last executing test programs: 7m2.719302902s ago: executing program 1 (id=3274): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, 0x0, 0x0) 7m2.618752852s ago: executing program 1 (id=3278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 7m2.307981876s ago: executing program 1 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff00000000feffffff850000007b000000450000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="080026bd7000ffdbdf250900000008000300", @ANYRES32=r9, @ANYBLOB="991b0a90509b0c14cb4c8d860979e9a6bca22c66acda0a305d1d8798fb03f7be27dcaf554623e82ff77a71a721fc98387be3da38c52e5619a8bf6df473011f3270b08d61ce1888daeeb831da8ee41548a8857d75b7d2c022"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 7m2.229395834s ago: executing program 1 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x44, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) 7m2.140647328s ago: executing program 1 (id=3289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16=r0], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xf34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x10}, {0xf00, 0x2, [@TCA_FW_ACT={0xefc, 0x4, [@m_pedit={0xef8, 0x1, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x2, 0x6, 0xb, 0x3, 0x5}, 0x4, 0x11, [{0x4, 0xffffffff, 0x2d40, 0x9, 0x7, 0x8}, {0xa, 0x2c, 0x505, 0x9a, 0x3, 0xdc01}, {0x5, 0x5, 0x6000, 0x4, 0x6, 0x5}, {0x7, 0xf5, 0x101, 0x8, 0x6f4, 0x80000000}, {0x5, 0x2, 0x10000, 0x9, 0x4, 0x200}, {0x6, 0x3, 0x40, 0x1, 0x309, 0xf}, {0xbe0, 0xe947, 0x1, 0x3, 0x73, 0x8}]}, [{0xfffffffc, 0xfffffff9, 0x1d47, 0x3, 0x2, 0xe}, {0x8, 0x3, 0x0, 0x7e2, 0x2, 0x3}, {0x9, 0x27c, 0x9fc, 0x7, 0x8, 0x4}, {0x6, 0x80, 0xc, 0x9, 0x3364, 0x8001}, {0x10001, 0x5, 0xf, 0xffffffff, 0x81, 0x13b}, {0x3, 0x14349d83, 0x1000, 0x0, 0x77, 0x7ff}, {0x7, 0xc, 0xff, 0xfffffffe, 0x1, 0x3}, {0xb17, 0x5, 0x5, 0xc2, 0x8, 0x7}, {0x5, 0xffffff62, 0x0, 0x3, 0xf5, 0x2}, {0x4538, 0x4, 0x9406, 0x1, 0x81, 0x197d}, {0xfffffff9, 0x25e0, 0x1, 0x5, 0xd, 0x8}, {0x4, 0x91, 0x10004, 0x200, 0x5}, {0x0, 0xfffff4e1, 0x7fffffff, 0x1, 0x1, 0xe2}, {0x9, 0x10001, 0x7fffffff, 0x4, 0x6, 0x4f}, {0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x9}, {0xffffc92f, 0x7fff, 0x6, 0x2, 0x5, 0x3}, {0x1, 0x6, 0x401, 0xffffa1fe, 0x0, 0x881}, {0x3, 0xf, 0x6b, 0x9bb5, 0x2, 0x8000}, {0xf, 0x3, 0x2, 0x6a41, 0x2, 0x1}, {0x100, 0x1, 0x7, 0x8001, 0x5, 0x8}, {0x7, 0x0, 0x7ff, 0x9, 0x634, 0x9}, {0x2, 0x8, 0x0, 0x9, 0x4, 0x5}, {0x10001, 0x19, 0x6, 0x800, 0x7, 0xfffffffe}, {0x39, 0x8, 0x0, 0x5, 0xc3f, 0x6d}, {0xfffffff7, 0xe3, 0x1, 0xffffffd2, 0x8, 0x944}, {0x0, 0x8000, 0x4, 0xffffffff, 0x0, 0x4}, {0x4, 0x4, 0xea82, 0xd16, 0xe687, 0xb}, {0xb9e, 0x800, 0x3eaa2532, 0x80000001, 0x2, 0x5}, {0x0, 0x4, 0x3, 0xa9, 0x2, 0x23f3}, {0x1f, 0x47, 0xfffffff7, 0x4, 0x6, 0x8}, {0x3, 0xb01, 0x26, 0x10000, 0x4b, 0x3}, {0x6, 0x9, 0xfffffffc, 0x4, 0x2, 0x1}, {0x668, 0x6, 0xffff, 0x10001, 0xd66e, 0x4}, {0x0, 0xf, 0x0, 0x1ff, 0xcb, 0xffff8001}, {0x6, 0x2, 0xb853, 0x9}, {0x9, 0x5, 0x2, 0x8000, 0x7, 0x1a}, {0x800, 0x4, 0x80, 0x0, 0x4, 0xa}, {0x1, 0x0, 0x400, 0x39, 0x40, 0xffff}, {0xe, 0xa8, 0x7fffffff, 0x6, 0x7, 0x6}, {0x10, 0x10, 0xfffffffc, 0x3, 0x0, 0x80}, {0xc, 0x8001, 0x6cbf, 0x2, 0x7fffffff, 0xfffffffc}, {0x5, 0x80000000, 0x8, 0x5, 0x10, 0x200}, {0x800, 0x8, 0x3, 0x8001, 0x81, 0x2}, {0x8, 0xe25, 0x8, 0xffff0001, 0x9, 0xa}, {0x3, 0x8, 0x7, 0x9, 0x4, 0x24}, {0xcd85, 0xb, 0x218a, 0x4, 0x5, 0x1}, {0x200, 0x2, 0x97e, 0x1, 0xa, 0xd814}, {0x1, 0x3ff, 0x2d2c, 0x2, 0x8, 0x11898e13}, {0x6, 0x2, 0x8000, 0x9, 0x6, 0x2}, {0x80f, 0x852, 0xc66, 0x7, 0x6, 0x3}, {0x2, 0x9, 0xfffffffa, 0x5, 0x4, 0x2}, {0x3, 0xb, 0x1, 0x9, 0x3dbc0000, 0x200}, {0xfffffffe, 0xc, 0x5b, 0x5, 0x5, 0x2}, {0x9, 0x5, 0x8, 0xffff, 0x7f3b, 0x80}, {0x3, 0x5, 0x8, 0xf96, 0xfe0, 0x9}, {0x10001, 0x4, 0xf, 0x1, 0x401, 0x8}, {0xfffffff5, 0x7ff, 0xffff, 0x8000, 0x7, 0x8}, {0x0, 0xffe00000, 0x9, 0x2, 0xd91, 0x7}, {0x5, 0x2, 0x7fffffff, 0x0, 0xfffffff8, 0xfff}, {0x400, 0x9, 0x6, 0x5, 0x3d63, 0x2}, {0xb6f, 0x9, 0x7fff, 0x48bc, 0x2, 0x7ff}, {0x0, 0x5, 0x2, 0x8, 0x85, 0x10}, {0xff, 0x5, 0x0, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x200, 0x9, 0x5, 0x3}, {0x9, 0x40, 0x18d, 0x7, 0x0, 0x3}, {0x5, 0x7ff80000, 0xffffffff, 0xd, 0x80000000, 0x3}, {0x80000001, 0x81, 0x7a82, 0x0, 0x3, 0x4}, {0x1000, 0x298edb52, 0x8, 0x6cd, 0xfffffff8, 0xeecf}, {0x5, 0x2, 0x6, 0x3ff, 0x8, 0x10}, {0x4, 0x9, 0x7, 0x1, 0x7, 0x1}, {0x80000001, 0xffffff80, 0x7ff, 0x9, 0x9, 0x6}, {0x3, 0x8, 0x7, 0xb2d, 0x8, 0x85}, {0xb3b, 0x9fee, 0xbe1, 0xb1a0, 0x9, 0x100}, {0x0, 0x5b, 0x6fc, 0x9, 0x7, 0x41}, {0x5, 0x7, 0x3, 0x3, 0x0, 0x10001}, {0x8, 0x84, 0x3, 0x80000001, 0x3}, {0x8, 0x8001, 0x7, 0x7f, 0x2, 0x8}, {0x4, 0x1ff, 0x6d3, 0x6, 0x6, 0xa000}, {0x10001, 0xbf4, 0x2, 0x8001, 0x7f, 0x9}, {0x3800000, 0x6, 0x1ff, 0x10000, 0xffffff9e, 0x3}, {0x7, 0x0, 0x4, 0x1, 0x3, 0x7}, {0x8, 0x7, 0x5, 0x5, 0x10000, 0x1}, {0x6, 0x4, 0x90f3, 0x4, 0xa9, 0x3}, {0x7fffffff, 0x9, 0x6, 0x3, 0xd105, 0x4}, {0x5, 0x4, 0xa, 0x6, 0x5, 0x2}, {0x5, 0x7a96, 0xa54, 0x100, 0x0, 0xe}, {0x1, 0xfffffffe, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x4, 0x2, 0x2, 0xe4}, {0xc000000, 0xfff, 0x6, 0x6, 0x894, 0x6}, {0x3, 0x3, 0x2, 0x1678, 0x5, 0x2}, {0x6, 0x80000001, 0xde1, 0xff, 0x7, 0x8}, {0x2, 0x0, 0x7fff, 0x80000001, 0x2, 0x86db}, {0xf7ef, 0x7, 0x200, 0x4, 0x8, 0xc6ab}, {0x2, 0x1, 0x2, 0x4, 0x6, 0x7}, {0x5e27, 0x8, 0xffffffff, 0x6, 0x1000, 0x8}, {0x2, 0x2, 0xff, 0x6, 0xf, 0x5}, {0x7, 0x8, 0x2e16, 0x3ff, 0x8, 0x401}, {0x6, 0x3, 0x5, 0xfffffff9, 0xbd83, 0x7}, {0x7e1, 0x9, 0x7ff, 0x100000, 0x8, 0x401}, {0x4, 0xb, 0x6, 0x8, 0x95, 0xf32}, {0x7, 0xfff, 0x3, 0xaeb3, 0x7, 0xffff}, {0xfff, 0x5f, 0x3ff, 0x8, 0x101, 0xffffd453}, {0x0, 0x9, 0x6, 0x400, 0x2, 0x7}, {0xbda0, 0x4, 0x8, 0x4, 0x557, 0x101}, {0x3, 0x1000, 0x5, 0x37, 0xbcc2, 0x345}, {0x100, 0x0, 0x7f, 0xffffff00, 0x1ff, 0x8}, {0x1, 0x4, 0xfff, 0x2, 0x2, 0x7}, {0x9, 0x9, 0x467, 0x4, 0x4, 0x2}, {0x8cd, 0x5, 0x2, 0x4c, 0xc, 0x8}, {0x2, 0x10000, 0x8, 0x0, 0x200, 0x2}, {0x7, 0x80000000, 0x101, 0x401, 0x1ff, 0x4}, {0x10, 0x8, 0x9, 0x6, 0x1, 0x3}, {0x2, 0x0, 0x9, 0x3, 0x3, 0x5}, {0xfd, 0x2, 0x6, 0x101, 0x1, 0x401}, {0x42, 0x1, 0x2, 0x4, 0x0, 0x1}, {0x6, 0x4, 0x9, 0x3, 0x2097, 0x7}, {0x10001, 0x9, 0x9, 0x2, 0x6539, 0xfffffff7}, {0x80, 0xb00, 0x86, 0x1, 0x10, 0x80000001}, {0x8, 0x9, 0xc, 0x8000, 0x3, 0x5}, {0x0, 0xfffffff7, 0x6, 0x6, 0x7fff, 0x3}, {0x4, 0x1800000, 0xfffffffd, 0x4, 0x1c000, 0x68}, {0x0, 0xfffffffb, 0x5, 0x6c, 0x4, 0x5}, {0x5, 0x7, 0x9, 0x9, 0x2, 0x4}, {0x9, 0x1, 0xfff, 0x9, 0xc, 0xfffffffb}, {0x9, 0x7f3, 0x1000, 0x4, 0x5, 0x3}, {0x1, 0x401, 0xffffe7ad, 0xa, 0x894, 0x7}, {0x64d7e3ec, 0x9, 0x1ff, 0x5, 0x8001, 0x8}, {0x0, 0x78f3, 0x7fffffff, 0x78b, 0xffffffff, 0x3}], [{0x1, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {0x5}, {}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0xdc11eedf34026e23}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xf34}, 0x1, 0x0, 0x0, 0x1}, 0x800) 7m1.931923597s ago: executing program 1 (id=3294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x4, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r8) pipe(&(0x7f0000000100)) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 5m21.424780687s ago: executing program 32 (id=3294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x4, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r8) pipe(&(0x7f0000000100)) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 1m7.823630874s ago: executing program 5 (id=5240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}}, 0x24000044) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x4, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x24000044) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}}, 0x24000044) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x4, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x24000044) (async) 1m7.583743926s ago: executing program 5 (id=5242): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000005c0)={0x7, {{0xa, 0x4e24, 0x5, @mcast2, 0x1000005}}, {{0xa, 0x4620, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000005c0)={0x7, {{0xa, 0x4e24, 0x5, @mcast2, 0x1000005}}, {{0xa, 0x4620, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x1, 0x2, 0x3, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0xf, [{@rand_addr=0x64010102, 0x9}, {@empty, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x80000000}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}]}, @noop]}}}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="147f0000", @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}, 0x1, 0x0, 0x0, 0xc085}, 0x4010) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000280)=0x5, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="ce9ada41c8f5", 0x6}], 0x1, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) splice(r5, 0x0, r9, 0x0, 0x2, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 1m6.672695866s ago: executing program 5 (id=5247): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x8788, 0x20}, 0xc) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x8788, 0x20}, 0xc) (async) 1m6.508029484s ago: executing program 5 (id=5250): connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) sendmmsg$inet(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 1m3.244965113s ago: executing program 5 (id=5263): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc9}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a40, 0x0) r4 = socket(0x25, 0x3, 0x2000) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in6=@loopback, 0x4e20, 0x1, 0x4e23, 0xb, 0xa, 0x80, 0x60, 0x32}, {0x15ba3b73, 0xb, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x7fffffff, 0x52ae, 0x7, 0x1000000000b}, {0x8, 0x80000000, 0x8}, 0x5, 0x0, 0x2, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in=@private=0xa010101, 0x34ff, 0x0, 0x1, 0xf, 0xbf8f, 0x7, 0x800}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000000000095", @ANYRES16=r3, @ANYRES32=r8], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c005165fa1300002d000100000000007c0000002400008008ffff0000000000007a922434ff2b727c123b5193428285493641ae773400000000000000"], 0x1c}], 0x1}, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000faf900000700", @ANYRESOCT=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m3.187206904s ago: executing program 3 (id=5266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000130001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00010000021000001400140076657468300000000200000000000000140035006d616373656330000000000000000000050027000600000008002c000004000005001000780000000c001a"], 0x6c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1m2.335499093s ago: executing program 5 (id=5271): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x2, 0x0, 0x9, 0x1d, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_key={0x12, 0x9, 0x438, 0x0, "c3a2372f44c48e28312eb6609d08040fc86236761fd85c238d3b8b0393ed53115f4e14d0448fa094536f9689feb982598483514fea3ecb61af5cd885e5d789a67d0256861452b278189dd17937bba2731a44b6af5dcacbb69323521a5b70f26e05db2aadf0c80bc35e854b3507224b848ee62c25aaacaed8f3a22b78a465c4417fe9221a0b4e85"}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xe8}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001033c1f60ca06ec7d82cbf00010000000000000000000300000a4c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000200004801c000180090000006d617463680000000c000280080001007533320014000000110001000000"], 0x74}}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0) close(r6) connect$can_bcm(r4, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, 0x0, 0x24004895) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000100)={0x3, 0x7fffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) 1m2.115781174s ago: executing program 3 (id=5273): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtclass={0xcec, 0x28, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffe0, 0x3}, {}, {0x7, 0x1}}, [@c_cbq={{0x8}, {0x864, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x101, 0x8, 0x81, 0xe}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0xc}, 0xffffff81, 0xe}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x21, 0x3, 0x4, 0x2, 0x7, 0x0, 0x8, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x80, 0xf652, 0xcab5, 0xe0ea}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0xc390, 0x3, 0xca7, 0x5412619a, 0x0, 0x81, 0x4, 0x5, 0x9, 0x2, 0xfffff55d, 0xe3faa19, 0x1, 0x9, 0x0, 0x6, 0x7, 0x0, 0x4, 0x5, 0x5, 0x7, 0x101, 0x3, 0x0, 0xd5e5, 0x2, 0x10, 0x0, 0x0, 0xaa34, 0x8, 0x4a, 0x1, 0x1000, 0x5, 0x8000, 0x9, 0x6, 0xfffffffe, 0x0, 0x8, 0xbb9e, 0xfffff60e, 0x8, 0x8, 0x523, 0x8, 0x5, 0xfff, 0x9, 0x1, 0x3, 0x80000001, 0x2, 0x80000, 0x0, 0xffffffff, 0x2, 0x0, 0x7fffffff, 0x4, 0x4, 0xa, 0x4, 0x3, 0x5, 0x6, 0x1000, 0x0, 0x1000, 0x0, 0x1, 0xf, 0x4, 0x3, 0x47, 0xf, 0xb, 0xfffffffe, 0xfffff236, 0x5, 0x7, 0x40, 0x5, 0x2, 0x879f, 0xfffffff9, 0xf, 0x2, 0x3, 0x7, 0x4, 0xc, 0x5, 0x2, 0x6, 0x1, 0x0, 0x9, 0xfffffbff, 0x5, 0x0, 0xd, 0x0, 0x4e8, 0xfffffe00, 0x0, 0x0, 0x8, 0x1, 0x8, 0xfffffff5, 0x8, 0x1ff, 0x2, 0x9, 0x1, 0x1000, 0x9, 0x9, 0x0, 0x6, 0x5, 0x5, 0xa31, 0xfffe0000, 0x80000000, 0x4, 0x7, 0x7fff, 0x7, 0x6, 0x2, 0xfffff801, 0x5, 0x7fffffff, 0x3, 0x8, 0x8, 0xfffe0000, 0x2, 0xc, 0x9, 0xf5, 0x80, 0x1ff, 0x6d48, 0x4, 0x30c7, 0x2, 0x0, 0x1, 0x29, 0x2, 0x11a, 0x5, 0x2e6, 0xff, 0xb, 0x2d, 0x4, 0xd, 0x7ff, 0x800, 0x4, 0x5, 0x7f, 0x0, 0xb4, 0x9, 0x2, 0x7fffffff, 0x8, 0x3, 0xfffffffd, 0x2, 0x40, 0x4, 0xd, 0x7fffffff, 0x55, 0x800, 0x7, 0xa9, 0x6, 0x3, 0x3e54458b, 0xf1, 0xf78, 0x8, 0xf3, 0x7, 0x4473, 0x2, 0x1, 0x9d, 0x3, 0x31, 0x4, 0xc, 0x8000, 0x5, 0x8001, 0x8, 0x2, 0x8, 0x6, 0x5, 0x200, 0x7, 0xa, 0x8, 0x6, 0x7, 0x7, 0x6, 0xfffffff9, 0x9, 0x77c, 0x1, 0xfffffffc, 0xa50, 0x4, 0x5e, 0x4, 0x2fa, 0x2, 0x5, 0xab11, 0x1a00, 0x2a48, 0x75127080, 0x4, 0x3ff, 0x1, 0x1, 0x6, 0x8, 0x6, 0x9, 0xfffffffc, 0xfffffffb, 0x4, 0xe, 0x33, 0x890, 0x2, 0x800, 0x5, 0x4, 0xffffffff, 0x200, 0x9, 0x800]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x2, 0xffffff93, 0x1ff, 0x1e, 0x8, 0xa, 0x0, 0x43, 0x2, 0xbef, 0x6, 0x24000, 0x7fff, 0x1, 0x3, 0x8, 0x7, 0x7, 0x800, 0x4b2, 0xee6a, 0x1, 0x7, 0x2, 0x80, 0xfffffff7, 0x4, 0xc38, 0x0, 0x4, 0x6, 0xfffffffe, 0x1d2, 0x80000001, 0x401, 0x1, 0x10000, 0x1, 0x6, 0x4, 0xfffffffe, 0x5e, 0x6, 0x8, 0x3, 0x3, 0x3, 0x0, 0x4, 0x3, 0xfffff198, 0x6, 0x125d333a, 0x2, 0x4, 0x800000, 0x2, 0x4, 0x6, 0xff, 0x7fffffff, 0x1, 0xc, 0x5, 0x1, 0x3, 0x3a, 0x9, 0x5, 0x1, 0x1ff, 0x2, 0xfff, 0x2, 0x929, 0x8, 0x6, 0x1, 0x1, 0x2, 0x1, 0x9, 0xc, 0x9376, 0x101, 0x7, 0x8000, 0x3c6, 0x2, 0x3, 0xc29, 0x8001, 0x7, 0x1, 0xfffffffd, 0x4, 0x8, 0xfffffffc, 0x2, 0x4a, 0x5, 0xb8, 0x8, 0xd8a, 0x5, 0xffff8001, 0x5, 0x10001, 0x10, 0x8, 0x2365, 0x4, 0x10000, 0x3, 0x9, 0x7, 0x4, 0x89, 0x10000, 0x400, 0x8, 0x8, 0x917, 0x9b, 0x1, 0x8, 0xffffffff, 0x4, 0x1, 0x3, 0x5, 0x800000, 0x2, 0x7, 0x8000, 0x2, 0x0, 0x5, 0x40, 0x28, 0x97b, 0x64e1, 0x226e, 0xeb78, 0x7, 0x3ff, 0x8, 0x4, 0xa, 0x4, 0x1, 0x7fffffff, 0x5b, 0xb9, 0x2, 0x101, 0xffffff7f, 0x39, 0xff, 0x401, 0x5, 0xc, 0x3, 0x8, 0xfffffff8, 0x7, 0x1000, 0x8001, 0xffff8000, 0x0, 0x7f, 0x4, 0x0, 0x5, 0x2, 0x3, 0x3, 0xff, 0x7, 0x2, 0xb, 0x4, 0x7ff, 0xd, 0xfffffffe, 0x1, 0x0, 0x3, 0x7, 0x9, 0x80000001, 0xff, 0x5, 0x9302, 0x1, 0x0, 0x3, 0x8, 0x7, 0xcb2, 0x80, 0x20aa00, 0x400, 0x3, 0x0, 0x59, 0xae, 0x200, 0x3, 0x8c, 0x3, 0x2, 0x3c, 0xfdf, 0x9, 0x7, 0x7, 0x1000, 0x0, 0x3ff, 0x5, 0x3, 0x32, 0x8000, 0x5b1, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x1, 0x8, 0x0, 0xf, 0x4, 0x2, 0xf, 0x7, 0x7, 0x101, 0xffffffff, 0x40, 0x80000000, 0x5, 0x9, 0x1, 0x2400, 0x6]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xffe0}, 0x3, 0xff}}]}}, @c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0xffff}, 0x5, 0xe}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x200, 0x4, 0x81, 0x3, 0x7, 0xffffffff, 0x7, 0x8, 0xb, 0x7, 0x1ff, 0xe, 0x6600, 0x2, 0x7f, 0xfe6, 0x451, 0x3, 0x8, 0x8, 0xe, 0x0, 0x6, 0xffff, 0x879, 0x0, 0x4, 0x1aa, 0x2, 0xe72, 0x7, 0x5, 0x4a7a, 0x8000, 0x2, 0x1, 0xf4, 0x922a, 0x2, 0x81, 0x7ff, 0x25ce, 0x5, 0x8a1, 0xffffffff, 0xfff, 0x0, 0x80000000, 0x4, 0x941, 0x9, 0xbd, 0x7c133872, 0x7, 0xffffffff, 0x2, 0x8, 0x27a0, 0x1, 0x9, 0x2, 0x80000000, 0x7, 0xe2d, 0x7ff, 0x720, 0x4102, 0x4, 0xa8f, 0x400, 0x2e0dcd51, 0x5, 0x8, 0x7ff, 0xfffffffd, 0x1e, 0xffffffff, 0x40, 0x4, 0x40ab, 0x4, 0x0, 0xffff, 0x6, 0x800, 0x9, 0xfffffff6, 0x3, 0x4, 0x7, 0x1b, 0x401, 0x6ad4, 0x3ff, 0x81, 0xffffff33, 0x4, 0x9, 0x0, 0x5f99, 0x200, 0x7, 0x9, 0xffffff9f, 0x5, 0x400, 0xefa4, 0x7, 0x7, 0xa, 0x400, 0xf0, 0x232e63f8, 0x4, 0xe, 0x80, 0x6, 0x7, 0xf, 0x800, 0x8, 0xf6d4, 0x5, 0x272, 0x8, 0xb, 0x6, 0x0, 0x7, 0x2, 0x9, 0x0, 0x10000000, 0x4000000, 0x4, 0x4, 0x8, 0x8001, 0x40, 0x9a2, 0x3ff, 0x2, 0x7fffffff, 0xffff, 0x3, 0x1, 0x2, 0x8, 0x37f8, 0x8, 0x1, 0x7e, 0x1000, 0x7, 0x4d6d1211, 0x6, 0x400, 0x3, 0x0, 0x8, 0x3, 0x10000, 0x3ff, 0xfffffffe, 0x4, 0x800, 0x8001, 0x4, 0x9cc, 0x0, 0x3, 0x0, 0x0, 0x7, 0x81, 0xf, 0x9, 0x0, 0x8, 0xc2, 0x3, 0x7f, 0x5c, 0x2467, 0x1000, 0x4, 0x8, 0x5, 0x6, 0x3, 0x3, 0x9, 0xfffffffd, 0x100, 0x7, 0x55f9, 0x3, 0x9, 0x6f33, 0x2, 0x2156, 0x6, 0x4b, 0x8, 0x55364947, 0x3, 0x100, 0x3, 0xfff, 0xd54, 0x9, 0x9, 0xffffffff, 0xcf, 0x62d00000, 0x200, 0x7, 0x1, 0x400, 0x5, 0x5, 0x6, 0x0, 0x6, 0x1, 0x10, 0x6, 0x2, 0x9, 0x7, 0x7ff, 0x8, 0x8, 0x81, 0x9, 0x80000001, 0x6, 0xf022, 0x8, 0x6, 0x7, 0xe, 0x0, 0x8, 0x16a, 0x8, 0x0, 0x8, 0x5, 0x36a, 0xffff, 0xc, 0xe, 0x8, 0x6, 0x9]}, @TCA_CBQ_RATE={0x10, 0x5, {0xe2, 0x0, 0x40, 0x7, 0x0, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0xffff}, 0x8, 0x6}}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x9}, 0x3, 0x16e}}]}}]}, 0xcec}, 0x1, 0x0, 0x0, 0x4}, 0x44044810) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000700)=""/9, 0x9}], 0x2}, 0x7}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x5, 0x14}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, &(0x7f00000001c0)=0xc) getpeername$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@delqdisc={0xfc, 0x25, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xb}, {0x4, 0xb}, {0xfff3, 0xe}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4c8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xfc}}, 0x40) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000200)={r7, 0xfb, "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"}, &(0x7f0000000340)=0x103) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="3eaa00000000000071000095000000005b0d000000000000", @ANYRESHEX], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m2.109698617s ago: executing program 2 (id=5274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x18c, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6de}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xfe5000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x68}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0x6000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x49}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x8000}, {0x5}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x70}, 0x1, 0xba01}, 0x0) 1m1.928319246s ago: executing program 4 (id=5275): r0 = socket$kcm(0x10, 0x2, 0x10) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x23000, 0x1000, 0x8, 0x2}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/\x00\x00'], 0x20) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xfe9}], 0x1}, 0x40000020) 1m1.759866628s ago: executing program 2 (id=5276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xa, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f00924a100767ff70d6297cd9fac1ec3f751", 0x12}, {0x0}], 0x2}}], 0x2, 0x20000010) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in6=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x6]}, 0xa) 1m1.615866235s ago: executing program 4 (id=5277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xffffffffffffff44, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x12, 0x7, 0x1, 0x0, "6925755e2a22570e4acda831399f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4000191) 1m1.504204806s ago: executing program 3 (id=5278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x7ffffffe, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x5, 0x0, 0x208000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) close(r3) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3000000000080004400000000a080009400000200308000340000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1m1.400047949s ago: executing program 4 (id=5279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x100}, {r0, 0x24a7}, {r6, 0x540}, {0xffffffffffffffff, 0x328}, {r5, 0x8008}, {0xffffffffffffffff, 0x1041}, {r2, 0x463d}], 0x0, 0x0, 0x0, 0xffffff68) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) write$nci(r10, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000080)={0xa002a008}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r14, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r15, &(0x7f00000bd000), 0x2d, 0x20040040) 1m0.865621871s ago: executing program 2 (id=5280): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xb, 0xa}, {0x9, 0xffef}}}, 0x24}}, 0x4000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x7fff) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xb) socket$isdn_base(0x22, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x2, 0x24000045) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) 1m0.46329115s ago: executing program 4 (id=5281): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x1005) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000002340)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x20000000000000bd, 0x0, 0xd, 0x6000000, [{0x4000d, 0x40000002}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x9}, 0x28) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x89, @rand_addr=0x64010102, 0x4e24, 0x0, 'lblc\x00', 0x1c, 0x4, 0x1f}, {@multicast1, 0x4e21, 0x10000, 0x0, 0x81, 0x1ff}}, 0x44) 1m0.348119356s ago: executing program 4 (id=5282): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x40082) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x5, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffff3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0xc010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r11}, 0x8) 1m0.100486567s ago: executing program 3 (id=5283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xe, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1], 0xfce) 59.927884357s ago: executing program 4 (id=5284): unshare(0x6a040080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x300, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x80}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)={r2, 0x6, 0x2, [0x0, 0x4]}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20044801) r4 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @loopback, 0x4e24, 0x400000b, 'lc\x00', 0x12, 0x200323b, 0x137}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x32050100) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r6, &(0x7f0000000380), 0xe) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendto$inet(r7, &(0x7f0000000240)="3699aec200f88887e9416f45cd843b2d449d8d66478cc3f7940a2412e2201108dbb68676c49da7b4c675316a4bd62478993b3dc1fe7e631fb969f780214126a17e3ed6931f8f4efde78921c3195f26713fdc858973efdffe5f8e9cfb51bd019b17bfb476d9329714eb11650b14623f63026e", 0x72, 0x1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r8, 0x0) recvfrom(r8, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 59.718141214s ago: executing program 3 (id=5285): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 59.361585974s ago: executing program 2 (id=5286): unshare(0x22020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000341200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000006000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000004c0)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/187, 0xbb, 0x0, &(0x7f0000000040)=""/41, 0x29}, &(0x7f0000000240)=0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200f4ff04000000080000000100200080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x9, 0x1, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2}, 0x3) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000000)) socket(0x1, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={0x24, @short={0x2, 0x2}}, 0x14) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000280)=0x4) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r9, 0x8923, &(0x7f0000000080)="33adf5aa3a") setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)={0x14, 0x12, 0xa01, 0x70bd26, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) 58.766938127s ago: executing program 3 (id=5287): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200100001600010000000000ffdbdf2500000000000000000000000000000000ff01000000000000000000000000000100000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000001320000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000002000000000008547e9aafb963862b592d2eb4b000000000000000000000000000000000000000000000000000000000000000000000005350000000000000100000000000000000000f7fffffff727001a00ac1414294f0000000000000000000000ac1414bb000000"], 0x120}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003f930000000000000000001810ff00", @ANYRES32, @ANYBLOB="0000a200000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300090000000000040000000300000008000200030005"], 0x1c}}, 0x24000044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000090b00020073797a32000000000900010073797a30000000002c0004802800e97f07000100637400001c000280080001400000001308000240000000150500030000000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x800, 0xfffffffc, 0x1}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 56.097862449s ago: executing program 2 (id=5289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000019c0)="e94e6785facdeda4e9a789778edd8051746667861fcb55fc79f3dce63694e62c7129c14cad36728ec771c9b3ad8ff8bb3b3aef032adf92a73fccc368f7e4d07073ce68baace2fe4cd861eb3a2988ca9fd7f2705cfa224834816767e62ff51ae65db5ee09c76585f0722b13d592d9802d70802efe930242ca43280995f58a88253329a8f6edea76902bd788304505c89f7fcdf8ae99f9d7d90748f6ba6fe67f634fd01f4748a6cdf5e7b532b57d822b4b931229e2be3205408e37917aa6aa36391d5f2d55d44148932f2e849bb14e69fca4e3bcece4c70f56094e0c5e1e489fd63b691adb46cfb1234810341415f0cd066ef33a67b6ae1c87eff349aac90632539d0f3842ac7d8d101bfb58a8ac8c353b0be5b1e16bf560cf4a909d369a73da8c5627edce549e1e307377bb768da857d113a603f051769c9df45c64550ef7299271dd821421e60977f693942666cd79fb7c96899e57b56aa13dc3334dbe96879ba304d672f92548f3b5d7df7835d7307a6d47cb13afd113609f093cf527d64d29437d15eee3cf82ecb328e7beb0595f534d712154092ab45559c25dce68753ed7956c98dd8c432415c6e7f1b1444e7178afd18f506033d4a4c5feaf56c663cad615f7e04a009e53edcbc2d587e9f8edd184d9cf8cefb8a722510f4b037fc0eeb88e4e294c3bdcd2bc36e5a79e5b03d8f0fd363142d85bc0098a13b29e5dda20f20e1f22b10bdce593ea7d0ab6a88455d2acd4667d996b3e913923099ed01944efc2427f04fa09886c6e7c43120a023d9427d38a6b0be6a35b8e83491c5e472f2bb1bdbd39b6e3c8d8fd803529de9ea66155928aa56f4cec6654d3480ad9da35624ae41b836b455a5449c73ac22a3fe8fc020a8af63e4e21c1e791bd160d1c04a2a42e93784a225fdbd169bdea851f91886433813fcd7677c2b87791dfa280c9d322b52bcd3708778cb644fd8656321416c905c893ffd578a57c2ecd21a75e34cf2e9ddb56b6e62347cfd9d4413047903a5643f6734d42699715d457ca11721e21fa2cd0bd776548d2f9da40900848606d8587fdc24612b6d9042c9f1785db6628c11d7e79e9a550a8bfbcc82f218926b3043701e0e4111d73ca7bf7b061debe7231d9293abfe2ff6dbfbdbebbed3915e9d27f2f63cb0a6091ba7bda625aa9d978fe41aed03bbd0aeb6cc2985e0c2c4d9d1eeb2474e7d26ab7cc472afe2f11f243708ed43623fd5c0861ad7cf5970f154048fbc58678cb14a4e4e6fdd43605cb3e23efd9df955c7f9539a2074bbe65ee1748a81fe5efe6bf533836becce2afb20366e647a225d7ed6d554d9df7ac1b7c466aab548283a2a9b54fea91bb1ddeceb71aa078c1b847c92d7d5ba703f9d7d9a116f9b18a27ca47c3500ccffb187d70d3b86b31da43d02f1dc0fd92072471c66b931c81dae72bbaa19556a8a806471ff5d91e6489066a287cc1f6dee365f65416fa506edfacbd4a16a66e138f93eb603babe582027e38fee835a002e1a94eb0424c016619f26604517d0bc03e7bdbf2a437fbcb6a3f9ec6977762193665339ad6af2f84872cfcc794fe1e61f6392d1f5cbc409d3050cc655435d6fdd38385e39e18d70c6ea1618e962b6b4b4d0edbffd882c700bf900137832027f807d7739af211ad5be5c538b70d1983bf6693ed909fd406e1d5c8b7bfbdd36d5f9d6a88100895f08cb6ef123e41419d5877d1e17ec72b862fbfc7ddf6f37c8aacbcfb05dad0c2a596b610da09b0bf3b72b420fd797ed0aa72fcac87a6192c0ef7551baa06d50739abff50ba92e79451dc3588ed45e821bfe9b8e25fb871e592dcfedb1b5de9fba1b1635f7e10a4aa8f1785429ac582b4d5a725c6d0051af07ab043d62326b77ea259cf44e8cf14bd8d6a1353c770ab6f1dbedd7f3b39fe2bbd9cc986db49782b34be117cf578cbc417799f12cc5c5bf32ea96d2d7ca48650c74e827f5fe12393be2181416e4030d02c875eb242f815774211cb50a1ce4d53e926388723c5d157b12bcccaf193f2fffb8a53b0b0ec9834c07e96a2cf2323cfb2e1cc92e18baf8bf87ac9a7336f8c04fe6c8fae5ccc81976a26afb44c1aa0efbd93ef87e722c6c3f00da78bdc81dad9795fe2c1c644fdc09c842c138f704353c786311a0e14c226ef9061e36cdade4febdad904cdad6cbc4edcd1d73e27e835324988510534af9475416d5b8c14075b774efaddaad27889736369ab28ac8d005292105d1c3bdc7c665fceef0d945626bf76c8c147f7de23b07c9ca073058f1150958e85193303c7f1f7a60839dcce54d466a210a6d123968fbec47ba47239c1a2fadf9566e356ac610e562b77934bf56456e16edf9a8c0915c0a0b9405676d0d20d31ad62844416de5c043255f24c591427a21479c7fccd231c6b6a90880a551832ef874a879cc7b847aa926964224231a81af9b13d48f02828cb960d88a46302d2ef1492fae558a3d9c81042e2450b3a0aa1cb86bfa58ec3b09da9c360a202d28136565bb956", 0x6f0}], 0x1, 0x0, 0x0, 0x40080}], 0x1, 0x20040800) socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13092abd7000ffdbdf25210000000c000100000200000000000009001f00"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) 53.503951905s ago: executing program 0 (id=5290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x23aa}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) (async, rerun: 32) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a49}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84b3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf954}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54c834e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10f5dcc7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cfd2bda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa98c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x90bbf3817bdd561f}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20738666}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x614d9e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a08a188}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc0000000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000007c0)=0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000880)={r7, 0xee00, r8}, 0xc) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000008c0)={0x0, 0xe0, "229e853e40f11f39bea799b80e717f27faf45cb16e7d896263c9e68bbe2a8cc3cad3e1824ba281cd0298caaca2f68383ec9ed91a0a54b2a2354096fbd43f9dd73c6f9819a05a1c2cedffb3250f13f005a927b78f24f5d981a80b9236e74b27f9fef3631ff816338cd3e1ea948326e5e83ef4d21ba2e213fd6321b62f20765b3aae89a419110f53def73fadbec52aaf2dc0ef7fc296ca899efa5a7edcfa533460dd1cf6e581bebe4ff0b11b588c84ae9ff8c21c2ba282445b13764a43a9972b175d2d58b86cf54d7144389eb27bb6a7c7f529248048dfae1558fdd816c3ecfd12"}, &(0x7f00000009c0)=0xe8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000a00)={r10, 0x6, 0x8, 0xf4, 0x9, 0xd7}, &(0x7f0000000a40)=0x14) (async) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000a80)=""/242, &(0x7f0000000b80)=0xf2) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000bc0)={r11, 0x8000}, 0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000c00)={r10, 0x5}, &(0x7f0000000c40)=0x8) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd99}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0xb, 0x0, 0x58]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 32) setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f0000000dc0)=@fragment={0x67, 0x0, 0x3, 0x0, 0x0, 0x19, 0x67}, 0x8) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r13, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x118, r14, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3a5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000c1}, 0x2c000811) (async, rerun: 64) r15 = syz_genetlink_get_family_id$fou(&(0x7f0000001080), r13) (rerun: 64) sendmsg$FOU_CMD_DEL(r13, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, r15, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 52.003343289s ago: executing program 2 (id=5291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x51cf8d4f258ee1a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x3, 0x1, 0x6, 0x40}, {0x9e, 0x0, 0x2, 0x401, 0x1}, 0xd73, 0xb29, 0x400372}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async) r10 = socket(0x10, 0x80003, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 46.291584957s ago: executing program 33 (id=5271): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x2, 0x0, 0x9, 0x1d, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_key={0x12, 0x9, 0x438, 0x0, "c3a2372f44c48e28312eb6609d08040fc86236761fd85c238d3b8b0393ed53115f4e14d0448fa094536f9689feb982598483514fea3ecb61af5cd885e5d789a67d0256861452b278189dd17937bba2731a44b6af5dcacbb69323521a5b70f26e05db2aadf0c80bc35e854b3507224b848ee62c25aaacaed8f3a22b78a465c4417fe9221a0b4e85"}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xe8}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001033c1f60ca06ec7d82cbf00010000000000000000000300000a4c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000200004801c000180090000006d617463680000000c000280080001007533320014000000110001000000"], 0x74}}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0) close(r6) connect$can_bcm(r4, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, 0x0, 0x24004895) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000100)={0x3, 0x7fffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) 44.336527328s ago: executing program 0 (id=5293): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2], 0x4c}}, 0xc0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2], 0x4c}}, 0xc0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000020000100000000020000000008000400fbffffff1400030076657468305f746f5f68737200000000"], 0x38}}, 0x0) r4 = socket(0x1d, 0x80802, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff3f000000000001090000008500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r7, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4110, 0x100e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/3, 0x3}], 0x1}, 0x80000000}], 0x2, 0x12002, 0x0) (async) recvmmsg(r7, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4110, 0x100e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/3, 0x3}], 0x1}, 0x80000000}], 0x2, 0x12002, 0x0) close(0x3) (async) close(0x3) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r11 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\x00\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) (async) sendmsg$inet(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\x00\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800003}, 0xc, &(0x7f00000005c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="80020000", @ANYRES16=0x0, @ANYBLOB="000428bd7000030000001300000014000380080002007e0000000800010002000000540001800d0001007564703a73797a3100000000080003000500000038000400200001000a004e2000000008fc040000000000000000000000000001030000001400020002004e20e0000002000000000000000024010180080003000300000038000400200001000a004e2200000001fe8800000000000000000000000001010c0000001400020002004e2300000000000000000000000038000400200001000a004e2300007fff20010000000000000000000000000000090000001400020002004e20ac1e00010000000000000000380004001400010002004e23e00000020000000000000000200002000a004e218000000000000000000000000000000000000001af000000380004001400010002004e21ac1414aa0000000000000000200002000a004e24fffffffeff010000000000000000000000000001ff7f000008000300000001000d0001007564703a73797a31000000001500010069623a76657468305f746f5f626f6e640000000008000300000000002400068008000100ffffff7f0800010004000000080001000000000008000100ff7f0000240003800800020000000000080001000100000008000200ffffffff080003000e00000044000980080001000200000008000100e304000008000100fe0900000800020005000000080002000700000008000200f404000008000100e7d600000800010001000100540005801400028008000300080d00000800040002000000070001006962000007000100696200002c0002800800040000feffff0800030004000000080004000700000008000400000000800800020001000000"], 0x280}, 0x1, 0x0, 0x0, 0x200004c0}, 0x4) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000080)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044001}, 0x20000000) 43.518243158s ago: executing program 34 (id=5284): unshare(0x6a040080) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x300, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x80}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)={r2, 0x6, 0x2, [0x0, 0x4]}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20044801) r4 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @loopback, 0x4e24, 0x400000b, 'lc\x00', 0x12, 0x200323b, 0x137}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x32050100) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r6, &(0x7f0000000380), 0xe) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendto$inet(r7, &(0x7f0000000240)="3699aec200f88887e9416f45cd843b2d449d8d66478cc3f7940a2412e2201108dbb68676c49da7b4c675316a4bd62478993b3dc1fe7e631fb969f780214126a17e3ed6931f8f4efde78921c3195f26713fdc858973efdffe5f8e9cfb51bd019b17bfb476d9329714eb11650b14623f63026e", 0x72, 0x1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r8, 0x0) recvfrom(r8, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 41.692531278s ago: executing program 35 (id=5287): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200100001600010000000000ffdbdf2500000000000000000000000000000000ff01000000000000000000000000000100000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000001320000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000002000000000008547e9aafb963862b592d2eb4b000000000000000000000000000000000000000000000000000000000000000000000005350000000000000100000000000000000000f7fffffff727001a00ac1414294f0000000000000000000000ac1414bb000000"], 0x120}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003f930000000000000000001810ff00", @ANYRES32, @ANYBLOB="0000a200000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300090000000000040000000300000008000200030005"], 0x1c}}, 0x24000044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000090b00020073797a32000000000900010073797a30000000002c0004802800e97f07000100637400001c000280080001400000001308000240000000150500030000000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x800, 0xfffffffc, 0x1}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 34.374278671s ago: executing program 36 (id=5291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x51cf8d4f258ee1a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x3, 0x1, 0x6, 0x40}, {0x9e, 0x0, 0x2, 0x401, 0x1}, 0xd73, 0xb29, 0x400372}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async) r10 = socket(0x10, 0x80003, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 33.936099315s ago: executing program 0 (id=5297): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x47, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000700)={{0xa, 0x4e24, 0x0, @mcast1, 0x2850}, {0xa, 0x4e20, 0x0, @remote}, 0xffffffffffffffff, {[0x3e, 0x5, 0xc, 0x6, 0x7, 0x7, 0xbc, 0xf]}}, 0x5c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000002c0)={0x0, 'macvtap0\x00', {0x4}, 0x86}) r3 = accept4(r2, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x81800) r4 = accept$unix(r3, 0x0, &(0x7f0000000400)) sendto$unix(r4, &(0x7f0000000440)="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", 0xfa, 0x408d0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfb7c}}], &(0x7f0000000140)='GPL\x00', 0xa09, 0x3d, &(0x7f0000000180)=""/61, 0x41100, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x6037, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x3, 0x9, 0x4}, {0x0, 0x3, 0xd}], 0x10, 0x400}, 0x94) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000003c0)={r2, r5}) (async) sendto$llc(r3, &(0x7f00000005c0)="37e7bddcd9c914cbda288ec33f22ab959336d0f2038f55f54cab8de33b7f4e8369586ccf7f9f059450e4df424774cc20e4baccf8766ddf54b090ebeb88ccc286267f02ad153842362c5a1fb3b892d836c440fe461cfde40caefb5461d82532bc6cc842628a781269d8564dc1ebfb33dc1336c4eebca3d1b5a48b09e0fc0ec809a001dbce216c034fc3c0b38bbd6f2b0f0df7fa803700b0b29bf82e47b1ce20b10bb5f677eaa743ad5da66968e4e4119629e8d1a29c196f93bb1766ac6e374ce82c7837ef86145d260f08bee42db4c3820b1e648b49ce1f74fb33e54a44481903c6acf2007a90727aaa086ed15caa6d31542d2cc725b4d453ce", 0xf9, 0x1, &(0x7f00000006c0)={0x1a, 0x301, 0x81, 0x83, 0xa, 0x8, @random="2af911dfa82b"}, 0x10) 26.203248754s ago: executing program 0 (id=5298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x1, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x200}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000041bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc8, &(0x7f0000000380)=""/200, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0xfffffffffffffdbc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x800}) syz_emit_ethernet(0x23, &(0x7f0000000300)={@remote, @remote, @void, {@arp={0x806, @generic={0x309, 0x88ca, 0x6, 0x1, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, "ae", @local}}}}, &(0x7f0000000340)={0x0, 0x1, [0xa65, 0xde4, 0x4a5, 0xc92]}) 16.766264855s ago: executing program 0 (id=5299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x10, 0x20}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_OIF={0x8}]}, 0x2c}}, 0x20004000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x10d00, 0xf) sendmsg$802154_dgram(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000040)={&(0x7f0000000140)="f740aac547ff3970806b205bd1af19d7d45b88b680927e3424d231f17081c113974425af81e9865629856db0d383801c7acb751cdf4468f6e9da9c5306853bb65e521079f6f15d2952c55dcad63a8f13df1edc7aef94dd21e3fa03f65cd716dffae09ea6d5e61157abb5dcb5539137267120afe18266158170018f12e686d5a8f6f5811143efcb8054e5122cf7187519e8dbdcdb31fc6eb26d7520a8ab619f085fe42534667bf9632804598e49bedabf79a0dc22c3854d5468bc4b71fc7cf1fba9a2706dd6bec82ebe34711db6050ab642aa759ecc616744f9b2469d5a390e23", 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x10, 0x20}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_OIF={0x8}]}, 0x2c}}, 0x20004000) (async) pipe(&(0x7f0000000080)) (async) socket$netlink(0x10, 0x3, 0xc) (async) splice(r1, 0x0, r2, 0x0, 0x10d00, 0xf) (async) sendmsg$802154_dgram(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000040)={&(0x7f0000000140)="f740aac547ff3970806b205bd1af19d7d45b88b680927e3424d231f17081c113974425af81e9865629856db0d383801c7acb751cdf4468f6e9da9c5306853bb65e521079f6f15d2952c55dcad63a8f13df1edc7aef94dd21e3fa03f65cd716dffae09ea6d5e61157abb5dcb5539137267120afe18266158170018f12e686d5a8f6f5811143efcb8054e5122cf7187519e8dbdcdb31fc6eb26d7520a8ab619f085fe42534667bf9632804598e49bedabf79a0dc22c3854d5468bc4b71fc7cf1fba9a2706dd6bec82ebe34711db6050ab642aa759ecc616744f9b2469d5a390e23", 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) (async) 15.472821582s ago: executing program 0 (id=5300): socket(0x2000000000000021, 0x2, 0x10000000000002) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x6, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}}, 0x2000c800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x829, 0x20000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) unshare(0x22020600) recvmmsg(r6, &(0x7f000000a400)=[{{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)}, {&(0x7f0000000580)=""/119, 0x77}], 0x2, &(0x7f0000000640)=""/156, 0x9c}, 0x7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000000880)=""/136, 0x88}], 0x3, &(0x7f0000000980)=""/10, 0xa}, 0x8}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/240, 0xf0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/236, 0xec}, {&(0x7f0000000d40)=""/41, 0x29}, {&(0x7f0000000d80)=""/83, 0x53}, {&(0x7f0000000e00)=""/135, 0x87}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x9, &(0x7f0000004500)=""/4096, 0x1000}, 0x29}, {{&(0x7f0000000f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005500)=[{&(0x7f0000001000)=""/143, 0x8f}, {&(0x7f00000010c0)=""/157, 0x9d}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/2, 0x2}, {&(0x7f0000001280)=""/29, 0x1d}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f00000013c0)=""/89, 0x59}], 0x7, &(0x7f0000005580)=""/213, 0xd5}, 0x6}, {{&(0x7f0000005680)=@phonet, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005700)=""/204, 0xcc}, {&(0x7f0000005800)=""/228, 0xe4}, {&(0x7f0000001440)=""/36, 0x24}, {&(0x7f0000005900)=""/83, 0x53}, {&(0x7f0000005980)=""/146, 0x92}, {&(0x7f0000005a40)=""/115, 0x73}], 0x6, &(0x7f0000005b40)=""/17, 0x11}, 0x1ff}, {{&(0x7f0000005b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000008f00)=[{&(0x7f0000005c00)=""/94, 0x5e}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/155, 0x9b}, {&(0x7f0000006d40)=""/136, 0x88}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/15, 0xf}, {&(0x7f0000007e40)=""/126, 0x7e}, {&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000008ec0)=""/30, 0x1e}], 0x9, &(0x7f0000008fc0)=""/146, 0x92}, 0x80000001}, {{&(0x7f0000009080)=@nfc_llcp, 0x80, &(0x7f000000a380)=[{&(0x7f0000009100)=""/105, 0x69}, {&(0x7f0000009180)=""/209, 0xd1}, {&(0x7f0000009280)=""/127, 0x7f}, {&(0x7f0000009300)=""/115, 0x73}, {&(0x7f0000009380)=""/4096, 0x1000}], 0x5}, 0xfff}], 0x7, 0x40000120, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) (async, rerun: 32) write$tun(r8, &(0x7f0000000200)=ANY=[@ANYRES16=r9], 0x4a) (rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) (async) close(0x4) 0s ago: executing program 37 (id=5300): socket(0x2000000000000021, 0x2, 0x10000000000002) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x6, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}}, 0x2000c800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x829, 0x20000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) unshare(0x22020600) recvmmsg(r6, &(0x7f000000a400)=[{{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)}, {&(0x7f0000000580)=""/119, 0x77}], 0x2, &(0x7f0000000640)=""/156, 0x9c}, 0x7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000000880)=""/136, 0x88}], 0x3, &(0x7f0000000980)=""/10, 0xa}, 0x8}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/240, 0xf0}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/236, 0xec}, {&(0x7f0000000d40)=""/41, 0x29}, {&(0x7f0000000d80)=""/83, 0x53}, {&(0x7f0000000e00)=""/135, 0x87}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x9, &(0x7f0000004500)=""/4096, 0x1000}, 0x29}, {{&(0x7f0000000f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005500)=[{&(0x7f0000001000)=""/143, 0x8f}, {&(0x7f00000010c0)=""/157, 0x9d}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/2, 0x2}, {&(0x7f0000001280)=""/29, 0x1d}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f00000013c0)=""/89, 0x59}], 0x7, &(0x7f0000005580)=""/213, 0xd5}, 0x6}, {{&(0x7f0000005680)=@phonet, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005700)=""/204, 0xcc}, {&(0x7f0000005800)=""/228, 0xe4}, {&(0x7f0000001440)=""/36, 0x24}, {&(0x7f0000005900)=""/83, 0x53}, {&(0x7f0000005980)=""/146, 0x92}, {&(0x7f0000005a40)=""/115, 0x73}], 0x6, &(0x7f0000005b40)=""/17, 0x11}, 0x1ff}, {{&(0x7f0000005b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000008f00)=[{&(0x7f0000005c00)=""/94, 0x5e}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/155, 0x9b}, {&(0x7f0000006d40)=""/136, 0x88}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/15, 0xf}, {&(0x7f0000007e40)=""/126, 0x7e}, {&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000008ec0)=""/30, 0x1e}], 0x9, &(0x7f0000008fc0)=""/146, 0x92}, 0x80000001}, {{&(0x7f0000009080)=@nfc_llcp, 0x80, &(0x7f000000a380)=[{&(0x7f0000009100)=""/105, 0x69}, {&(0x7f0000009180)=""/209, 0xd1}, {&(0x7f0000009280)=""/127, 0x7f}, {&(0x7f0000009300)=""/115, 0x73}, {&(0x7f0000009380)=""/4096, 0x1000}], 0x5}, 0xfff}], 0x7, 0x40000120, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) (async, rerun: 32) write$tun(r8, &(0x7f0000000200)=ANY=[@ANYRES16=r9], 0x4a) (rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) (async) close(0x4) kernel console output (not intermixed with test programs): queue+0xb0/0x110 [ 431.854325][T19994] xsk_setsockopt+0x57b/0x8d0 [ 431.854354][T19994] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.854380][T19994] ? rcu_is_watching+0x15/0xb0 [ 431.854400][T19994] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.854433][T19994] ? __se_sys_futex+0x36f/0x400 [ 431.854459][T19994] ? aa_sock_opt_perm+0xff/0x1b0 [ 431.854480][T19994] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 431.854503][T19994] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.854532][T19994] do_sock_setsockopt+0x179/0x1b0 [ 431.854557][T19994] __x64_sys_setsockopt+0x13f/0x1b0 [ 431.854581][T19994] do_syscall_64+0xfa/0x3b0 [ 431.854601][T19994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.854623][T19994] ? clear_bhb_loop+0x60/0xb0 [ 431.854646][T19994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.854672][T19994] RIP: 0033:0x7f2d5758ebe9 [ 431.854698][T19994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.854717][T19994] RSP: 002b:00007f2d583b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.854740][T19994] RAX: ffffffffffffffda RBX: 00007f2d577b5fa0 RCX: 00007f2d5758ebe9 [ 431.854756][T19994] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 431.854768][T19994] RBP: 00007f2d57611e19 R08: 0000000000000004 R09: 0000000000000000 [ 431.854782][T19994] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 431.854796][T19994] R13: 00007f2d577b6038 R14: 00007f2d577b5fa0 R15: 00007ffcd43089d8 [ 431.854822][T19994] [ 431.879891][T19994] Mem-Info: [ 431.915811][T19986] team0: Port device team_slave_1 removed [ 431.942229][T19994] active_anon:6080 inactive_anon:0 isolated_anon:0 [ 431.942229][T19994] active_file:3080 inactive_file:39970 isolated_file:0 [ 431.942229][T19994] unevictable:768 dirty:188 writeback:0 [ 431.942229][T19994] slab_reclaimable:13019 slab_unreclaimable:260208 [ 431.942229][T19994] mapped:29149 shmem:1361 pagetables:1229 [ 431.942229][T19994] sec_pagetables:0 bounce:0 [ 431.942229][T19994] kernel_misc_reclaimable:0 [ 431.942229][T19994] free:1156253 free_pcp:17211 free_cma:0 [ 431.953177][T19986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.968859][T19994] Node 0 active_anon:24520kB inactive_anon:0kB active_file:12320kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116596kB dirty:752kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15224kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 431.985798][T19986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.028055][T19994] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 432.258995][T19994] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.288273][T19986] bond1: (slave macvlan2): Removing an active aggregator [ 432.289301][T19994] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 432.302703][T19986] bond1: (slave macvlan2): Releasing backup interface [ 432.305052][T19994] Node 0 DMA32 free:717468kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26480kB inactive_anon:0kB active_file:12320kB inactive_file:158092kB unevictable:1536kB writepending:832kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:50720kB local_pcp:27232kB free_cma:0kB [ 432.358253][T19994] lowmem_reserve[]: 0 0 1 1 1 [ 432.391538][T19994] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 432.468215][T19994] lowmem_reserve[]: 0 0 0 0 0 [ 432.505156][T20016] ieee802154 phy0 wpan0: encryption failed: -90 [ 432.507931][T19994] Node 1 Normal free:3891836kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16024kB local_pcp:9896kB free_cma:0kB [ 432.514150][T20016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3744'. [ 432.579870][T19994] lowmem_reserve[]: 0 0 0 0 0 [ 432.586243][T19994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 432.620177][T20016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3744'. [ 432.629848][T19994] Node 0 DMA32: 0*4kB 329*8kB (UME) 175*16kB (M) 716*32kB (UME) 592*64kB (UME) 113*128kB (UME) 177*256kB (UM) 345*512kB (UME) 232*1024kB (UME) 14*2048kB (UME) 36*4096kB (M) = 716344kB [ 432.653133][T19994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 432.657715][T20019] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 432.666043][T19994] Node 1 Normal: 185*4kB (UE) 37*8kB (UME) 37*16kB (UME) 101*32kB (UME) 34*64kB (UME) 10*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891836kB [ 432.698998][T19994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.726122][T20019] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 432.743951][T19994] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.755635][T20019] team0: Failed to send options change via netlink (err -105) [ 432.763406][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.776184][T19994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.785942][T19994] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.803753][T20019] team0: Port device batadv2 added [ 432.812552][T19994] 44408 total pagecache pages [ 432.817381][T19994] 0 pages in swap cache [ 432.824576][T19994] Free swap = 124996kB [ 432.828827][T19994] Total swap = 124996kB [ 432.834849][T19994] 2097051 pages RAM [ 432.838680][T19994] 0 pages HighMem/MovableOnly [ 432.846300][T19994] 425663 pages reserved [ 432.852719][T19994] 0 pages cma reserved [ 433.006739][T20017] team0: Failed to send options change via netlink (err -105) [ 433.014640][T20017] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 433.047310][T20017] team0: Port device netdevsim0 removed [ 433.440770][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 433.799918][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.855007][T20086] lo speed is unknown, defaulting to 1000 [ 434.080687][T20095] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 434.278705][T20086] wg1 speed is unknown, defaulting to 1000 [ 434.311936][T20093] lo speed is unknown, defaulting to 1000 [ 434.620482][T20093] wg1 speed is unknown, defaulting to 1000 [ 434.832175][T20126] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 434.849904][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.015286][T20126] netlink: 'syz.4.3771': attribute type 12 has an invalid length. [ 435.033599][T20132] tun0: tun_chr_ioctl cmd 1074025675 [ 435.039101][T20132] tun0: persist enabled [ 435.044517][T20132] tun0: tun_chr_ioctl cmd 1074025675 [ 435.064229][T20132] tun0: persist disabled [ 435.260241][T20134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.300152][T20134] bond2: (slave bond3): Enslaving as an active interface with an up link [ 435.328939][T20135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.388202][T20140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.412648][T20151] __nla_validate_parse: 136 callbacks suppressed [ 435.412669][T20151] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3778'. [ 435.451359][T20144] ip6_vti0: left allmulticast mode [ 435.486717][T20144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.507459][T20144] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.518425][T20144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.568572][T20140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.717470][T20160] netlink: 'syz.3.3781': attribute type 13 has an invalid length. [ 436.031967][T18280] bond5 (unregistering): (slave geneve4): Releasing backup interface [ 436.604425][T18280] bond0 (unregistering): Released all slaves [ 436.618212][T18280] bond1 (unregistering): Released all slaves [ 436.633602][T18280] bond2 (unregistering): Released all slaves [ 436.648313][T18280] bond3 (unregistering): Released all slaves [ 436.665943][T18280] bond4 (unregistering): Released all slaves [ 436.680226][T18280] bond5 (unregistering): Released all slaves [ 436.694776][T18280] bond6 (unregistering): Released all slaves [ 436.711019][T18280] bond7 (unregistering): Released all slaves [ 436.724357][T18280] bond8 (unregistering): Released all slaves [ 436.786318][T20140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.877493][T20163] tipc: Started in network mode [ 436.885961][T20163] tipc: Node identity 2, cluster identity 4711 [ 436.893356][T20163] tipc: Node number set to 2 [ 436.898285][T20163] tipc: Cannot configure node identity twice [ 436.966523][T20140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.988593][T18280] k›*·]‘: left promiscuous mode [ 436.997236][T20164] lo speed is unknown, defaulting to 1000 [ 437.004391][T11447] wg1 speed is unknown, defaulting to 1000 [ 437.034350][T11447] syz0: Port: 1 Link DOWN [ 437.069228][T20177] lo speed is unknown, defaulting to 1000 [ 437.115306][T18280] tipc: Disabling bearer [ 437.141934][T18280] tipc: Disabling bearer [ 437.154047][T18280] tipc: Left network mode [ 437.184218][T18286] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.196250][T18280] IPVS: stopping backup sync thread 10887 ... [ 437.213352][T18286] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.224817][T20018] Set syz1 is full, maxelem 65536 reached [ 437.249321][T18286] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.307988][T18286] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.356473][T20164] wg1 speed is unknown, defaulting to 1000 [ 437.494267][T20177] wg1 speed is unknown, defaulting to 1000 [ 437.555584][T20188] syzkaller0: entered promiscuous mode [ 437.561610][T20188] syzkaller0: entered allmulticast mode [ 437.618706][T20189] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 437.626105][T20189] syzkaller0: Linktype set failed because interface is up [ 437.637413][T20188] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 437.646157][T20188] syzkaller0: Linktype set failed because interface is up [ 438.084512][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3794'. [ 438.107997][T20225] veth0_macvtap: left promiscuous mode [ 438.304634][T18280] hsr_slave_0: left promiscuous mode [ 438.354638][T18280] team0: left promiscuous mode [ 438.379048][T18280] veth0_macvtap: left promiscuous mode [ 438.867119][T11447] infiniband syz1: ib_query_port failed (-19) [ 438.906277][T20242] bond2: entered promiscuous mode [ 438.926347][T20256] wireguard0: entered promiscuous mode [ 438.945370][T20256] wireguard0: entered allmulticast mode [ 439.017057][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3805'. [ 439.075228][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3806'. [ 439.084552][T20269] netlink: 'syz.5.3806': attribute type 6 has an invalid length. [ 439.226086][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 439.236212][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 439.528135][T20306] tipc: Enabled bearer , priority 0 [ 439.585683][T20306] tipc: Disabling bearer [ 439.617848][T18280] IPVS: stop unused estimator thread 0... [ 439.807229][T20339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3823'. [ 439.817849][T20339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3823'. [ 439.828833][T20338] lo speed is unknown, defaulting to 1000 [ 439.853482][T11452] IPVS: starting estimator thread 0... [ 439.900134][T20346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3824'. [ 439.933100][T20346] netlink: 'syz.5.3824': attribute type 1 has an invalid length. [ 439.948281][T20346] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3824'. [ 439.960749][T20344] IPVS: using max 33 ests per chain, 79200 per kthread [ 440.822418][T20410] __nla_validate_parse: 4 callbacks suppressed [ 440.822438][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3836'. [ 440.855850][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3836'. [ 441.137746][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3838'. [ 441.256201][ C1] vcan0: j1939_session_tx_dat: 0xffff88802177b000: queue data error: -100 [ 441.303633][T20439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3845'. [ 441.338891][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'. [ 441.401061][T20433] tipc: Enabled bearer , priority 0 [ 441.401423][T20448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3848'. [ 441.412706][T20433] syzkaller0: entered promiscuous mode [ 441.424587][T20433] syzkaller0: entered allmulticast mode [ 441.486608][T20427] tipc: Resetting bearer [ 441.498882][T20427] tipc: Disabling bearer [ 441.650877][T20461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3853'. [ 441.662562][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 441.672072][T20461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3853'. [ 441.728228][T20465] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3855'. [ 441.824746][T20473] tap0: tun_chr_ioctl cmd 1074025677 [ 441.832644][T20473] tap0: linktype set to 0 [ 442.248660][T20491] netlink: 'syz.3.3861': attribute type 2 has an invalid length. [ 442.261139][T20491] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 442.318183][T20497] pimreg: entered allmulticast mode [ 442.637241][T20505] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 443.028227][T20520] netlink: 'syz.2.3870': attribute type 1 has an invalid length. [ 443.093115][T20520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.196891][T20529] xfrm1: entered promiscuous mode [ 443.204980][T20529] xfrm1: entered allmulticast mode [ 443.356782][T20534] tipc: Enabled bearer , priority 0 [ 443.446024][T20534] syzkaller0: entered promiscuous mode [ 443.477684][T20534] syzkaller0: entered allmulticast mode [ 443.677900][T20534] tipc: Resetting bearer [ 444.083759][T20533] tipc: Resetting bearer [ 444.120926][T20533] tipc: Disabling bearer [ 444.142524][T20544] lo speed is unknown, defaulting to 1000 [ 444.166575][T20559] openvswitch: netlink: IP tunnel dst address not specified [ 444.497722][T20566] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 444.663909][T20573] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595) [ 444.675747][T20573] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 445.240012][T20607] syz_tun: entered allmulticast mode [ 445.289487][T20607] dvmrp8: entered allmulticast mode [ 445.355386][T20607] lo speed is unknown, defaulting to 1000 [ 445.368373][T20609] lo speed is unknown, defaulting to 1000 [ 445.408754][T20619] tipc: Started in network mode [ 445.410598][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.414553][T20619] tipc: Node identity faf65d20f8e2, cluster identity 4711 [ 445.448206][T20619] tipc: Enabled bearer , priority 0 [ 445.465547][T20619] syzkaller0: entered promiscuous mode [ 445.518404][T20619] syzkaller0: entered allmulticast mode [ 445.585954][T20619] tipc: Resetting bearer [ 445.599684][T20618] tipc: Resetting bearer [ 445.615552][T20618] tipc: Disabling bearer [ 445.735266][T20605] syz_tun: left allmulticast mode [ 445.784650][T20605] dvmrp8: left allmulticast mode [ 446.109704][T20653] sctp: [Deprecated]: syz.3.3904 (pid 20653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.109704][T20653] Use struct sctp_sack_info instead [ 446.364684][T20661] lo speed is unknown, defaulting to 1000 [ 446.446771][T20665] __nla_validate_parse: 14 callbacks suppressed [ 446.446793][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 446.466547][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3905'. [ 446.654360][T20670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3907'. [ 446.730716][T20672] veth1_virt_wifi: entered allmulticast mode [ 446.858718][T20678] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 446.910815][T20682] netlink: 'syz.5.3911': attribute type 3 has an invalid length. [ 446.936364][T20683] bridge_slave_0: left allmulticast mode [ 446.953055][T20683] bridge_slave_0: left promiscuous mode [ 446.968262][T20683] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.994049][T20686] netlink: 'syz.2.3910': attribute type 10 has an invalid length. [ 447.005284][T20683] bridge_slave_1: left allmulticast mode [ 447.028871][T20683] bridge_slave_1: left promiscuous mode [ 447.034990][T20683] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.046123][T20683] bond0: (slave bond_slave_0): Releasing backup interface [ 447.058273][T20683] bond0: (slave bond_slave_1): Releasing backup interface [ 447.077540][T20683] team0: Port device team_slave_0 removed [ 447.085428][T20683] team0: Port device team_slave_1 removed [ 447.094264][T20683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.102949][T20683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.115350][T20683] bond0: (slave wlan1): Releasing backup interface [ 447.127708][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3912'. [ 447.144633][T20683] team0: Port device batadv2 removed [ 447.156534][T20683] bond2: (slave bond3): Releasing backup interface [ 447.166676][T20686] mac80211_hwsim hwsim35 wlan1: left allmulticast mode [ 447.180423][T20686] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 447.194964][T20689] syzkaller1: entered promiscuous mode [ 447.201508][T20689] syzkaller1: entered allmulticast mode [ 447.448084][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3915'. [ 447.458987][T20704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.485118][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 447.622542][T20713] netlink: 'syz.5.3919': attribute type 6 has an invalid length. [ 447.628749][T20714] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3920'. [ 447.661017][ T5867] Bluetooth: hci2: link tx timeout [ 447.666192][ T5867] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.687762][ T5862] Bluetooth: hci2: link tx timeout [ 447.694724][ T5862] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.718319][T20716] netlink: 'syz.2.3921': attribute type 1 has an invalid length. [ 447.740988][T20716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3921'. [ 447.862634][T20722] !: renamed from dummy0 [ 448.109145][T20732] syzkaller0: entered allmulticast mode [ 448.241916][T20733] lo speed is unknown, defaulting to 1000 [ 448.260572][T20740] IPVS: Error connecting to the multicast addr [ 448.328466][T20735] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 448.336946][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 448.436466][T20750] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 449.284297][T20773] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3930'. [ 449.474364][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3934'. [ 449.722853][ T5862] Bluetooth: hci2: command 0x0405 tx timeout [ 450.172233][T20816] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 450.354889][T20821] syz_tun: refused to change device tx_queue_len [ 450.374694][T20821] syzkaller1: entered promiscuous mode [ 450.400026][T20821] syzkaller1: entered allmulticast mode [ 450.647271][T20827] bridge_slave_1: left allmulticast mode [ 450.666945][T20827] bridge_slave_1: left promiscuous mode [ 450.677253][T20827] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.728397][T20827] bridge_slave_0: left allmulticast mode [ 450.729105][T20837] netlink: 'syz.3.3951': attribute type 13 has an invalid length. [ 450.749544][T20837] netlink: 'syz.3.3951': attribute type 17 has an invalid length. [ 450.757820][T20827] bridge_slave_0: left promiscuous mode [ 450.771693][T20827] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.918857][T20837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.945386][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 450.992113][T12199] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 451.013407][T12199] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 451.037526][T20835] lo speed is unknown, defaulting to 1000 [ 451.068015][T20840] lo speed is unknown, defaulting to 1000 [ 451.095608][T20844] vlan3: entered promiscuous mode [ 451.118450][T20844] gretap0: entered promiscuous mode [ 451.129523][T20844] vlan3: entered allmulticast mode [ 451.136434][T20844] gretap0: entered allmulticast mode [ 451.604717][T20866] lo speed is unknown, defaulting to 1000 [ 451.619068][T20869] __nla_validate_parse: 10 callbacks suppressed [ 451.619088][T20869] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3960'. [ 451.695197][T20871] syzkaller1: entered promiscuous mode [ 451.701088][T20871] syzkaller1: entered allmulticast mode [ 451.719920][T11459] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.046026][T11447] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.210445][T20885] netlink: 'syz.4.3964': attribute type 1 has an invalid length. [ 452.218250][T20885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3964'. [ 452.468020][T20894] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3967'. [ 452.598526][T20903] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3970'. [ 452.713293][T20908] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3973'. [ 452.837206][T20917] lo speed is unknown, defaulting to 1000 [ 452.867108][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3972'. [ 453.365946][T20937] lo speed is unknown, defaulting to 1000 [ 453.544058][T20964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3982'. [ 453.674555][T20967] _ÐZ`Ô€@S: entered promiscuous mode [ 453.883589][T20985] netlink: 'syz.5.3989': attribute type 21 has an invalid length. [ 454.108669][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'. [ 454.255317][T21010] syzkaller1: entered allmulticast mode [ 454.572178][T21021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3999'. [ 454.676677][T21032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4002'. [ 454.722560][T21037] syzkaller1: entered promiscuous mode [ 454.728322][T21037] syzkaller1: entered allmulticast mode [ 455.091421][T21065] netlink: 'syz.3.4012': attribute type 3 has an invalid length. [ 455.243666][T21077] IPVS: Error connecting to the multicast addr [ 455.265600][T21077] nbd: must specify at least one socket [ 455.271974][T21077] nbd: couldn't find device at index 2 [ 455.319926][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.390112][T21085] netlink: 'syz.2.4019': attribute type 1 has an invalid length. [ 455.398252][T21085] netlink: 'syz.2.4019': attribute type 1 has an invalid length. [ 455.465246][T21091] lo speed is unknown, defaulting to 1000 [ 455.683374][T21097] syz.2.4022 uses old SIOCAX25GETINFO [ 455.724649][T21097] lo speed is unknown, defaulting to 1000 [ 455.864980][T21107] tipc: Trying to set illegal importance in message [ 456.064764][T21121] tipc: Enabled bearer , priority 0 [ 456.096183][T21119] syzkaller0: entered promiscuous mode [ 456.127131][T21119] syzkaller0: entered allmulticast mode [ 456.222253][T21127] nbd: couldn't find device at index 536870912 [ 456.499270][T21119] tipc: Resetting bearer [ 456.546639][T21119] tipc: Disabling bearer [ 456.887779][T21153] __nla_validate_parse: 4 callbacks suppressed [ 456.887800][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4033'. [ 457.224709][T21131] bond2: left promiscuous mode [ 457.229932][T21131] xfrm1: left promiscuous mode [ 457.234736][T21131] xfrm1: left allmulticast mode [ 457.239853][ T5861] Bluetooth: hci2: command 0x0405 tx timeout [ 457.264032][T21146] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4034'. [ 457.281267][T21146] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4034'. [ 457.303684][T21150] syzkaller1: entered promiscuous mode [ 457.318601][T21150] syzkaller1: entered allmulticast mode [ 457.355732][T18273] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.385962][T18273] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.447523][T18273] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.476674][T21164] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4038'. [ 457.479328][T18273] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.756848][T21178] veth0_to_bond: entered allmulticast mode [ 457.803369][T21183] tipc: Enabled bearer , priority 0 [ 457.818337][T21183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4044'. [ 457.841243][T21183] syzkaller0: entered promiscuous mode [ 457.846774][T21183] syzkaller0: entered allmulticast mode [ 457.905098][T21192] netlink: 'syz.5.4043': attribute type 10 has an invalid length. [ 457.913163][T21192] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4043'. [ 457.924891][T21183] tipc: Resetting bearer [ 457.942133][T21192] !: entered promiscuous mode [ 457.948645][T21192] bridge0: port 1(0!) entered blocking state [ 457.958932][T21192] bridge0: port 1(0!) entered disabled state [ 457.965936][T21192] !: entered allmulticast mode [ 457.984865][T21192] bridge0: port 1(0!) entered blocking state [ 457.991233][T21192] bridge0: port 1(0!) entered forwarding state [ 458.115790][T21196] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4046'. [ 458.126338][T21196] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 458.134825][T21196] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 458.247145][T21182] tipc: Resetting bearer [ 458.267206][T21182] tipc: Disabling bearer [ 458.288178][T21193] lo speed is unknown, defaulting to 1000 [ 458.353371][T21205] tipc: Enabled bearer , priority 0 [ 458.363108][T21205] syzkaller0: entered promiscuous mode [ 458.369215][T21205] syzkaller0: entered allmulticast mode [ 458.414988][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 458.428153][T21204] tipc: Resetting bearer [ 458.441374][T21204] tipc: Disabling bearer [ 458.471613][T21210] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 458.479893][T21210] netlink: 'syz.4.4051': attribute type 6 has an invalid length. [ 458.490676][T21210] netlink: 'syz.4.4051': attribute type 3 has an invalid length. [ 458.600093][T21219] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4054'. [ 458.862461][T21240] netlink: 'syz.0.4060': attribute type 10 has an invalid length. [ 458.890259][T21240] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4060'. [ 458.904166][T21240] team0: entered promiscuous mode [ 458.909652][T21240] team_slave_0: entered promiscuous mode [ 458.917332][T21240] team_slave_1: entered promiscuous mode [ 458.935320][T21240] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.134851][T21254] TCP: TCP_TX_DELAY enabled [ 459.328171][T21266] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.345818][T21266] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 459.357645][T21266] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 459.524042][T21289] tipc: Enabled bearer , priority 0 [ 459.551091][T21289] syzkaller0: entered promiscuous mode [ 459.565299][T21289] syzkaller0: entered allmulticast mode [ 459.613871][T21289] tipc: Resetting bearer [ 459.652598][T21289] netlink: 'syz.0.4072': attribute type 12 has an invalid length. [ 459.815346][T11450] IPVS: starting estimator thread 0... [ 459.913859][T21323] IPVS: using max 35 ests per chain, 84000 per kthread [ 459.984540][T21286] tipc: Resetting bearer [ 460.038525][T21286] tipc: Disabling bearer [ 460.253242][T21360] vlan2: entered allmulticast mode [ 460.269880][T21360] bond0: entered allmulticast mode [ 460.275069][T21360] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 460.348295][T21366] netlink: 'syz.0.4091': attribute type 10 has an invalid length. [ 460.466091][T21371] lo speed is unknown, defaulting to 1000 [ 461.253094][T21432] !: left allmulticast mode [ 461.271482][T21432] bridge0: port 1(0!) entered disabled state [ 461.311102][T21438] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 461.324950][T21438] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 461.445673][T21449] tipc: Enabled bearer , priority 0 [ 461.460658][T21449] syzkaller0: entered promiscuous mode [ 461.471871][T21449] syzkaller0: entered allmulticast mode [ 461.497231][T21449] tipc: Resetting bearer [ 461.522453][T21449] tipc: Disabling bearer [ 461.695643][T21464] tipc: Enabled bearer , priority 0 [ 461.703489][T21464] syzkaller0: entered promiscuous mode [ 461.709172][T21464] syzkaller0: entered allmulticast mode [ 461.725542][T21464] tipc: Resetting bearer [ 461.782936][T21464] tipc: Disabling bearer [ 461.874838][T21473] netlink: 'syz.2.4118': attribute type 2 has an invalid length. [ 461.920936][T21473] : entered promiscuous mode [ 462.078778][T21473] lo speed is unknown, defaulting to 1000 [ 462.180790][ T30] audit: type=1800 audit(1756053447.588:10): pid=21472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4119" name="memory.events" dev="tmpfs" ino=1056 res=0 errno=0 [ 462.459327][T21489] lo speed is unknown, defaulting to 1000 [ 462.492936][T21496] netlink: 'syz.3.4124': attribute type 10 has an invalid length. [ 462.502131][T21496] team0: Device bond0 failed to register rx_handler [ 462.626771][T21498] __nla_validate_parse: 17 callbacks suppressed [ 462.626792][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 462.938013][T21516] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 463.097159][T21534] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4134'. [ 463.139814][T21534] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4134'. [ 463.195459][T21534] netlink: 'syz.5.4134': attribute type 5 has an invalid length. [ 463.219364][T21534] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4134'. [ 463.366705][T21546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4138'. [ 463.369146][T21549] netlink: 'syz.5.4139': attribute type 11 has an invalid length. [ 463.383994][T21549] netlink: 'syz.5.4139': attribute type 4 has an invalid length. [ 463.395963][T21549] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4139'. [ 463.426229][T21548] netlink: 'syz.5.4139': attribute type 11 has an invalid length. [ 463.479088][T21548] netlink: 'syz.5.4139': attribute type 4 has an invalid length. [ 463.528130][T21548] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4139'. [ 463.554217][T21566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4142'. [ 463.581632][T21551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4140'. [ 463.738959][T21578] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.4145'. [ 463.821617][T21577] lo speed is unknown, defaulting to 1000 [ 464.140605][T21594] netlink: 'syz.5.4149': attribute type 1 has an invalid length. [ 464.564771][T21619] dvmrp0: entered allmulticast mode [ 465.144101][T21659] lo speed is unknown, defaulting to 1000 [ 465.530511][T21681] tipc: Enabling of bearer rejected, failed to enable media [ 465.734309][T18277] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 465.807023][T21699] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 465.819325][T21699] openvswitch: netlink: Message has 1 unknown bytes. [ 465.855045][T21699] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 466.069529][T21713] netlink: 'syz.3.4183': attribute type 8 has an invalid length. [ 466.913222][T21766] netlink: 'syz.2.4200': attribute type 39 has an invalid length. [ 466.942193][T18285] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.952055][T18285] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.963537][T18285] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.972767][T18285] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.175654][T21772] syz_tun: left allmulticast mode [ 467.197111][T21772] team0: left promiscuous mode [ 467.204270][T21772] team_slave_0: left promiscuous mode [ 467.210482][T21772] team_slave_1: left promiscuous mode [ 467.219032][T21772] veth0_to_bond: left allmulticast mode [ 467.226584][T21772] veth1_virt_wifi: left allmulticast mode [ 467.243654][T21772] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 467.252765][T21772] macsec1: left promiscuous mode [ 467.263247][T21772] wireguard0: left promiscuous mode [ 467.268659][T21772] wireguard0: left allmulticast mode [ 467.284073][T21772] vlan3: left promiscuous mode [ 467.289087][T21772] gretap0: left promiscuous mode [ 467.294513][T21772] vlan3: left allmulticast mode [ 467.299586][T21772] gretap0: left allmulticast mode [ 467.679840][T21797] __nla_validate_parse: 9 callbacks suppressed [ 467.679859][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4209'. [ 467.742725][T21801] tipc: Enabled bearer , priority 0 [ 467.761085][T21801] syzkaller0: entered promiscuous mode [ 467.766619][T21801] syzkaller0: entered allmulticast mode [ 467.920499][T21814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4214'. [ 468.043904][T21817] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 468.123950][T21801] tipc: Resetting bearer [ 468.560171][T21800] tipc: Resetting bearer [ 468.586127][T21800] tipc: Disabling bearer [ 468.739586][T21840] lo speed is unknown, defaulting to 1000 [ 468.768428][T21845] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 468.776404][T21845] macsec1: entered promiscuous mode [ 468.783719][T21845] macsec1: entered allmulticast mode [ 468.789144][T21845] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 468.803758][T21843] bridge0: port 1(erspan0) entered blocking state [ 468.826408][T21843] bridge0: port 1(erspan0) entered disabled state [ 468.849076][T21843] erspan0: entered allmulticast mode [ 468.876426][T21843] erspan0: entered promiscuous mode [ 468.906134][T21857] erspan0: left allmulticast mode [ 468.932829][T21857] erspan0: left promiscuous mode [ 468.937999][T21857] bridge0: port 1(erspan0) entered disabled state [ 468.950842][T21866] netlink: 'syz.4.4223': attribute type 10 has an invalid length. [ 468.961524][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4226'. [ 469.026238][T21866] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.072472][T21866] bond0: (slave team0): Enslaving as an active interface with an up link [ 469.217917][T21877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.243158][T21877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.259059][T21880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4230'. [ 469.294673][T21881] _ÐZ`Ô€@S: entered promiscuous mode [ 469.341649][T21890] netlink: 'syz.0.4233': attribute type 1 has an invalid length. [ 469.363073][T21890] netlink: 'syz.0.4233': attribute type 2 has an invalid length. [ 469.382081][T21890] netlink: 'syz.0.4233': attribute type 8 has an invalid length. [ 469.403508][T21890] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.4233'. [ 469.414266][T21893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.415215][T21877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.439380][T21877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.484968][T21893] team0: Device gtp0 is of different type [ 469.564617][T21877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.575712][T21877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.644723][T21903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.683766][T21903] bond3 (unregistering): Released all slaves [ 469.731904][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 469.737497][T21877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.759272][T21877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.908259][T12199] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.924179][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4241'. [ 469.932777][T12199] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.933790][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4241'. [ 469.963250][T12199] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.984354][T12199] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.056172][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4242'. [ 470.093933][T18273] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.112058][T18273] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.167234][T18273] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.189074][T18273] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.217445][T21941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4244'. [ 470.432543][T21950] bond0 (unregistering): Released all slaves [ 470.500956][T21954] netlink: 'syz.2.4248': attribute type 22 has an invalid length. [ 470.530778][T21956] tipc: Enabling of bearer rejected, failed to enable media [ 470.755882][T21965] bond1: entered promiscuous mode [ 470.762870][T21965] bond1: entered allmulticast mode [ 470.768420][T21965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.872872][T21971] syzkaller1: entered promiscuous mode [ 470.895318][T21971] syzkaller1: entered allmulticast mode [ 470.923177][T21981] tipc: Enabled bearer , priority 0 [ 470.934974][T21981] syzkaller0: entered promiscuous mode [ 470.940940][T21981] syzkaller0: entered allmulticast mode [ 470.967106][T21981] tipc: Resetting bearer [ 470.974794][T21978] tipc: Resetting bearer [ 470.985212][T21978] tipc: Disabling bearer [ 471.013140][T21986] netlink: 'syz.0.4255': attribute type 1 has an invalid length. [ 471.207729][T22002] lo speed is unknown, defaulting to 1000 [ 472.341248][T22035] pim6reg1: entered promiscuous mode [ 472.362308][T22035] pim6reg1: entered allmulticast mode [ 472.429367][T22043] tipc: Enabled bearer , priority 0 [ 472.453238][T22046] tipc: Resetting bearer [ 472.496318][T22047] tipc: Disabling bearer [ 472.520118][ T5867] Bluetooth: hci2: command 0x0405 tx timeout [ 472.543774][T22040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.565105][T22040] team0: Port device bond3 added [ 472.697508][T22063] __nla_validate_parse: 7 callbacks suppressed [ 472.697530][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4272'. [ 472.739380][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4274'. [ 472.886195][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'. [ 473.289330][T22106] netlink: 'syz.2.4288': attribute type 10 has an invalid length. [ 473.314150][T22108] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 473.321943][T22108] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 473.393723][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.415078][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.433216][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.453151][T18273] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.462334][T22124] netlink: 'syz.0.4291': attribute type 13 has an invalid length. [ 473.513662][T22128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4291'. [ 473.684980][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4295'. [ 473.726386][T22141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.732847][T22143] netlink: 'syz.5.4298': attribute type 1 has an invalid length. [ 473.742399][T22130] netlink: 'syz.4.4295': attribute type 9 has an invalid length. [ 473.787292][T22143] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.800412][T22143] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 473.813778][T22143] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 473.839860][T22131] lo speed is unknown, defaulting to 1000 [ 474.012444][T22152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4300'. [ 474.687631][T22190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4307'. [ 474.829245][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 474.903762][T22202] batman_adv: batadv0: Adding interface: ipvlan2 [ 474.918999][T22202] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.001144][T22202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.023530][T22202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.037249][T22202] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 475.056869][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4309'. [ 475.380569][T22233] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 475.422725][T22233] netlink: 'syz.2.4320': attribute type 11 has an invalid length. [ 475.435567][T22224] netlink: 'syz.0.4316': attribute type 12 has an invalid length. [ 475.440634][T22238] netlink: 'syz.3.4321': attribute type 38 has an invalid length. [ 475.443466][T22224] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4316'. [ 475.548978][T22233] tipc: Enabling of bearer rejected, failed to enable media [ 475.595902][T22251] netlink: 'syz.3.4324': attribute type 7 has an invalid length. [ 475.713504][T22257] macvlan3: entered allmulticast mode [ 475.725277][T22257] veth1_vlan: entered allmulticast mode [ 475.732960][T22257] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 475.746687][T22258] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 475.895916][T22269] netlink: 'syz.4.4330': attribute type 9 has an invalid length. [ 476.176445][T22292] tipc: Enabled bearer , priority 0 [ 476.215140][T22292] syzkaller0: entered promiscuous mode [ 476.221297][T22292] syzkaller0: entered allmulticast mode [ 476.255210][T22306] tipc: Resetting bearer [ 476.283626][T22306] tipc: Disabling bearer [ 476.367840][T22318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.440680][T22327] tipc: Enabled bearer , priority 10 [ 476.458760][T22327] netlink: 'syz.3.4345': attribute type 10 has an invalid length. [ 476.477651][T22328] netlink: 'syz.3.4345': attribute type 10 has an invalid length. [ 476.487957][T22328] batadv0: entered promiscuous mode [ 476.499227][T22328] batadv0: entered allmulticast mode [ 476.512562][T22328] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 476.531532][T22327] batadv0: left promiscuous mode [ 476.536554][T22327] batadv0: left allmulticast mode [ 476.547614][T22327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.556312][T22327] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 476.646979][T22331] syzkaller0: entered promiscuous mode [ 476.655593][T22331] syzkaller0: entered allmulticast mode [ 476.674385][T22331] syzkaller1: entered promiscuous mode [ 476.683418][T22331] syzkaller1: entered allmulticast mode [ 476.756829][T22349] netlink: 'syz.5.4351': attribute type 1 has an invalid length. [ 476.761019][T22348] netlink: 'syz.5.4351': attribute type 3 has an invalid length. [ 477.555317][T22409] netlink: 'syz.0.4364': attribute type 6 has an invalid length. [ 477.563374][ T9] tipc: Node number set to 1459260773 [ 477.621649][T12199] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.630442][T18285] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.643355][T18285] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.659912][T18285] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.834709][T22420] __nla_validate_parse: 14 callbacks suppressed [ 477.834732][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4368'. [ 477.860022][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 477.894544][T22422] team0: Mode changed to "loadbalance" [ 478.033938][T22422] bond5: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 478.067142][T22432] delete_channel: no stack [ 478.089505][T22422] bond5: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 478.157530][T22422] bond5: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 478.176074][T22432] delete_channel: no stack [ 478.193663][T22432] delete_channel: no stack [ 478.204387][T22432] delete_channel: no stack [ 478.209103][T22432] delete_channel: no stack [ 478.213950][T22432] delete_channel: no stack [ 478.218661][T22432] delete_channel: no stack [ 478.226054][T22432] delete_channel: no stack [ 478.230799][T22432] delete_channel: no stack [ 478.235630][T22432] delete_channel: no stack [ 478.243937][T22432] delete_channel: no stack [ 478.248684][T22432] delete_channel: no stack [ 478.253473][T22432] delete_channel: no stack [ 478.259549][T22432] delete_channel: no stack [ 478.264377][T22432] delete_channel: no stack [ 478.269102][T22432] delete_channel: no stack [ 478.275647][T22432] delete_channel: no stack [ 478.280451][T22432] delete_channel: no stack [ 478.285091][T22432] delete_channel: no stack [ 478.289992][T22432] delete_channel: no stack [ 478.296582][T22432] delete_channel: no stack [ 478.301539][T22432] delete_channel: no stack [ 478.306171][T22432] delete_channel: no stack [ 478.312585][T22432] delete_channel: no stack [ 478.317239][T22432] delete_channel: no stack [ 478.322102][T22432] delete_channel: no stack [ 478.326824][T22432] delete_channel: no stack [ 478.393246][T22432] delete_channel: no stack [ 478.398433][T22432] delete_channel: no stack [ 478.403418][T22432] delete_channel: no stack [ 478.413984][T22432] delete_channel: no stack [ 478.419137][T22432] delete_channel: no stack [ 478.432229][T22432] delete_channel: no stack [ 478.535037][T22455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4375'. [ 478.720993][T22458] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4375'. [ 479.029179][T22465] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4376'. [ 479.075648][T22453] syzkaller0: entered promiscuous mode [ 479.086410][T22453] syzkaller0: entered allmulticast mode [ 479.357112][T22474] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.4379'. [ 480.054516][T22479] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.080313][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.132004][T22479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.154832][T22495] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 480.167912][T22467] lo speed is unknown, defaulting to 1000 [ 480.280693][T22480] lo speed is unknown, defaulting to 1000 [ 480.361646][T22507] netlink: 788 bytes leftover after parsing attributes in process `syz.4.4386'. [ 480.523221][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4388'. [ 480.620033][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.792743][T18285] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.821372][T18285] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 481.129949][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 482.258695][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4395'. [ 482.291390][T22550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4400'. [ 482.362562][T22557] validate_nla: 5 callbacks suppressed [ 482.362584][T22557] netlink: 'syz.5.4401': attribute type 13 has an invalid length. [ 482.598165][T22568] netlink: 'syz.5.4404': attribute type 3 has an invalid length. [ 482.640961][T22568] netlink: 'syz.5.4404': attribute type 3 has an invalid length. [ 482.814976][T22573] netlink: 'syz.2.4406': attribute type 1 has an invalid length. [ 482.858987][T22573] __nla_validate_parse: 4 callbacks suppressed [ 482.859030][T22573] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4406'. [ 482.963896][T22571] can: request_module (can-proto-0) failed. [ 483.199212][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4409'. [ 483.416866][T22598] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4413'. [ 484.605260][T22630] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4419'. [ 484.685821][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4419'. [ 484.760104][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 485.281500][T22651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4423'. [ 485.311558][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 485.333506][T22651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4423'. [ 485.583070][T22658] lo speed is unknown, defaulting to 1000 [ 485.940464][T22685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4425'. [ 486.245036][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4432'. [ 486.390661][T22698] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 486.439779][ C0] sched: DL replenish lagged too much [ 486.660926][ T30] audit: type=1800 audit(1756053472.078:11): pid=22663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4425" name="cgroup.controllers" dev="tmpfs" ino=1341 res=0 errno=0 [ 488.337019][T22729] bond0: entered promiscuous mode [ 488.381603][T22729] batadv0: entered promiscuous mode [ 488.438421][T22729] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 488.495163][T22729] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 488.601997][T22745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.629947][T18273] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 488.677201][T22740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.600097][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 489.716290][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 489.768798][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 489.865159][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 489.923294][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 489.961951][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 489.999925][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 490.036228][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 490.074624][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 490.090420][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 490.431224][T22804] tipc: Enabled bearer , priority 0 [ 490.823545][T22800] tipc: Disabling bearer [ 491.145310][T22817] netlink: 'syz.0.4461': attribute type 1 has an invalid length. [ 491.408593][T22826] bond2: (slave gretap2): making interface the new active one [ 491.463063][T22826] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 491.784202][T22838] tipc: New replicast peer: 208.253.78.183 [ 491.811773][T22838] tipc: Enabled bearer , priority 10 [ 492.759852][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 493.016882][T22871] netlink: 'syz.0.4476': attribute type 39 has an invalid length. [ 494.293673][T22910] tipc: Enabled bearer , priority 0 [ 494.316135][T22913] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 494.336519][T22913] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 494.387293][T22910] syzkaller0: entered promiscuous mode [ 494.398093][T22910] syzkaller0: entered allmulticast mode [ 494.457803][T22910] tipc: Resetting bearer [ 494.841281][T22921] __nla_validate_parse: 18 callbacks suppressed [ 494.841302][T22921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4487'. [ 495.147213][T22909] tipc: Resetting bearer [ 495.195493][T22930] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4489'. [ 495.256262][T22909] tipc: Disabling bearer [ 495.270370][T22930] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 495.302500][ T5912] tipc: Node number set to 34888992 [ 495.362660][T22922] lo speed is unknown, defaulting to 1000 [ 495.389245][T22930] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 495.494966][T22928] lo speed is unknown, defaulting to 1000 [ 496.039556][T22942] lo speed is unknown, defaulting to 1000 [ 496.075187][T22946] lo speed is unknown, defaulting to 1000 [ 497.480471][T22985] netlink: 'syz.5.4502': attribute type 1 has an invalid length. [ 497.675682][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4502'. [ 497.745388][T22992] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4502'. [ 498.074730][T22998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.184286][T22996] netlink: 'syz.3.4504': attribute type 11 has an invalid length. [ 498.193397][T22992] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 498.215522][T22992] gretap2: entered promiscuous mode [ 499.349412][T23022] tipc: Enabled bearer , priority 0 [ 499.382277][T23022] syzkaller0: entered promiscuous mode [ 499.405872][T23022] syzkaller0: entered allmulticast mode [ 499.487505][T23022] tipc: Resetting bearer [ 499.560130][T23020] tipc: Resetting bearer [ 499.644671][T23020] tipc: Disabling bearer [ 499.692533][T23037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4514'. [ 499.705846][T23038] tipc: Enabled bearer , priority 0 [ 499.779323][T23030] tipc: Resetting bearer [ 499.824354][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'. [ 500.222144][T23055] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4522'. [ 500.419571][T23066] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4526'. [ 500.533453][T23066] batadv1: entered promiscuous mode [ 500.557898][T23066] batadv1: entered allmulticast mode [ 500.684974][T23077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4526'. [ 500.747012][T23074] IPVS: Scheduler module ip_vs_sip not found [ 500.776032][T23074] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4529'. [ 500.808784][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4527'. [ 500.908382][T23080] netlink: 'syz.2.4527': attribute type 3 has an invalid length. [ 500.980138][T23086] dvmrp8: entered allmulticast mode [ 501.031961][T23069] dvmrp8: left allmulticast mode [ 501.468260][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4536'. [ 501.654843][T23108] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4535'. [ 501.931415][T23114] bond0: (slave wlan1): Releasing backup interface [ 501.963157][T23114] mac80211_hwsim hwsim35 wlan1: left allmulticast mode [ 502.135285][T23127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4541'. [ 502.146316][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4539'. [ 503.829129][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4555'. [ 503.874559][T23177] netlink: 'syz.5.4555': attribute type 11 has an invalid length. [ 505.057967][T23221] tipc: Enabling of bearer rejected, already enabled [ 505.242825][ T5867] Bluetooth: hci2: command 0x0405 tx timeout [ 505.656898][T23241] netlink: 'syz.4.4572': attribute type 13 has an invalid length. [ 505.765641][T23241] netlink: 'syz.4.4572': attribute type 17 has an invalid length. [ 506.030837][T23258] __nla_validate_parse: 21 callbacks suppressed [ 506.030859][T23258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4573'. [ 506.191860][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 506.235803][T23241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.283854][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4578'. [ 506.368521][T23252] wg1 speed is unknown, defaulting to 1000 [ 506.380695][T23244] lo speed is unknown, defaulting to 1000 [ 506.417906][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4578'. [ 506.696401][T23252] wg1 speed is unknown, defaulting to 1000 [ 506.739664][T23272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4579'. [ 506.808047][T23252] wg1 speed is unknown, defaulting to 1000 [ 506.850269][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 507.095861][T23273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4579'. [ 507.350030][T23279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4580'. [ 507.395606][T23252] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 507.841736][T23252] wg1 speed is unknown, defaulting to 1000 [ 507.877349][T23252] wg1 speed is unknown, defaulting to 1000 [ 507.909550][T23252] wg1 speed is unknown, defaulting to 1000 [ 507.941276][T23252] wg1 speed is unknown, defaulting to 1000 [ 507.985594][T23252] wg1 speed is unknown, defaulting to 1000 [ 508.019548][T23252] wg1 speed is unknown, defaulting to 1000 [ 508.061081][T23252] wg1 speed is unknown, defaulting to 1000 [ 508.104876][T23252] wg1 speed is unknown, defaulting to 1000 [ 508.246038][T23303] pim6reg1: entered promiscuous mode [ 508.299918][T23303] pim6reg1: entered allmulticast mode [ 508.611714][T23314] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4587'. [ 508.759839][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 509.313650][T23314] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 509.342500][T23314] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode [ 509.371373][T23315] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 509.712377][T23320] syzkaller0: entered promiscuous mode [ 509.764626][T23320] syzkaller0: entered allmulticast mode [ 509.834196][T23349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4596'. [ 509.986627][T23343] lo speed is unknown, defaulting to 1000 [ 510.174655][T23355] erspan0: entered promiscuous mode [ 510.670864][T23366] netlink: 'syz.3.4601': attribute type 10 has an invalid length. [ 510.720831][T23366] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4601'. [ 510.789210][T23366] team0: entered promiscuous mode [ 510.851024][T23366] bond3: entered promiscuous mode [ 511.082691][T23343] wg1 speed is unknown, defaulting to 1000 [ 511.401408][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 511.510084][T23382] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4604'. [ 512.225758][T23396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 512.511777][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4614'. [ 512.562281][T23416] geneve2: entered promiscuous mode [ 512.578938][T23417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4614'. [ 512.596334][T18273] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.635068][T18273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.672035][T18273] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.705892][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4615'. [ 512.747228][T23424] tap0: tun_chr_ioctl cmd 1074025677 [ 512.771057][T23424] tap0: linktype set to 800 [ 512.794609][T18273] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.860869][T23430] netlink: 'syz.0.4618': attribute type 1 has an invalid length. [ 512.901406][T23430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4618'. [ 512.961568][T23430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4618'. [ 513.265738][T23439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4621'. [ 513.327283][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'. [ 513.544646][T23446] lo speed is unknown, defaulting to 1000 [ 513.672822][T23450] vlan4: entered allmulticast mode [ 513.693950][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4626'. [ 513.718155][T23450] dummy0: entered allmulticast mode [ 514.113652][T23456] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 514.253004][T23446] wg1 speed is unknown, defaulting to 1000 [ 514.339341][T23453] lo speed is unknown, defaulting to 1000 [ 514.453700][T23453] wg1 speed is unknown, defaulting to 1000 [ 514.693259][T23468] lo speed is unknown, defaulting to 1000 [ 515.638251][T23468] wg1 speed is unknown, defaulting to 1000 [ 515.750554][T23505] siw: device registration error -23 [ 515.844933][T23506] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 516.485675][T23517] netlink: 'syz.4.4636': attribute type 83 has an invalid length. [ 517.438392][T23503] lo speed is unknown, defaulting to 1000 [ 517.475969][T23515] lo speed is unknown, defaulting to 1000 [ 517.639575][T23523] __nla_validate_parse: 8 callbacks suppressed [ 517.639596][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4640'. [ 517.813382][T23515] wg1 speed is unknown, defaulting to 1000 [ 518.347729][T23503] wg1 speed is unknown, defaulting to 1000 [ 518.389146][T23537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.704728][T23550] veth2: entered promiscuous mode [ 518.732747][T23550] veth2: entered allmulticast mode [ 518.897078][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4647'. [ 519.062983][T23559] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 519.509136][T23555] tipc: Resetting bearer [ 519.565694][T23555] veth1_vlan: left allmulticast mode [ 519.784767][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.819117][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.983562][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.023301][T23580] ip6gretap2: entered promiscuous mode [ 520.061713][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.502116][T23604] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 520.701010][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4661'. [ 520.758433][T23609] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 520.796320][T23609] tipc: Enabled bearer , priority 10 [ 521.621457][T23640] tipc: Enabled bearer , priority 0 [ 521.720895][T23640] syzkaller0: entered promiscuous mode [ 521.726425][T23640] syzkaller0: entered allmulticast mode [ 521.902782][T23640] tipc: Resetting bearer [ 521.967288][T23633] tipc: Resetting bearer [ 522.188814][T23633] tipc: Disabling bearer [ 522.202352][T23672] netlink: 'syz.5.4676': attribute type 4 has an invalid length. [ 522.242505][T23658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 522.289601][T23673] netlink: 'syz.5.4676': attribute type 4 has an invalid length. [ 522.489064][T23678] netlink: 'syz.3.4677': attribute type 1 has an invalid length. [ 522.527006][T23681] netlink: 'syz.2.4679': attribute type 1 has an invalid length. [ 522.568830][T23681] netlink: 'syz.2.4679': attribute type 1 has an invalid length. [ 522.750285][ T5911] tipc: Node number set to 799767728 [ 522.793142][T23695] netlink: 'syz.2.4679': attribute type 1 has an invalid length. [ 522.878275][T23680] lo speed is unknown, defaulting to 1000 [ 522.976367][T23689] gretap1: entered promiscuous mode [ 523.052009][T23689] bond4: (slave gretap1): making interface the new active one [ 523.108866][T23689] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 523.158402][T23692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4677'. [ 523.471132][T23680] wg1 speed is unknown, defaulting to 1000 [ 523.978312][T23709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4685'. [ 524.164617][T23713] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4685'. [ 524.179997][T23715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4687'. [ 524.469284][T23727] netlink: 'syz.0.4691': attribute type 10 has an invalid length. [ 524.516943][T23727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4691'. [ 524.578555][T23727] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4691'. [ 524.599367][T23727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4691'. [ 524.619611][T23727] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4691'. [ 524.671610][T23736] netlink: 'syz.5.4692': attribute type 4 has an invalid length. [ 524.796037][T23740] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4692'. [ 526.165758][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4693'. [ 526.596541][T23760] netlink: 'syz.5.4700': attribute type 1 has an invalid length. [ 526.755102][T23760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 527.006979][T23770] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 527.040265][T23770] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 528.246343][T23786] syzkaller1: entered allmulticast mode [ 528.295452][T23791] netlink: 'syz.5.4707': attribute type 1 has an invalid length. [ 528.347623][T23793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.628351][T23796] lo speed is unknown, defaulting to 1000 [ 528.981163][T23796] wg1 speed is unknown, defaulting to 1000 [ 528.995089][T23811] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 529.225642][T23819] __nla_validate_parse: 1 callbacks suppressed [ 529.225666][T23819] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4715'. [ 529.357646][T23822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4716'. [ 529.399657][T23822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4716'. [ 529.431052][T23827] block nbd1: server does not support multiple connections per device. [ 529.465292][T23827] block nbd1: shutting down sockets [ 530.298636][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4724'. [ 530.973898][T23867] lo speed is unknown, defaulting to 1000 [ 531.359477][T23867] wg1 speed is unknown, defaulting to 1000 [ 533.210722][T23895] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4737'. [ 534.274917][T23902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.377257][T23902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4739'. [ 534.476910][T23907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4740'. [ 534.634335][T23909] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4741'. [ 534.646603][T23907] vlan3: entered promiscuous mode [ 534.667459][T23907] gretap0: entered promiscuous mode [ 535.276216][T23923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4745'. [ 535.599218][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4748'. [ 536.892964][T23967] netlink: 'syz.0.4755': attribute type 10 has an invalid length. [ 537.000634][T23975] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4756'. [ 537.787842][T18270] nci: nci_rsp_packet: unknown rsp opcode 0x711 [ 537.841751][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4762'. [ 537.940827][T24008] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4762'. [ 538.423482][T24013] lo speed is unknown, defaulting to 1000 [ 538.978770][T24022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4768'. [ 539.017109][T24027] lo speed is unknown, defaulting to 1000 [ 539.235079][T18273] nci: nci_rx_work: unknown MT 0x1 [ 539.251297][T24037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4771'. [ 539.320999][T18271] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.341812][T18271] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.387495][T18271] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.444860][T18271] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.492356][T24013] wg1 speed is unknown, defaulting to 1000 [ 539.652534][T24050] __nla_validate_parse: 1 callbacks suppressed [ 539.652555][T24050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4773'. [ 540.008333][T24027] wg1 speed is unknown, defaulting to 1000 [ 540.188978][T24065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4776'. [ 540.759824][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 540.900996][T24080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4780'. [ 541.265034][T24086] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4782'. [ 568.282190][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 604.119819][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.871540][T24096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4788'. [ 605.522333][T18273] syzkaller0: tun_net_xmit 76 [ 605.530822][T24122] syzkaller0: create flow: hash 2512845410 index 1 [ 605.542678][T18273] syzkaller0: tun_net_xmit 48 [ 605.550011][T11446] syzkaller0: tun_net_xmit 76 [ 605.715315][T24122] syzkaller0: delete flow: hash 2512845410 index 1 [ 606.055118][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 606.070162][T24135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4806'. [ 606.387058][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4808'. [ 607.053380][T24126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4802'. [ 607.210819][T24136] tipc: Enabling of bearer rejected, failed to enable media [ 607.232921][T24135] vlan4: entered allmulticast mode [ 607.238360][T24135] hsr0: entered allmulticast mode [ 607.248669][T24135] hsr_slave_0: entered allmulticast mode [ 607.256189][T24135] hsr_slave_1: entered allmulticast mode [ 607.270883][T24150] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4809'. [ 607.297609][T24155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4810'. [ 607.328066][T24157] tipc: Enabling of bearer rejected, failed to enable media [ 608.108644][T24190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4822'. [ 608.157610][T24190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4822'. [ 608.458313][T24204] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 609.530663][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 610.408033][T24275] netlink: 'syz.2.4860': attribute type 1 has an invalid length. [ 610.461544][T24283] sctp: [Deprecated]: syz.2.4860 (pid 24283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.461544][T24283] Use struct sctp_sack_info instead [ 611.087679][T24286] netlink: 'syz.3.4864': attribute type 5 has an invalid length. [ 611.179461][T24289] lo speed is unknown, defaulting to 1000 [ 611.185486][T24287] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 611.404570][T24299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4868'. [ 611.703833][T24289] wg1 speed is unknown, defaulting to 1000 [ 612.433171][T24298] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 612.486768][T24298] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 612.530521][T24298] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 613.434851][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4884'. [ 613.469217][T24367] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4884'. [ 613.486651][T24367] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4884'. [ 613.526799][T24370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4885'. [ 613.596530][T24367] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4884'. [ 613.814401][T24387] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4890'. [ 614.093488][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4891'. [ 614.459334][T24401] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 614.570962][T24401] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 614.825295][T24407] vlan4: entered allmulticast mode [ 615.281612][T24428] netlink: 'syz.3.4899': attribute type 5 has an invalid length. [ 615.336645][T24438] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 615.370628][T24434] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4900'. [ 615.396183][T24438] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4902'. [ 615.767633][T24457] lo speed is unknown, defaulting to 1000 [ 616.299858][T24471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.330732][T24457] wg1 speed is unknown, defaulting to 1000 [ 616.387687][T24471] tipc: Enabled bearer , priority 0 [ 616.429024][T24471] syzkaller0: entered promiscuous mode [ 616.469098][T24471] syzkaller0: entered allmulticast mode [ 616.534706][T24470] tipc: Resetting bearer [ 616.573805][T24484] __nla_validate_parse: 4 callbacks suppressed [ 616.573827][T24484] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4915'. [ 616.597279][T24470] tipc: Disabling bearer [ 616.725893][T24488] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4916'. [ 616.746019][T24488] netlink: zone id is out of range [ 616.758021][T24488] netlink: zone id is out of range [ 616.772439][T24488] netlink: zone id is out of range [ 616.783461][T24488] netlink: zone id is out of range [ 616.794452][T24488] netlink: zone id is out of range [ 616.805282][T24488] netlink: zone id is out of range [ 616.817180][T24488] netlink: zone id is out of range [ 616.829413][T24488] netlink: zone id is out of range [ 616.839515][T24488] netlink: zone id is out of range [ 616.852306][T24488] netlink: zone id is out of range [ 617.287112][T24500] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4920'. [ 617.589033][T24512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.596363][T24512] IPv6: NLM_F_CREATE should be set when creating new route [ 617.603647][T24512] IPv6: NLM_F_CREATE should be set when creating new route [ 617.777902][T24518] tipc: Resetting bearer [ 617.880668][T24520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4926'. [ 617.976386][T24505] lo speed is unknown, defaulting to 1000 [ 618.232410][T24536] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 618.324824][ T30] audit: type=1800 audit(1756053603.738:12): pid=24539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4932" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1672 res=0 errno=0 [ 618.464163][ T30] audit: type=1800 audit(1756053603.758:13): pid=24539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4932" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1672 res=0 errno=0 [ 618.561504][T24544] nbd: must specify an index to disconnect [ 618.588844][T24505] wg1 speed is unknown, defaulting to 1000 [ 618.882229][T24551] lo speed is unknown, defaulting to 1000 [ 618.945647][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4941'. [ 618.990570][T24563] netlink: 'syz.2.4940': attribute type 1 has an invalid length. [ 619.391465][T24578] "syz.2.4945" (24578) uses obsolete ecb(arc4) skcipher [ 619.625550][T24551] wg1 speed is unknown, defaulting to 1000 [ 620.055239][T24584] netlink: 'syz.3.4947': attribute type 1 has an invalid length. [ 620.189047][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4948'. [ 620.380694][T24594] netlink: 'syz.0.4949': attribute type 1 has an invalid length. [ 620.439447][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4949'. [ 620.491834][T24594] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 620.808339][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4952'. [ 620.870135][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4955'. [ 620.909220][T24618] tipc: Enabled bearer , priority 0 [ 620.958897][T24615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.969503][T24609] syzkaller0: entered promiscuous mode [ 620.976046][T24609] syzkaller0: entered allmulticast mode [ 621.090392][T24609] tipc: Resetting bearer [ 621.186506][T24624] lo speed is unknown, defaulting to 1000 [ 621.550867][T24632] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.4958'. [ 621.598184][T24608] tipc: Resetting bearer [ 621.702872][T24608] tipc: Disabling bearer [ 621.736169][T24624] wg1 speed is unknown, defaulting to 1000 [ 621.743654][T24632] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 621.774020][T24632] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 621.902213][T24627] lo speed is unknown, defaulting to 1000 [ 622.376344][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4962'. [ 622.443549][T24646] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 622.469471][T24650] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4962'. [ 622.514008][T24627] wg1 speed is unknown, defaulting to 1000 [ 622.786851][T24660] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4968'. [ 622.801014][T24658] netlink: 'syz.3.4967': attribute type 2 has an invalid length. [ 622.814056][T24660] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4968'. [ 622.968794][T24664] lo: entered allmulticast mode [ 623.002287][T24664] lo: left allmulticast mode [ 623.043958][T24666] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4971'. [ 623.268102][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4973'. [ 623.436417][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4975'. [ 623.463694][T24680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4975'. [ 623.484909][T24670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4970'. [ 623.630657][T24683] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4976'. [ 623.652207][T24684] net_ratelimit: 3 callbacks suppressed [ 623.652231][T24684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.251337][T24684] lo speed is unknown, defaulting to 1000 [ 624.981387][T24718] lo speed is unknown, defaulting to 1000 [ 625.028802][ T5867] Bluetooth: hci2: link tx timeout [ 625.034419][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.043322][ T5867] Bluetooth: hci2: link tx timeout [ 625.048663][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.057250][ T5867] Bluetooth: hci2: link tx timeout [ 625.062652][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.071107][ T5867] Bluetooth: hci2: link tx timeout [ 625.076488][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.086156][ T5867] Bluetooth: hci2: link tx timeout [ 625.091782][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.100661][ T5867] Bluetooth: hci2: link tx timeout [ 625.106010][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.114279][ T5867] Bluetooth: hci2: link tx timeout [ 625.119608][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.128751][ T5867] Bluetooth: hci2: link tx timeout [ 625.135171][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.143322][ T5867] Bluetooth: hci2: link tx timeout [ 625.148649][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.166672][ T5867] Bluetooth: hci2: link tx timeout [ 625.172196][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.182369][ T5867] Bluetooth: hci2: link tx timeout [ 625.187584][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.195867][ T5867] Bluetooth: hci2: link tx timeout [ 625.205841][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.213744][ T5867] Bluetooth: hci2: link tx timeout [ 625.218915][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.259523][ T5867] Bluetooth: hci2: link tx timeout [ 625.265107][ T5867] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 625.324967][T24727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.348762][T24727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.378646][T24727] batman_adv: batadv0: Removing interface: ipvlan2 [ 625.437332][T24684] wg1 speed is unknown, defaulting to 1000 [ 625.731411][T24718] wg1 speed is unknown, defaulting to 1000 [ 625.963625][T24736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.743534][T24748] lo speed is unknown, defaulting to 1000 [ 627.081406][ T5867] Bluetooth: hci2: command 0x0405 tx timeout [ 627.854603][T24748] wg1 speed is unknown, defaulting to 1000 [ 627.925500][T24785] __nla_validate_parse: 6 callbacks suppressed [ 627.925530][T24785] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4997'. [ 628.020086][T24785] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4997'. [ 628.086041][T24800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5001'. [ 628.193723][T24800] openvswitch: netlink: Flow key attr not present in new flow. [ 629.255157][T24831] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.5006'. [ 629.392288][T24831] netlink: zone id is out of range [ 629.467443][T24831] netlink: zone id is out of range [ 629.529937][T24831] netlink: zone id is out of range [ 629.661283][T24843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5010'. [ 629.732088][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 629.871771][T24845] macvtap1: entered promiscuous mode [ 629.932620][T24845] bridge0: entered promiscuous mode [ 629.986687][T24845] bridge0: port 1(macvtap1) entered blocking state [ 630.045709][T24845] bridge0: port 1(macvtap1) entered disabled state [ 630.114305][T24845] macvtap1: entered allmulticast mode [ 630.153584][T24845] bridge0: entered allmulticast mode [ 630.219639][T24845] macvtap1: left allmulticast mode [ 630.256780][T24845] bridge0: left allmulticast mode [ 630.305269][T24845] bridge0: left promiscuous mode [ 630.848500][T24877] netlink: 'syz.5.5019': attribute type 9 has an invalid length. [ 630.906636][T24877] netlink: 212260 bytes leftover after parsing attributes in process `syz.5.5019'. [ 631.088869][T24883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5021'. [ 631.204037][T24883] vlan4: entered promiscuous mode [ 631.224678][T24883] erspan0: entered promiscuous mode [ 631.688900][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5028'. [ 631.877467][T24917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.997907][T24923] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 632.717353][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5035'. [ 632.791860][T24944] bridge0: failed insert local address into bridge forwarding table [ 633.268741][T24967] netlink: 'syz.4.5043': attribute type 39 has an invalid length. [ 633.613891][T24976] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 633.651628][T24976] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 633.664462][T24983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5046'. [ 633.703489][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5045'. [ 634.062270][T25003] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5052'. [ 634.105925][T25003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5052'. [ 634.185235][T25012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5054'. [ 634.570525][T25018] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 634.632993][T25018] syzkaller0: entered promiscuous mode [ 634.638587][T25018] syzkaller0: entered allmulticast mode [ 635.806211][T25064] netlink: 'syz.3.5066': attribute type 10 has an invalid length. [ 635.828473][T25064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5066'. [ 637.025157][T25064] geneve0: entered promiscuous mode [ 637.080408][T25064] team0: Port device geneve0 added [ 637.133211][T25065] syzkaller1: entered promiscuous mode [ 637.154545][T25065] syzkaller1: entered allmulticast mode [ 637.312135][T25094] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5074'. [ 637.424771][T25075] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.568398][T25075] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.893689][T25075] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.021344][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 638.058230][T25075] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.088234][T25114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5080'. [ 638.214748][T25108] lo speed is unknown, defaulting to 1000 [ 638.397098][T25112] lo speed is unknown, defaulting to 1000 [ 638.403691][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.484670][T18285] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.586120][T18285] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.600447][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 638.647056][T25124] lo speed is unknown, defaulting to 1000 [ 638.654408][T18280] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.262752][T25108] wg1 speed is unknown, defaulting to 1000 [ 639.553813][T25112] wg1 speed is unknown, defaulting to 1000 [ 639.563291][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 639.649412][T25152] netlink: 'syz.3.5089': attribute type 178 has an invalid length. [ 639.754402][T25152] bridge0: port 1(batadv1) entered blocking state [ 639.783100][T25152] bridge0: port 1(batadv1) entered disabled state [ 639.797357][T25152] batadv1: entered allmulticast mode [ 639.860958][T25152] batadv1: entered promiscuous mode [ 640.123050][T25124] wg1 speed is unknown, defaulting to 1000 [ 640.226241][T25164] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 640.246043][T18273] batman_adv: batadv1: IGMP Querier appeared [ 640.252533][T18273] batman_adv: batadv1: MLD Querier appeared [ 640.571717][T25164] syzkaller1: entered promiscuous mode [ 640.589204][T25164] syzkaller1: entered allmulticast mode [ 640.619126][T25168] lo speed is unknown, defaulting to 1000 [ 641.091281][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5094'. [ 641.233067][T25168] wg1 speed is unknown, defaulting to 1000 [ 641.248617][T25175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5093'. [ 641.410937][T25185] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 641.793424][T25196] tipc: Enabled bearer , priority 0 [ 641.831863][T25196] syzkaller0: entered promiscuous mode [ 641.837391][T25196] syzkaller0: entered allmulticast mode [ 642.176729][T25204] tipc: Resetting bearer [ 642.247804][T25195] tipc: Resetting bearer [ 642.330850][T25212] netlink: 'syz.3.5101': attribute type 39 has an invalid length. [ 642.353213][T25195] tipc: Disabling bearer [ 642.969134][T25223] tipc: Enabled bearer , priority 0 [ 643.001898][T25227] syzkaller0: entered promiscuous mode [ 643.024402][T25227] syzkaller0: entered allmulticast mode [ 643.063783][T25223] tipc: Resetting bearer [ 643.107918][T25222] tipc: Resetting bearer [ 643.156499][T25222] tipc: Disabling bearer [ 643.276737][T25241] lo speed is unknown, defaulting to 1000 [ 643.294273][T25237] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.5107'. [ 643.307701][T25240] netlink: 4066 bytes leftover after parsing attributes in process `syz.0.5106'. [ 643.385316][T25235] netlink: 4066 bytes leftover after parsing attributes in process `syz.0.5106'. [ 643.686112][T25251] lo speed is unknown, defaulting to 1000 [ 643.714489][T25257] netlink: 'syz.2.5112': attribute type 5 has an invalid length. [ 643.807787][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5114'. [ 644.152965][T25241] wg1 speed is unknown, defaulting to 1000 [ 644.316697][T25276] tipc: Enabling of bearer rejected, failed to enable media [ 644.869276][T25251] wg1 speed is unknown, defaulting to 1000 [ 644.995585][T25304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5123'. [ 645.208367][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'. [ 645.374244][T25312] lo speed is unknown, defaulting to 1000 [ 645.514505][T25316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5125'. [ 645.548107][T25316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5125'. [ 646.069334][T25326] netlink: 'syz.0.5128': attribute type 12 has an invalid length. [ 646.267489][T25312] wg1 speed is unknown, defaulting to 1000 [ 646.431490][T25328] macsec1: entered promiscuous mode [ 646.436869][T25328] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 646.721960][T25338] lo speed is unknown, defaulting to 1000 [ 646.782531][T25340] geneve2: entered promiscuous mode [ 646.831505][T18280] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.887115][T18280] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.037636][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5134'. [ 647.207990][T25363] netlink: 'syz.2.5134': attribute type 8 has an invalid length. [ 647.614601][T18280] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.665762][T25356] macvtap1: entered promiscuous mode [ 647.673963][T25356] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 647.712801][T25365] gtp1: entered promiscuous mode [ 647.729196][T25338] wg1 speed is unknown, defaulting to 1000 [ 647.765344][T18280] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.813579][T25344] lo speed is unknown, defaulting to 1000 [ 647.893533][T25369] netlink: 'syz.2.5137': attribute type 21 has an invalid length. [ 647.956140][T25369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5137'. [ 648.212083][T25370] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.376848][T25373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5138'. [ 648.421146][T25344] wg1 speed is unknown, defaulting to 1000 [ 648.453517][T25370] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.856587][T25370] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.033771][T25370] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.070191][T25382] netlink: 'syz.3.5141': attribute type 2 has an invalid length. [ 649.147084][T25383] netlink: 'syz.3.5141': attribute type 2 has an invalid length. [ 649.335302][T18280] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.369080][T18280] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.686306][T18280] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.775703][T18273] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.271506][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5145'. [ 651.216731][T25428] netlink: 1760 bytes leftover after parsing attributes in process `syz.5.5152'. [ 652.126055][T25418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5150'. [ 652.140283][T25418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5150'. [ 652.149471][T25418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5150'. [ 652.616795][T25455] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 652.778723][T25462] netlink: 'syz.2.5161': attribute type 1 has an invalid length. [ 652.814306][T25465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5162'. [ 653.241456][T25462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5161'. [ 653.370400][T25490] syzkaller0: entered promiscuous mode [ 653.390569][T25492] netlink: 1620 bytes leftover after parsing attributes in process `syz.3.5167'. [ 653.405511][T25490] syzkaller0: entered allmulticast mode [ 653.560826][T25495] netlink: 'syz.0.5168': attribute type 6 has an invalid length. [ 653.713076][T25500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5170'. [ 653.958386][T25502] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5169'. [ 654.079158][T25514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5174'. [ 654.136275][T25510] can: request_module (can-proto-3) failed. [ 654.182192][T25514] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 654.257141][T25514] CPU: 1 UID: 0 PID: 25514 Comm: syz.4.5174 Not tainted syzkaller #0 PREEMPT(full) [ 654.257173][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.257188][T25514] Call Trace: [ 654.257196][T25514] [ 654.257206][T25514] dump_stack_lvl+0x189/0x250 [ 654.257241][T25514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.257267][T25514] ? __pfx__printk+0x10/0x10 [ 654.257295][T25514] ? kernfs_root+0x1c/0x230 [ 654.257320][T25514] ? kernfs_path_from_node+0x2f/0x290 [ 654.257344][T25514] ? kernfs_path_from_node+0x250/0x290 [ 654.257368][T25514] ? kernfs_path_from_node+0x2f/0x290 [ 654.257395][T25514] sysfs_warn_dup+0x8e/0xa0 [ 654.257417][T25514] sysfs_do_create_link_sd+0xc0/0x110 [ 654.257442][T25514] device_add_class_symlinks+0x1cf/0x240 [ 654.257468][T25514] device_add+0x475/0xb50 [ 654.257490][T25514] wiphy_register+0x1ba6/0x28d0 [ 654.257533][T25514] ? __pfx_wiphy_register+0x10/0x10 [ 654.257564][T25514] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 654.257593][T25514] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 654.257619][T25514] ieee80211_register_hw+0x3425/0x4080 [ 654.257655][T25514] ? ieee80211_register_hw+0x14e1/0x4080 [ 654.257686][T25514] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 654.257713][T25514] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 654.257748][T25514] ? __hrtimer_setup+0x187/0x210 [ 654.257768][T25514] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 654.257802][T25514] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 654.257848][T25514] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 654.257876][T25514] ? trace_kmalloc+0x1f/0xd0 [ 654.257904][T25514] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 654.257935][T25514] ? kstrndup+0xbf/0x160 [ 654.257963][T25514] hwsim_new_radio_nl+0xea4/0x1b10 [ 654.257993][T25514] ? __pfx___nla_validate_parse+0x10/0x10 [ 654.258042][T25514] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 654.258079][T25514] ? __nla_parse+0x40/0x60 [ 654.258114][T25514] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 654.258147][T25514] genl_family_rcv_msg_doit+0x215/0x300 [ 654.258178][T25514] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 654.258212][T25514] ? bpf_lsm_capable+0x9/0x20 [ 654.258241][T25514] ? security_capable+0x7e/0x2e0 [ 654.258276][T25514] genl_rcv_msg+0x60e/0x790 [ 654.258305][T25514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.258329][T25514] ? __kasan_slab_alloc+0x6c/0x80 [ 654.258357][T25514] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 654.258386][T25514] ? __netlink_lookup+0xbd/0x810 [ 654.258405][T25514] ? rcu_is_watching+0x15/0xb0 [ 654.258431][T25514] netlink_rcv_skb+0x205/0x470 [ 654.258464][T25514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.258489][T25514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.258529][T25514] ? lock_release+0x4b/0x3e0 [ 654.258562][T25514] ? down_read+0x1ad/0x2e0 [ 654.258584][T25514] genl_rcv+0x28/0x40 [ 654.258606][T25514] netlink_unicast+0x82c/0x9e0 [ 654.258640][T25514] ? __pfx_netlink_unicast+0x10/0x10 [ 654.258670][T25514] ? netlink_sendmsg+0x642/0xb30 [ 654.258689][T25514] ? skb_put+0x11b/0x210 [ 654.258711][T25514] netlink_sendmsg+0x805/0xb30 [ 654.258736][T25514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.258758][T25514] ? aa_sock_msg_perm+0xf1/0x1d0 [ 654.258779][T25514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.258801][T25514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.258821][T25514] __sock_sendmsg+0x21c/0x270 [ 654.258852][T25514] ____sys_sendmsg+0x505/0x830 [ 654.258877][T25514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.258906][T25514] ? import_iovec+0x74/0xa0 [ 654.258932][T25514] ___sys_sendmsg+0x21f/0x2a0 [ 654.258956][T25514] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.258983][T25514] ? futex_wake+0x4b2/0x560 [ 654.259040][T25514] ? __fget_files+0x2a/0x420 [ 654.259059][T25514] ? __fget_files+0x3a0/0x420 [ 654.259084][T25514] __x64_sys_sendmsg+0x19b/0x260 [ 654.259109][T25514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.259139][T25514] ? rcu_is_watching+0x15/0xb0 [ 654.259162][T25514] ? rcu_is_watching+0x15/0xb0 [ 654.259185][T25514] do_syscall_64+0xfa/0x3b0 [ 654.259206][T25514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.259228][T25514] ? clear_bhb_loop+0x60/0xb0 [ 654.259253][T25514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.259275][T25514] RIP: 0033:0x7f2d5758ebe9 [ 654.259294][T25514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.259314][T25514] RSP: 002b:00007f2d583b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.259338][T25514] RAX: ffffffffffffffda RBX: 00007f2d577b5fa0 RCX: 00007f2d5758ebe9 [ 654.259354][T25514] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 654.259368][T25514] RBP: 00007f2d57611e19 R08: 0000000000000000 R09: 0000000000000000 [ 654.259382][T25514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.259395][T25514] R13: 00007f2d577b6038 R14: 00007f2d577b5fa0 R15: 00007ffcd43089d8 [ 654.259422][T25514] [ 656.259974][T25552] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.5182'. [ 657.277469][T25548] lo speed is unknown, defaulting to 1000 [ 657.318062][T25547] lo speed is unknown, defaulting to 1000 [ 657.371291][T25563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5183'. [ 657.386312][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5183'. [ 657.525270][T25563] bond4: entered promiscuous mode [ 657.577695][T25563] bond4: entered allmulticast mode [ 657.608140][T25563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 657.699026][T25548] wg1 speed is unknown, defaulting to 1000 [ 657.768892][T25571] lo speed is unknown, defaulting to 1000 [ 658.921932][T25575] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.998934][T25547] wg1 speed is unknown, defaulting to 1000 [ 660.187855][T25575] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.246805][T25571] wg1 speed is unknown, defaulting to 1000 [ 660.378408][T25575] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.544120][T25575] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.836584][T18285] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.876867][T18285] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.008076][T18285] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.191322][T18280] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.335181][T25602] netlink: 'syz.3.5192': attribute type 21 has an invalid length. [ 661.361389][T25601] netlink: 'syz.2.5193': attribute type 72 has an invalid length. [ 661.382788][T25602] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5192'. [ 661.439008][T25602] netlink: 'syz.3.5192': attribute type 5 has an invalid length. [ 661.488553][T25602] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5192'. [ 661.763106][T25608] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 661.791219][T25614] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 661.851207][T25613] netlink: 'syz.4.5196': attribute type 13 has an invalid length. [ 661.859097][T25613] netlink: 'syz.4.5196': attribute type 17 has an invalid length. [ 662.168915][T25613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.200652][T25625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5198'. [ 662.419077][T25632] syzkaller1: entered promiscuous mode [ 662.437908][T25632] syzkaller1: entered allmulticast mode [ 662.645556][T25640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5202'. [ 662.767745][T25646] netlink: 'syz.5.5206': attribute type 7 has an invalid length. [ 662.790452][T25649] netlink: 'syz.4.5207': attribute type 3 has an invalid length. [ 662.810042][T25646] netlink: 'syz.5.5206': attribute type 12 has an invalid length. [ 662.826871][T25649] syz_tun: entered allmulticast mode [ 662.924574][T25649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.067813][T25660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5208'. [ 663.095655][T25647] syz_tun: left allmulticast mode [ 663.114757][T25663] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5210'. [ 663.289564][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 663.841095][T25694] lo speed is unknown, defaulting to 1000 [ 665.265990][T25694] wg1 speed is unknown, defaulting to 1000 [ 665.503941][T25697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.590659][T25755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5229'. [ 665.807509][T25755] lo speed is unknown, defaulting to 1000 [ 665.965977][T25771] openvswitch: netlink: Flow actions attr not present in new flow. [ 666.054219][T25755] wg1 speed is unknown, defaulting to 1000 [ 666.204196][T25775] bond0: (slave bond_slave_0): Releasing backup interface [ 666.241478][T25775] bond0: (slave bond_slave_1): Releasing backup interface [ 666.276219][T25775] team0: Port device team_slave_0 removed [ 666.333324][T25775] team0: Port device team_slave_1 removed [ 666.385186][T25775] bond0: (slave macvlan3): Releasing backup interface [ 666.416148][T25775] bond2: (slave gretap2): Releasing active interface [ 667.153688][T25791] lo speed is unknown, defaulting to 1000 [ 667.237293][T25804] netlink: zone id is out of range [ 667.266661][T25804] netlink: zone id is out of range [ 667.284361][T25804] netlink: zone id is out of range [ 667.299042][T25804] netlink: zone id is out of range [ 667.315262][T25804] netlink: zone id is out of range [ 667.323074][T25807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5245'. [ 667.351972][T25804] netlink: zone id is out of range [ 667.356757][T25807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5245'. [ 667.376271][T25804] netlink: zone id is out of range [ 667.394430][T25804] netlink: zone id is out of range [ 667.410262][T25804] netlink: zone id is out of range [ 667.424410][T25791] wg1 speed is unknown, defaulting to 1000 [ 667.439565][T25804] netlink: zone id is out of range [ 667.972505][T25822] veth8: entered promiscuous mode [ 667.999134][T25822] veth8: entered allmulticast mode [ 668.184181][T25830] validate_nla: 5 callbacks suppressed [ 668.184202][T25830] netlink: 'syz.5.5250': attribute type 4 has an invalid length. [ 668.251177][T25827] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 669.163858][T25837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5252'. [ 670.737918][T25832] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 670.964104][T18280] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.000124][T18280] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.008639][T18280] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.072336][T18280] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.120306][T18280] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.128725][T18280] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.376257][T18280] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.411613][T25881] netlink: 'syz.5.5263': attribute type 21 has an invalid length. [ 671.439930][T18280] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.590730][T25881] netlink: 'syz.5.5263': attribute type 1 has an invalid length. [ 672.057453][T25904] lo speed is unknown, defaulting to 1000 [ 672.453744][T25915] lo speed is unknown, defaulting to 1000 [ 672.532847][T25904] wg1 speed is unknown, defaulting to 1000 [ 672.939104][T25936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5277'. [ 673.075284][T25933] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 673.133064][ T37] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.168023][ T37] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.284572][ T37] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.319183][ T37] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.706647][T25915] wg1 speed is unknown, defaulting to 1000 [ 674.071881][T25953] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20004 [ 675.031566][T25968] lo speed is unknown, defaulting to 1000 [ 679.113671][T25989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'. [ 679.192472][T25984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5287'. [ 679.948693][T25968] wg1 speed is unknown, defaulting to 1000 [ 685.814139][T25982] lo speed is unknown, defaulting to 1000 [ 692.432122][T26006] can: request_module (can-proto-5) failed. [ 693.222757][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5293'. [ 708.297756][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.311018][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.318389][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.332238][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.345232][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.781476][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 709.789043][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 709.803064][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 709.904678][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 709.935832][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 710.620050][ T5861] Bluetooth: hci4: command tx timeout [ 710.762139][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 710.791363][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 710.798784][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 710.812483][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 710.825032][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 711.877258][T26030] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 711.890516][T26030] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 711.897872][T26030] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 711.911177][T26030] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 711.918696][T26030] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 712.713010][T26030] Bluetooth: hci4: command tx timeout [ 715.200562][T26030] Bluetooth: hci4: command tx timeout [ 715.206036][T26030] Bluetooth: hci8: command tx timeout [ 715.216890][T26030] Bluetooth: hci7: command tx timeout [ 715.233468][T26030] Bluetooth: hci6: command tx timeout [ 716.686293][T25982] wg1 speed is unknown, defaulting to 1000 [ 717.405967][T26030] Bluetooth: hci4: command tx timeout [ 717.416852][T26030] Bluetooth: hci6: command tx timeout [ 717.427938][T26030] Bluetooth: hci7: command tx timeout [ 717.438821][T26030] Bluetooth: hci8: command tx timeout [ 719.529968][T26030] Bluetooth: hci7: command tx timeout [ 719.535435][T26030] Bluetooth: hci6: command tx timeout [ 719.546787][ T5867] Bluetooth: hci8: command tx timeout [ 721.644779][T26028] Bluetooth: hci8: command tx timeout [ 721.655884][T26028] Bluetooth: hci7: command tx timeout [ 721.666656][T26030] Bluetooth: hci6: command tx timeout [ 737.240832][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 745.955820][T26029] lo speed is unknown, defaulting to 1000 [ 746.007092][T26019] lo speed is unknown, defaulting to 1000 [ 746.605282][T26028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 746.705863][T26028] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.724549][T26028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.738074][T26028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.752188][T26028] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 749.248319][T26028] Bluetooth: hci1: command tx timeout [ 749.992677][T26026] lo speed is unknown, defaulting to 1000 [ 750.004476][T26016] lo speed is unknown, defaulting to 1000 [ 750.005214][T26029] wg1 speed is unknown, defaulting to 1000 [ 751.332337][T26030] Bluetooth: hci1: command tx timeout [ 753.444829][T26028] Bluetooth: hci1: command tx timeout [ 755.531574][T26028] Bluetooth: hci1: command tx timeout [ 764.408152][T26019] wg1 speed is unknown, defaulting to 1000 [ 765.868837][T26030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 765.884924][T26030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 765.898217][T26030] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 765.911828][T26030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 765.927336][T26030] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 766.996661][T26028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 767.025089][T26028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 767.038232][T26028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 767.051521][T26028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 767.059062][T26028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 767.521080][T26030] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 767.528886][T26030] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 767.541944][T26030] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 767.557167][T26030] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 767.586364][T26030] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 768.521242][T26030] Bluetooth: hci2: command tx timeout [ 769.060207][T26041] lo speed is unknown, defaulting to 1000 [ 769.484885][T26030] Bluetooth: hci3: command tx timeout [ 769.730693][T26030] Bluetooth: hci9: command tx timeout [ 770.607449][T26030] Bluetooth: hci2: command tx timeout [ 771.565018][T26030] Bluetooth: hci3: command tx timeout [ 771.820379][T26030] Bluetooth: hci9: command tx timeout [ 772.803624][T26030] Bluetooth: hci2: command tx timeout [ 773.636724][T26028] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 773.706686][T26028] Bluetooth: hci3: command tx timeout [ 773.886058][ T5867] Bluetooth: hci9: command tx timeout [ 773.898895][T26028] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 773.922517][T26028] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 773.936520][T26028] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 773.956083][T26028] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 774.875934][T26028] Bluetooth: hci2: command tx timeout [ 775.805356][T26028] Bluetooth: hci3: command tx timeout [ 775.967812][T26028] Bluetooth: hci9: command tx timeout [ 776.128273][T26028] Bluetooth: hci10: command tx timeout [ 778.212033][T26028] Bluetooth: hci10: command tx timeout [ 780.285012][T26030] Bluetooth: hci10: command tx timeout [ 782.373253][T26030] Bluetooth: hci10: command tx timeout [ 816.436256][T26028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.512068][T26028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.537063][T26028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.606824][T26028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.686808][T26028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.144530][T26030] Bluetooth: hci5: command tx timeout [ 821.446627][T26030] Bluetooth: hci5: command tx timeout [ 823.225204][T26028] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 823.291128][T26028] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 823.304442][T26028] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 823.366762][T26028] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 823.409411][T26028] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 823.503467][T26030] Bluetooth: hci5: command tx timeout [ 826.126727][T26028] Bluetooth: hci5: command tx timeout [ 826.142608][T26028] Bluetooth: hci11: command tx timeout [ 829.122153][T26030] Bluetooth: hci11: command tx timeout [ 830.180002][ T5867] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 830.187539][ T5867] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 830.200916][ T5867] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 830.208693][ T5867] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 830.236307][ T5867] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 830.437133][ T5867] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 830.483734][ T5867] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 830.530387][ T5867] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 830.538431][ T5867] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 830.552005][ T5867] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 831.171153][T26030] Bluetooth: hci11: command tx timeout [ 831.616616][T26030] Bluetooth: hci4: command 0x0406 tx timeout [ 832.104622][ T5867] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 832.118073][ T5867] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 832.131653][ T5867] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 832.139479][ T5867] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 832.153108][ T5867] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 832.374210][T26030] Bluetooth: hci12: command tx timeout [ 832.609991][T26030] Bluetooth: hci13: command tx timeout [ 833.247793][T26030] Bluetooth: hci11: command tx timeout [ 834.451206][T26030] Bluetooth: hci12: command tx timeout [ 834.896466][T26070] Bluetooth: hci13: command tx timeout [ 836.551615][T26070] Bluetooth: hci12: command tx timeout [ 836.956941][T26070] Bluetooth: hci13: command tx timeout [ 836.981841][T26070] Bluetooth: hci6: command 0x0406 tx timeout [ 836.987905][T26070] Bluetooth: hci7: command 0x0406 tx timeout [ 836.999973][T26070] Bluetooth: hci8: command 0x0406 tx timeout [ 838.610503][T26071] Bluetooth: hci12: command tx timeout [ 839.111403][T26071] Bluetooth: hci13: command tx timeout [ 843.568494][ T5867] Bluetooth: hci14: command tx timeout [ 846.112227][ T5867] Bluetooth: hci14: command tx timeout [ 848.205328][ T5867] Bluetooth: hci14: command tx timeout [ 850.288180][ T5867] Bluetooth: hci14: command tx timeout [ 872.669122][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 891.195611][T26030] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 891.208981][T26030] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 891.221895][T26030] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 891.235579][T26030] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 891.248809][T26030] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 892.423708][T26028] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 892.628120][T26028] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 892.642962][T26028] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 892.656589][T26028] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 892.675482][T26028] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 893.005200][T26028] Bluetooth: hci2: command 0x0406 tx timeout [ 893.016925][T26028] Bluetooth: hci3: command 0x0406 tx timeout [ 893.028327][T26030] Bluetooth: hci9: command 0x0406 tx timeout [ 893.156101][T26028] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 893.348770][T26028] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 893.361787][T26028] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 893.425888][T26028] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 893.445680][T26028] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 893.492698][T26030] Bluetooth: hci15: command tx timeout [ 893.515976][T26030] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 893.528915][T26030] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 893.543858][T26030] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 893.584893][T26071] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 893.598583][T26071] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 894.225820][T26072] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 894.238877][T26072] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 894.254359][T26072] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 894.274232][T26072] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 894.287610][T26072] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 894.928722][T26072] Bluetooth: hci16: command tx timeout [ 895.568440][T26072] Bluetooth: hci15: command tx timeout [ 897.004467][T26091] Bluetooth: hci16: command tx timeout [ 897.649778][T26091] Bluetooth: hci15: command tx timeout [ 898.056836][T26091] Bluetooth: hci10: command 0x0406 tx timeout [ 899.084918][T26091] Bluetooth: hci16: command tx timeout [ 899.728031][T26091] Bluetooth: hci15: command tx timeout [ 900.706941][T26071] Bluetooth: hci19: command tx timeout [ 901.168377][T26071] Bluetooth: hci16: command tx timeout [ 902.765687][T26071] Bluetooth: hci19: command tx timeout [ 903.156995][T26030] Bluetooth: hci17: command tx timeout [ 904.852034][T26072] Bluetooth: hci19: command tx timeout [ 905.168247][T26072] Bluetooth: hci18: command tx timeout [ 905.245881][T26072] Bluetooth: hci17: command tx timeout [ 906.926987][T26072] Bluetooth: hci19: command tx timeout [ 907.245788][T26072] Bluetooth: hci18: command tx timeout [ 907.321644][T26072] Bluetooth: hci17: command tx timeout [ 909.325651][T26072] Bluetooth: hci18: command tx timeout [ 909.408320][T26072] Bluetooth: hci17: command tx timeout [ 911.639826][T26072] Bluetooth: hci18: command tx timeout [ 927.966872][ T31] INFO: task syz.3.5287:25982 blocked for more than 143 seconds. [ 928.009171][ T31] Not tainted syzkaller #0 [ 928.019635][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 928.028443][ T31] task:syz.3.5287 state:D stack:26008 pid:25982 tgid:25980 ppid:17587 task_flags:0x400140 flags:0x00004006 [ 928.433191][ T31] Call Trace: [ 928.436543][ T31] [ 928.439500][ T31] __schedule+0x1798/0x4cc0 [ 928.706879][ T31] ? __pfx___schedule+0x10/0x10 [ 928.756550][ T31] ? schedule+0x91/0x360 [ 928.766157][ T31] ? rcu_is_watching+0x15/0xb0 [ 928.861395][ T31] ? lock_release+0x4b/0x3e0 [ 928.866074][ T31] schedule+0x165/0x360 [ 928.900190][ T31] schedule_preempt_disabled+0x13/0x30 [ 928.905740][ T31] rwsem_down_write_slowpath+0x872/0xfe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 929.070236][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 929.076659][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 929.190213][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 929.196465][ T31] ? lock_acquire+0x5f/0x360 [ 929.279925][ T31] ? rcu_is_watching+0x15/0xb0 [ 929.284777][ T31] down_write+0x1ab/0x1f0 [ 929.289146][ T31] ? __pfx_down_write+0x10/0x10 [ 929.453731][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 929.459009][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 929.556564][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 929.696074][ T31] rdma_dev_exit_net+0x8c/0x340 [ 929.706850][ T31] ? __pfx___might_resched+0x10/0x10 [ 929.755470][ T31] ? lock_release+0x4b/0x3e0 [ 929.765818][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 929.800254][ T31] ? net_generic+0x1e/0x240 [ 929.804831][ T31] ? mutex_is_locked+0x17/0x50 [ 929.946050][ T31] ? rtnl_is_locked+0x15/0x20 [ 929.961350][ T31] ops_undo_list+0x497/0x990 [ 929.966009][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 930.212838][ T31] ? ops_init+0x469/0x5c0 [ 930.217262][ T31] setup_net+0x2d3/0x320 [ 930.226989][ T31] ? __pfx_setup_net+0x10/0x10 [ 930.306306][ T31] ? copy_net_ns+0x304/0x4d0 [ 930.321584][ T31] ? down_read_killable+0x1d1/0x350 [ 930.326849][ T31] copy_net_ns+0x31b/0x4d0 [ 930.426251][ T31] create_new_namespaces+0x3f3/0x720 [ 930.442081][ T31] ? security_capable+0x7e/0x2e0 [ 930.447110][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 930.516017][ T31] ksys_unshare+0x4c8/0x8c0 [ 930.530961][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 930.536062][ T31] ? rcu_is_watching+0x15/0xb0 [ 930.657317][ T31] __x64_sys_unshare+0x38/0x50 [ 930.671817][ T31] do_syscall_64+0xfa/0x3b0 [ 930.676384][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.849416][ T31] ? clear_bhb_loop+0x60/0xb0 [ 930.865050][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.220310][ T31] RIP: 0033:0x7f285a98ebe9 [ 931.224816][ T31] RSP: 002b:00007f285b88a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 931.540293][ T31] RAX: ffffffffffffffda RBX: 00007f285abb5fa0 RCX: 00007f285a98ebe9 [ 931.548419][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 931.901008][ T31] RBP: 00007f285aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 931.909144][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.474408][ T31] R13: 00007f285abb6038 R14: 00007f285abb5fa0 R15: 00007ffd33b2d5f8 [ 932.495419][ T31] [ 932.498532][ T31] INFO: task syz-executor:26026 blocked for more than 147 seconds. [ 932.540713][ T31] Not tainted syzkaller #0 [ 932.545717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 932.559840][ T31] task:syz-executor state:D stack:24040 pid:26026 tgid:26026 ppid:1 task_flags:0x400140 flags:0x00004006 [ 932.650835][ T31] Call Trace: [ 932.654182][ T31] [ 932.657146][ T31] __schedule+0x1798/0x4cc0 [ 932.703211][ T31] ? rcu_is_watching+0x15/0xb0 [ 932.708074][ T31] ? __pfx___schedule+0x10/0x10 [ 932.971680][ T31] ? schedule+0x91/0x360 [ 932.976009][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.120925][ T31] ? lock_release+0x4b/0x3e0 [ 933.125616][ T31] schedule+0x165/0x360 [ 933.221307][ T31] schedule_preempt_disabled+0x13/0x30 [ 933.226854][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 933.276044][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 933.403891][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 933.516396][ T31] ? lock_acquire+0x5f/0x360 [ 933.556746][ T31] ? xa_find_after+0xae/0x430 [ 933.685223][ T31] down_read+0x98/0x2e0 [ 933.689459][ T31] rdma_dev_init_net+0x1d2/0x270 [ 933.711978][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 933.717520][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.796016][ T31] ? trace_kmalloc+0x1f/0xd0 [ 933.811218][ T31] ? ops_init+0x7b/0x5c0 [ 933.815527][ T31] ops_init+0x35c/0x5c0 [ 933.856520][ T31] setup_net+0x10c/0x320 [ 933.866116][ T31] ? __pfx_setup_net+0x10/0x10 [ 933.899999][ T31] ? copy_net_ns+0x304/0x4d0 [ 933.904723][ T31] ? down_read_killable+0x1d1/0x350 [ 934.023164][ T31] copy_net_ns+0x31b/0x4d0 [ 934.027689][ T31] create_new_namespaces+0x3f3/0x720 [ 934.204740][ T31] ? security_capable+0x7e/0x2e0 [ 934.225591][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 934.256327][ T31] ksys_unshare+0x4c8/0x8c0 [ 934.266242][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 934.281092][ T31] __x64_sys_unshare+0x38/0x50 [ 934.285964][ T31] do_syscall_64+0xfa/0x3b0 [ 934.323776][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.355638][ T31] ? clear_bhb_loop+0x60/0xb0 [ 934.512278][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.518252][ T31] RIP: 0033:0x7fae135903e7 [ 934.566047][ T31] RSP: 002b:00007ffc15324668 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 934.593397][ T31] RAX: ffffffffffffffda RBX: 00007fae137b5f40 RCX: 00007fae135903e7 [ 934.993557][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 935.015413][ T31] RBP: 00007fae137b67b8 R08: 0000000000000000 R09: 0000000000000000 [ 935.029405][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 935.055610][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 935.082684][ T31] [ 935.085841][ T31] INFO: lockdep is turned off. [ 935.140226][ T31] NMI backtrace for cpu 1 [ 935.140254][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 935.140281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.140295][ T31] Call Trace: [ 935.140304][ T31] [ 935.140314][ T31] dump_stack_lvl+0x189/0x250 [ 935.140347][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.140374][ T31] ? __pfx__printk+0x10/0x10 [ 935.140411][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 935.140441][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 935.140469][ T31] ? __pfx__printk+0x10/0x10 [ 935.140501][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 935.140544][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 935.140574][ T31] watchdog+0xf93/0xfe0 [ 935.140608][ T31] ? watchdog+0x1de/0xfe0 [ 935.140640][ T31] kthread+0x70e/0x8a0 [ 935.140669][ T31] ? __pfx_watchdog+0x10/0x10 [ 935.140698][ T31] ? __pfx_kthread+0x10/0x10 [ 935.140725][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 935.140755][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 935.140785][ T31] ? __pfx_kthread+0x10/0x10 [ 935.140812][ T31] ret_from_fork+0x3f9/0x770 [ 935.140836][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 935.140861][ T31] ? __switch_to_asm+0x39/0x70 [ 935.140889][ T31] ? __switch_to_asm+0x33/0x70 [ 935.140916][ T31] ? __pfx_kthread+0x10/0x10 [ 935.140944][ T31] ret_from_fork_asm+0x1a/0x30 [ 935.140981][ T31] [ 935.140990][ T31] Sending NMI from CPU 1 to CPUs 0: [ 935.405936][ C0] NMI backtrace for cpu 0 [ 935.405957][ C0] CPU: 0 UID: 0 PID: 18270 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 935.405986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.405999][ C0] Workqueue: bat_events batadv_tt_purge [ 935.406030][ C0] RIP: 0010:unwind_next_frame+0x527/0x2390 [ 935.406055][ C0] Code: 1e c1 eb 0b 80 e3 01 48 8b 44 24 28 0f b6 04 28 84 c0 4c 8b 7c 24 70 0f 85 6d 18 00 00 48 8b 44 24 10 88 18 0f b7 1e 83 e3 0f <83> fb 05 0f 8f 85 00 00 00 83 fb 03 0f 8f 01 01 00 00 83 fb 02 0f [ 935.406071][ C0] RSP: 0018:ffffc90000006bd8 EFLAGS: 00000202 [ 935.406087][ C0] RAX: ffffc90000006cdd RBX: 0000000000000004 RCX: ffffffff8fb7df30 [ 935.406100][ C0] RDX: ffffffff903416ac RSI: ffffffff903416b0 RDI: ffffffff8be33620 [ 935.406114][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 935.406126][ C0] R10: ffffc90000006cf8 R11: ffffffff81ac3810 R12: ffffffff903416b1 [ 935.406140][ C0] R13: ffffc90000006cf8 R14: ffffc90000006ca8 R15: ffffc90000006ce0 [ 935.406155][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 935.406170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.406183][ C0] CR2: 00007f2c220e4de0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 935.406199][ C0] Call Trace: [ 935.406206][ C0] [ 935.406219][ C0] ? unwind_next_frame+0xa5/0x2390 [ 935.406241][ C0] ? handle_softirqs+0x283/0x870 [ 935.406262][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 935.406285][ C0] arch_stack_walk+0x11c/0x150 [ 935.406310][ C0] ? handle_softirqs+0x283/0x870 [ 935.406329][ C0] stack_trace_save+0x9c/0xe0 [ 935.406350][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 935.406372][ C0] ? stack_trace_save+0x9c/0xe0 [ 935.406392][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 935.406414][ C0] ? stack_depot_save_flags+0x40/0x860 [ 935.406439][ C0] kasan_save_track+0x3e/0x80 [ 935.406461][ C0] ? kasan_save_track+0x3e/0x80 [ 935.406483][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 935.406505][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 935.406530][ C0] ? kmalloc_reserve+0xbd/0x290 [ 935.406546][ C0] ? __alloc_skb+0x142/0x2d0 [ 935.406560][ C0] ? synproxy_send_client_synack_ipv6+0x169/0xca0 [ 935.406579][ C0] ? nft_synproxy_eval_v6+0x36e/0x560 [ 935.406600][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 935.406620][ C0] ? nft_do_chain+0x409/0x1920 [ 935.406638][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 935.406657][ C0] ? nf_hook_slow+0xc2/0x220 [ 935.406672][ C0] ? NF_HOOK+0x206/0x3a0 [ 935.406696][ C0] ? ip6_input+0x16a/0x270 [ 935.406720][ C0] ? NF_HOOK+0x30c/0x3a0 [ 935.406743][ C0] ? __netif_receive_skb+0xd3/0x380 [ 935.406767][ C0] ? process_backlog+0x60e/0x14f0 [ 935.406792][ C0] ? __napi_poll+0xc7/0x360 [ 935.406814][ C0] ? net_rx_action+0x707/0xe30 [ 935.406839][ C0] ? handle_softirqs+0x283/0x870 [ 935.406875][ C0] __kasan_slab_alloc+0x6c/0x80 [ 935.406899][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 935.406925][ C0] ? kmalloc_reserve+0xbd/0x290 [ 935.406943][ C0] kmalloc_reserve+0xbd/0x290 [ 935.406962][ C0] __alloc_skb+0x142/0x2d0 [ 935.406986][ C0] synproxy_send_client_synack_ipv6+0x169/0xca0 [ 935.407010][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.407026][ C0] ? synproxy_pernet+0x45/0x270 [ 935.407047][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 935.407066][ C0] ? __asan_memset+0x22/0x50 [ 935.407086][ C0] ? synproxy_pernet+0x45/0x270 [ 935.407110][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 935.407134][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 935.407157][ C0] ? nf_ip_checksum+0x13c/0x510 [ 935.407181][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 935.407202][ C0] ? ktime_get+0x3e/0x1f0 [ 935.407224][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 935.407246][ C0] ? nft_do_chain+0x169f/0x1920 [ 935.407272][ C0] nft_do_chain+0x409/0x1920 [ 935.407292][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 935.407318][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 935.407336][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 935.407366][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 935.407391][ C0] ? do_xdp_generic+0x11a/0x11a0 [ 935.407414][ C0] ? unwind_next_frame+0xa5/0x2390 [ 935.407432][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.407450][ C0] ? unwind_next_frame+0xa5/0x2390 [ 935.407472][ C0] nft_do_chain_inet+0x25d/0x340 [ 935.407493][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 935.407512][ C0] ? nf_conntrack_in+0x1a1/0x15c0 [ 935.407537][ C0] ? NF_HOOK+0x9a/0x3a0 [ 935.407560][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.407578][ C0] ? lock_acquire+0x5f/0x360 [ 935.407604][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 935.407626][ C0] nf_hook_slow+0xc2/0x220 [ 935.407644][ C0] NF_HOOK+0x206/0x3a0 [ 935.407670][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 935.407696][ C0] ? NF_HOOK+0x9a/0x3a0 [ 935.407721][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 935.407745][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.407763][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 935.407792][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.407811][ C0] ip6_input+0x16a/0x270 [ 935.407835][ C0] ? ip6_input+0x23/0x270 [ 935.407861][ C0] NF_HOOK+0x30c/0x3a0 [ 935.407885][ C0] ? skb_orphan+0xaf/0xd0 [ 935.407911][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.407936][ C0] ? NF_HOOK+0x9a/0x3a0 [ 935.407960][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 935.407992][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.408022][ C0] __netif_receive_skb+0xd3/0x380 [ 935.408048][ C0] ? process_backlog+0x2d5/0x14f0 [ 935.408075][ C0] process_backlog+0x60e/0x14f0 [ 935.408110][ C0] ? __pfx_process_backlog+0x10/0x10 [ 935.408137][ C0] ? get_jiffies_update+0x44/0x140 [ 935.408159][ C0] __napi_poll+0xc7/0x360 [ 935.408183][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.408201][ C0] net_rx_action+0x707/0xe30 [ 935.408229][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.408254][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 935.408299][ C0] handle_softirqs+0x283/0x870 [ 935.408318][ C0] ? do_softirq+0xec/0x180 [ 935.408338][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 935.408358][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 935.408384][ C0] do_softirq+0xec/0x180 [ 935.408400][ C0] [ 935.408407][ C0] [ 935.408414][ C0] ? __pfx_do_softirq+0x10/0x10 [ 935.408430][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 935.408452][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.408470][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 935.408488][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 935.408508][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 935.408531][ C0] ? batadv_tt_local_purge+0x2a7/0x340 [ 935.408557][ C0] batadv_tt_local_purge+0x2a7/0x340 [ 935.408588][ C0] batadv_tt_purge+0x35/0x9e0 [ 935.408614][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.408631][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 935.408648][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 935.408666][ C0] process_scheduled_works+0xae1/0x17b0 [ 935.408698][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 935.408724][ C0] worker_thread+0x8a0/0xda0 [ 935.408755][ C0] kthread+0x70e/0x8a0 [ 935.408779][ C0] ? __pfx_worker_thread+0x10/0x10 [ 935.408797][ C0] ? __pfx_kthread+0x10/0x10 [ 935.408819][ C0] ? rcu_is_watching+0x15/0xb0 [ 935.408837][ C0] ? __pfx_kthread+0x10/0x10 [ 935.408859][ C0] ret_from_fork+0x3f9/0x770 [ 935.408879][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 935.408900][ C0] ? __switch_to_asm+0x39/0x70 [ 935.408923][ C0] ? __switch_to_asm+0x33/0x70 [ 935.408946][ C0] ? __pfx_kthread+0x10/0x10 [ 935.408973][ C0] ret_from_fork_asm+0x1a/0x30 [ 935.409005][ C0] [ 937.738628][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 937.745550][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 937.754728][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.764814][ T31] Call Trace: [ 937.768118][ T31] [ 937.771072][ T31] dump_stack_lvl+0x99/0x250 [ 937.775693][ T31] ? __asan_memcpy+0x40/0x70 [ 937.780319][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.785547][ T31] ? __pfx__printk+0x10/0x10 [ 937.790180][ T31] vpanic+0x281/0x750 [ 937.794378][ T31] ? __pfx_vpanic+0x10/0x10 [ 937.798921][ T31] ? preempt_schedule+0xae/0xc0 [ 937.803825][ T31] ? preempt_schedule_common+0x83/0xd0 [ 937.809424][ T31] panic+0xb9/0xc0 [ 937.813180][ T31] ? __pfx_panic+0x10/0x10 [ 937.817631][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 937.823054][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 937.829247][ T31] watchdog+0xfd2/0xfe0 [ 937.833452][ T31] ? watchdog+0x1de/0xfe0 [ 937.837821][ T31] kthread+0x70e/0x8a0 [ 937.841926][ T31] ? __pfx_watchdog+0x10/0x10 [ 937.846637][ T31] ? __pfx_kthread+0x10/0x10 [ 937.851261][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 937.856492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.861732][ T31] ? __pfx_kthread+0x10/0x10 [ 937.866367][ T31] ret_from_fork+0x3f9/0x770 [ 937.870993][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 937.876140][ T31] ? __switch_to_asm+0x39/0x70 [ 937.880938][ T31] ? __switch_to_asm+0x33/0x70 [ 937.885737][ T31] ? __pfx_kthread+0x10/0x10 [ 937.890364][ T31] ret_from_fork_asm+0x1a/0x30 [ 937.895171][ T31] [ 937.898488][ T31] Kernel Offset: disabled [ 937.902821][ T31] Rebooting in 86400 seconds..