 1000 [ 715.329925][T18543] hsr_slave_0: left promiscuous mode [ 715.372477][T18543] hsr_slave_1: left promiscuous mode [ 715.487138][T18545] netlink: 'syz.0.3344': attribute type 16 has an invalid length. [ 715.507097][T18545] netlink: 'syz.0.3344': attribute type 17 has an invalid length. [ 715.707621][T18545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.717881][T18545] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.734868][T18545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.795486][T18555] wg1 speed is unknown, defaulting to 1000 [ 716.097060][T18531] ip6_vti0 speed is unknown, defaulting to 1000 [ 716.461061][T18581] netlink: 'syz.5.3355': attribute type 3 has an invalid length. [ 716.510656][T18581] netlink: 'syz.5.3355': attribute type 1 has an invalid length. [ 716.533650][T18555] ip6_vti0 speed is unknown, defaulting to 1000 [ 717.257926][T18612] __nla_validate_parse: 13 callbacks suppressed [ 717.257947][T18612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3363'. [ 717.501066][T18620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3365'. [ 717.576565][T18616] wg1 speed is unknown, defaulting to 1000 [ 717.801642][T18627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.811580][T18627] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.829097][T18627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.870632][T18616] ip6_vti0 speed is unknown, defaulting to 1000 [ 718.681524][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 718.735025][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 718.884104][T18658] validate_nla: 4 callbacks suppressed [ 718.893058][T18658] netlink: 'syz.5.3380': attribute type 16 has an invalid length. [ 718.904007][T18658] netlink: 'syz.5.3380': attribute type 17 has an invalid length. [ 718.965351][T18658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 719.107890][T18674] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3384'. [ 719.241460][T18677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3386'. [ 719.289228][T18678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3384'. [ 719.298914][T18678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3384'. [ 719.407337][T18681] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3385'. [ 719.435738][T18678] bridge0: entered promiscuous mode [ 719.523266][T18685] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3388'. [ 719.572149][T18678] bridge0: left promiscuous mode [ 719.600596][T18677] wg1 speed is unknown, defaulting to 1000 [ 719.613441][T18685] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 719.622180][T18685] 0ªî{X¹¦: entered allmulticast mode [ 719.628681][T18685] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 719.653241][T18686] bridge0: entered promiscuous mode [ 719.669781][T18686] ip6gretap0: entered promiscuous mode [ 719.690374][T18686] debugfs: 'hsr0' already exists in 'hsr' [ 719.696861][T18686] Cannot create hsr debugfs directory [ 719.714799][ T5835] Bluetooth: hci0: command tx timeout [ 720.035055][T18677] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.167979][T18707] netlink: 'syz.4.3394': attribute type 16 has an invalid length. [ 720.194806][T18707] netlink: 'syz.4.3394': attribute type 17 has an invalid length. [ 720.241917][T18707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 720.632365][T18722] wg1 speed is unknown, defaulting to 1000 [ 720.890204][T18722] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.962201][T18729] wg1 speed is unknown, defaulting to 1000 [ 721.489144][T18735] netlink: 'syz.3.3402': attribute type 2 has an invalid length. [ 721.497355][T18735] netlink: 'syz.3.3402': attribute type 9 has an invalid length. [ 721.993991][T18755] netlink: 'syz.4.3406': attribute type 16 has an invalid length. [ 722.039600][T18755] netlink: 'syz.4.3406': attribute type 17 has an invalid length. [ 722.169487][T18755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 722.231655][T18729] ip6_vti0 speed is unknown, defaulting to 1000 [ 722.464529][T18765] __nla_validate_parse: 12 callbacks suppressed [ 722.464548][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3408'. [ 722.480330][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3409'. [ 722.489614][T18761] bridge_slave_1: left allmulticast mode [ 722.492757][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3409'. [ 722.497413][T18761] bridge_slave_1: left promiscuous mode [ 722.511854][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.525078][T18761] bridge_slave_0: left allmulticast mode [ 722.530723][T18761] bridge_slave_0: left promiscuous mode [ 722.536514][T18761] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.585219][T18761] bridge0 (unregistering): left promiscuous mode [ 722.765357][T18766] bridge0: entered promiscuous mode [ 722.772888][T18766] ip6gretap0: entered promiscuous mode [ 722.785490][T18766] debugfs: 'hsr1' already exists in 'hsr' [ 722.802148][T18766] Cannot create hsr debugfs directory [ 722.813670][T18766] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 722.844777][T18758] wg1 speed is unknown, defaulting to 1000 [ 723.241614][T18758] ip6_vti0 speed is unknown, defaulting to 1000 [ 723.494646][T18780] wg1 speed is unknown, defaulting to 1000 [ 723.901979][T18780] ip6_vti0 speed is unknown, defaulting to 1000 [ 724.665550][T18808] netlink: 'syz.2.3420': attribute type 4 has an invalid length. [ 725.037263][T18813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3422'. [ 725.145656][T18814] wg1 speed is unknown, defaulting to 1000 [ 725.198746][T18820] netdevrim0: renamed from erspan0 (while UP) [ 725.236459][T18820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3423'. [ 725.256024][T18820] A link change request failed with some changes committed already. Interface netdevrim0 may have been left with an inconsistent configuration, please check. [ 725.327443][T18820] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3423'. [ 725.356113][T18814] ip6_vti0 speed is unknown, defaulting to 1000 [ 725.645169][T18826] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3425'. [ 725.671087][T18826] tc_dump_action: action bad kind [ 725.755598][T18826] vlan2: entered promiscuous mode [ 725.905082][T18832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.425273][T18849] wg1 speed is unknown, defaulting to 1000 [ 726.453996][T18854] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 726.550547][T18858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3434'. [ 726.621454][T18861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3435'. [ 726.662087][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3434'. [ 726.886036][T18862] bridge_slave_1: left allmulticast mode [ 726.961856][T18862] bridge_slave_1: left promiscuous mode [ 726.967859][T18862] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.987355][T18862] bridge_slave_0: left allmulticast mode [ 726.993221][T18862] bridge_slave_0: left promiscuous mode [ 726.999937][T18862] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.111598][T18863] bridge_slave_1: left allmulticast mode [ 727.122070][T18863] bridge_slave_1: left promiscuous mode [ 727.128042][T18863] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.139749][T18863] bridge_slave_0: left allmulticast mode [ 727.153165][T18863] bridge_slave_0: left promiscuous mode [ 727.174471][T18863] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.247046][T18863] bridge0 (unregistering): left promiscuous mode [ 727.301362][T18849] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.590580][T18864] wg1 speed is unknown, defaulting to 1000 [ 728.348633][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.377869][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.402932][T18864] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.445242][T18901] syzkaller0: entered promiscuous mode [ 728.453661][T18901] syzkaller0: entered allmulticast mode [ 728.466564][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.479648][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.523274][T18904] sctp: [Deprecated]: syz.0.3443 (pid 18904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 728.523274][T18904] Use struct sctp_sack_info instead [ 728.780232][T18903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.801013][T18903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.835798][T15833] Bluetooth: hci1: command 0x0406 tx timeout [ 728.979938][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.991020][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.026122][ T6544] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.063301][ T6544] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.072975][ T6544] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.090366][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.100590][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.137265][ T6544] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.148320][T18922] netlink: zone id is out of range [ 729.153640][T18922] netlink: zone id is out of range [ 729.160414][T18922] netlink: set zone limit has 8 unknown bytes [ 729.939431][ T36] smc: removing ib device syz2 [ 730.316932][ T12] dvmrp0 (unregistering): left allmulticast mode [ 730.975285][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 731.015290][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.055617][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 731.083309][ T12] bond0 (unregistering): Released all slaves [ 731.343433][ T12] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 731.352685][ T12] wireguard0: left promiscuous mode [ 731.361011][ T12] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 731.374365][ T12] bond1 (unregistering): Released all slaves [ 731.577905][ T12] bond2 (unregistering): Released all slaves [ 731.765032][ T12] bond3 (unregistering): (slave veth5): Releasing active interface [ 731.774627][ T12] bond3 (unregistering): Released all slaves [ 731.790083][T12409] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.806758][T12409] syz2: Port: 1 Link DOWN [ 731.970369][ T12] : left promiscuous mode [ 732.062728][T18957] syzkaller0: entered promiscuous mode [ 732.071313][T18957] syzkaller0: entered allmulticast mode [ 732.083391][T18955] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 732.107925][T18955] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 732.459483][T18967] __nla_validate_parse: 3 callbacks suppressed [ 732.459501][T18967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3459'. [ 732.590154][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3461'. [ 732.671721][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3461'. [ 733.949382][ T12] tipc: Disabling bearer [ 733.964262][ T12] tipc: Left network mode [ 733.964353][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 734.172042][T18955] wg1 speed is unknown, defaulting to 1000 [ 734.187270][T18982] wg1 speed is unknown, defaulting to 1000 [ 734.195358][T18981] wg1 speed is unknown, defaulting to 1000 [ 734.250843][T18989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.504782][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3469'. [ 734.918528][T19012] netlink: 'syz.2.3472': attribute type 21 has an invalid length. [ 734.930674][T19012] netlink: 'syz.2.3472': attribute type 6 has an invalid length. [ 734.938927][T19012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3472'. [ 734.966171][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 734.989056][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 735.012152][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 735.035494][T19013] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 735.044322][T19013] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3472'. [ 735.059352][T19013] NCSI netlink: No device for ifindex 0 [ 735.378095][T19025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3474'. [ 735.390021][T19025] tc_dump_action: action bad kind [ 735.397016][T19025] 8021q: VLANs not supported on ip6gre0 [ 735.417218][T19000] wg1 speed is unknown, defaulting to 1000 [ 736.431157][ T12] hsr_slave_0: left promiscuous mode [ 736.441446][ T12] hsr_slave_1: left promiscuous mode [ 736.463902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.498453][ T12] team_slave_0: left promiscuous mode [ 736.577506][T19046] netlink: 'syz.3.3480': attribute type 1 has an invalid length. [ 736.911919][ T12] team0 (unregistering): Port device team_slave_1 removed [ 736.964577][T19052] xt_policy: too many policy elements [ 736.972452][ T12] team0 (unregistering): Port device team_slave_0 removed [ 737.512866][T19054] __nla_validate_parse: 1 callbacks suppressed [ 737.512883][T19054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3482'. [ 737.730172][T19069] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3482'. [ 738.667680][ T12] IPVS: stop unused estimator thread 0... [ 738.988433][T19101] syzkaller1: entered promiscuous mode [ 738.995462][T19101] syzkaller1: entered allmulticast mode [ 739.085725][T19108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3496'. [ 739.139041][T19108] wg1 speed is unknown, defaulting to 1000 [ 739.979280][T19123] syzkaller0: entered promiscuous mode [ 739.994319][T19123] syzkaller0: entered allmulticast mode [ 740.157811][T19126] wg1 speed is unknown, defaulting to 1000 [ 740.235609][T19121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.283018][T19121] netlink: 'syz.4.3499': attribute type 3 has an invalid length. [ 740.304410][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3499'. [ 740.328297][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3502'. [ 740.385703][T19121] FAULT_INJECTION: forcing a failure. [ 740.385703][T19121] name failslab, interval 1, probability 0, space 0, times 0 [ 740.426521][T19121] CPU: 1 UID: 0 PID: 19121 Comm: syz.4.3499 Not tainted syzkaller #0 PREEMPT(full) [ 740.426547][T19121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.426557][T19121] Call Trace: [ 740.426564][T19121] [ 740.426572][T19121] dump_stack_lvl+0x189/0x250 [ 740.426600][T19121] ? __pfx____ratelimit+0x10/0x10 [ 740.426620][T19121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.426642][T19121] ? __pfx__printk+0x10/0x10 [ 740.426666][T19121] ? __pfx___might_resched+0x10/0x10 [ 740.426690][T19121] should_fail_ex+0x414/0x560 [ 740.426721][T19121] should_failslab+0xa8/0x100 [ 740.426741][T19121] __kmalloc_noprof+0xcb/0x7f0 [ 740.426762][T19121] ? kfree+0x4d/0x6d0 [ 740.426780][T19121] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 740.426812][T19121] tomoyo_realpath_from_path+0xe3/0x5d0 [ 740.426839][T19121] ? tomoyo_domain+0xd9/0x130 [ 740.426861][T19121] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 740.426883][T19121] tomoyo_path_number_perm+0x1e8/0x5a0 [ 740.426907][T19121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 740.426969][T19121] ? __fget_files+0x2a/0x420 [ 740.426990][T19121] ? __fget_files+0x3a0/0x420 [ 740.427011][T19121] ? __fget_files+0x2a/0x420 [ 740.427029][T19121] security_file_ioctl+0xcb/0x2d0 [ 740.427052][T19121] __se_sys_ioctl+0x47/0x170 [ 740.427077][T19121] do_syscall_64+0xfa/0xfa0 [ 740.427095][T19121] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.427116][T19121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.427133][T19121] ? clear_bhb_loop+0x60/0xb0 [ 740.427155][T19121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.427171][T19121] RIP: 0033:0x7f0a3ef8f749 [ 740.427188][T19121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.427204][T19121] RSP: 002b:00007f0a3fed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.427223][T19121] RAX: ffffffffffffffda RBX: 00007f0a3f1e5fa0 RCX: 00007f0a3ef8f749 [ 740.427237][T19121] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000004 [ 740.427249][T19121] RBP: 00007f0a3fed4090 R08: 0000000000000000 R09: 0000000000000000 [ 740.427260][T19121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.427270][T19121] R13: 00007f0a3f1e6038 R14: 00007f0a3f1e5fa0 R15: 00007ffce80de998 [ 740.427303][T19121] [ 740.427323][T19121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 740.760878][T19134] sch_tbf: burst 88 is lower than device veth1 mtu (1514) ! [ 741.337436][T19163] netlink: 'syz.4.3508': attribute type 12 has an invalid length. [ 741.378294][T19167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3510'. [ 741.537378][T19167] wg1 speed is unknown, defaulting to 1000 [ 741.625236][T19179] wg1 speed is unknown, defaulting to 1000 [ 741.784360][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'. [ 742.004582][T19192] netlink: 'syz.4.3515': attribute type 7 has an invalid length. [ 742.012662][T19192] netlink: 'syz.4.3515': attribute type 8 has an invalid length. [ 742.249787][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'. [ 742.350036][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3519'. [ 742.371998][T19210] netlink: 'syz.2.3518': attribute type 13 has an invalid length. [ 742.382312][T19209] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 742.384262][T19210] netlink: 'syz.2.3518': attribute type 17 has an invalid length. [ 742.404684][T19209] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3520'. [ 742.757854][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 300 seconds [ 742.774396][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 300 seconds [ 742.792585][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 300 seconds [ 742.803764][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 300 seconds [ 743.036564][T19211] netlink: 'syz.5.3519': attribute type 4 has an invalid length. [ 743.211298][T19232] vlan2: entered allmulticast mode [ 743.220437][T19232] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 743.531263][T19244] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3527'. [ 743.531706][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3528'. [ 743.686252][T19246] wg1 speed is unknown, defaulting to 1000 [ 743.923424][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3532'. [ 743.988765][T19265] Bluetooth: MGMT ver 1.23 [ 744.056630][T19269] netlink: 'syz.5.3532': attribute type 1 has an invalid length. [ 744.378111][T19270] bond1 (unregistering): Released all slaves [ 744.437235][T19259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.438133][T19283] netlink: 'syz.4.3531': attribute type 3 has an invalid length. [ 744.524367][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'. [ 744.634996][T17756] IPVS: starting estimator thread 0... [ 744.667407][T19288] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3538'. [ 744.728714][T19289] IPVS: using max 30 ests per chain, 72000 per kthread [ 744.783127][T19291] wg1 speed is unknown, defaulting to 1000 [ 745.506614][T19314] wg1 speed is unknown, defaulting to 1000 [ 745.660627][T19320] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3546'. [ 745.846917][T19315] wg1 speed is unknown, defaulting to 1000 [ 745.982525][T19327] tipc: Failed to obtain node identity [ 745.990043][T19327] tipc: Enabling of bearer rejected, failed to enable media [ 746.000714][T19328] tipc: Enabled bearer , priority 0 [ 746.009233][T19328] syzkaller0: entered promiscuous mode [ 746.015242][T19328] syzkaller0: entered allmulticast mode [ 746.130562][T19330] tipc: Resetting bearer [ 746.160607][T19326] tipc: Resetting bearer [ 746.190367][T19326] tipc: Disabling bearer [ 746.220169][T19332] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3550'. [ 746.511560][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3553'. [ 746.527394][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'. [ 746.589907][T19353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3555'. [ 746.633090][T19353] wg1 speed is unknown, defaulting to 1000 [ 747.239571][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.289348][T19360] vlan2: entered promiscuous mode [ 747.411358][T19364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.420681][T19364] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 747.627859][T19368] wg1 speed is unknown, defaulting to 1000 [ 747.662421][T19369] wg1 speed is unknown, defaulting to 1000 [ 748.102566][T19398] wg1 speed is unknown, defaulting to 1000 [ 748.236624][T19404] syz_tun: entered promiscuous mode [ 748.242320][T19404] vlan2: entered promiscuous mode [ 748.821474][T19406] siw: device registration error -23 [ 749.258015][T19424] __nla_validate_parse: 9 callbacks suppressed [ 749.258032][T19424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3577'. [ 750.017912][T19459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.086466][T19462] xt_NFQUEUE: number of total queues is 0 [ 750.239951][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 750.410880][T19478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3592'. [ 750.446255][T19478] wg1 speed is unknown, defaulting to 1000 [ 750.524409][T19466] netlink: 'syz.0.3588': attribute type 3 has an invalid length. [ 750.532516][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 750.652262][T19489] tipc: Started in network mode [ 750.658118][T19489] tipc: Node identity b61955ffaf69, cluster identity 4711 [ 750.666957][T19489] tipc: Enabled bearer , priority 0 [ 750.678703][T19489] syzkaller0: entered promiscuous mode [ 750.689622][T19489] syzkaller0: entered allmulticast mode [ 750.712681][T19488] tipc: Resetting bearer [ 750.772980][T19488] tipc: Disabling bearer [ 750.889146][T19496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3597'. [ 751.238843][T19492] wg1 speed is unknown, defaulting to 1000 [ 751.278869][T19507] wg1 speed is unknown, defaulting to 1000 [ 751.292867][T19521] netlink: 'syz.3.3601': attribute type 3 has an invalid length. [ 751.331625][T19521] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3601'. [ 751.511600][T19533] tipc: Enabling of bearer rejected, failed to enable media [ 751.696595][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3603'. [ 751.775202][T19533] bond1: entered allmulticast mode [ 751.783754][T19533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.924474][T19550] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 751.937898][T19550] bond2 (unregistering): Released all slaves [ 752.285138][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'. [ 752.575261][T19564] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3608'. [ 752.646971][T19569] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3610'. [ 752.923785][T19579] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 753.409792][T19611] wg1 speed is unknown, defaulting to 1000 [ 753.527101][T19616] wg1 speed is unknown, defaulting to 1000 [ 754.537439][T19638] wg1 speed is unknown, defaulting to 1000 [ 754.810565][T19640] wg1 speed is unknown, defaulting to 1000 [ 755.278164][T19656] netlink: 'syz.5.3632': attribute type 1 has an invalid length. [ 755.286803][T19633] wg1 speed is unknown, defaulting to 1000 [ 755.393884][T19656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.435042][T19658] bond1: (slave ip6gretap1): making interface the new active one [ 755.444519][T19658] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 755.465184][T19660] netlink: 'syz.3.3633': attribute type 1 has an invalid length. [ 755.491880][T19656] veth3: entered promiscuous mode [ 755.500815][T19656] bond1: (slave veth3): Enslaving as an active interface with a down link [ 755.556038][T19660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.576068][T19656] erspan0: entered allmulticast mode [ 755.582340][T19660] __nla_validate_parse: 4 callbacks suppressed [ 755.582356][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 755.588624][T19656] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 755.630686][T19658] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 755.846893][T19660] bond2 (unregistering): Released all slaves [ 755.896762][T19666] netlink: 'syz.5.3634': attribute type 12 has an invalid length. [ 756.044401][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 756.467273][T19680] syz_tun: entered promiscuous mode [ 756.484637][T19680] vlan2: entered promiscuous mode [ 756.862092][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 756.883647][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3640'. [ 757.046592][T19689] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 757.063615][T19690] netlink: 'syz.5.3641': attribute type 1 has an invalid length. [ 757.072586][T19690] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3641'. [ 757.120837][T19686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.128394][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 757.147338][T19693] raw_sendmsg: syz.5.3641 forgot to set AF_INET. Fix it! [ 757.183099][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 757.338533][T19701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 757.431212][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 757.605739][T19708] wg1 speed is unknown, defaulting to 1000 [ 758.127082][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'. [ 758.484575][T19723] team0 (unregistering): Port device team_slave_0 removed [ 758.514560][T19723] team0 (unregistering): Port device team_slave_1 removed [ 758.676891][T19731] wg1 speed is unknown, defaulting to 1000 [ 758.794286][T19733] wg1 speed is unknown, defaulting to 1000 [ 759.722522][T19755] wg1 speed is unknown, defaulting to 1000 [ 760.740473][T19776] __nla_validate_parse: 2 callbacks suppressed [ 760.740491][T19776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3663'. [ 760.766518][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'. [ 761.129531][T19781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.185699][T19798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3668'. [ 761.537608][T19803] netlink: 'syz.4.3669': attribute type 1 has an invalid length. [ 761.579367][T19781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.713172][T19803] bond1: entered promiscuous mode [ 761.725342][T19803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.771603][T19804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.780683][T19804] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 761.792311][T19804] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 761.808241][T19804] bond1: (slave wireguard0): making interface the new active one [ 761.817146][T19804] wireguard0: entered promiscuous mode [ 761.824734][T19804] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 761.834593][T19787] wg1 speed is unknown, defaulting to 1000 [ 761.867580][T19781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.898038][T19806] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 761.931289][T19806] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 762.119523][T19781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.176540][T19810] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 762.196897][T19810] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 762.255584][T19810] netlink: 'syz.4.3670': attribute type 10 has an invalid length. [ 762.263621][T19810] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 762.342951][ T6540] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.372315][ T6540] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.437242][ T6540] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.445756][ T6540] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.454474][T19816] wg1 speed is unknown, defaulting to 1000 [ 762.755811][T19830] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3677'. [ 762.914882][T19834] bridge1: entered promiscuous mode [ 762.926633][T19834] bridge1: entered allmulticast mode [ 763.055664][T19823] netlink: 'syz.2.3672': attribute type 6 has an invalid length. [ 763.068960][T19841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3681'. [ 763.357571][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3681'. [ 763.571879][T19847] syzkaller0: entered promiscuous mode [ 763.572598][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3683'. [ 763.587092][T19847] syzkaller0: entered allmulticast mode [ 763.605753][T19850] netlink: 'syz.5.3683': attribute type 13 has an invalid length. [ 765.473531][ T1229] IPVS: starting estimator thread 0... [ 765.520863][T19860] wg1 speed is unknown, defaulting to 1000 [ 765.564289][T19866] IPVS: using max 31 ests per chain, 74400 per kthread [ 765.658122][T19873] tipc: Enabled bearer , priority 0 [ 765.739187][T19873] syzkaller0: entered promiscuous mode [ 765.744974][T19873] syzkaller0: entered allmulticast mode [ 765.751363][T19873] tipc: Resetting bearer [ 765.759749][T19875] netlink: 'syz.5.3688': attribute type 1 has an invalid length. [ 765.785159][T19872] tipc: Resetting bearer [ 765.988073][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 765.998278][T19889] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3692'. [ 766.111107][T19894] netlink: 'syz.3.3693': attribute type 11 has an invalid length. [ 766.119812][T19894] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3693'. [ 767.475937][T19872] tipc: Disabling bearer [ 767.535146][ T10] tipc: Node number set to 426792447 [ 767.594474][T19901] netlink: 'syz.2.3694': attribute type 58 has an invalid length. [ 767.610331][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3694'. [ 768.204539][T19934] netlink: 'syz.3.3704': attribute type 12 has an invalid length. [ 768.212867][T19934] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3704'. [ 768.558854][T19956] wg1 speed is unknown, defaulting to 1000 [ 768.647889][T19962] tipc: Enabling of bearer rejected, failed to enable media [ 768.711287][T19963] wg1 speed is unknown, defaulting to 1000 [ 769.125847][T19989] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3719'. [ 769.490685][T20002] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3722'. [ 769.597589][T20006] sch_fq: defrate 0 ignored. [ 769.641365][T20006] xfrm1: entered allmulticast mode [ 769.893629][T20022] netlink: 'syz.5.3730': attribute type 1 has an invalid length. [ 769.920901][T20022] netlink: 15638 bytes leftover after parsing attributes in process `syz.5.3730'. [ 769.959933][T20022] netlink: 'syz.5.3730': attribute type 1 has an invalid length. [ 770.002356][T20022] netlink: 15638 bytes leftover after parsing attributes in process `syz.5.3730'. [ 770.099506][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 770.460654][T20037] IPv6: sit1: Disabled Multicast RS [ 770.469624][T20037] sit1: entered allmulticast mode [ 770.512021][T20042] batadv1: entered promiscuous mode [ 771.230125][T20066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.399822][T20057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.432271][T20057] netlink: 'syz.0.3739': attribute type 3 has an invalid length. [ 771.450793][T20057] __nla_validate_parse: 3 callbacks suppressed [ 771.450811][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'. [ 771.518440][T20071] pim6reg1: entered promiscuous mode [ 771.524053][T20071] pim6reg1: entered allmulticast mode [ 771.587081][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 771.616344][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 771.629507][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 771.646525][T20079] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3744'. [ 771.888506][T20097] netlink: 'syz.0.3751': attribute type 1 has an invalid length. [ 772.038075][T20097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.063060][T20100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.070265][T20100] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 772.083265][T20100] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 772.109742][T20107] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 772.118967][T20107] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 772.638931][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3756'. [ 772.742735][T20124] netlink: 'syz.3.3759': attribute type 3 has an invalid length. [ 772.767704][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3759'. [ 772.854555][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 330 seconds [ 772.866318][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 330 seconds [ 772.877881][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 330 seconds [ 772.889441][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 330 seconds [ 773.249299][T20138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3760'. [ 773.389127][T20149] netlink: 'syz.0.3766': attribute type 33 has an invalid length. [ 773.409911][T20149] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3766'. [ 773.474540][T15833] Bluetooth: hci0: command 0x0405 tx timeout [ 773.508651][T20149] wg1 speed is unknown, defaulting to 1000 [ 773.652602][T20166] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3769'. [ 773.688912][T20160] syzkaller0: entered promiscuous mode [ 773.699044][T20160] syzkaller0: entered allmulticast mode [ 774.162413][T20171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.196776][T20171] netlink: 'syz.5.3772': attribute type 3 has an invalid length. [ 774.615010][T20187] sctp: [Deprecated]: syz.4.3777 (pid 20187) Use of int in max_burst socket option. [ 774.615010][T20187] Use struct sctp_assoc_value instead [ 775.432574][T20233] netlink: 'syz.2.3790': attribute type 29 has an invalid length. [ 775.690265][T20245] tipc: New replicast peer: 255.255.255.83 [ 775.703910][T20245] tipc: Enabled bearer , priority 26 [ 775.733478][T20227] geneve3: entered promiscuous mode [ 775.764927][T20227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.067844][T20267] netlink: 'syz.4.3803': attribute type 1 has an invalid length. [ 776.088379][T20272] netlink: 'syz.3.3804': attribute type 10 has an invalid length. [ 776.101891][T20267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 776.109403][T20272] dummy0: entered promiscuous mode [ 776.121886][T20272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 776.420107][T20294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.447941][T20292] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR [ 776.496269][T20294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.530394][T20294] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 776.542540][T20294] bond3: (slave sit2): Error -95 calling set_mac_address [ 776.703585][T20320] bond4: (slave team0): Device is not bonding slave [ 776.712217][T20320] bond4: option active_slave: invalid value (team0) [ 776.737295][T20320] bond4 (unregistering): Released all slaves [ 777.071380][T20346] __nla_validate_parse: 10 callbacks suppressed [ 777.071398][T20346] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3816'. [ 777.077201][T20348] 8021q: VLANs not supported on ip_vti0 [ 777.288431][T20357] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 777.352134][T20357] netlink: 'syz.0.3822': attribute type 1 has an invalid length. [ 777.390750][T20365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3825'. [ 777.536977][T20369] syzkaller0: entered promiscuous mode [ 777.542618][T20369] syzkaller0: entered allmulticast mode [ 777.551543][T20369] TC_ACT_REPEAT abuse ? [ 777.592892][T20376] netlink: 'syz.3.3828': attribute type 4 has an invalid length. [ 777.805708][T20380] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.816704][T20380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.864950][T20388] wg1 speed is unknown, defaulting to 1000 [ 777.999991][T20395] wg1 speed is unknown, defaulting to 1000 [ 778.346770][T20404] netlink: 'syz.5.3834': attribute type 1 has an invalid length. [ 780.190251][T20407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3836'. [ 780.322654][T20412] wg1 speed is unknown, defaulting to 1000 [ 780.360453][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'. [ 780.503757][T20427] syzkaller0: entered promiscuous mode [ 780.529293][T20427] syzkaller0: entered allmulticast mode [ 780.654692][T20422] wg1 speed is unknown, defaulting to 1000 [ 780.682168][T20416] wg1 speed is unknown, defaulting to 1000 [ 781.168057][T20459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3849'. [ 781.368026][T20466] netlink: 'syz.4.3851': attribute type 33 has an invalid length. [ 781.376353][T20466] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3851'. [ 781.412268][T20460] wg1 speed is unknown, defaulting to 1000 [ 781.485533][T20468] syz_tun: entered promiscuous mode [ 781.490917][T20468] vlan0: entered promiscuous mode [ 781.678500][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3854'. [ 782.016914][T20479] syzkaller0: entered promiscuous mode [ 782.022427][T20479] syzkaller0: entered allmulticast mode [ 782.046088][T20478] tipc: Enabled bearer , priority 0 [ 782.073994][T20478] tipc: Resetting bearer [ 782.082219][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.092399][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.201383][T20474] wg1 speed is unknown, defaulting to 1000 [ 782.204615][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.283595][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.323305][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.369225][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.472038][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.481787][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.513122][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.527658][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 782.544037][T20476] tipc: Resetting bearer [ 782.566700][T20476] tipc: Disabling bearer [ 782.950840][T20485] ip6tnl2: entered allmulticast mode [ 783.357676][T20491] wg1 speed is unknown, defaulting to 1000 [ 783.647164][T20505] netlink: 'syz.5.3864': attribute type 3 has an invalid length. [ 783.851387][T20494] wg1 speed is unknown, defaulting to 1000 [ 784.374102][T20516] wg1 speed is unknown, defaulting to 1000 [ 784.711308][T20535] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 784.731298][T20533] ip6tnl2: entered allmulticast mode [ 784.760874][T20533] netlink: 'syz.4.3872': attribute type 1 has an invalid length. [ 784.816125][T20535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.001421][T20546] veth3: entered promiscuous mode [ 785.323431][T20563] netlink: 'syz.4.3879': attribute type 1 has an invalid length. [ 785.370969][T20557] wg1 speed is unknown, defaulting to 1000 [ 786.000246][ T30] audit: type=1800 audit(1764505688.484:11): pid=20568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3881" name="cgroup.controllers" dev="tmpfs" ino=1039 res=0 errno=0 [ 786.338608][T20587] ip6gretap1: entered allmulticast mode [ 786.436551][T20585] wg1 speed is unknown, defaulting to 1000 [ 786.834660][T20601] syzkaller1: entered promiscuous mode [ 786.853890][T20601] syzkaller1: entered allmulticast mode [ 787.171806][T20613] bond1: option xmit_hash_policy: invalid value (10) [ 787.185332][T20613] bond1 (unregistering): Released all slaves [ 787.206773][T20616] wg1 speed is unknown, defaulting to 1000 [ 787.372634][T20620] __nla_validate_parse: 35 callbacks suppressed [ 787.372653][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3892'. [ 787.930939][T20636] wg1 speed is unknown, defaulting to 1000 [ 788.043651][T20637] wg1 speed is unknown, defaulting to 1000 [ 788.435032][T20645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3899'. [ 788.527698][T20645] wg1 speed is unknown, defaulting to 1000 [ 788.725244][T20654] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3901'. [ 788.735702][T20654] 0ªX¹¦À: renamed from caif0 [ 788.772380][T20654] 0ªX¹¦À: entered allmulticast mode [ 788.787610][T20654] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 788.813116][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 788.845175][T20658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 789.029403][T20664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3904'. [ 789.122509][T20674] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3905'. [ 789.176524][T20674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.512571][T20695] IPVS: persistence engine module ip_vs_pe_ not found [ 790.361395][T20731] netlink: 'syz.5.3917': attribute type 13 has an invalid length. [ 790.374034][T20731] netlink: 'syz.5.3917': attribute type 17 has an invalid length. [ 790.480378][T20731] erspan0: left allmulticast mode [ 790.513287][T20731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.522838][T20731] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.537153][T20731] 0ªX¹¦À: left allmulticast mode [ 790.542297][T20731] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 790.740729][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3921'. [ 790.767258][T20748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3922'. [ 790.860150][T20753] IPVS: set_ctl: invalid protocol: 11608 224.0.0.2:20001 [ 790.968094][T20758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3924'. [ 791.021441][T20758] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 791.029200][T20758] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 791.061167][T20760] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 791.080312][T20760] netlink: 'syz.3.3925': attribute type 10 has an invalid length. [ 791.110226][T20760] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 791.195215][T20768] sctp: [Deprecated]: syz.0.3927 (pid 20768) Use of int in maxseg socket option. [ 791.195215][T20768] Use struct sctp_assoc_value instead [ 791.322396][T20782] 8021q: VLANs not supported on ip6gre0 [ 791.562340][T20794] wg1 speed is unknown, defaulting to 1000 [ 791.602437][T20799] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 791.629222][T20796] wg1 speed is unknown, defaulting to 1000 [ 792.048097][T20820] wg1 speed is unknown, defaulting to 1000 [ 792.270028][T20826] wg1 speed is unknown, defaulting to 1000 [ 792.679110][T20836] __nla_validate_parse: 1 callbacks suppressed [ 792.679129][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3944'. [ 792.738602][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3944'. [ 792.983415][T20851] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 793.101429][T20855] team0: Port device bridge3 added [ 793.112910][T20855] bridge0: port 1(team0) entered blocking state [ 793.119588][T20855] bridge0: port 1(team0) entered disabled state [ 793.126707][T20855] team0: entered allmulticast mode [ 793.132097][T20855] bridge3: entered allmulticast mode [ 793.155922][T20855] team0: left allmulticast mode [ 793.160884][T20855] bridge3: left allmulticast mode [ 793.239802][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3951'. [ 793.298430][T20834] wg1 speed is unknown, defaulting to 1000 [ 793.895319][T20864] wg1 speed is unknown, defaulting to 1000 [ 793.969846][T20865] wg1 speed is unknown, defaulting to 1000 [ 794.300144][T20873] wg1 speed is unknown, defaulting to 1000 [ 794.409694][T20875] wg1 speed is unknown, defaulting to 1000 [ 794.531757][T20879] dummy0: left promiscuous mode [ 794.619665][T20879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.635137][T20879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.773561][T20879] geneve3: left promiscuous mode [ 794.934008][ T6508] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.960494][ T6508] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.984742][ T6508] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.993377][ T6508] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.088498][T20886] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3958'. [ 795.120042][T20886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3958'. [ 796.132560][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3961'. [ 796.343590][T20898] macvlan3: entered promiscuous mode [ 796.349481][T20898] macvlan3: entered allmulticast mode [ 796.356661][T20898] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 796.631383][T20904] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3963'. [ 797.340377][T20910] wg1 speed is unknown, defaulting to 1000 [ 797.955676][T20933] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 798.081792][T20934] lo: entered allmulticast mode [ 798.104080][T20934] tunl0: entered allmulticast mode [ 798.115183][T20934] gre0: entered allmulticast mode [ 798.141036][T20934] erspan0: entered allmulticast mode [ 798.152212][T20934] ip_vti0: entered allmulticast mode [ 798.159313][T20934] ip6_vti0: entered allmulticast mode [ 798.166567][T20934] sit0: entered allmulticast mode [ 798.178156][T20934] ip6tnl0: entered allmulticast mode [ 798.185725][T20934] ip6gre0: entered allmulticast mode [ 798.226375][T20934] syz_tun: entered allmulticast mode [ 798.233702][T20934] ip6gretap0: entered allmulticast mode [ 798.251710][T20934] vcan0: entered allmulticast mode [ 798.282084][T20934] bond0: entered allmulticast mode [ 798.304275][T20934] bond_slave_0: entered allmulticast mode [ 798.318009][T20934] bond_slave_1: entered allmulticast mode [ 798.333881][T20934] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 798.349031][T20934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.359964][T20934] team0: entered allmulticast mode [ 798.365539][T20934] team_slave_0: entered allmulticast mode [ 798.371550][T20934] team_slave_1: entered allmulticast mode [ 798.379990][T20934] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.388344][T20934] dummy0: entered allmulticast mode [ 798.396402][T20934] nlmon0: entered allmulticast mode [ 798.428712][T20934] caif0: entered allmulticast mode [ 798.434072][T20934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.630652][T20946] wg1 speed is unknown, defaulting to 1000 [ 798.706009][T20954] x_tables: duplicate underflow at hook 1 [ 798.752093][T20954] 8021q: VLANs not supported on ipvlan0 [ 798.759696][T20952] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3974'. [ 799.008341][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 799.018229][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 799.196258][T20977] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 799.559725][T20983] wg1 speed is unknown, defaulting to 1000 [ 799.598666][T20984] wg1 speed is unknown, defaulting to 1000 [ 799.692914][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3984'. [ 799.746346][T20988] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3985'. [ 799.768889][T20988] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3985'. [ 800.300735][T21012] netlink: 'syz.4.3990': attribute type 3 has an invalid length. [ 800.311157][T21006] lo: entered allmulticast mode [ 800.321961][T21006] tunl0: entered allmulticast mode [ 800.329575][T21006] gre0: entered allmulticast mode [ 800.359509][T21006] gretap0: entered allmulticast mode [ 800.368194][T21012] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3990'. [ 800.384770][T21006] ip_vti0: entered allmulticast mode [ 800.393268][T21006] ip6_vti0: entered allmulticast mode [ 800.401674][T21006] sit0: entered allmulticast mode [ 800.407846][T21006] ip6tnl0: entered allmulticast mode [ 800.413907][T21006] ip6gre0: entered allmulticast mode [ 800.423387][T21006] syz_tun: entered allmulticast mode [ 800.449775][T21006] ip6gretap0: entered allmulticast mode [ 800.463014][T21006] bond0: entered allmulticast mode [ 800.473806][T21006] : entered allmulticast mode [ 800.483703][T21006] bond_slave_1: entered allmulticast mode [ 800.493878][T21006] dummy0: entered allmulticast mode [ 800.515163][T21006] nlmon0: entered allmulticast mode [ 800.533883][T21006] caif0: entered allmulticast mode [ 800.546966][T21006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.554541][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3993'. [ 801.790283][T21044] wg1 speed is unknown, defaulting to 1000 [ 802.840774][T21055] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 802.916632][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 360 seconds [ 802.928136][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 360 seconds [ 802.939738][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 360 seconds [ 802.951171][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 360 seconds [ 802.996828][T21057] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4002'. [ 808.677473][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.805857][T15833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 815.815607][T15833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 815.823682][T15833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 815.831959][T15833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 815.839715][T21066] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 815.841628][T21067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 815.862198][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 815.871170][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 815.877557][T21063] wg1 speed is unknown, defaulting to 1000 [ 815.880517][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 815.892367][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 815.939496][T21065] wg1 speed is unknown, defaulting to 1000 [ 816.208505][T21063] chnl_net:caif_netlink_parms(): no params data found [ 816.331551][T21063] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.338958][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.346431][T21063] bridge_slave_0: entered allmulticast mode [ 816.353480][T21063] bridge_slave_0: entered promiscuous mode [ 816.367238][T21063] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.374677][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.381868][T21063] bridge_slave_1: entered allmulticast mode [ 816.389279][T21063] bridge_slave_1: entered promiscuous mode [ 816.437264][T21063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.464512][T21063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.520714][T21063] team0: Port device team_slave_0 added [ 816.531783][T21063] team0: Port device team_slave_1 added [ 816.569290][T21063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.576561][T21063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.602809][T21063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.615107][T21065] chnl_net:caif_netlink_parms(): no params data found [ 816.629391][T21063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.636930][T21063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.676352][T21063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.875855][T21063] hsr_slave_0: entered promiscuous mode [ 816.882601][T21063] hsr_slave_1: entered promiscuous mode [ 816.905229][T21063] debugfs: 'hsr0' already exists in 'hsr' [ 816.911002][T21063] Cannot create hsr debugfs directory [ 817.040395][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 817.050844][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 817.064501][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 817.075095][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 817.085586][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 817.095701][T21065] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.102886][T21065] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.119081][T21065] bridge_slave_0: entered allmulticast mode [ 817.126237][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 817.127694][T21065] bridge_slave_0: entered promiscuous mode [ 817.135924][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 817.149023][T21065] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.156520][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 817.158960][T21065] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.166476][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 817.170888][T21065] bridge_slave_1: entered allmulticast mode [ 817.179091][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 817.185299][T21065] bridge_slave_1: entered promiscuous mode [ 817.274708][T21065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.315259][T21065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.324521][T21085] wg1 speed is unknown, defaulting to 1000 [ 817.346392][T21083] wg1 speed is unknown, defaulting to 1000 [ 817.399510][T21065] team0: Port device team_slave_0 added [ 817.409296][T21065] team0: Port device team_slave_1 added [ 817.471432][T21065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.479463][T21065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.505784][T21065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.518991][T21065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.526027][T21065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.552350][T21065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.653770][T21065] hsr_slave_0: entered promiscuous mode [ 817.660603][T21065] hsr_slave_1: entered promiscuous mode [ 817.668256][T21065] debugfs: 'hsr0' already exists in 'hsr' [ 817.673996][T21065] Cannot create hsr debugfs directory [ 817.874522][ T5835] Bluetooth: hci3: command tx timeout [ 817.954317][ T5835] Bluetooth: hci6: command tx timeout [ 818.058869][T21085] chnl_net:caif_netlink_parms(): no params data found [ 818.198013][T21083] chnl_net:caif_netlink_parms(): no params data found [ 818.208488][T21085] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.215846][T21085] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.223053][T21085] bridge_slave_0: entered allmulticast mode [ 818.230577][T21085] bridge_slave_0: entered promiscuous mode [ 818.255150][T21085] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.262294][T21085] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.269826][T21085] bridge_slave_1: entered allmulticast mode [ 818.277672][T21085] bridge_slave_1: entered promiscuous mode [ 818.337733][T21085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.354013][T21085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.410883][T21083] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.418225][T21083] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.425820][T21083] bridge_slave_0: entered allmulticast mode [ 818.432882][T21083] bridge_slave_0: entered promiscuous mode [ 818.442414][T21085] team0: Port device team_slave_0 added [ 818.451355][T21085] team0: Port device team_slave_1 added [ 818.458345][T21083] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.465675][T21083] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.472875][T21083] bridge_slave_1: entered allmulticast mode [ 818.480121][T21083] bridge_slave_1: entered promiscuous mode [ 818.536758][T21085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.543734][T21085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.580024][T21085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.612508][T21085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.621670][T21085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.648510][T21085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.672792][T21083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.709192][T21083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.760224][T21085] hsr_slave_0: entered promiscuous mode [ 818.767695][T21085] hsr_slave_1: entered promiscuous mode [ 818.774107][T21085] debugfs: 'hsr0' already exists in 'hsr' [ 818.779978][T21085] Cannot create hsr debugfs directory [ 818.798655][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 818.809713][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 818.819408][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 818.827759][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 818.830894][T21083] team0: Port device team_slave_0 added [ 818.840889][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 818.854860][T21083] team0: Port device team_slave_1 added [ 818.904742][T21083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.911714][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.938366][T21083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.989559][T21083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.997231][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.024214][T21083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.080847][T21100] wg1 speed is unknown, defaulting to 1000 [ 819.148426][T21083] hsr_slave_0: entered promiscuous mode [ 819.155398][ T5835] Bluetooth: hci7: command tx timeout [ 819.162885][T21083] hsr_slave_1: entered promiscuous mode [ 819.169816][T21083] debugfs: 'hsr0' already exists in 'hsr' [ 819.175660][T21083] Cannot create hsr debugfs directory [ 819.234389][ T5835] Bluetooth: hci8: command tx timeout [ 819.644657][T21100] chnl_net:caif_netlink_parms(): no params data found [ 819.709215][T21100] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.716783][T21100] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.724000][T21100] bridge_slave_0: entered allmulticast mode [ 819.731657][T21100] bridge_slave_0: entered promiscuous mode [ 819.739829][T21100] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.747052][T21100] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.754299][T21100] bridge_slave_1: entered allmulticast mode [ 819.761368][T21100] bridge_slave_1: entered promiscuous mode [ 819.790816][T21100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.803157][T21100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.833979][T21100] team0: Port device team_slave_0 added [ 819.842506][T21100] team0: Port device team_slave_1 added [ 819.867839][T21100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.876592][T21100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.902977][T21100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.915329][T21100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.922274][T21100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.948242][T21100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.958910][ T5835] Bluetooth: hci3: command tx timeout [ 819.993432][T21100] hsr_slave_0: entered promiscuous mode [ 819.999870][T21100] hsr_slave_1: entered promiscuous mode [ 820.006179][T21100] debugfs: 'hsr0' already exists in 'hsr' [ 820.012158][T21100] Cannot create hsr debugfs directory [ 820.034444][ T5835] Bluetooth: hci6: command tx timeout [ 820.914691][ T5835] Bluetooth: hci9: command tx timeout [ 821.234614][ T5835] Bluetooth: hci7: command tx timeout [ 821.314590][ T5835] Bluetooth: hci8: command tx timeout [ 822.035268][ T5835] Bluetooth: hci3: command tx timeout [ 822.114681][ T5835] Bluetooth: hci6: command tx timeout [ 822.996265][ T5835] Bluetooth: hci9: command tx timeout [ 823.314420][ T5835] Bluetooth: hci7: command tx timeout [ 823.394757][ T5835] Bluetooth: hci8: command tx timeout [ 824.114725][ T5835] Bluetooth: hci3: command tx timeout [ 824.194441][ T5835] Bluetooth: hci6: command tx timeout [ 825.074543][ T5835] Bluetooth: hci9: command tx timeout [ 825.394415][ T5835] Bluetooth: hci7: command tx timeout [ 825.474490][ T5835] Bluetooth: hci8: command tx timeout [ 827.154455][ T5835] Bluetooth: hci9: command tx timeout [ 832.995175][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 390 seconds [ 833.005966][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 390 seconds [ 833.017080][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 390 seconds [ 833.028177][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 390 seconds [ 863.084390][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 420 seconds [ 863.095472][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 420 seconds [ 863.106591][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 420 seconds [ 863.117676][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 420 seconds [ 870.119039][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.412741][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 876.423684][ T5834] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 876.431918][ T5834] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 876.443730][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 876.450299][T21066] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 876.451877][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 876.461131][T21066] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 876.474578][T21066] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 876.483980][T21066] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 876.492544][T21066] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 876.505498][T21110] wg1 speed is unknown, defaulting to 1000 [ 876.542742][T21112] wg1 speed is unknown, defaulting to 1000 [ 876.825665][T21110] chnl_net:caif_netlink_parms(): no params data found [ 876.954231][T21110] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.961417][T21110] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.968826][T21110] bridge_slave_0: entered allmulticast mode [ 876.976232][T21110] bridge_slave_0: entered promiscuous mode [ 876.984938][T21110] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.992106][T21110] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.999757][T21110] bridge_slave_1: entered allmulticast mode [ 877.007304][T21110] bridge_slave_1: entered promiscuous mode [ 877.048164][T21110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.065967][T21110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.140538][T21110] team0: Port device team_slave_0 added [ 877.164684][T21110] team0: Port device team_slave_1 added [ 877.251190][T21112] chnl_net:caif_netlink_parms(): no params data found [ 877.271458][T21110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.284436][T21110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.344245][T21110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.374920][T21110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.381900][T21110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.424204][T21110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.577313][T21110] hsr_slave_0: entered promiscuous mode [ 877.595145][T21110] hsr_slave_1: entered promiscuous mode [ 877.601637][T21110] debugfs: 'hsr0' already exists in 'hsr' [ 877.605222][T21067] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 877.617524][T21067] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 877.624308][T21110] Cannot create hsr debugfs directory [ 877.627831][T21067] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 877.641895][T21067] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 877.651097][T21067] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 877.684706][T21067] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 877.695089][T21067] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 877.704932][T21067] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 877.713120][T21067] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 877.721677][T21067] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 877.773096][T21112] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.780468][T21112] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.787822][T21112] bridge_slave_0: entered allmulticast mode [ 877.795384][T21112] bridge_slave_0: entered promiscuous mode [ 877.814465][T21112] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.821775][T21112] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.829459][T21112] bridge_slave_1: entered allmulticast mode [ 877.837108][T21112] bridge_slave_1: entered promiscuous mode [ 877.850471][T21127] wg1 speed is unknown, defaulting to 1000 [ 877.896568][T21130] wg1 speed is unknown, defaulting to 1000 [ 877.950586][T21112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.980804][T21112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.058431][T21112] team0: Port device team_slave_0 added [ 878.086496][T21112] team0: Port device team_slave_1 added [ 878.139375][T21112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.150040][T21112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.176939][T21112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.213608][T21112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.221108][T21112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.247783][T21112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.361888][T21112] hsr_slave_0: entered promiscuous mode [ 878.371486][T21112] hsr_slave_1: entered promiscuous mode [ 878.377757][T21112] debugfs: 'hsr0' already exists in 'hsr' [ 878.383474][T21112] Cannot create hsr debugfs directory [ 878.514759][T21067] Bluetooth: hci10: command tx timeout [ 878.517239][T21066] Bluetooth: hci11: command tx timeout [ 878.643375][T21127] chnl_net:caif_netlink_parms(): no params data found [ 878.958729][T21130] chnl_net:caif_netlink_parms(): no params data found [ 878.972241][T21127] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.979871][T21127] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.987627][T21127] bridge_slave_0: entered allmulticast mode [ 878.995892][T21127] bridge_slave_0: entered promiscuous mode [ 879.028974][T21127] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.036778][T21127] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.045875][T21127] bridge_slave_1: entered allmulticast mode [ 879.046058][T21067] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 879.053777][T21127] bridge_slave_1: entered promiscuous mode [ 879.062723][T21067] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 879.081660][T21067] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 879.091567][T21067] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 879.099477][T21067] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 879.174794][T21127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.201461][T21127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.243245][T21130] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.251073][T21130] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.259147][T21130] bridge_slave_0: entered allmulticast mode [ 879.266564][T21130] bridge_slave_0: entered promiscuous mode [ 879.295097][T21127] team0: Port device team_slave_0 added [ 879.301041][T21130] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.309529][T21130] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.317294][T21130] bridge_slave_1: entered allmulticast mode [ 879.325286][T21130] bridge_slave_1: entered promiscuous mode [ 879.351570][T21127] team0: Port device team_slave_1 added [ 879.419689][T21127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.427254][T21127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.453436][T21127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.467680][T21130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.480952][T21130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.490245][T21142] wg1 speed is unknown, defaulting to 1000 [ 879.520683][T21127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.527993][T21127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.554526][T21127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.588990][T21130] team0: Port device team_slave_0 added [ 879.598231][T21130] team0: Port device team_slave_1 added [ 879.688478][T21130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.695939][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.714456][T21066] Bluetooth: hci12: command tx timeout [ 879.722210][T21130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.759842][T21130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.767993][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.794359][T21066] Bluetooth: hci13: command tx timeout [ 879.800004][T21130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.816500][T21127] hsr_slave_0: entered promiscuous mode [ 879.822993][T21127] hsr_slave_1: entered promiscuous mode [ 879.829504][T21127] debugfs: 'hsr0' already exists in 'hsr' [ 879.835259][T21127] Cannot create hsr debugfs directory [ 879.958081][T21130] hsr_slave_0: entered promiscuous mode [ 879.965096][T21130] hsr_slave_1: entered promiscuous mode [ 879.971250][T21130] debugfs: 'hsr0' already exists in 'hsr' [ 879.977124][T21130] Cannot create hsr debugfs directory [ 880.281076][T21142] chnl_net:caif_netlink_parms(): no params data found [ 880.382065][T21142] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.389750][T21142] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.398301][T21142] bridge_slave_0: entered allmulticast mode [ 880.411074][T21142] bridge_slave_0: entered promiscuous mode [ 880.431881][T21142] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.445440][T21142] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.453066][T21142] bridge_slave_1: entered allmulticast mode [ 880.462883][T21142] bridge_slave_1: entered promiscuous mode [ 880.552460][T21142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.578889][T21142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.598318][T21066] Bluetooth: hci11: command tx timeout [ 880.604354][T21066] Bluetooth: hci10: command tx timeout [ 880.653879][T21142] team0: Port device team_slave_0 added [ 880.663496][T21142] team0: Port device team_slave_1 added [ 880.693877][T21142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.701139][T21142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.727317][T21142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.746457][T21142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.753405][T21142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.780451][T21142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.830051][T21142] hsr_slave_0: entered promiscuous mode [ 880.840062][T21142] hsr_slave_1: entered promiscuous mode [ 880.847128][T21142] debugfs: 'hsr0' already exists in 'hsr' [ 880.852852][T21142] Cannot create hsr debugfs directory [ 881.154879][T21066] Bluetooth: hci14: command tx timeout [ 881.795228][T21066] Bluetooth: hci12: command tx timeout [ 881.874484][T21066] Bluetooth: hci13: command tx timeout [ 882.674416][T21066] Bluetooth: hci10: command tx timeout [ 882.674456][T21067] Bluetooth: hci11: command tx timeout [ 883.234422][T21067] Bluetooth: hci14: command tx timeout [ 883.874737][T21067] Bluetooth: hci12: command tx timeout [ 883.954501][T21067] Bluetooth: hci13: command tx timeout [ 884.754458][T21067] Bluetooth: hci11: command tx timeout [ 884.754502][T21066] Bluetooth: hci10: command tx timeout [ 885.315336][T21066] Bluetooth: hci14: command tx timeout [ 885.954335][T21066] Bluetooth: hci12: command tx timeout [ 886.034363][T21066] Bluetooth: hci13: command tx timeout [ 887.394466][T21066] Bluetooth: hci14: command tx timeout [ 893.155441][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 450 seconds [ 893.166360][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 450 seconds [ 893.177410][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 450 seconds [ 893.188610][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 450 seconds [ 902.914481][T21067] Bluetooth: hci0: command 0x0405 tx timeout [ 923.234748][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 480 seconds [ 923.245624][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 480 seconds [ 923.256835][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 480 seconds [ 923.267936][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 480 seconds [ 931.560161][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.689177][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 936.699155][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 936.713556][T21159] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 936.715428][T15833] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 936.725914][T21160] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 936.729650][T15833] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 936.736322][T21160] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 936.743093][T15833] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 936.751117][T21160] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 936.771756][T21160] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 936.790692][T21155] wg1 speed is unknown, defaulting to 1000 [ 936.817557][T21157] wg1 speed is unknown, defaulting to 1000 [ 937.103661][T21155] chnl_net:caif_netlink_parms(): no params data found [ 937.232356][T21155] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.239808][T21155] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.247826][T21155] bridge_slave_0: entered allmulticast mode [ 937.255094][T21155] bridge_slave_0: entered promiscuous mode [ 937.264966][T21155] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.272128][T21155] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.279657][T21155] bridge_slave_1: entered allmulticast mode [ 937.286941][T21155] bridge_slave_1: entered promiscuous mode [ 937.328633][T21155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.341496][T21155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.395315][T21155] team0: Port device team_slave_0 added [ 937.416075][T21155] team0: Port device team_slave_1 added [ 937.465456][T21155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.472442][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.499130][T21155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.519567][T21155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.526748][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.552773][T21155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.571798][T21157] chnl_net:caif_netlink_parms(): no params data found [ 937.648250][T21155] hsr_slave_0: entered promiscuous mode [ 937.655488][T21155] hsr_slave_1: entered promiscuous mode [ 937.661637][T21155] debugfs: 'hsr0' already exists in 'hsr' [ 937.667832][T21155] Cannot create hsr debugfs directory [ 937.712203][T21157] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.719528][T21157] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.727112][T21157] bridge_slave_0: entered allmulticast mode [ 937.734891][T21157] bridge_slave_0: entered promiscuous mode [ 937.748295][T21157] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.755596][T21157] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.762848][T21157] bridge_slave_1: entered allmulticast mode [ 937.770172][T21157] bridge_slave_1: entered promiscuous mode [ 937.828166][T21157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.841425][T21157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.947423][T21157] team0: Port device team_slave_0 added [ 937.968513][T21157] team0: Port device team_slave_1 added [ 938.125076][T21157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.132073][T21157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.204247][T21157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.246997][T21157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.253980][T21157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.314485][T21157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.334910][ T5834] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 938.345177][ T5834] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 938.356045][ T5834] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 938.366612][ T5834] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 938.379188][T15833] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 938.388430][ T5834] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 938.398125][T15833] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 938.409386][T15833] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 938.424551][ T5834] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 938.433890][ T5834] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 938.468641][T21157] hsr_slave_0: entered promiscuous mode [ 938.475394][T21157] hsr_slave_1: entered promiscuous mode [ 938.481582][T21157] debugfs: 'hsr0' already exists in 'hsr' [ 938.487632][T21157] Cannot create hsr debugfs directory [ 938.563186][T21175] wg1 speed is unknown, defaulting to 1000 [ 938.577447][T21177] wg1 speed is unknown, defaulting to 1000 [ 938.758094][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 938.765579][ T5835] Bluetooth: hci6: command 0x0406 tx timeout [ 938.834699][T21066] Bluetooth: hci16: command tx timeout [ 938.840973][T21066] Bluetooth: hci15: command tx timeout [ 939.231446][T21175] chnl_net:caif_netlink_parms(): no params data found [ 939.331645][T21067] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 939.344795][T21067] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 939.375222][T21067] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 939.385493][T21067] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 939.395133][T21067] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 939.537608][T21175] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.545068][T21175] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.552387][T21175] bridge_slave_0: entered allmulticast mode [ 939.560198][T21175] bridge_slave_0: entered promiscuous mode [ 939.577839][T21175] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.585253][T21175] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.592550][T21175] bridge_slave_1: entered allmulticast mode [ 939.600722][T21175] bridge_slave_1: entered promiscuous mode [ 939.607809][T21184] wg1 speed is unknown, defaulting to 1000 [ 939.648640][T21175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.662439][T21175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.713062][T21175] team0: Port device team_slave_0 added [ 939.723942][T21175] team0: Port device team_slave_1 added [ 939.773978][T21175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.781246][T21175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.810242][T21175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.829979][T21175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.837475][T21175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.863829][T21175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.876447][T21177] chnl_net:caif_netlink_parms(): no params data found [ 940.012350][T21175] hsr_slave_0: entered promiscuous mode [ 940.018987][T21175] hsr_slave_1: entered promiscuous mode [ 940.025869][T21175] debugfs: 'hsr0' already exists in 'hsr' [ 940.031589][T21175] Cannot create hsr debugfs directory [ 940.075355][T21177] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.082558][T21177] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.090763][T21177] bridge_slave_0: entered allmulticast mode [ 940.098078][T21177] bridge_slave_0: entered promiscuous mode [ 940.125719][T21177] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.132877][T21177] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.140664][T21177] bridge_slave_1: entered allmulticast mode [ 940.148031][T21177] bridge_slave_1: entered promiscuous mode [ 940.205956][T21177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.227824][T21177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.276171][T21177] team0: Port device team_slave_0 added [ 940.296328][T21177] team0: Port device team_slave_1 added [ 940.379062][T21177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.387329][T21177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.413594][T21177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.426775][T21177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.433742][T21177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.460116][T21177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.460151][T21067] Bluetooth: hci17: command tx timeout [ 940.519983][T21067] Bluetooth: hci18: command tx timeout [ 940.555198][T21184] chnl_net:caif_netlink_parms(): no params data found [ 940.576908][T21177] hsr_slave_0: entered promiscuous mode [ 940.583379][T21177] hsr_slave_1: entered promiscuous mode [ 940.589873][T21177] debugfs: 'hsr0' already exists in 'hsr' [ 940.596786][T21177] Cannot create hsr debugfs directory [ 940.749236][T21184] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.757044][T21184] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.764437][T21184] bridge_slave_0: entered allmulticast mode [ 940.771713][T21184] bridge_slave_0: entered promiscuous mode [ 940.790699][T21184] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.798042][T21184] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.805545][T21184] bridge_slave_1: entered allmulticast mode [ 940.812730][T21184] bridge_slave_1: entered promiscuous mode [ 940.881658][T21184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.895396][T21184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.914857][T21066] Bluetooth: hci16: command tx timeout [ 940.920460][T21067] Bluetooth: hci15: command tx timeout [ 940.963906][T21184] team0: Port device team_slave_0 added [ 940.976120][T21184] team0: Port device team_slave_1 added [ 941.019479][T21184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.026555][T21184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.052924][T21184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.080759][T21184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.088029][T21184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.114073][T21184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.203424][T21184] hsr_slave_0: entered promiscuous mode [ 941.210274][T21184] hsr_slave_1: entered promiscuous mode [ 941.217238][T21184] debugfs: 'hsr0' already exists in 'hsr' [ 941.222957][T21184] Cannot create hsr debugfs directory [ 941.474466][T21067] Bluetooth: hci19: command tx timeout [ 942.514417][T21067] Bluetooth: hci17: command tx timeout [ 942.594490][T21067] Bluetooth: hci18: command tx timeout [ 942.994787][T21067] Bluetooth: hci15: command tx timeout [ 942.994796][ T5835] Bluetooth: hci16: command tx timeout [ 943.554390][ T5835] Bluetooth: hci19: command tx timeout [ 943.878625][ T5835] Bluetooth: hci7: command 0x0406 tx timeout [ 943.880478][T21067] Bluetooth: hci9: command 0x0406 tx timeout [ 943.885410][T15833] Bluetooth: hci8: command 0x0406 tx timeout [ 944.594365][T21160] Bluetooth: hci17: command tx timeout [ 944.674777][T21160] Bluetooth: hci18: command tx timeout [ 945.074447][T21160] Bluetooth: hci16: command tx timeout [ 945.084490][T21160] Bluetooth: hci15: command tx timeout [ 945.634487][T21160] Bluetooth: hci19: command tx timeout [ 946.684336][T21160] Bluetooth: hci17: command tx timeout [ 946.754596][T21160] Bluetooth: hci18: command tx timeout [ 947.714350][T21160] Bluetooth: hci19: command tx timeout [ 948.834819][ T31] INFO: task syz.4.3990:21012 blocked for more than 143 seconds. [ 948.844552][ T31] Not tainted syzkaller #0 [ 948.849505][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 948.858221][ T31] task:syz.4.3990 state:D stack:26024 pid:21012 tgid:21011 ppid:17420 task_flags:0x480140 flags:0x00080002 [ 948.870247][ T31] Call Trace: [ 948.873532][ T31] [ 948.876626][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 948.881164][ T31] ? __lock_acquire+0xab9/0xd20 [ 948.886218][ T31] ? __lock_acquire+0xab9/0xd20 [ 948.891120][ T31] ? __pfx___schedule+0x10/0x10 [ 948.897048][ T31] ? schedule+0x91/0x360 [ 948.901325][ T31] schedule+0x165/0x360 [ 948.905921][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 948.911415][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 948.918400][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 948.924619][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 948.930541][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 948.937065][ T31] nbd_set_size+0x47e/0x6a0 [ 948.941592][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 948.946775][ T31] ? nla_memcpy+0x5b/0xc0 [ 948.951125][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 948.956847][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 948.962356][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 948.968581][ T31] ? bpf_lsm_capable+0x9/0x20 [ 948.973272][ T31] ? security_capable+0x7e/0x2e0 [ 948.979450][ T31] ? radix_tree_lookup+0x240/0x290 [ 948.984702][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 948.990019][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 948.996689][ T31] ? rcu_is_watching+0x15/0xb0 [ 949.001478][ T31] ? __nla_parse+0x40/0x60 [ 949.006276][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 949.012625][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 949.018453][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 949.024686][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 949.030110][ T31] genl_rcv_msg+0x60e/0x790 [ 949.034799][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 949.039835][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 949.045776][ T31] netlink_rcv_skb+0x208/0x470 [ 949.050551][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.055583][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 949.060619][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.066837][ T31] ? down_read+0x1ad/0x2e0 [ 949.071275][ T31] genl_rcv+0x28/0x40 [ 949.076816][ T31] netlink_unicast+0x82f/0x9e0 [ 949.115469][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 949.125345][ T31] ? netlink_sendmsg+0x642/0xb30 [ 949.136490][ T31] ? skb_put+0x11b/0x210 [ 949.140791][ T31] netlink_sendmsg+0x805/0xb30 [ 949.145798][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.151136][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 949.156580][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.161942][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.167373][ T31] __sock_sendmsg+0x21c/0x270 [ 949.172057][ T31] ____sys_sendmsg+0x505/0x830 [ 949.177000][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.182301][ T31] ? import_iovec+0x74/0xa0 [ 949.186887][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 949.191567][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.196903][ T31] ? __fget_files+0x2a/0x420 [ 949.201502][ T31] ? __fget_files+0x3a0/0x420 [ 949.206356][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 949.211289][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.216893][ T31] ? do_syscall_64+0xbe/0xfa0 [ 949.221589][ T31] do_syscall_64+0xfa/0xfa0 [ 949.226449][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.231675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.238029][ T31] ? clear_bhb_loop+0x60/0xb0 [ 949.242728][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.248717][ T31] RIP: 0033:0x7f0a3ef8f749 [ 949.253136][ T31] RSP: 002b:00007f0a3fed4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.261629][ T31] RAX: ffffffffffffffda RBX: 00007f0a3f1e5fa0 RCX: 00007f0a3ef8f749 [ 949.269857][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 949.277939][ T31] RBP: 00007f0a3f013f91 R08: 0000000000000000 R09: 0000000000000000 [ 949.285962][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.293936][ T31] R13: 00007f0a3f1e6038 R14: 00007f0a3f1e5fa0 R15: 00007ffce80de998 [ 949.301945][ T31] [ 949.305042][ T31] INFO: task syz.3.3992:21017 blocked for more than 143 seconds. [ 949.312754][ T31] Not tainted syzkaller #0 [ 949.318296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 949.327015][ T31] task:syz.3.3992 state:D stack:28456 pid:21017 tgid:21016 ppid:17289 task_flags:0x400040 flags:0x00080002 [ 949.339089][ T31] Call Trace: [ 949.342353][ T31] [ 949.345357][ T31] __schedule+0x1798/0x4cc0 [ 949.349854][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.354740][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.359573][ T31] ? __pfx___schedule+0x10/0x10 [ 949.364498][ T31] ? schedule+0x91/0x360 [ 949.368731][ T31] schedule+0x165/0x360 [ 949.372868][ T31] schedule_preempt_disabled+0x13/0x30 [ 949.378390][ T31] __mutex_lock+0x7e6/0x1350 [ 949.382984][ T31] ? __mutex_lock+0x5bb/0x1350 [ 949.387772][ T31] ? genl_rcv_msg+0x10d/0x790 [ 949.392432][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 949.397724][ T31] ? radix_tree_lookup+0x240/0x290 [ 949.402853][ T31] genl_rcv_msg+0x10d/0x790 [ 949.407416][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 949.412444][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 949.417565][ T31] ? __asan_memcpy+0x40/0x70 [ 949.422171][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 949.427596][ T31] netlink_rcv_skb+0x208/0x470 [ 949.432346][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.437225][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 949.442234][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.447714][ T31] ? down_read+0x1ad/0x2e0 [ 949.452121][ T31] genl_rcv+0x28/0x40 [ 949.456221][ T31] netlink_unicast+0x82f/0x9e0 [ 949.460993][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 949.466312][ T31] ? netlink_sendmsg+0x642/0xb30 [ 949.471234][ T31] ? skb_put+0x11b/0x210 [ 949.475799][ T31] netlink_sendmsg+0x805/0xb30 [ 949.480630][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.485968][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 949.490894][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.496208][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.501478][ T31] __sock_sendmsg+0x21c/0x270 [ 949.506176][ T31] __sys_sendto+0x3bd/0x520 [ 949.510667][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 949.515796][ T31] ? count_memcg_event_mm+0x21/0x260 [ 949.521116][ T31] ? exc_page_fault+0x82/0x100 [ 949.526122][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 949.531397][ T31] __x64_sys_sendto+0xde/0x100 [ 949.536185][ T31] do_syscall_64+0xfa/0xfa0 [ 949.540673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.545895][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.551945][ T31] ? clear_bhb_loop+0x60/0xb0 [ 949.557014][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.562932][ T31] RIP: 0033:0x7f1f1fd915dc [ 949.567415][ T31] RSP: 002b:00007f1f20b7cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 949.576066][ T31] RAX: ffffffffffffffda RBX: 00007f1f20b7cfc0 RCX: 00007f1f1fd915dc [ 949.584041][ T31] RDX: 0000000000000020 RSI: 00007f1f20b7d010 RDI: 0000000000000003 [ 949.592056][ T31] RBP: 0000000000000000 R08: 00007f1f20b7cf14 R09: 000000000000000c [ 949.600064][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 949.608059][ T31] R13: 00007f1f20b7cf68 R14: 00007f1f20b7d010 R15: 0000000000000000 [ 949.616084][ T31] [ 949.619106][ T31] INFO: task syz.0.3996:21037 blocked for more than 144 seconds. [ 949.626881][ T31] Not tainted syzkaller #0 [ 949.631839][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 949.640682][ T31] task:syz.0.3996 state:D stack:28456 pid:21037 tgid:21032 ppid:16493 task_flags:0x400040 flags:0x00080002 [ 949.652716][ T31] Call Trace: [ 949.656108][ T31] [ 949.659040][ T31] __schedule+0x1798/0x4cc0 [ 949.663533][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.668593][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.673449][ T31] ? __pfx___schedule+0x10/0x10 [ 949.678470][ T31] ? schedule+0x91/0x360 [ 949.682717][ T31] schedule+0x165/0x360 [ 949.686980][ T31] schedule_preempt_disabled+0x13/0x30 [ 949.692423][ T31] __mutex_lock+0x7e6/0x1350 [ 949.697114][ T31] ? __mutex_lock+0x5bb/0x1350 [ 949.701883][ T31] ? genl_rcv_msg+0x10d/0x790 [ 949.706736][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 949.711767][ T31] ? radix_tree_lookup+0x240/0x290 [ 949.717086][ T31] genl_rcv_msg+0x10d/0x790 [ 949.721598][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 949.726657][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 949.731666][ T31] ? __asan_memcpy+0x40/0x70 [ 949.736277][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 949.741646][ T31] netlink_rcv_skb+0x208/0x470 [ 949.746437][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.751286][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 949.756392][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.761693][ T31] ? down_read+0x1ad/0x2e0 [ 949.766235][ T31] genl_rcv+0x28/0x40 [ 949.770219][ T31] netlink_unicast+0x82f/0x9e0 [ 949.775245][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 949.780556][ T31] ? netlink_sendmsg+0x642/0xb30 [ 949.785635][ T31] ? skb_put+0x11b/0x210 [ 949.789886][ T31] netlink_sendmsg+0x805/0xb30 [ 949.794753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.800034][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 949.805248][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.810546][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.815946][ T31] __sock_sendmsg+0x21c/0x270 [ 949.820635][ T31] __sys_sendto+0x3bd/0x520 [ 949.825181][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 949.830187][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.835196][ T31] ? fd_install+0x97/0x540 [ 949.839602][ T31] ? fd_install+0x30d/0x540 [ 949.844092][ T31] __x64_sys_sendto+0xde/0x100 [ 949.848962][ T31] do_syscall_64+0xfa/0xfa0 [ 949.853463][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.858682][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.864781][ T31] ? clear_bhb_loop+0x60/0xb0 [ 949.869443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.875979][ T31] RIP: 0033:0x7f66c6d915dc [ 949.880417][ T31] RSP: 002b:00007f66c7c06ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 949.889029][ T31] RAX: ffffffffffffffda RBX: 00007f66c7c06fc0 RCX: 00007f66c6d915dc [ 949.897106][ T31] RDX: 0000000000000020 RSI: 00007f66c7c07010 RDI: 0000000000000006 [ 949.905178][ T31] RBP: 0000000000000000 R08: 00007f66c7c06f14 R09: 000000000000000c [ 949.913136][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 949.921452][ T31] R13: 00007f66c7c06f68 R14: 00007f66c7c07010 R15: 0000000000000000 [ 949.929656][ T31] [ 949.932700][ T31] INFO: task syz.2.3997:21038 blocked for more than 144 seconds. [ 949.940757][ T31] Not tainted syzkaller #0 [ 949.945892][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 949.955031][ T31] task:syz.2.3997 state:D stack:26088 pid:21038 tgid:21035 ppid:17737 task_flags:0x400140 flags:0x00080002 [ 949.967093][ T31] Call Trace: [ 949.970386][ T31] [ 949.973301][ T31] __schedule+0x1798/0x4cc0 [ 949.978026][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.982894][ T31] ? __lock_acquire+0xab9/0xd20 [ 949.987950][ T31] ? __pfx___schedule+0x10/0x10 [ 949.992825][ T31] ? schedule+0x91/0x360 [ 949.997281][ T31] schedule+0x165/0x360 [ 950.001445][ T31] schedule_preempt_disabled+0x13/0x30 [ 950.007049][ T31] __mutex_lock+0x7e6/0x1350 [ 950.011646][ T31] ? __mutex_lock+0x5bb/0x1350 [ 950.016486][ T31] ? genl_rcv_msg+0x10d/0x790 [ 950.021155][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 950.026341][ T31] ? radix_tree_lookup+0x240/0x290 [ 950.031453][ T31] genl_rcv_msg+0x10d/0x790 [ 950.036196][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.041225][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 950.046258][ T31] ? __asan_memcpy+0x40/0x70 [ 950.050836][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 950.056437][ T31] netlink_rcv_skb+0x208/0x470 [ 950.061212][ T31] ? __lock_acquire+0xab9/0xd20 [ 950.066111][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.071138][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.076501][ T31] ? down_read+0x1ad/0x2e0 [ 950.080937][ T31] genl_rcv+0x28/0x40 [ 950.084997][ T31] netlink_unicast+0x82f/0x9e0 [ 950.089771][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 950.095109][ T31] ? netlink_sendmsg+0x642/0xb30 [ 950.100047][ T31] ? skb_put+0x11b/0x210 [ 950.104340][ T31] netlink_sendmsg+0x805/0xb30 [ 950.109110][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.114732][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 950.119684][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.125142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.130438][ T31] __sock_sendmsg+0x21c/0x270 [ 950.135212][ T31] __sys_sendto+0x3bd/0x520 [ 950.139722][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 950.144768][ T31] ? count_memcg_event_mm+0x21/0x260 [ 950.150053][ T31] ? exc_page_fault+0x82/0x100 [ 950.154834][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 950.160103][ T31] __x64_sys_sendto+0xde/0x100 [ 950.164887][ T31] do_syscall_64+0xfa/0xfa0 [ 950.169390][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.174644][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.180692][ T31] ? clear_bhb_loop+0x60/0xb0 [ 950.185380][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.191254][ T31] RIP: 0033:0x7fbd39d915dc [ 950.195752][ T31] RSP: 002b:00007fbd3aba7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.204254][ T31] RAX: ffffffffffffffda RBX: 00007fbd3aba7fc0 RCX: 00007fbd39d915dc [ 950.212235][ T31] RDX: 000000000000001c RSI: 00007fbd3aba8010 RDI: 0000000000000010 [ 950.220283][ T31] RBP: 0000000000000000 R08: 00007fbd3aba7f14 R09: 000000000000000c [ 950.228307][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 950.236460][ T31] R13: 00007fbd3aba7f68 R14: 00007fbd3aba8010 R15: 0000000000000000 [ 950.244539][ T31] [ 950.247558][ T31] INFO: task syz.5.4002:21057 blocked for more than 144 seconds. [ 950.255356][ T31] Not tainted syzkaller #0 [ 950.260271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.268962][ T31] task:syz.5.4002 state:D stack:26024 pid:21057 tgid:21056 ppid:15832 task_flags:0x400140 flags:0x00080002 [ 950.281060][ T31] Call Trace: [ 950.284395][ T31] [ 950.287312][ T31] __schedule+0x1798/0x4cc0 [ 950.291804][ T31] ? __lock_acquire+0xab9/0xd20 [ 950.296686][ T31] ? __lock_acquire+0xab9/0xd20 [ 950.301534][ T31] ? __pfx___schedule+0x10/0x10 [ 950.306415][ T31] ? schedule+0x91/0x360 [ 950.310640][ T31] schedule+0x165/0x360 [ 950.314817][ T31] schedule_preempt_disabled+0x13/0x30 [ 950.320257][ T31] __mutex_lock+0x7e6/0x1350 [ 950.324942][ T31] ? __mutex_lock+0x5bb/0x1350 [ 950.329722][ T31] ? genl_rcv_msg+0x10d/0x790 [ 950.334480][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 950.339536][ T31] ? radix_tree_lookup+0x240/0x290 [ 950.344806][ T31] genl_rcv_msg+0x10d/0x790 [ 950.349293][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.354821][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 950.359858][ T31] ? __asan_memcpy+0x40/0x70 [ 950.364495][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 950.369895][ T31] netlink_rcv_skb+0x208/0x470 [ 950.374694][ T31] ? __lock_acquire+0xab9/0xd20 [ 950.379531][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.384593][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.389873][ T31] ? down_read+0x1ad/0x2e0 [ 950.394354][ T31] genl_rcv+0x28/0x40 [ 950.398325][ T31] netlink_unicast+0x82f/0x9e0 [ 950.403073][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 950.408366][ T31] ? netlink_sendmsg+0x642/0xb30 [ 950.413326][ T31] ? skb_put+0x11b/0x210 [ 950.417597][ T31] netlink_sendmsg+0x805/0xb30 [ 950.422350][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.427716][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 950.432662][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.438083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.443383][ T31] __sock_sendmsg+0x21c/0x270 [ 950.448206][ T31] __sys_sendto+0x3bd/0x520 [ 950.452714][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 950.457904][ T31] ? count_memcg_event_mm+0x21/0x260 [ 950.463196][ T31] ? exc_page_fault+0x82/0x100 [ 950.468055][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 950.473330][ T31] __x64_sys_sendto+0xde/0x100 [ 950.478220][ T31] do_syscall_64+0xfa/0xfa0 [ 950.482721][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.487982][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.494065][ T31] ? clear_bhb_loop+0x60/0xb0 [ 950.498820][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.504809][ T31] RIP: 0033:0x7f10a27915dc [ 950.509226][ T31] RSP: 002b:00007f10a3708ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.517792][ T31] RAX: ffffffffffffffda RBX: 00007f10a3708fc0 RCX: 00007f10a27915dc [ 950.525923][ T31] RDX: 0000000000000020 RSI: 00007f10a3709010 RDI: 0000000000000006 [ 950.533876][ T31] RBP: 0000000000000000 R08: 00007f10a3708f14 R09: 000000000000000c [ 950.541887][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 950.549916][ T31] R13: 00007f10a3708f68 R14: 00007f10a3709010 R15: 0000000000000000 [ 950.557952][ T31] [ 950.561028][ T31] [ 950.561028][ T31] Showing all locks held in the system: [ 950.568931][ T31] 1 lock held by khungtaskd/31: [ 950.573768][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 950.583748][ T31] 2 locks held by getty/5591: [ 950.588460][ T31] #0: ffff88802fb2d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 950.598430][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 950.608603][ T31] 1 lock held by udevd/11786: [ 950.613258][ T31] #0: ffff88805af79358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 950.622576][ T31] 6 locks held by syz.4.3990/21012: [ 950.627816][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.636025][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.645015][ T31] #2: ffff888030623270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 950.655452][ T31] #3: ffff88802777a478 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 950.665092][ T31] #4: ffff888027779e18 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 950.677535][ T31] #5: ffff888027779e50 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 950.690043][ T31] 2 locks held by syz.3.3992/21017: [ 950.695265][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.703446][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.712442][ T31] 2 locks held by syz.0.3996/21037: [ 950.717684][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.725883][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.734882][ T31] 2 locks held by syz.2.3997/21038: [ 950.740059][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.748271][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.757341][ T31] 2 locks held by syz.5.4002/21057: [ 950.762568][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.770863][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.779897][ T31] 2 locks held by syz-executor/21063: [ 950.785411][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.793577][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.802622][ T31] 2 locks held by syz-executor/21065: [ 950.808018][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.816241][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.825240][ T31] 2 locks held by syz-executor/21083: [ 950.830589][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.838889][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.847965][ T31] 2 locks held by syz-executor/21085: [ 950.853328][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.861551][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.870550][ T31] 2 locks held by syz-executor/21100: [ 950.875957][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.884152][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.893124][ T31] 2 locks held by syz-executor/21110: [ 950.898662][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.906913][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.919098][ T31] 2 locks held by syz-executor/21112: [ 950.924538][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.932746][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.941741][ T31] 2 locks held by syz-executor/21127: [ 950.947112][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.955403][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.964417][ T31] 2 locks held by syz-executor/21130: [ 950.969765][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.977982][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.987015][ T31] 2 locks held by syz-executor/21142: [ 950.992379][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.001173][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 951.010325][ T31] 2 locks held by syz-executor/21155: [ 951.015767][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.023938][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 951.032916][ T31] 2 locks held by syz-executor/21157: [ 951.038324][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.046569][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 951.055573][ T31] 2 locks held by syz-executor/21175: [ 951.060921][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.069121][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 951.078162][ T31] 2 locks held by syz-executor/21177: [ 951.083514][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.091734][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 951.100757][ T31] 2 locks held by syz-executor/21184: [ 951.106198][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.114656][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 951.123692][ T31] [ 951.126080][ T31] ============================================= [ 951.126080][ T31] [ 951.134556][ T31] NMI backtrace for cpu 0 [ 951.134571][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 951.134590][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.134602][ T31] Call Trace: [ 951.134608][ T31] [ 951.134614][ T31] dump_stack_lvl+0x189/0x250 [ 951.134634][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.134646][ T31] ? __pfx__printk+0x10/0x10 [ 951.134663][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 951.134680][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 951.134696][ T31] ? __pfx__printk+0x10/0x10 [ 951.134708][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 951.134724][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 951.134740][ T31] watchdog+0xf60/0xfa0 [ 951.134753][ T31] ? watchdog+0x1e2/0xfa0 [ 951.134766][ T31] kthread+0x711/0x8a0 [ 951.134789][ T31] ? __pfx_watchdog+0x10/0x10 [ 951.134805][ T31] ? __pfx_kthread+0x10/0x10 [ 951.134825][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 951.134842][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.134861][ T31] ? __pfx_kthread+0x10/0x10 [ 951.134883][ T31] ret_from_fork+0x4bc/0x870 [ 951.134896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 951.134909][ T31] ? __switch_to_asm+0x39/0x70 [ 951.134917][ T31] ? __switch_to_asm+0x33/0x70 [ 951.134925][ T31] ? __pfx_kthread+0x10/0x10 [ 951.134937][ T31] ret_from_fork_asm+0x1a/0x30 [ 951.134954][ T31] [ 951.134958][ T31] Sending NMI from CPU 0 to CPUs 1: [ 951.280067][ C1] NMI backtrace for cpu 1 [ 951.280100][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 951.280116][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.280126][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 951.280149][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c1 1f 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 951.280164][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 951.280178][ C1] RAX: 027a891a2c7ad200 RBX: ffffffff81967b47 RCX: 027a891a2c7ad200 [ 951.280191][ C1] RDX: 0000000000000001 RSI: ffffffff8d714225 RDI: ffffffff8bbf08e0 [ 951.280201][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 951.280213][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7d1e70 [ 951.280225][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 951.280235][ C1] FS: 0000000000000000(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 951.280248][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.280259][ C1] CR2: 0000561d8f611000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 951.280273][ C1] Call Trace: [ 951.280282][ C1] [ 951.280289][ C1] default_idle+0x13/0x20 [ 951.280308][ C1] default_idle_call+0x73/0xb0 [ 951.280328][ C1] do_idle+0x1e7/0x510 [ 951.280348][ C1] ? __pfx_do_idle+0x10/0x10 [ 951.280372][ C1] cpu_startup_entry+0x44/0x60 [ 951.280387][ C1] start_secondary+0x101/0x110 [ 951.280402][ C1] common_startup_64+0x13e/0x147 [ 951.280438][ C1] [ 953.316777][ T25] block nbd0: Possible stuck request ffff888062b9fa40: control (read@0,1024B). Runtime 510 seconds [ 953.327752][ T25] block nbd0: Possible stuck request ffff888062b9fc00: control (read@1024,1024B). Runtime 510 seconds [ 953.338814][ T25] block nbd0: Possible stuck request ffff888062b9fdc0: control (read@2048,1024B). Runtime 510 seconds [ 953.349828][ T25] block nbd0: Possible stuck request ffff888062830000: control (read@3072,1024B). Runtime 510 seconds