last executing test programs: 3.397531053s ago: executing program 4 (id=940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x14, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x80803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x6, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000640)={{r9}, "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"}) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r7], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_int(r6, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7fff}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) socket$nl_netfilter(0x10, 0x3, 0xc) 2.836058043s ago: executing program 1 (id=946): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6369, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xd, 0xa, {{0x26, 0x4, 0x3, 0x6, 0x98, 0x65, 0x0, 0xe5, 0x29, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x1f, 0x4e, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101, @empty]}, @end, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x2b, 0x47, [@private=0xa010102, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @rand_addr=0x64010102, @multicast2, @broadcast, @empty, @local]}, @timestamp_prespec={0x44, 0x34, 0xe3, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x800000}, {@empty, 0x7}, {@loopback}, {@loopback, 0x8}, {@multicast2, 0x4}, {@broadcast, 0x3c}]}]}}}}}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x20}}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r6, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x10, 0x5}]}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0xc2, 0x2e]}}, 0x0, 0x3c, 0x0, 0x1, 0x80000001}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) 2.57402218s ago: executing program 1 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700000dcdf2503000000050002001c"], 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x18, 0xa, 0x40000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079001a0000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r8, r8, 0x2f}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000100)={r7, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2.120931812s ago: executing program 0 (id=952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000ffffffff8500000028000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ff80ffb702000008000000b703000002000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000003010101000000110e761a0618344d6c149900000000000200001608001503400000240028001a40000234c00800084000000006"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)='\x00'/14, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/8, 0x8}, {&(0x7f0000000540)=""/20, 0x14}], 0x6, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000001c40)=[{&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/78, 0x4e}, {&(0x7f0000001880)=""/60, 0x3c}, {&(0x7f00000018c0)=""/95, 0x5f}, {&(0x7f0000001940)=""/190, 0xbe}, {&(0x7f0000001a00)=""/209, 0xd1}, {&(0x7f0000001b00)=""/179, 0xb3}, {&(0x7f0000001bc0)=""/115, 0x73}], 0xa, &(0x7f0000001d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001d40)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001dc0)=""/123, 0x7b}], 0x1, &(0x7f0000001e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000002080)=[{&(0x7f0000001fc0)=""/184, 0xb8}], 0x1, &(0x7f00000020c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002100), 0x6e, &(0x7f0000002380)=[{&(0x7f0000002180)=""/128, 0x80}, {&(0x7f0000002200)=""/120, 0x78}, {&(0x7f0000002280)=""/223, 0xdf}], 0x3, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x0, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 1.827920565s ago: executing program 4 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24018014) socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x41, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r1, 0x605, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) 1.700418194s ago: executing program 1 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) 1.699935478s ago: executing program 0 (id=955): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in=@loopback, 0x4e21, 0x0, 0x4e20, 0xfffb, 0x2}, {0xfffffffffffffffd, 0x1, 0x4, 0x0, 0x4, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000900)={{r2, &(0x7f0000000380)='mptcp_pm\x00', 0x82400, &(0x7f00000003c0)={@align=0x1, {0x9, 0x2, 0x9, 0xe}}, 0x6, &(0x7f0000000400), &(0x7f0000000440)=0x5}, 0x4, &(0x7f0000000880)=[{0x3, 0x7, &(0x7f0000000480)='\xff\xff', &(0x7f0000000580)="ad0f87d1a932977e1ed1f77b06f367d162d0df40b38ff12fea774495ea39a3c9c0f1c09b22a26fed730e140dd96890f1b8db5f13abcfa286fd9a133e22a85ce9b6b6f8aac7f41a2976bb677a3594a64335c5f3bdb7bec51d557062e22f2360f5d68f031a62f351e3bbed5bf7e4f755f69213cbf1ebe8d18f1e89278d2e713abea156e98bbcc628057e11cb1da2b79940a145f1918edf9ea7e63f6249530f27", 0x9f, 0x8}, {0x0, 0xba01, &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)="ca5ba523f97ebbae8998ddf62f06422e3a0827010438bcafc05a9e666cd53511f84a034887f8a163eb765f5900edde6ac7c4b826206892", 0x37, 0x28}, {0x1, 0x2, &(0x7f00000006c0)='}!!e*/:\'[%!\x00', &(0x7f0000000700)="31168bd5c285d091557fd86c8a411e3543e7efd3db2284b1b12cd31ec4089489f716e7efd1a72e563ee0ddde6f3738b27714abb87330e3ff84f6bec1d26c0cd7f6090970ceb056b7c042aac471e158f831e32795d48b91d147e0aad20a3aa4d4c8d9b04c4f0ef3205be6f551a1a99cbdefb61965ac06886c4043d0eaa5ebcc3ce45dd1769caf20b98a2e35149e8f4b7672a201ab56c3e53cb18f87c7b406b2b191181f9c76ccee22d4a9fea5f4dd735d740e1232c87fa340efd6b2855dad7913cb5258dfe84f55e8323d76c7bc351017a4c2c29c5dc6603c07fcf5868aa894ce25", 0xe1}, {0x1, 0x8, &(0x7f0000000800)='\\\x00', &(0x7f0000000840)="c2e43fc0d7", 0x5, 0x3a}]}) openat$cgroup_subtree(r4, &(0x7f0000000980), 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x3, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) unshare(0x2040400) r8 = socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000b80)={0x0, 0x90, &(0x7f0000000ac0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, @in6={0xa, 0x4e20, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in6={0xa, 0x4e21, 0x9, @private0, 0x4}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x4}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000bc0)=0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000000)="2a000200010078", 0x7) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000900000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d4000000bf090000000000005509010000000000950000000000000018440000030000000000000000000000850000000100000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) recvmmsg(r3, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000150001000020007a000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0x69, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6, 0x6, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.613397228s ago: executing program 4 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000400000000004543bd3ac403cfc01914d0d7165caddbae3f78b011d73a9e47b239c522b67ab58ee95412efa2d171c7f53e69a9527710b26e5dfb72d25052fc0cb495d97823c6b4e26a225e2fa14809f4a6e22c80237cbb80689a75c21f35f7812e571fc4ac3792316189a05355d22da2bbe477afa87b0d570708b3fb939ee005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620542, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xfe, 0x0, 0xfffff024}, {0x30, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) pwritev(r2, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000000e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x790}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8101, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x5, 0xe, 0x5, 0x6}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000680)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x46}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {0x0}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x3) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000100)=0x730) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x11, 0x0, 0x6, &(0x7f0000000180), 0x40000000000002cd, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0xb}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0xba, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@map=r5, r8, 0x28, 0x2014, 0x0, @value=r11, @void, @void, @void, r10}, 0x20) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x2000}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1.444175047s ago: executing program 1 (id=958): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x8001, @vifc_lcl_addr=@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xfc}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x32, "636b8e62d4672b5b8c751278237b9ddf0708c925d5812896e7b9e21ba88ace7ebae7e3d37427e3c47210184a3c56f08e449a"}, &(0x7f0000000240)=0x3a) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r5, 0x1c, 0x20}, &(0x7f0000000300)=0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 1.365936545s ago: executing program 2 (id=960): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) 1.247991266s ago: executing program 3 (id=961): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40050) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40050) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.111648656s ago: executing program 3 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x551241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) sendto$rxrpc(r0, &(0x7f0000000240)="1534a52844051002571a21453688e492f7b6e3946627eca5d30968633ed8bb3621ac4be7077fc1b74a7ace11084d1e32d2f3aaf0a740476d0b58478da41e2cdabce8e9f3b7677620d1e2ba9932ec24a668d03dfe5ff6a1f9c3ff62a04347091d01a1d8fc955e", 0x66, 0x804, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @loopback, 0xe}}, 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001300)="b8d49fc0205107", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8000007}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd000011"], 0xfce) 855.433508ms ago: executing program 3 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)={@fallback=r1, r1, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@fallback=r1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r2, r2, 0x2f, 0x0, 0x4, @void, @value, @void, @void, r3}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) 840.959892ms ago: executing program 2 (id=964): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0203ff030b0000002abd7000fbdadf250100090000000000030006003c00000002004e22ac1414bb00000000000000e601000100000004d40000070300000000030005000000000002004e21ac1e01010000000000000000"], 0x58}, 0x1, 0x7}, 0x0) 736.825261ms ago: executing program 0 (id=965): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="11000000040000000400000066"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000010"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="37771bfd"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x51, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x41) 736.464358ms ago: executing program 3 (id=966): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x1, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/103, &(0x7f0000000180)=0x67) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000000), 0xff7b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) recvfrom$phonet(r0, 0x0, 0x0, 0x40000142, &(0x7f0000000700)={0x23, 0x9, 0xce, 0xe5}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a0000000100009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 698.211693ms ago: executing program 2 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x0, 0x1, 0x200, 0x8, 0x2, 0x4, 0x6, 0x80, 0x7, 0x4, 0x7, 0xfffb, 0x4, 0x5, 0x0, [0x11, 0xff]}}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c854}, 0x40000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006118000000000000850000007d00000018110000", @ANYRES32=r6, @ANYBLOB="85beab6d6d2fda2345acc7101c2a940000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffdc}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r5, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000400)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000ff3f000818110000", @ANYRES32=r9, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r12, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 637.507284ms ago: executing program 4 (id=968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x6, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x3}, {0x3}, {}, {0x74, 0x0, 0x0, 0x20}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 580.815705ms ago: executing program 0 (id=969): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x33, 0x0, &(0x7f00000003c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x400) syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a35f2ec4b0600fe5000000000000000000000000000bbfc000000000000000000000000000000000202d000000000fe8000000000000000000000000000aa3b000510640000004e244e2247893cef7e3b30ea79dd963774ba6c796c85619128e3cac654dd493a79f7fa16a3f0f7f92ef542dc01b40c731c4941935e973f06c348b430886df46323253360551dfe8ff951bde675653b3e65ecd40ad80a81f4f11b9c219d807675185f61916c15a75398d9c02faa25e7fe3a5f779c0ef2543bdd176cd7bf281fccc7bf3ff695ae0f5994f2ca", @ANYRES32=r6, @ANYBLOB="b0c200009078400000fe14f9895b0800000010b9bb9a78810000000000000000"], 0x0) syz_emit_ethernet(0xf5, &(0x7f0000000c80)={@random="dc09cd0f3ab6", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x6, 0xdf, 0x66, 0x0, 0x2, 0x6, 0x0, @loopback, @private=0xa010102, {[@timestamp={0x44, 0x4, 0x11, 0x0, 0xa}]}}, {{0x4e22, 0x4e24, r5, r6, 0x0, 0x0, 0x6, 0x80, 0x549b, 0x0, 0xffc, {[@eol]}}, {"a83e3fde277cfc39c4dd9e0f7b6baf10ba90cc4e48f562dd289b450dd260ee327e49673b19faaf05ac65b472fca482bd1f970006e7cc29b98e1211f605d4ebca60a2e31da35ce1f847ce63d5fcddbd703febda6800065656572057dfc1449b5fd9e98ec12d8413f15123aeb3405b1c29a2d6eeb103d72a7263bfb2c332fdac4ac18a23c572379cc2440e2580efbc0f3ec6b6fd8907f8b599b1162410b4c4ebb3dfc33ce3f3acc520fb6d78f56b6397"}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0xc) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000001010102000000400000800002000000240002800c001c80040001003a20000014000180080001cd4bde2a0192000000000000000c80198008000359"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 541.973772ms ago: executing program 3 (id=970): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x11, @empty, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x877, 0x40}, 0x2c) r1 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={&(0x7f0000000480)="dd76ff38dd39fa4f08cd2bc3e861c03803e93b7b4fa2f05746f767a7d8e11eca89836d4e4f4cea0cf7b72dc237bba6453c7cd06d7f51256095ac1d567ffd1abed570a68801ca5dda3aaa1306248425b139e5b5ef7828b9896b3349809b7690de8caf571bc9e71c449a7fc14a154fab53f3c459", &(0x7f0000000500)=""/227, &(0x7f0000000600)="9302f9f98892133d5f5c6ea16a6657d441615ef35065fa2cc02ce5fd", &(0x7f0000000640)="0614d4ce0e96c96a03dc71414e0726e3248b9d09804218a8bab15309e8caa55cda798d859e7f8a7d5bf9757cfb0148fc68ab05b567486107", 0x13ea, 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x20004000) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000d00)="446bc5dabd9a8323faeda4c62eeb56701a227eb3d150ea20617433986bdf5801d1814e528700bd8938c5d0ce89a29e8b7833d22251adb94b1200a2720407f4088c5bbd5ac6fb061bff67a76bc05ea63b57b2d1740ac0ad99fdb48ed4d68d124f89449b0298517908b949226061a203ce467d56e83f49ddd50b9c330a85a3ffc0d40a7d505e46dafca295788f1a5790119064ced0db3b47e152e723729220cfa6526d94c6a61837bf0ee28e7858c51747975b8fc34d396d5424f8136b2948646fb9b3e033a1edc1a22d5fce81d327288ffc5468c16d9151ef9508ee1886abae1b4e60c604c56b685bf067f3d4e0e15a655ebe1920106a9185"}], 0x13) bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)="821c8236738d1a8ccf39b6c1862f0a46dca9cde9eb64fd3e7f2413dd9ed805b40edc01dd5d230153a71bcd5341475d32559b3f8050f37747baea8968ab21f2290b0a6fd00a36f7318962d6ed973c04303aae306044caec5620ed02cbe45e13b254b6b2667cf0728df14f3a881dd9608ff69b3d1c125d6620f0087688e42cfdfdbbabaa85898fb76c23bf9dab35bea7b5f3871c71c4c572c88fd07f5b67023bfc99edd5689ef6a7bed2e8b2fdb49cec641bfa982fc012980fcc4a81c93e80536a6eecc8658afcb6dc3d2c997864acc574df9c0608316629a9a86b8a9c33c42bada8bcafe31147070afc8a415535709972784a4e09944d14", 0xf7}, {&(0x7f0000000880)="9cbab3ad43757d23eb1e1a9b84b5eccaf8ae6af6d1ccd5bb17d23e40b9dd7530faefc46f6b86967e99252fe3cba4166042de67214654035ac70e", 0x3a}, {&(0x7f00000008c0)="c38a63c2128fbe18cab2a6c09f15fc11cec6b705473e1bc87b2ad668490bb549fd550d8887277cf1f4a86367bacc77136df2967ee05894b62f7b3bd3f600fbb2bca240fa8d7ce1338f76d9cd1e38a55f60", 0x51}, {&(0x7f0000000940)="89c544896c9f25110159cbf0155f732597d7f5eb8cb35fbc5478d99a41d62699ea5f44737d4ba114b98d2994b13e15005bb765eff54ce6a0f5093aa01dad4cd4fe2438f5cf666f35c4cd36026c43858ea0eef70e5e92e4a91da24a89e072195f2679c14aa270ca0c802452755ccc47890995df18bd01d895b11813c31cc7f3db7101a2b4fe4273916f71a6e35dfd59b2266971947ff29c1b6c85", 0x9a}, {&(0x7f0000000a00)="bc3e2ee9454cb67f346755f6c3514be8097dace53bdc9eb609cc6f757b252038530bae642aaf693a0c621361ffa71fe09e01448419d2134b97ad0cdcd6254118360cce0eb732c3ce9d764c521ec9b6939205741cb95e48c40c7d18301a024f59d870943cd5d913882ab65a1d11b0", 0x6e}], 0x5}, 0x2000c854) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 516.070511ms ago: executing program 2 (id=971): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="0681010000000200000000000000", 0xe}], 0x1}, 0x4040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x7, 0x7, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x1, 0x5, 0x8}, {0x1, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x2}, {0x2, 0x5, 0x4, 0x8}, {0x5, 0x4, 0x9, 0x4}, {0x1, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x3, 0x5}], 0x10, 0x8}, 0x94) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000480)={{r1}, "b05f9e0d2dcf06697906fa6a27f06aadb6469cb51894cab1c75e3ccc81c27a79000e4124ee15c421275225276e0edbde2a0ad5043f132e8c5d4470a733f853584165392444c1dd8aafbf989513fd4163fc4fdce083cdcec758ed06b9383efe364113dd5c80e45ccd268a0f3b5e7c5370c0117308d5d8e783e9b18b8211d54b390dfadd8b6047eacdffe924aee53498ec0d6c93e82a4f8ca875e228412e8604496613ca2a2b28422c825e99f1e3b10c78a013c5c7285ebb6385d7b9c3a18cee6fcf565269a0b97bfef2445d4013f3b15b4fe5c4b575468fc7257d3b7b392920278db62cd22ba4a1b20a4ba8201afc4b4b2e9e0161116a67095179d7284869ff12a7e3e1abbe9001bc838037110edea77f6bc4f6c33bfc570f7c744841ed73348e2f9fa9c5ba9f0a82b9ce69c66101221496a748d0c81bd5cef1da5c91c383e043f895f2c7f0798c8783749172908d6f98642e23826bd0f6451dca2854ab6965e702cdc0609c08a0a9bf1531a62773b3a5b1584426243887624181bb314211af02bec14d94448a154c5fbf160c521bcf3497e34c2c292b22752ad3b0cfa4241b868b0c6b33402fcde794555ac6fa0a4fbdbe2856cee2410bddfa25608c36a4314d02ea13230182a112cba77172bd46872db313410d5602c74b6defce1dbd9a94fe0228da17b849c1440eb99f17170226442af212e4e2ed9d8b5701e44355f876fe623c22dad0723e8089f53dfd9c52883d5dfdac9a33f6929483d9ab7ccf43342aa33b9033b12ca77e204b880619f72966d242370bdf41127e0172245b820ba6ba1ee50a7ff4c6671d912d3704e4678ba5744ce9f389dcd6b63d2160fcea153220f7023b505272396f4c18344f4416161b2d9f83d8f567ba6808fce1b268a1ecb3b4f27c333ce859aeb566a92a3f1df0d90c94c68da873167390cf674a04a6741199d00790ed07b6d234c369c4cde58718d568ecee000ef726d59b0e9205f84090d19c85d7b33e0f31670a60bf098a14f15e76f2e9fce8068bc357298247097f9527919ea15441d0c735929eb3525587a26b9610046644f1372637fbce9e1c4c8c58f51d3e0c241920e9f0f2c7f46271161128044b398cd6c35843b8de8a8ac15893af674c53aef484d9e019bf6f809f841067f1067a41f4ccfc5bc6c12f391eb71cfe1462b080f31cc9a9923e57cd56d55920471bea5ccfb89668567f6de47a338855f8a8838b995a3674336fda91949ee4edc6764da982b5e4945922c379a546bad7643e78ffea733771c243b48bb6835bfcc3444e11b64b8811f76cae2061e86eff5bb70634fa9ae72241f7d7743ed83fbd537361e44cd39c5d17152e32cc89e596c888f7a0b8b63c06413506b89ef2e816c3a90f3aa150b2233ca3d0b88cd3b3ab0b37731134664bda637b9e173d177874bec8cd77b6fb9be56142d76edc13aed6c95034342c868d81fef5d8edd90ab5aec4ff7f17011446497d296b25af7400254b05ceda9ea16bc9b5762411b8756bd4bcbe4f1bfa6274a7fed75a047ea1acea7fa94f3c8502869b73ddc3567e49a92fe3f7504e0b4b1daeece836cdcbb9117bfa178d28dc58aed466f2d2f521d73135f02b9e161f1c33e2f002b20fbc37d9742078a3f427a2016c9a7319eddf7788f2e2437f8a7debe55bcd444e5a45d469657cb80bb62e4879c016dcd439c5d53458f3e493ddeb37bc471e2b0c0a9435db7a0ea5e59b5498ecd1ac5c2b454ef928696ebef0b109c0b21eb9aad7f36c52e46549ff9168e956b75b4e7cc1c19199677939b4aa8a84c535b22568211228d7e87f05accf8349ebbf04aa2f275f86b27c9ac4c95f2b5a02219b1403ee197eaba73b85773e8e48691fa70886b380170eeaf30e47eed46562f9944cfd7fa4a6e0070a7611ff20e230f4125a512de2a7ea37bdeee5ee4173ac39816a12fa10e3d63ec76def1b696ef43b1075e14ba8e3dce116c633a464ec359c66b2f07d944eb586988243da939af9fd4ca260825193cc9fca7b9ab997c123fec72ecaad37a4fc769d5592c472a7479578992412a42f9ef4b0816614da6fc5b1cf4083c04e6d4e2b2d00776f2c3721acefb7f9bda0a87822a2f05b4e6750382c45f370d5d08c09d08da7e7bdda25403275616d358d76c74ea8aa981048b47268afc8fc9c22a90098c23040e9a4256be777a9fcdc60eb67943bf366901b57e648d719d862f3e96c484523bb6a18e2960963d11bbc8c0b67c16ae495b2dfdefb8d5b4ad93e3f54cabaf62b8259233bb13c5d10eb14bdbc1f54c5d34389b61b7e16565432bf09f655c0010e23191ac7002e377642ffd31b998402c6ec071d7eb43eb939e107fa1ce4022d1c950e420657fe51ddd7023509ba894356d15fd5f60ea0fc24fd6401f340b71e73cad73f9a47bf72a5f2212b814e2b5994a5e0cfbdc5f58261d0f1dd5e411aefc80f8ef1331e9917c21279e1269e831b599f8d8f496a049cf1690979d881ed431a9350760a52a5c7b90c5db54814fbb2d126723bc60a9bffbaafc87b61df2dca60b54f3f902d327e8b9c3662f8de588ba7c41dd4dce1b306a3b6077195c7e1a3e0d801e5b443b7f533451eb0ed12d5b703136d74d995b4c20da80e28dff0cd0a6a76fd9b359656dcd70c9bd0d8bb44f3aad50ddde9706362c632fd3c94a49f5971a2c7d3a1da83c0867b9246bb72f085cb6e4e741ce99c423b655b7e7fc2d40a7a047b4f879d5c473fec621e0907d810750b6974a4ffeb4b4e5c7ca91510c4005456f14205eb21fb4d51df0beb2afea604610b4bebd3c92984a0020402bf159949b00f4ec4f9d56b63ac78d5ba4057e1236c737a26cf844c0840a6c796ac36055f3333278947b7a6fc74bb9d45784c68ded32b11990919d392664402b1bfb2504595981a825b833424cc54f71a5690af30758fbf0541fc72014ceba3b1230b580217f155f688d16a006057afe9b869d2fe2e40521ee189aa650915aababe9f7c9ec0ee92b40b0a1630433685f02d9877a37abeb20d9e451fd8742e45d0717e7533937a3249d1e80d5fa392e9a429df92bf02be1fb9eab29c99e86f7bb203b714413586310a254d6e5df7f167e5402db89f2ce35a4b15f9a6217e2bb6e8c3fd0393ce2fa425e15dfc36631938c869d69843de0c0dc01c42752e0d5ad561ac2c0cc91e7cd34b190b406c84731d9e87c1db8650ce8d0303b20e4d6ba795babc6d747631af79d1252061240a75af8120f08dd7be0929362a43dba36176aeddfd97c032b512c558597bbfc5b392c550dd1846f6256556df78dee50416aab338354659bebf66c2dd9f59bf847a2e1142343f64f88fa73abffa25c2d409d92f31d6fc83664ea44ba4c3a943b6c3be5ebfb67171a211fbb49d4f0bc5c5f8bf97641ef8f82df3ba4edf401cd1bc0fd6262328fc253951685614fcd88bc4661428b186ccbf6bc1e7736370dfe5e2b8995d8d87baba27aea95fc6bfe85b166c20d057b34b972e9dc819f0a1f1d0b2bc4f04722cb6a7d8a0ab18158843232f34a0aedd67c3473b0bb1ade844dcc8f1c05316475231f77a189299bce85c47a5c802f2df72913be001a0552b5f4af2fbaf89b09c92cde27fe0a55379bd716fbea1b48bc0462045e3c9000f145725912d836d62d9dba39b213e00fe992283ff5fc7b89484667662f70574294fb4e342927deb64f3901669c5323a8d9262eb61ff2b42c5be793a9e982bb7308277a121378fa61fa87d3fdb57915f3e55be973baafbc66f1d7107b6073b2b7e10218330911af0daeef5ce296dbdb2bf90dbb21e1da8b3874a2f81ff3d2aa65edfe567d8eb1b15fee11a59cbeeac130554ec1a45eff862541b2d03597a15405e6bd1d5199f4cf111fef02aee12ed4fd6b735c1ca45e1012075f0a2ea3b52d3f4eafd96a2c7c11e44d7bcfa8249fa2a6a989ae176b1613c051aff66732c00499cbf0a56ba3f972fe8330d2b3168c35beb6a24066c7127667273999560b0ae85ca35d6baa7d2d7da7cf596de6423efd7c12b57cd549e8859cf0f05e86cb99e114c18a462ef83d3e5561b4642fcb2c592782c02c330ad3a12a52161058d9a75ac0bb3b2c3106c75dac3e5ae06125da254ee5ac5534583ae3e841c3f3d71906a57b897d07e5def3cc0174d36b8fddc6c910af6ee0688463ccd290f344e8de8d480905ee99b37994bb9f5bc8994798fe465665904a83be1c44b46d4de9ebf1993f7b8c9fe30d109ad56210a8c9ea66b76caddad77979b125ee45630f7e858e2cc3c2e16d4077dd91b0825487216db3ba3a9e7f1c2885a08dbeacfcaa47c6543316d8eda7880c32e4abec98dd5b98e21d660105ca8656d266068879b7ea45ace31dc4b8d5cf5b929c02bd99f2a416e005cc79a5379fae9dc7386b7e4b8de1970d49dbf05081fbf14f29ea02140fc62844b38cd3574ec07b886c6c4c9ad8222fd531abdd877f5bee036eaaf37ef44846d3fc925c9242282b220019b0a06f3e9db5eb16946805780c8f110175fc0da5faf9169f0da1ad0de25a7d1457dc399af025096e1bfda30980531a0c0ba269d14bf226212f24a4b9a62db10786ef7282da54615e7defa26dfcb88e4f3c313b9f55179d14c766039daccd01d74931143a6e196f4dafe31a728b50238d34bfe205615948ccc0ac9f224258da35355ca715306e20288cc589b73751ed9cce9236f6b115736c27bf5be6fbb919fdaf6912e34a46134cbe232c104ba18716677c66db7471e0794814e263a9b2ae0a0ca41147dc1d351b298e91cc1abfab75d74de3b27139b3e3559e67fd12050f8b9a088b32963cee8f7d78c2f2b9ee86ffad1f4deebe6593e85e2dee466e547a85e49cd4ff533f20afefc84ccf5598c9df732e86b17d8b220ddc013d4f50821c01f1d472c93fdc0de81953c0a54b20afeed8cbfc04b7495c9c3e3820aded218d7c222bfb338896b2e15c5b65bb7103d9ff627740986cffa356fad3140aa8d090c013201854a60a932691df5be29178ce76aab4b0e1f1372a1ebc905b9ed65822b48079a8b092b9524ebb6a6008c6fdf825fdcea4400386c485c8d75947c38c064aeaa87e389fe080f00c0abc6c71c11b2a96795379aaa6e3fe24279cdd3639e6ea25d601e4f84834d1e6888ccff55a3502913e11c50206abb42742043259d96c98101f0437f58812919addaaaad1cdf1a858e5916d500c3de449f3df9558b066f0a78764ead1cc3a4cbe1d7980d27102047898a3c5051fb8d5d78f76da868e04482b01002dbeb757226e5e0d2e9e8a7c2e26019aab1df358e13f68144c2da79cfc79a0ee2be9f8f53a13bd840eb14bdc70fb1664320785291f83ae7380dd811d8aafd1b5ee5e481637bf004b2089b9e216cc10d6035dcc9990d84edd3e3d1e8d2652d44fa116fa95461c5f99ebf1f0643e66ea5ae4b2c8ea71735014062678058f1570517e9474d532657b3545f051db428c2647d3503d0558661fa8592983a8645baaa3c18319f493e13eaa283d59b72baa17eb733e4105058e75bacf28cf9f6a6f48434233223f2889b0f94b9437762b3a5715c55d78f43a40f6b49653ebbb91117bd8dba37358fc0766041b36dfd6de7d1e62d96cc2357251a0811333808b1eb899d07fd24a2ad254694b918a31f3db861eb3816772aabcc0d65b1f33ae061626a14430e7fc72d669f25ade2ab4973a1bc79fac817dd1535801f3f2633bd1c10dc015b771382518e7c06dc929976080b9268323798055f248fc5fabb2a5bbe3eb3eea15ef6ba4a2e4a8f4186edcfd55e25ee8f6fa6396c38e3d0"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 468.358912ms ago: executing program 1 (id=972): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private0, 0x0}, &(0x7f0000000040)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1c, 0xa81, 0xd1, 0x6, 0x804, 0x1, 0x44, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x36}, @ldst={0x2, 0x0, 0x6, 0x3, 0x1, 0xfffffffffffffff4, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x25ba8656, 0xdf, &(0x7f0000000240)=""/223, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r1, r1, 0x1, 0x1], &(0x7f0000000400)=[{0x2, 0x2, 0x3, 0x7}, {0x2, 0x3, 0x0, 0x8}, {0x3, 0x1, 0x4, 0x2}, {0x2, 0x1, 0x7, 0x2}, {0x3, 0x2, 0xd, 0xb}]}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfff}, @alu={0x4, 0x0, 0x0, 0x0, 0x8, 0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x3, 0x2, 0x0, 0x8, 0xffffffffffffff68}, @ldst={0x2, 0x2, 0x4, 0x9, 0x8, 0xfffffffffffffffc, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x92}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x8, 0x19, &(0x7f0000000680)=""/25, 0x41000, 0xa, '\x00', r0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x21357, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r1, r1, r1, r1, r1], &(0x7f0000000700)=[{0x3, 0x2, 0x9, 0x1}, {0x3, 0x1, 0x3, 0x3}, {0x0, 0x5, 0xf, 0x7}, {0x5, 0x5, 0x520b, 0x2}, {0x0, 0x5, 0x2, 0xc}, {0x3, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x5, 0x8}, {0x2, 0x5, 0xd, 0xc}, {0x4, 0x3, 0x0, 0x4}, {0x5, 0x5, 0x8d, 0x6}], 0x10, 0x81}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map=0x1, 0xb, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@fallback=r1, r2, 0x30, 0x201d, r3, @value=r1, @void, @void, @void, r5}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @enum64={0x4, 0x8, 0x0, 0x13, 0x1, 0x0, [{0x10, 0x7fffffff, 0xfffffffa}, {0x3, 0x54b3987f, 0xc4}, {0x6, 0xd, 0x4}, {0x3, 0xff, 0x2}, {0x9, 0xfffffffe, 0x5}, {0x3, 0x4, 0x100}, {0xc, 0x510, 0x5}, {0x6, 0x8, 0x2}]}, @union={0x1, 0x6, 0x0, 0x5, 0x0, 0xfff, [{0x0, 0x0, 0x842f}, {0x10, 0x1, 0x6}, {0x3, 0x0, 0x6}, {0xffffffff, 0x2, 0x3}, {0xa, 0x3, 0xe}, {0xf, 0x5, 0x5}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x0, 0x2e, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000c40)=""/68, 0xfa, 0x44, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x7, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xa4}, @alu={0x4, 0x1, 0x3, 0x2, 0xb, 0x40, 0x4}, @exit]}, &(0x7f0000000a40)='GPL\x00', 0x8, 0xa7, &(0x7f0000000a80)=""/167, 0x0, 0x0, '\x00', r0, 0x25, r6, 0x8, &(0x7f0000000d00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xb, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000e40)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000e80)=0x19a, 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={r4, 0x58, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x8c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000881}, 0x20004810) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001100)={0x0, 0x6}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001180)={0x3, 0x8, 0x9, 0x3, r10}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f00000011c0)=0xac0, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x16c, r11, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1ff, 0x73}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "413dc74e1118a274fd82bfa60dbe7f6fdb7b9f3c1f7e2fc6"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "52d56720a33de01a821c764febe24665226741f2a8d44ce4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2c37ada3259a69d332ba3c33d83362992dbd1cca79389d44"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bd34c3217a0929bfb351a3075dcf6faf5e8da06d30fcdc04"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5db18c138cf3cadf1ccf3f997c6b6c06459fbb55bc6eda0e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "44163aa597e18eb81d7a5f7fb3c171b88b0feaacf6bf937b"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xc0, r13, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4) r14 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r14, 0x8918, &(0x7f0000001680)={@loopback, 0x1d, r9}) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r15, 0x40087602, &(0x7f00000016c0)=0x8000000000000000) sendmsg$inet6(r14, &(0x7f0000001b80)={&(0x7f0000001700)={0xa, 0x4e22, 0xfae, @remote, 0x3}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001740)="ca06b389fcdc8895404513e940ce8a47db39cea1e515f8186b7281cd49d6099a3f8aa76d17a2901ecc69b417feff75d38f1b8bacbb88c7b6a9223bdadfd24b0aff10fdbf8e3a1749a8b0", 0x4a}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="9e7b644eb9773e6a2dba423b670066e03745131d01", 0x15}, {&(0x7f0000001840)="c505123d5b5be429caeb339d3e700a6be9675770c91d6cf8b92b5aa92bfb54724ba231852ab7769088ec12a5582d71bf8756e4f6de80cc1516d37ae4ec9710af943b6ea506729c667b497e95589933c0b69aa28af04492ed0782b32d02e3c745a8ae06bbff47d3a7efe97d82e83a2bee869ee64734b161c5a9e0905c2eba37aaf81a12aa8891344b197e387f4105ebfb2bbbff", 0x93}, {&(0x7f0000001900)="6d9eef81c40f412e977dbf2fb160b4fac099604f8a1bf16c5a36bec5bf286de2315013e1efc2bade6082a3961797f7e0947f5f31110b784e638201fc6a6a4a5671a2de3dd174cb2d0e9d1f445846850428e3cdee33a74917b38c15a87625ab5c6c72cfc9b0d9f35e86af510c0ec76f9a1f4c49c3433391a9e96765959eef4cecf857e12ac2d0ea217c510de191da31cfb650bfcc1670250bd0d207126f7c18ddbbc437badb11ab251619ad", 0xab}, {&(0x7f00000019c0)="4b2627bb98e1eca1a8b2105edaf875a8046f81d259d497d8765e4e6e22692ffcd66ff59389fc5c0c791760fac7ce4b1cc45fd3e3b53e0237423c35c5a8d012731dd99306933004e21ea81d0c221b31279662f8f2d6e4f7b4e3c2220a3249a6ff286e5d33e4417461a10169e56a9bc54f27111ca7011de1cd03c9b85484246ab76cb92c922cae9e", 0x87}], 0x6, &(0x7f0000001b00)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xc0, 0x6, 0x2, 0x4, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}], 0x60}, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000001bc0)=0x7) r16 = accept(r8, &(0x7f0000001c00)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000001c80)=0x80) connect$pptp(r16, &(0x7f0000001cc0)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) 437.909662ms ago: executing program 4 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05062dbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) 385.211171ms ago: executing program 3 (id=974): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) 313.235425ms ago: executing program 2 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa7, 0x0, 0x0, 0x0, 0x2, 0x1, 0xf}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c200000000000000103a01fe800000000000000000000000000000ff0200000000000000000000000000018b009078000f00090000000000401b00"], 0x0) 312.401722ms ago: executing program 0 (id=976): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c010000130001012abd70000000000064010102000000000000000000000000000000000000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="1e94846d55fe08535a9beeb835307755f8849e7606286b88062657ef519c35f6486d8089a36e58b7499a8904b457d9fe175e538ea3658409bd304f795b1a36f120b67efb14cb826858c2117f1ffc9ca0e5134fe0b688cbbf034783968056f69a08ed01684a6cbb5b653f70a9b8e5ac95d896d5f144f6c6ef9a054adf8bccf79b69c72d0f76afca47551167b8141f6e175abe8991ad3d739922be27e80bbf5549f8cf556eab31a4b8606028f822304c82cea1cc04951abc45e0f60a55026c132f6549fe0eb1e11a0b04e014c64c2b02a5aefa50d9596767ee5d28b3063f108a181e7a81", @ANYRES32=r1], 0xfdef) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)=',\\#\x00', 0x60100, &(0x7f00000000c0)={@_ha_fsid={[0x400, 0x2f]}, {0x6, 0x101, 0x9, 0x7f}}, 0xffffff45, &(0x7f0000000280), &(0x7f0000000300)=0x81}) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @hci={0x1f, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, @vsock={0x28, 0x0, 0xffffffff, @local}, 0x2, 0x0, 0x0, 0x0, 0x46, 0x0, 0x7dcf, 0xde48, 0x14}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x64) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r8, &(0x7f0000000580)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000020601010000001b00"], 0x14}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000480)=0x1) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000180)="55ff8ad072ddce19", 0x8}, {0x0}], 0x2) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 232.239815ms ago: executing program 1 (id=977): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 230.945813ms ago: executing program 4 (id=978): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffbfffff8000, 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x47, "93f66dd81f57563ea772f310ac553942e14158519073fac730fd07f826892c32bbd7fdfb8a98249aaf8124e1137c4a29739ad0f49015d576a5a22de060698909fb31d90c36862c"}, &(0x7f00000000c0)=0x4f) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000300)=0x84) 150.839155ms ago: executing program 2 (id=979): syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) r2 = socket$inet(0x2, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000003000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x400) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0211ed73d10000a8436900"/20, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) sendto$inet(r2, &(0x7f0000000580)="3bb6ca140e4248dd39a0cc9990a512eaf35487e6cb67b8153eed87c12aa852da44fa8daedd16157f4936a63c3af494dea7776b30c2fc79bd4e6fd4341a830326ba2806771ff5219ba3eb169e2f04", 0x4e, 0x8000800, &(0x7f0000000600)={0x2, 0x4e20, @multicast2}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc) 0s ago: executing program 0 (id=980): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x6) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20c, 0x42}}}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xad129aa96b0df2cb, 0x24}}, @cf={0x4, 0x6, {0x0, 0x6, 0x0, 0x8}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x31, 0x2a, [@preq={0x82, 0x2b, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x9, 0x2, @broadcast, 0x9, @value, 0x8, 0x9, 0x1, [{{}, @broadcast, 0x3}]}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x44044}, 0x4000) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000280)={r5, 0x8, 0x1, "30821b6510ac000b3d7a1e1123d6260cb1c431b25af1025ec359ee5c8cb3fd0685b15c2f7c8b88a3bf4597bd577ae5386e669dccb50fbe0b6a9805c99bfb9c7e9c5652b1c4a26aec993313bb50775da89b63452501d0ae67680ea7ed9a037a14ca3893cbf7eacb6ee974bc52fb223bac711c6196c1fcb03c335f810b91e7b32a7266699bd98fbe3c0d1fca97fa4dc8dc531e16c175b1a01d7f884f063f9781714df725b7584b2c8d63c35cce5d498237d2"}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000480)={{r5, &(0x7f0000000340)='.--\xd3{&/(\x00', 0x1, &(0x7f0000000380)={@_ha_fsid={[0x1ff, 0x3]}, {0xbded, 0x6, 0x4, 0x1d6e52cb}}, 0x412, &(0x7f00000003c0), &(0x7f0000000400)=0x6}, {[0x4, 0x7, 0x5, 0x3]}, 0xf, 0x2a, &(0x7f0000000440)=""/42}) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000500)=0x6, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r6) r7 = accept(r6, &(0x7f0000000580)=@nfc_llcp, &(0x7f0000000600)=0x80) sendfile(r7, r5, &(0x7f0000000640)=0x7fff, 0xffffffffffffffc8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xb, 0xaf, @l2={'ib', 0x3a, 'pim6reg1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r6, &(0x7f0000000840)="c71f9d8687d56555aab41834db6667fb239458632a2bb0e3d8a18795a5bdab65535b73012ed27dd74032f266ff03969a577401148f91861887fb089570a17b2725a802469c9c8d88b26ebc52c53f"}, 0x20) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x101000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000940), &(0x7f0000000980)=0x4) write$cgroup_int(r1, &(0x7f00000009c0)=0x9, 0x12) write$ppp(r6, &(0x7f0000000a00)="c85e11d1de73c7cba376428aff7e228f0303f6f63291026475ed24a43dc2305621b08f627a996a837267ba065bd3adde147d2ccd6371133698ae2cbf9277fd15f4a14de17557bd93329f5846d8dbd2673c08fab90ce8780b3d27d291beb9c5766f7e6d12240d33f5e5b1cfc51b5052b31852f8f75f981acadc6448bd9dedfb5cc1fe6e7774382bbd5342f5a4b9136bca9b97fa9d86b6384a476d", 0x9a) ioctl$OCFS2_IOC_GROUP_EXTEND(r9, 0x40046f01, &(0x7f0000000ac0)=0xb4c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000b80)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x3}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000c00)={0x0, 0x2}, &(0x7f0000000c40)=0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000c80)={0x20002009}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000cc0)={0x2001}) ioctl$FIOCLEX(r1, 0x5451) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 78.826994][ T5607] cgroup: Unknown subsys name 'net' [ 78.925426][ T5607] cgroup: Unknown subsys name 'cpuset' [ 78.928836][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.570584][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.988462][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.998759][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.001225][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.004790][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.006108][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.008814][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.009015][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.009687][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.010008][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.011062][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.014074][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.017472][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.018502][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.019733][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.020451][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.021250][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.023340][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.024355][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.027002][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.030252][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.044577][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.044655][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.047221][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.048977][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.052709][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.999975][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.008127][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.008299][ T5620] bridge_slave_0: entered allmulticast mode [ 85.010523][ T5620] bridge_slave_0: entered promiscuous mode [ 85.083094][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.083231][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.083343][ T5620] bridge_slave_1: entered allmulticast mode [ 85.084891][ T5620] bridge_slave_1: entered promiscuous mode [ 85.131655][ T5630] Bluetooth: hci0: command tx timeout [ 85.131939][ T5622] Bluetooth: hci1: command tx timeout [ 85.141085][ T5630] Bluetooth: hci3: command tx timeout [ 85.142260][ T5622] Bluetooth: hci4: command tx timeout [ 85.194856][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.195010][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.195138][ T5621] bridge_slave_0: entered allmulticast mode [ 85.196387][ T5621] bridge_slave_0: entered promiscuous mode [ 85.211254][ T5622] Bluetooth: hci2: command tx timeout [ 85.253233][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.253402][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.253511][ T5621] bridge_slave_1: entered allmulticast mode [ 85.254932][ T5621] bridge_slave_1: entered promiscuous mode [ 85.282858][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.336654][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.359799][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.359968][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.360255][ T5618] bridge_slave_0: entered allmulticast mode [ 85.366118][ T5618] bridge_slave_0: entered promiscuous mode [ 85.428733][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.428845][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.428980][ T5618] bridge_slave_1: entered allmulticast mode [ 85.430625][ T5618] bridge_slave_1: entered promiscuous mode [ 85.467590][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.497368][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.497512][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.497645][ T5617] bridge_slave_0: entered allmulticast mode [ 85.499846][ T5617] bridge_slave_0: entered promiscuous mode [ 85.506551][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.506811][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.507139][ T5617] bridge_slave_1: entered allmulticast mode [ 85.512688][ T5617] bridge_slave_1: entered promiscuous mode [ 85.581202][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.583317][ T5620] team0: Port device team_slave_0 added [ 85.583546][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.583655][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.583787][ T5619] bridge_slave_0: entered allmulticast mode [ 85.585714][ T5619] bridge_slave_0: entered promiscuous mode [ 85.606885][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.619916][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.657908][ T5620] team0: Port device team_slave_1 added [ 85.658138][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.658302][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.658404][ T5619] bridge_slave_1: entered allmulticast mode [ 85.659767][ T5619] bridge_slave_1: entered promiscuous mode [ 85.670291][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.677155][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.781150][ T5621] team0: Port device team_slave_0 added [ 85.783643][ T5621] team0: Port device team_slave_1 added [ 85.784637][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.784650][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.784677][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.856718][ T5617] team0: Port device team_slave_0 added [ 85.872628][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.872643][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.872666][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.914243][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.933507][ T5618] team0: Port device team_slave_0 added [ 85.941610][ T5617] team0: Port device team_slave_1 added [ 85.950253][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.950266][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.950303][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.960708][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.968120][ T5618] team0: Port device team_slave_1 added [ 86.018903][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.018920][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.018947][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.133214][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.133232][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.133257][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.134379][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.134393][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.134417][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.195802][ T5620] hsr_slave_0: entered promiscuous mode [ 86.204805][ T5620] hsr_slave_1: entered promiscuous mode [ 86.256650][ T5619] team0: Port device team_slave_0 added [ 86.257371][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.257386][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.257412][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.259746][ T5619] team0: Port device team_slave_1 added [ 86.260437][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.260449][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.260471][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.449286][ T5621] hsr_slave_0: entered promiscuous mode [ 86.450125][ T5621] hsr_slave_1: entered promiscuous mode [ 86.450697][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.450993][ T5621] Cannot create hsr debugfs directory [ 86.476769][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.476785][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.476807][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.546684][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.546703][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.546729][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.585804][ T5617] hsr_slave_0: entered promiscuous mode [ 86.588849][ T5617] hsr_slave_1: entered promiscuous mode [ 86.593876][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.593931][ T5617] Cannot create hsr debugfs directory [ 86.663799][ T5618] hsr_slave_0: entered promiscuous mode [ 86.664583][ T5618] hsr_slave_1: entered promiscuous mode [ 86.665099][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 86.665119][ T5618] Cannot create hsr debugfs directory [ 86.909572][ T5619] hsr_slave_0: entered promiscuous mode [ 86.910636][ T5619] hsr_slave_1: entered promiscuous mode [ 86.913919][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 86.913971][ T5619] Cannot create hsr debugfs directory [ 87.212042][ T5622] Bluetooth: hci4: command tx timeout [ 87.212078][ T5622] Bluetooth: hci3: command tx timeout [ 87.212102][ T5622] Bluetooth: hci1: command tx timeout [ 87.212126][ T5622] Bluetooth: hci0: command tx timeout [ 87.291266][ T5630] Bluetooth: hci2: command tx timeout [ 87.307435][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.319299][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.357390][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.360702][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.386763][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.398635][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.427337][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.436476][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.514930][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.519835][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.538446][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.547396][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.552516][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.564781][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.565592][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.569165][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.668164][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.679857][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.689268][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.698576][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.699407][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.708910][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.714866][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.734402][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.857073][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.860657][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.868303][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.886703][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.887811][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.896060][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.916495][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.920108][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.032294][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.035819][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.039349][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.058061][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.077142][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.078162][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.087791][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.118999][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.129740][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.197383][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.214069][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.234209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.234302][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.259438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.259537][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.312462][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.345247][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.383571][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.383733][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.410597][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.411018][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.456669][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.484074][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.484205][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.487220][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.487292][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.514910][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.630455][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.647211][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.673956][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.674064][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.734985][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.735122][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.844571][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.893672][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.893779][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.970801][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.970916][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.292400][ T5630] Bluetooth: hci0: command tx timeout [ 89.292434][ T5630] Bluetooth: hci1: command tx timeout [ 89.292457][ T5630] Bluetooth: hci3: command tx timeout [ 89.292479][ T5630] Bluetooth: hci4: command tx timeout [ 89.380818][ T5622] Bluetooth: hci2: command tx timeout [ 89.774959][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.912816][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.106185][ T5621] veth0_vlan: entered promiscuous mode [ 90.174985][ T5621] veth1_vlan: entered promiscuous mode [ 90.308181][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.356650][ T5621] veth0_macvtap: entered promiscuous mode [ 90.399061][ T5621] veth1_macvtap: entered promiscuous mode [ 90.456105][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.483204][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.513010][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.534360][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.554607][ T5617] veth0_vlan: entered promiscuous mode [ 90.608975][ T5617] veth1_vlan: entered promiscuous mode [ 90.649449][ T5619] veth0_vlan: entered promiscuous mode [ 90.659724][ T5620] veth0_vlan: entered promiscuous mode [ 90.719888][ T5620] veth1_vlan: entered promiscuous mode [ 90.740327][ T5618] veth0_vlan: entered promiscuous mode [ 90.750687][ T5619] veth1_vlan: entered promiscuous mode [ 90.786331][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.786352][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.819741][ T5618] veth1_vlan: entered promiscuous mode [ 90.847794][ T5617] veth0_macvtap: entered promiscuous mode [ 90.885436][ T5617] veth1_macvtap: entered promiscuous mode [ 90.905619][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905640][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.927890][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.951757][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.952241][ T5620] veth0_macvtap: entered promiscuous mode [ 90.966135][ T5619] veth0_macvtap: entered promiscuous mode [ 90.987871][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.999383][ T5620] veth1_macvtap: entered promiscuous mode [ 91.022960][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.040776][ T5619] veth1_macvtap: entered promiscuous mode [ 91.070460][ T5621] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.070964][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.113806][ T5618] veth0_macvtap: entered promiscuous mode [ 91.148923][ T5618] veth1_macvtap: entered promiscuous mode [ 91.198625][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.201510][ T116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.201628][ T116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.201723][ T116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.201810][ T116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.201911][ T116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221767][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.276858][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.292720][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.312608][ T5814] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 91.371104][ T5622] Bluetooth: hci4: command tx timeout [ 91.371146][ T5622] Bluetooth: hci3: command tx timeout [ 91.371171][ T5622] Bluetooth: hci1: command tx timeout [ 91.371192][ T5622] Bluetooth: hci0: command tx timeout [ 91.446558][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.456055][ T5630] Bluetooth: hci2: command tx timeout [ 91.492441][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.500621][ T5819] syzkaller1: entered promiscuous mode [ 91.500643][ T5819] syzkaller1: entered allmulticast mode [ 91.531268][ T116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.535075][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.535095][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.563016][ T1471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563148][ T1471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563245][ T1471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.689384][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.689400][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.740868][ T1000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740920][ T1000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768597][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.768619][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.785546][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.785595][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.785634][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.785681][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.785716][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.876494][ T1219] cfg80211: failed to load regulatory.db [ 91.901051][ T1471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.984570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.044033][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.044056][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.156646][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.156683][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.290322][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.290343][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.403604][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.403627][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.431442][ T5833] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 92.646899][ T5854] Zero length message leads to an empty skb [ 93.023927][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12'. [ 93.316165][ T5879] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 93.364690][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 93.403984][ T5885] lo: entered promiscuous mode [ 93.424699][ T5890] netlink: 830 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.499584][ T5875] lo: left promiscuous mode [ 93.865168][ T5901] bond1 (unregistering): Released all slaves [ 94.157788][ T5915] sctp: [Deprecated]: syz.1.24 (pid 5915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.157788][ T5915] Use struct sctp_sack_info instead [ 94.251062][ T5622] Bluetooth: hci2: command 0x0405 tx timeout [ 94.630094][ T5929] syzkaller0: entered promiscuous mode [ 94.630709][ T5929] syzkaller0: entered allmulticast mode [ 94.646078][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 95.221034][ T5630] Bluetooth: hci2: ISO packet too small [ 95.286413][ T5954] netlink: 'syz.2.31': attribute type 2 has an invalid length. [ 95.286436][ T5954] netlink: 164 bytes leftover after parsing attributes in process `syz.2.31'. [ 95.352192][ T5964] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 95.352214][ T5964] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 95.352227][ T5964] netlink: 224 bytes leftover after parsing attributes in process `syz.0.32'. [ 95.544441][ T5969] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 95.544476][ T5969] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 95.562314][ T5970] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 95.562375][ T5970] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 95.717351][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 95.813911][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 96.721631][ T5983] ip6t_hbh: Not strict - not implemented [ 96.767183][ T5987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.39'. [ 96.801511][ T5997] x_tables: duplicate underflow at hook 2 [ 97.038592][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 97.039125][ T6012] veth1_macvtap: left promiscuous mode [ 97.141299][ T6017] gretap0: entered promiscuous mode [ 97.196896][ T6019] veth1_macvtap: entered promiscuous mode [ 97.233326][ T6019] batman_adv: batadv0: Adding interface: macsec0 [ 97.233343][ T6019] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.233372][ T6019] batman_adv: batadv0: Interface activated: macsec0 [ 97.289889][ T6024] 0ªî{X¹¦: renamed from gretap0 [ 97.307048][ T6024] 0ªî{X¹¦: left promiscuous mode [ 97.307069][ T6024] 0ªî{X¹¦: entered allmulticast mode [ 97.322814][ T6017] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.322854][ T6017] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.322898][ T6017] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.342903][ T6024] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.400334][ T6017] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.462687][ T6017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.498740][ T5984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.713769][ T6026] ipvlan2: entered allmulticast mode [ 97.713794][ T6026] syz_tun: entered allmulticast mode [ 98.070565][ T6033] syzkaller0: entered promiscuous mode [ 98.070590][ T6033] syzkaller0: entered allmulticast mode [ 98.598559][ T6071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.812826][ T6071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.867584][ T6044] netlink: 'syz.1.48': attribute type 4 has an invalid length. [ 98.895031][ T6075] syzkaller0: entered promiscuous mode [ 98.895064][ T6075] syzkaller0: entered allmulticast mode [ 99.283839][ T6101] __nla_validate_parse: 3 callbacks suppressed [ 99.283866][ T6101] netlink: 128 bytes leftover after parsing attributes in process `syz.3.60'. [ 99.542469][ T6109] xt_hashlimit: size too large, truncated to 1048576 [ 99.587853][ T6110] xt_hashlimit: size too large, truncated to 1048576 [ 99.676971][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 99.944733][ T6127] vlan0: entered promiscuous mode [ 99.944988][ T6127] vlan0: entered allmulticast mode [ 99.945004][ T6127] veth0_vlan: entered allmulticast mode [ 100.039255][ T6124] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 100.039398][ T6124] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 100.387913][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 100.389605][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 101.509847][ T6183] netlink: 'syz.0.79': attribute type 8 has an invalid length. [ 101.758156][ T6197] netlink: 'syz.2.82': attribute type 8 has an invalid length. [ 101.840075][ T6049] IPVS: starting estimator thread 0... [ 101.932225][ T6199] IPVS: using max 29 ests per chain, 69600 per kthread [ 102.339782][ T6218] IPVS: length: 29 != 24 [ 102.435850][ T6221] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 102.435877][ T6221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.86'. [ 102.643293][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 103.462403][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 103.462478][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 103.764901][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 103.764927][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 103.764953][ T6253] netlink: 'syz.0.93': attribute type 13 has an invalid length. [ 104.034024][ T6171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.641062][ T6274] Cannot find set identified by id 2 to match [ 105.064991][ T411] IPVS: starting estimator thread 0... [ 105.160881][ T6294] IPVS: using max 26 ests per chain, 62400 per kthread [ 105.544421][ T6305] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 105.572138][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.578562][ T6305] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.738396][ T6331] netlink: 'syz.3.107': attribute type 30 has an invalid length. [ 106.836044][ T6332] bond1 (unregistering): Released all slaves [ 107.059572][ T6344] x_tables: duplicate underflow at hook 1 [ 107.074087][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 107.074117][ T6344] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 107.212227][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 107.426114][ T6359] syzkaller1: entered promiscuous mode [ 107.426139][ T6359] syzkaller1: entered allmulticast mode [ 107.615657][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 107.714436][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 108.378167][ T6395] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 108.797447][ T6412] tipc: Started in network mode [ 108.797486][ T6412] tipc: Node identity ac14140f, cluster identity 4711 [ 108.800183][ T6412] tipc: New replicast peer: 255.255.255.255 [ 108.828846][ T6412] tipc: Enabled bearer , priority 10 [ 108.829763][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 108.845259][ T6412] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 108.934035][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 108.977045][ T6412] bond1: entered promiscuous mode [ 108.977518][ T6412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.977623][ T6419] openvswitch: netlink: Missing key (keys=40, expected=100) [ 109.055030][ T6414] bond1: entered allmulticast mode [ 109.149301][ T6412] bond1: (slave bridge1): making interface the new active one [ 109.149326][ T6412] bridge1: entered promiscuous mode [ 109.149513][ T6412] bridge1: entered allmulticast mode [ 109.175665][ T6412] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 109.744548][ T6445] netlink: 88 bytes leftover after parsing attributes in process `syz.3.138'. [ 109.744573][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 109.878584][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 109.912960][ T1219] tipc: Node number set to 2886997007 [ 110.282530][ T6463] netlink: 5396 bytes leftover after parsing attributes in process `syz.1.141'. [ 110.282569][ T6463] openvswitch: netlink: Flow key attr not present in new flow. [ 110.339465][ T6465] netlink: 'syz.4.144': attribute type 2 has an invalid length. [ 110.339490][ T6465] netlink: 224 bytes leftover after parsing attributes in process `syz.4.144'. [ 110.375285][ T6465] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 110.435152][ T6465] team0: Port device dummy0 added [ 110.481901][ T6465] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.513694][ T6471] block nbd0: server does not support multiple connections per device. [ 110.518447][ T6471] block nbd0: shutting down sockets [ 110.570304][ T6467] v: renamed from veth0_vlan [ 110.984652][ T5622] block nbd0: Receive control failed (result -32) [ 110.986835][ T5630] block nbd0: Receive control failed (result -32) [ 111.693492][ T6522] netlink: 'syz.1.158': attribute type 10 has an invalid length. [ 111.763930][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.785604][ T6522] team0: Port device netdevsim1 added [ 112.084451][ T34] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 112.472894][ T5280] v: left promiscuous mode [ 112.500332][ T6566] __nla_validate_parse: 4 callbacks suppressed [ 112.500352][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 112.532857][ T25] v: entered promiscuous mode [ 112.812998][ T6579] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 112.861168][ T6576] sctp: [Deprecated]: syz.2.171 (pid 6576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.861168][ T6576] Use struct sctp_sack_info instead [ 113.204755][ T6601] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.271933][ T6596] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 113.450699][ T6600] xt_CT: No such helper "snmp_trap" [ 113.626866][ T6603] batadv1: entered promiscuous mode [ 113.626888][ T6603] batadv1: entered allmulticast mode [ 113.645774][ T6603] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 113.972353][ T6626] bond1 (unregistering): Released all slaves [ 114.078015][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'. [ 114.168861][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 114.337339][ T6644] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.491997][ T6664] Bluetooth: MGMT ver 1.23 [ 114.492043][ T6664] Bluetooth: hci0: unsupported parameter 5135 [ 114.492057][ T6664] Bluetooth: hci0: unsupported parameter 8192 [ 114.492074][ T6664] Bluetooth: hci0: unsupported parameter 5135 [ 114.492087][ T6664] Bluetooth: hci0: unsupported parameter 8192 [ 114.493947][ T6664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.699572][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 114.699599][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.699618][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.727957][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.727981][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.738974][ T6671] batman_adv: batadv0: Interface deactivated: macsec0 [ 114.739000][ T6671] batman_adv: batadv0: Removing interface: macsec0 [ 115.250508][ T6684] xt_hashlimit: max too large, truncated to 1048576 [ 115.250556][ T6684] xt_hashlimit: overflow, try lower: 0/0 [ 115.263273][ T6684] syz_tun: entered allmulticast mode [ 116.064933][ T6596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.366247][ T6699] tc_dump_action: action bad kind [ 116.417141][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 116.550125][ T6704] bond0: (slave bond_slave_1): Releasing backup interface [ 116.618104][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 116.618130][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 116.750997][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.752437][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.949128][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 117.066043][ T1471] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.066125][ T1471] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.066165][ T1471] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.066203][ T1471] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.349714][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 117.409988][ T6740] Bluetooth: hci0: unsupported parameter 5134 [ 117.410011][ T6740] Bluetooth: hci0: unsupported parameter 8192 [ 117.410025][ T6740] Bluetooth: hci0: unsupported parameter 5134 [ 117.410037][ T6740] Bluetooth: hci0: unsupported parameter 8192 [ 117.707410][ T6754] syzkaller0: entered promiscuous mode [ 117.707434][ T6754] syzkaller0: entered allmulticast mode [ 117.748724][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 118.174173][ T6778] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 118.174203][ T6778] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 118.174382][ T6778] netlink: 10 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.476071][ T6784] ip_tables: iptables: counters copy to user failed while replacing table [ 118.583770][ T6793] openvswitch: netlink: Multiple metadata blocks provided [ 118.596489][ T6791] netlink: 220 bytes leftover after parsing attributes in process `syz.2.212'. [ 118.626199][ T6800] netlink: 88 bytes leftover after parsing attributes in process `syz.3.211'. [ 118.702139][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.706424][ T6790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.740392][ T6800] netlink: 92 bytes leftover after parsing attributes in process `syz.3.211'. [ 119.141369][ T6818] hsr0: entered promiscuous mode [ 119.320213][ T6827] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 119.377684][ T6816] hsr0: left promiscuous mode [ 119.576035][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.576062][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.576222][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.576241][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.576394][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.576413][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.576569][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.576587][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.576742][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.576760][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.576925][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.577083][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.577250][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.577406][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.594391][ T6832] openvswitch: netlink: Flow key attr not present in new flow. [ 119.646529][ T6831] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 119.976271][ T12] tipc: Subscription rejected, illegal request [ 120.281938][ T6854] warning: `syz.4.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.775999][ T6871] syzkaller0: entered promiscuous mode [ 120.776024][ T6871] syzkaller0: entered allmulticast mode [ 120.822336][ T6872] veth1_to_bond: entered allmulticast mode [ 121.564996][ T6890] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 122.344803][ T6869] veth1_to_bond: left allmulticast mode [ 122.644942][ T6930] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 122.840918][ T6935] __nla_validate_parse: 34 callbacks suppressed [ 122.840938][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 122.891512][ T5630] Bluetooth: hci0: command 0x0401 tx timeout [ 123.177776][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.249'. [ 123.198635][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 123.403049][ T6962] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 123.529540][ T6965] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 123.529565][ T6965] netlink: 17 bytes leftover after parsing attributes in process `syz.4.252'. [ 123.586103][ T6977] syzkaller1: entered promiscuous mode [ 123.586127][ T6977] syzkaller1: entered allmulticast mode [ 123.613761][ T6979] syzkaller1: left promiscuous mode [ 123.619965][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 124.120333][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'. [ 124.160927][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 124.267000][ T7008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.258'. [ 124.810054][ T7036] syzkaller1: entered promiscuous mode [ 124.810080][ T7036] syzkaller1: entered allmulticast mode [ 124.930971][ T7044] tipc: Enabling of bearer rejected, media not registered [ 125.489464][ T7060] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 125.584795][ T7060] bond2: option mode: invalid value (7) [ 125.608529][ T7060] bond2 (unregistering): Released all slaves [ 125.646495][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 125.662245][ T7071] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 125.686791][ T7072] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 125.686812][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.268'. [ 125.889554][ T7072] dummy0: entered promiscuous mode [ 127.726746][ T7186] net_ratelimit: 23 callbacks suppressed [ 127.726766][ T7186] openvswitch: netlink: Tunnel attr 166 out of range max 16 [ 127.727192][ T7180] openvswitch: netlink: Tunnel attr 166 out of range max 16 [ 128.078014][ T7196] __nla_validate_parse: 16 callbacks suppressed [ 128.078037][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 128.258117][ T7196] team0: Port device team_slave_0 removed [ 128.390304][ T7207] netlink: 'syz.0.296': attribute type 11 has an invalid length. [ 128.809621][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.298'. [ 129.231204][ T7239] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 129.477024][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 129.680862][ T7255] gre0: entered promiscuous mode [ 129.680886][ T7255] gre0: entered allmulticast mode [ 129.711703][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 129.926182][ T7262] netlink: 100 bytes leftover after parsing attributes in process `syz.3.314'. [ 129.926209][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 129.926233][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 129.962891][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 129.962943][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 129.965206][ T5630] Bluetooth: hci3: SCO packet too small [ 129.965396][ T5630] Bluetooth: hci3: SCO packet too small [ 130.022854][ T7262] IPv6: sit1: Disabled Multicast RS [ 130.192585][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 130.232784][ T5630] Bluetooth: hci2: unexpected event 0x04 length: 0 < 10 [ 130.439290][ T7283] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 130.844292][ T7300] bridge_slave_1: left allmulticast mode [ 130.844320][ T7300] bridge_slave_1: left promiscuous mode [ 130.844546][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.876914][ T7300] bridge_slave_0: left allmulticast mode [ 130.876939][ T7300] bridge_slave_0: left promiscuous mode [ 130.877471][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.348381][ T7318] netlink: 'syz.0.328': attribute type 9 has an invalid length. [ 131.451711][ T7322] netlink: 'syz.2.329': attribute type 21 has an invalid length. [ 132.134285][ T7351] syzkaller0: entered promiscuous mode [ 132.134310][ T7351] syzkaller0: entered allmulticast mode [ 132.817248][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.817359][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.397586][ T7399] __nla_validate_parse: 12 callbacks suppressed [ 133.397607][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 133.398454][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 133.555065][ T7407] vxcan3: entered promiscuous mode [ 134.082983][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.347'. [ 134.579826][ T7440] syzkaller1: entered promiscuous mode [ 134.579851][ T7440] syzkaller1: entered allmulticast mode [ 134.982168][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 134.982197][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 135.025547][ T7463] block nbd1: server does not support multiple connections per device. [ 135.078820][ T7463] block nbd1: shutting down sockets [ 135.204592][ T7475] netlink: 72 bytes leftover after parsing attributes in process `syz.4.354'. [ 135.343319][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 135.343346][ T7479] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.345311][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 135.345336][ T7483] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.399421][ T7479] ovs-s: entered promiscuous mode [ 135.662494][ T7492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.359'. [ 135.730687][ T7498] nft_compat: unsupported protocol 1 [ 135.731327][ T7498] nft_compat: unsupported protocol 1 [ 135.759195][ T7498] nft_compat: unsupported protocol 1 [ 135.759950][ T7498] nft_compat: unsupported protocol 1 [ 136.352121][ T7537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.368'. [ 136.685538][ T7542] tipc: Started in network mode [ 136.685572][ T7542] tipc: Node identity 1000001, cluster identity 4369 [ 136.685586][ T7542] tipc: Node number set to 16777217 [ 137.168098][ T7562] nbd1: detected capacity change from 0 to 63 [ 137.168948][ T7562] block nbd1: NBD_DISCONNECT [ 137.169589][ T7562] block nbd1: Disconnected due to user request. [ 137.169608][ T7562] block nbd1: shutting down sockets [ 137.179397][ T1706] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.179484][ T1706] Buffer I/O error on dev nbd1, logical block 0, async page read [ 137.180604][ T1706] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.180668][ T1706] Buffer I/O error on dev nbd1, logical block 1, async page read [ 137.182254][ T1706] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.182284][ T1706] Buffer I/O error on dev nbd1, logical block 2, async page read [ 137.182415][ T1706] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.182442][ T1706] Buffer I/O error on dev nbd1, logical block 3, async page read [ 137.183239][ T1706] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.183314][ T1706] Buffer I/O error on dev nbd1, logical block 0, async page read [ 137.183585][ T1706] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.183657][ T1706] Buffer I/O error on dev nbd1, logical block 1, async page read [ 137.185173][ T1706] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.185249][ T1706] Buffer I/O error on dev nbd1, logical block 2, async page read [ 137.185618][ T1706] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.185692][ T1706] Buffer I/O error on dev nbd1, logical block 3, async page read [ 137.186138][ T1706] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.186203][ T1706] Buffer I/O error on dev nbd1, logical block 0, async page read [ 137.186529][ T1706] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.186598][ T1706] Buffer I/O error on dev nbd1, logical block 1, async page read [ 137.199884][ T5636] ldm_validate_partition_table(): Disk read failed. [ 137.219050][ T5636] Dev nbd1: unable to read RDB block 0 [ 137.228639][ T5636] nbd1: unable to read partition table [ 137.448004][ T5636] ldm_validate_partition_table(): Disk read failed. [ 137.458763][ T5636] Dev nbd1: unable to read RDB block 0 [ 137.473654][ T5636] nbd1: unable to read partition table [ 137.697910][ T7574] xt_CT: No such helper "snmp_trap" [ 138.632820][ T7617] xt_REDIRECT: bad rangesize 26624. [ 138.928827][ T7622] __nla_validate_parse: 3 callbacks suppressed [ 138.928850][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.392'. [ 139.104461][ T7629] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 139.139430][ T7629] gretap0: entered promiscuous mode [ 139.152620][ T7629] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 139.481054][ T7634] netlink: 260 bytes leftover after parsing attributes in process `syz.4.396'. [ 139.553794][ T7645] xt_connbytes: Forcing CT accounting to be enabled [ 140.055287][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 140.759421][ T7700] x_tables: duplicate underflow at hook 2 [ 141.032276][ T7717] netlink: 68 bytes leftover after parsing attributes in process `syz.3.410'. [ 141.388694][ T7722] ip_tables: iptables: counters copy to user failed while replacing table [ 141.654637][ T7727] netlink: 80 bytes leftover after parsing attributes in process `syz.0.412'. [ 142.949057][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'. [ 142.964868][ T7732] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 143.225658][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 0 < 9 [ 143.582074][ T7772] netlink: 'syz.4.424': attribute type 2 has an invalid length. [ 143.676221][ T7777] netlink: Conntrack attr has 4 unknown bytes [ 143.676261][ T7777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.928685][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 144.306820][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 144.601773][ T7816] netlink: 48 bytes leftover after parsing attributes in process `syz.3.432'. [ 144.629286][ T7822] netlink: 'syz.0.436': attribute type 8 has an invalid length. [ 144.719287][ T7824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.087826][ T7847] IPVS: length: 15 != 61600695320 [ 145.246231][ T7857] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:4 [ 145.263048][ T7858] No such timeout policy "syz0" [ 145.400338][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 145.414021][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 145.497015][ T7862] bond2 (unregistering): Released all slaves [ 145.907712][ T7880] netlink: 5 bytes leftover after parsing attributes in process `syz.4.452'. [ 146.087435][ T7886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.455'. [ 146.090611][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 146.216381][ T7895] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 146.220189][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 146.348343][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'. [ 146.487256][ T7892] xt_hashlimit: size too large, truncated to 1048576 [ 146.630060][ T7919] netlink: 'syz.4.461': attribute type 5 has an invalid length. [ 146.759428][ T7895] lo: entered promiscuous mode [ 146.834194][ T7895] tunl0: entered promiscuous mode [ 146.845983][ T7895] gre0: entered promiscuous mode [ 147.019726][ T7895] gretap0: entered promiscuous mode [ 147.036996][ T7895] erspan0: entered promiscuous mode [ 147.048568][ T7895] ip_vti0: entered promiscuous mode [ 147.061993][ T7895] ip6_vti0: entered promiscuous mode [ 147.066670][ T7895] sit0: entered promiscuous mode [ 147.088832][ T7895] ip6tnl0: entered promiscuous mode [ 147.099768][ T7895] ip6gre0: entered promiscuous mode [ 147.116059][ T7895] syz_tun: entered promiscuous mode [ 147.135361][ T7895] ip6gretap0: entered promiscuous mode [ 147.278932][ T7918] @0Ù: renamed from bond_slave_1 [ 147.586150][ T7939] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 147.586175][ T7939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.463'. [ 147.702763][ T7942] syzkaller0: entered promiscuous mode [ 147.702789][ T7942] syzkaller0: entered allmulticast mode [ 147.750189][ T7942] tipc: Started in network mode [ 147.750224][ T7942] tipc: Node identity 6adacbbf3386, cluster identity 4711 [ 147.785374][ T7942] tipc: Enabled bearer , priority 0 [ 147.849041][ T7942] tipc: Resetting bearer [ 147.885826][ T7938] tipc: Resetting bearer [ 147.969136][ T7938] tipc: Disabling bearer [ 148.324819][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.352792][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.684894][ T7973] syzkaller0: entered promiscuous mode [ 148.684918][ T7973] syzkaller0: entered allmulticast mode [ 149.199813][ T8015] netlink: 'syz.3.484': attribute type 15 has an invalid length. [ 149.367560][ T8028] __nla_validate_parse: 1 callbacks suppressed [ 149.367592][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 149.493230][ T8032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.599812][ T8036] syzkaller0: entered promiscuous mode [ 149.620202][ T8036] syzkaller0: entered allmulticast mode [ 149.902492][ T8040] tc_dump_action: action bad kind [ 149.953535][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 150.212393][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 150.307333][ T8058] netlink: 72 bytes leftover after parsing attributes in process `syz.4.491'. [ 150.307638][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 150.353451][ T8066] pim6reg1: entered promiscuous mode [ 150.353477][ T8066] pim6reg1: entered allmulticast mode [ 150.637536][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 150.683776][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.688432][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.702659][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.716232][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.730011][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.765697][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.770222][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.793213][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.797106][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.801363][ T8085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.825851][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.862632][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.907549][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.923663][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.942224][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.945740][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.948102][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.950276][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.985075][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.012429][ T8087] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 151.016577][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.037905][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.069676][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.105373][ T8087] smc: net device lo applied user defined pnetid SYZ0 [ 151.135874][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.137373][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.138776][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.140157][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.190108][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.211821][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.215208][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.219614][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.265172][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.266639][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.268206][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.269815][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.314694][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.316388][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.318140][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.319865][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.349773][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.384172][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.273524][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 152.418655][ T8139] openvswitch: netlink: EtherType 300 is less than min 600 [ 152.505259][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 152.640684][ T8154] netlink: 'syz.3.513': attribute type 2 has an invalid length. [ 152.675201][ T8135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.688293][ T8135] bond1: (slave bond2): Enslaving as an active interface with an up link [ 152.731929][ T8148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.733413][ T8148] bond1: (slave bond3): Enslaving as an active interface with an up link [ 152.733859][ T8144] syzkaller1: entered promiscuous mode [ 152.733879][ T8144] syzkaller1: entered allmulticast mode [ 153.052032][ T8166] bond1: entered promiscuous mode [ 153.052057][ T8166] bond1: entered allmulticast mode [ 153.099669][ T8184] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.134647][ T8174] netlink: 'syz.4.519': attribute type 4 has an invalid length. [ 153.152273][ T8187] netlink: 'syz.4.519': attribute type 4 has an invalid length. [ 153.187120][ T8184] macsec1: entered allmulticast mode [ 153.187144][ T8184] ip6gretap0: entered allmulticast mode [ 153.420162][ T8203] lo: entered allmulticast mode [ 153.505941][ T8209] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 153.572211][ T8202] lo: left allmulticast mode [ 153.598212][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.526'. [ 153.598246][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.526'. [ 153.881525][ T8230] ip_tables: iptables: counters copy to user failed while replacing table [ 154.048834][ T8239] netlink: 'syz.4.533': attribute type 16 has an invalid length. [ 154.048858][ T8239] netlink: 'syz.4.533': attribute type 17 has an invalid length. [ 154.139563][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.140146][ T8239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.164057][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.164187][ T8239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.246866][ T8239] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 154.250009][ T8239] batadv1: left promiscuous mode [ 154.250033][ T8239] batadv1: left allmulticast mode [ 154.278783][ T8239] vxcan3: left promiscuous mode [ 154.286896][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 154.298376][ T8239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.338384][ T8245] ip_tables: iptables: counters copy to user failed while replacing table [ 154.428690][ T8225] __nla_validate_parse: 58 callbacks suppressed [ 154.428713][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.429184][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.429551][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.429865][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.430313][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.430675][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.431198][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 154.431515][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 155.208363][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.228140][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 155.232032][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.430017][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.522399][ T8291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.087092][ T8319] netlink: 'syz.2.556': attribute type 7 has an invalid length. [ 156.087115][ T8319] netlink: 'syz.2.556': attribute type 8 has an invalid length. [ 156.089093][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 156.125019][ T8323] netlink: 'syz.0.559': attribute type 3 has an invalid length. [ 156.513986][ T8326] syzkaller0: entered promiscuous mode [ 156.514010][ T8326] syzkaller0: entered allmulticast mode [ 156.696115][ T8340] netlink: 'syz.1.563': attribute type 11 has an invalid length. [ 158.828340][ T8382] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 159.335785][ T8402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.023574][ T8457] ip_tables: iptables: counters copy to user failed while replacing table [ 160.065328][ T8457] __nla_validate_parse: 6 callbacks suppressed [ 160.065351][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 160.552900][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 160.604173][ T8476] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 160.719852][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 160.746221][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 160.883284][ T8485] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 161.096604][ T8482] syzkaller0: entered promiscuous mode [ 161.096629][ T8482] syzkaller0: entered allmulticast mode [ 161.223646][ T8492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.253366][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 161.288823][ T8494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.601'. [ 161.316365][ T8494] ip6tnl3: entered allmulticast mode [ 161.319556][ T6048] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 161.319910][ T6048] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 161.341553][ T6780] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 161.447576][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 161.461146][ T8498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.524934][ T8503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.529864][ T8500] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 161.579863][ T8498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.789011][ T8513] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 161.820995][ T2258] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 161.974089][ T8523] netlink: 'syz.3.611': attribute type 2 has an invalid length. [ 161.980263][ T8523] netlink: zone id is out of range [ 161.980276][ T8523] netlink: zone id is out of range [ 161.980285][ T8523] netlink: zone id is out of range [ 161.980294][ T8523] netlink: zone id is out of range [ 161.980302][ T8523] netlink: zone id is out of range [ 161.980311][ T8523] netlink: zone id is out of range [ 161.980320][ T8523] netlink: zone id is out of range [ 161.980329][ T8523] netlink: zone id is out of range [ 161.980337][ T8523] netlink: zone id is out of range [ 162.199168][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 162.253442][ T2258] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 162.399510][ T8547] netlink: 'syz.0.614': attribute type 2 has an invalid length. [ 162.479721][ T8547] : entered promiscuous mode [ 162.804623][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 162.905960][ T8573] syzkaller0: entered promiscuous mode [ 162.905984][ T8573] syzkaller0: entered allmulticast mode [ 162.925551][ T8573] netlink: 76 bytes leftover after parsing attributes in process `syz.4.620'. [ 163.793174][ T8602] bond0: (slave team0): Releasing backup interface [ 164.101512][ T8602] team0: Port device dummy0 removed [ 164.119020][ T8602] bridge_slave_0: left allmulticast mode [ 164.119046][ T8602] bridge_slave_0: left promiscuous mode [ 164.119413][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.150570][ T8602] bridge_slave_1: left allmulticast mode [ 164.154376][ T8602] bridge_slave_1: left promiscuous mode [ 164.154604][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.202259][ T8602] bond0: (slave bond_slave_0): Releasing backup interface [ 164.263657][ T8602] team0: Port device team_slave_0 removed [ 164.319266][ T8602] team0: Port device team_slave_1 removed [ 164.321832][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.321854][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.348997][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.349038][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.402777][ T8608] team0: Mode changed to "loadbalance" [ 164.421918][ T8607] team0: Unable to change to the same mode the team is in [ 164.932623][ T8656] bond5: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 164.932647][ T8656] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 164.932905][ T8656] bond5: entered allmulticast mode [ 165.125878][ T8668] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 165.159547][ T8668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.195849][ T8671] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 165.200428][ T8668] team0: Port device netdevsim1 added [ 165.232233][ T8671] team0: Port device netdevsim1 removed [ 165.252053][ T8671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.258569][ T8671] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 165.315271][ T6049] IPVS: starting estimator thread 0... [ 165.398196][ T8681] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 165.404201][ T8677] IPVS: using max 34 ests per chain, 81600 per kthread [ 165.438801][ T8681] bond2: entered promiscuous mode [ 165.439250][ T8681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.451801][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 165.466165][ T8679] __nla_validate_parse: 6 callbacks suppressed [ 165.466183][ T8679] netlink: 164 bytes leftover after parsing attributes in process `syz.3.648'. [ 165.501127][ T8684] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 165.501127][ T8684] Please contact the netfilter-devel mailing list or update your nftables rules. [ 165.821554][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 166.107220][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.657'. [ 166.158075][ T8706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.657'. [ 166.647482][ T5630] Bluetooth: hci2: link tx timeout [ 166.647676][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.656829][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'. [ 166.677221][ T5630] Bluetooth: hci2: link tx timeout [ 166.677239][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.677361][ T5630] Bluetooth: hci2: link tx timeout [ 166.677374][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.679536][ T5630] Bluetooth: hci2: link tx timeout [ 166.679552][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.685955][ T5630] Bluetooth: hci2: link tx timeout [ 166.685970][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.694098][ T5630] Bluetooth: hci2: link tx timeout [ 166.694113][ T5630] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.911982][ T8731] ip6gretap1: entered allmulticast mode [ 167.244641][ T8753] syzkaller1: entered promiscuous mode [ 167.244666][ T8753] syzkaller1: entered allmulticast mode [ 167.489615][ T8766] net_ratelimit: 5 callbacks suppressed [ 167.489656][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.748405][ T8771] block nbd1: shutting down sockets [ 167.763501][ T8773] syzkaller0: entered promiscuous mode [ 167.763524][ T8773] syzkaller0: entered allmulticast mode [ 167.806929][ T8768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'. [ 168.122978][ T8782] tipc: Enabled bearer , priority 0 [ 168.146583][ T8782] syzkaller0: entered promiscuous mode [ 168.146617][ T8782] syzkaller0: entered allmulticast mode [ 168.271445][ T8787] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 168.302722][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 168.411427][ T8787] bond3: entered promiscuous mode [ 168.411925][ T8787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.480015][ T8798] batadv_slave_1: entered promiscuous mode [ 168.547738][ T8805] tipc: Resetting bearer [ 168.607370][ T8781] tipc: Resetting bearer [ 168.655132][ T8781] tipc: Disabling bearer [ 168.716142][ T8813] netlink: 'syz.0.685': attribute type 4 has an invalid length. [ 168.730880][ T5622] Bluetooth: hci2: command 0x0405 tx timeout [ 169.085309][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 169.085360][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 169.128225][ T8822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'. [ 169.710954][ T8845] dvmrp0: entered allmulticast mode [ 169.752448][ T8848] dvmrp1: entered allmulticast mode [ 170.175324][ T8895] tipc: Cannot configure node identity twice [ 170.287141][ T8899] netlink: 'syz.4.706': attribute type 30 has an invalid length. [ 170.306737][ T8900] netlink: 'syz.0.705': attribute type 16 has an invalid length. [ 170.306755][ T8900] netlink: 'syz.0.705': attribute type 17 has an invalid length. [ 170.308265][ T8899] vxlan0: entered promiscuous mode [ 170.308287][ T8899] vxlan0: entered allmulticast mode [ 170.310115][ T8900] lo: left promiscuous mode [ 170.346342][ T8899] netlink: 'syz.4.706': attribute type 30 has an invalid length. [ 170.370257][ T8900] tunl0: left promiscuous mode [ 170.379628][ T8900] gre0: left promiscuous mode [ 170.474886][ T8900] gretap0: left promiscuous mode [ 170.477592][ T8900] erspan0: left promiscuous mode [ 170.480165][ T8900] ip_vti0: left promiscuous mode [ 170.499250][ T8900] ip6_vti0: left promiscuous mode [ 170.507778][ T8900] sit0: left promiscuous mode [ 170.542356][ T8908] netlink: 'syz.3.708': attribute type 2 has an invalid length. [ 170.542380][ T8908] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 170.542394][ T8908] __nla_validate_parse: 8 callbacks suppressed [ 170.542406][ T8908] netlink: 152 bytes leftover after parsing attributes in process `syz.3.708'. [ 170.549885][ T8900] ip6tnl0: left promiscuous mode [ 170.551274][ T31] audit: type=1800 audit(1790631717.641:2): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.708" name=22 dev="tmpfs" ino=755 res=0 errno=0 [ 170.614253][ T8900] ip6gre0: left promiscuous mode [ 170.617307][ T8900] syz_tun: left promiscuous mode [ 170.620513][ T8900] ip6gretap0: left promiscuous mode [ 170.665667][ T8900] dummy0: left promiscuous mode [ 170.795468][ T8900] vlan0: left promiscuous mode [ 170.795639][ T8900] vlan0: left allmulticast mode [ 170.795658][ T8900] veth0_vlan: left allmulticast mode [ 170.866852][ T8900] bond1: left promiscuous mode [ 170.866876][ T8900] bridge1: left promiscuous mode [ 170.868360][ T8900] bond1: left allmulticast mode [ 170.868378][ T8900] bridge1: left allmulticast mode [ 170.914265][ T8900] bond2: left promiscuous mode [ 170.916762][ T8900] bond3: left promiscuous mode [ 170.948414][ T8899] vxlan1: entered promiscuous mode [ 170.948438][ T8899] vxlan1: entered allmulticast mode [ 171.254878][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 171.334950][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 171.334975][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 171.405878][ T8926] openvswitch: netlink: Message has 8 unknown bytes. [ 171.537022][ T8932] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.595676][ T8932] vxlan0: left promiscuous mode [ 171.596081][ T8932] vxlan1: left promiscuous mode [ 171.646631][ T8940] openvswitch: netlink: IP tunnel TTL not specified. [ 171.650437][ T8935] wg2 speed is unknown, defaulting to 1000 [ 171.651697][ T8935] wg2 speed is unknown, defaulting to 1000 [ 171.674090][ T8935] wg2 speed is unknown, defaulting to 1000 [ 171.675197][ T8935] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 171.675231][ T8935] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 171.675274][ T8935] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 171.724493][ T7544] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.724991][ T7544] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.725462][ T7544] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.745449][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.773985][ T8935] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.782897][ T7544] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.783018][ T7544] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.811552][ T7544] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.811597][ T7544] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.870288][ T8940] ip6gre1: entered promiscuous mode [ 171.870311][ T8940] ip6gre1: entered allmulticast mode [ 171.888102][ T8935] wg2 speed is unknown, defaulting to 1000 [ 171.944888][ T8935] wg2 speed is unknown, defaulting to 1000 [ 171.986348][ T8935] wg2 speed is unknown, defaulting to 1000 [ 171.987772][ T8948] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.023489][ T8935] wg2 speed is unknown, defaulting to 1000 [ 172.039118][ T8935] wg2 speed is unknown, defaulting to 1000 [ 172.247641][ T8953] FAULT_INJECTION: forcing a failure. [ 172.247641][ T8953] name failslab, interval 1, probability 0, space 0, times 1 [ 172.247686][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.0.717 Not tainted syzkaller #0 PREEMPT(full) [ 172.247711][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.247734][ T8953] Call Trace: [ 172.247747][ T8953] [ 172.247757][ T8953] dump_stack_lvl+0xe8/0x150 [ 172.247795][ T8953] should_fail_ex+0x410/0x560 [ 172.247825][ T8953] ? __alloc_skb+0x1db/0x7a0 [ 172.247853][ T8953] should_failslab+0xa8/0x100 [ 172.247882][ T8953] ? __alloc_skb+0x1db/0x7a0 [ 172.247907][ T8953] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 172.247948][ T8953] ? __alloc_skb+0x18d/0x7a0 [ 172.247976][ T8953] ? __alloc_skb+0x1db/0x7a0 [ 172.248011][ T8953] __alloc_skb+0x1db/0x7a0 [ 172.248045][ T8953] netlink_sendmsg+0x5d4/0xb40 [ 172.248078][ T8953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.248111][ T8953] ? apparmor_socket_sendmsg+0x98/0x360 [ 172.248139][ T8953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.248162][ T8953] sock_sendmsg_nosec+0x13a/0x180 [ 172.248190][ T8953] ____sys_sendmsg+0x54e/0x850 [ 172.248228][ T8953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.248270][ T8953] ? import_iovec+0x73/0xa0 [ 172.248309][ T8953] ___sys_sendmsg+0x2a5/0x360 [ 172.248340][ T8953] ? __lock_acquire+0x747/0x2de0 [ 172.248368][ T8953] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.248439][ T8953] ? __fget_files+0x2a/0x420 [ 172.248471][ T8953] ? __fget_files+0x3a2/0x420 [ 172.248513][ T8953] __x64_sys_sendmsg+0x1b1/0x290 [ 172.248549][ T8953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.248605][ T8953] do_syscall_64+0x166/0x520 [ 172.248636][ T8953] ? trace_irq_disable+0x3b/0x140 [ 172.248659][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.248683][ T8953] ? clear_bhb_loop+0x70/0xc0 [ 172.248710][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.248733][ T8953] RIP: 0033:0x7faded99e159 [ 172.248760][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.248778][ T8953] RSP: 002b:00007fadebbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.248802][ T8953] RAX: ffffffffffffffda RBX: 00007fadedc25fa0 RCX: 00007faded99e159 [ 172.248819][ T8953] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 172.248833][ T8953] RBP: 00007fadebbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.248847][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.248860][ T8953] R13: 00007fadedc26038 R14: 00007fadedc25fa0 R15: 00007ffefd2bf298 [ 172.248895][ T8953] [ 172.628736][ T8960] SET target dimension over the limit! [ 172.669212][ T8961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.745440][ T8957] wg2 speed is unknown, defaulting to 1000 [ 172.944913][ T5622] Bluetooth: hci4: ISO packet too small [ 173.239871][ T8988] netlink: 'syz.2.726': attribute type 5 has an invalid length. [ 173.305636][ T8988] syzkaller0: entered promiscuous mode [ 173.305662][ T8988] syzkaller0: entered allmulticast mode [ 173.378719][ T8988] tipc: Started in network mode [ 173.378753][ T8988] tipc: Node identity 72adab652866, cluster identity 4711 [ 173.379178][ T8988] tipc: Enabled bearer , priority 0 [ 173.405163][ T8987] tipc: Resetting bearer [ 173.466541][ T8987] tipc: Disabling bearer [ 173.967247][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 174.030687][ T9021] block nbd1: server does not support multiple connections per device. [ 174.031094][ T9021] block nbd1: shutting down sockets [ 174.411131][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 174.879560][ T9023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.879586][ T9023] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 174.990157][ T9023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.990180][ T9023] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 175.103593][ T9023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.103619][ T9023] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 175.137868][ T9060] Bluetooth: ISO socket layer initialized [ 175.155536][ T9023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.155565][ T9023] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 175.253478][ T9060] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 175.578506][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 175.578544][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 176.002255][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.745'. [ 176.337936][ T9090] v: renamed from dummy0 (while UP) [ 176.472216][ T9096] veth1_to_bond: entered allmulticast mode [ 176.477906][ T9093] veth1_to_bond: left allmulticast mode [ 176.736442][ T9109] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 176.910026][ T9109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.002512][ T9115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.003121][ T9115] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 177.004484][ T9115] bond4: (slave gre1): Error -95 calling set_mac_address [ 177.175100][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.749'. [ 177.240996][ T9109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.249149][ T9109] bond4: (slave bond5): Enslaving as an active interface with a down link [ 177.312246][ T9119] bond4 (unregistering): (slave bond5): Releasing active interface [ 177.315776][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.337337][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.356714][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.359818][ T9119] bond4 (unregistering): Released all slaves [ 177.395034][ T9141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.752'. [ 177.410445][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.455175][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.482301][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.513583][ T9131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.804912][ T9107] syzkaller0: entered promiscuous mode [ 177.804941][ T9107] syzkaller0: entered allmulticast mode [ 177.822558][ T9114] tipc: Enabled bearer , priority 0 [ 177.929608][ T9105] tipc: Resetting bearer [ 177.996004][ T9170] Bluetooth: MGMT ver 1.23 [ 178.068760][ T9105] tipc: Disabling bearer [ 179.057939][ T9228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.762'. [ 179.094884][ T9231] openvswitch: netlink: Message has 8 unknown bytes. [ 179.756406][ T9244] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 179.757007][ T9244] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.905434][ T9254] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.905768][ T9254] IPv6: Can't replace route, no match found [ 180.058281][ T9251] syzkaller1: entered promiscuous mode [ 180.058308][ T9251] syzkaller1: entered allmulticast mode [ 180.233518][ T9274] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20004 [ 180.465494][ T9293] openvswitch: netlink: Missing valid actions attribute. [ 180.465541][ T9293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.838399][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 180.914248][ T9315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.775'. [ 181.268411][ T9315] syzkaller0: entered promiscuous mode [ 181.268438][ T9315] syzkaller0: entered allmulticast mode [ 181.314854][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 181.471212][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.778'. [ 181.739609][ T9346] ip_tables: iptables: counters copy to user failed while replacing table [ 181.739957][ T9346] ip_tables: iptables: counters copy to user failed while replacing table [ 181.753410][ T9346] ip_tables: iptables: counters copy to user failed while replacing table [ 181.755061][ T9346] ip_tables: iptables: counters copy to user failed while replacing table [ 181.760475][ T9346] ip_tables: iptables: counters copy to user failed while replacing table [ 181.765193][ T9346] ip_tables: iptables: counters copy to user failed while replacing table [ 182.199405][ T9363] netlink: 56 bytes leftover after parsing attributes in process `syz.4.780'. [ 182.284834][ T9372] xt_hashlimit: size too large, truncated to 1048576 [ 182.646782][ T9387] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 182.646782][ T9386] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 182.680936][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 184.218520][ T9364] net_ratelimit: 28 callbacks suppressed [ 184.218538][ T9364] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 184.250011][ T9386] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 184.251460][ T9387] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 184.397761][ T9394] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 184.404287][ T9394] batman_adv: batadv0: Adding interface: gretap0 [ 184.404336][ T9394] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.404416][ T9394] batman_adv: batadv0: Interface activated: gretap0 [ 184.499200][ T9408] netlink: 5 bytes leftover after parsing attributes in process `syz.0.788'. [ 184.634082][ T9413] netlink: 72 bytes leftover after parsing attributes in process `syz.3.786'. [ 184.830600][ T9418] netlink: 'syz.1.791': attribute type 1 has an invalid length. [ 184.992965][ T9420] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 185.147592][ T9423] netlink: 'syz.4.794': attribute type 12 has an invalid length. [ 185.205188][ T9433] netlink: 'syz.2.795': attribute type 11 has an invalid length. [ 185.340052][ T9440] netlink: 44 bytes leftover after parsing attributes in process `syz.1.798'. [ 185.531274][ T9451] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.570393][ T9443] xt_hashlimit: size too large, truncated to 1048576 [ 185.570414][ T9443] xt_hashlimit: max too large, truncated to 1048576 [ 185.608152][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.802'. [ 185.625948][ T9459] hsr0: entered promiscuous mode [ 185.819931][ T9462] ip_tables: iptables: counters copy to user failed while replacing table [ 185.841585][ T9457] bridge3: entered promiscuous mode [ 185.841610][ T9457] bridge3: entered allmulticast mode [ 186.254261][ T9467] ipvlan2: entered promiscuous mode [ 186.254442][ T9467] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.254462][ T9467] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.256758][ T9467] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 186.692482][ T9476] macsec0: entered promiscuous mode [ 186.700448][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 186.736760][ T9476] macsec0 (unregistering): left promiscuous mode [ 187.189432][ T9490] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 187.202623][ T9490] bond4 (unregistering): Released all slaves [ 187.495392][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.816'. [ 187.495426][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 187.794583][ T9566] Cannot find set identified by id 65534 to match [ 187.986114][ T9573] xt_hashlimit: size too large, truncated to 1048576 [ 188.038720][ T9574] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 188.038929][ T9574] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 188.062434][ T9576] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 188.094814][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 188.094979][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 188.371638][ T9586] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 188.371667][ T9586] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 188.481900][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 188.797248][ T9607] xt_hashlimit: size too large, truncated to 1048576 [ 188.800030][ T9608] xt_hashlimit: size too large, truncated to 1048576 [ 188.949735][ T9624] netlink: 56 bytes leftover after parsing attributes in process `syz.4.834'. [ 189.254873][ T31] audit: type=1800 audit(1790631736.351:3): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.836" name=CB dev="tmpfs" ino=912 res=0 errno=0 [ 189.858166][ T9652] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 189.859758][ T9657] netlink: 120 bytes leftover after parsing attributes in process `syz.3.841'. [ 189.867302][ T9652] bond4 (unregistering): Released all slaves [ 190.026232][ T9653] syzkaller0: entered promiscuous mode [ 190.026260][ T9653] syzkaller0: entered allmulticast mode [ 190.287421][ T9674] netlink: 'syz.3.844': attribute type 9 has an invalid length. [ 190.389905][ T9681] netlink: 76 bytes leftover after parsing attributes in process `syz.3.844'. [ 190.464954][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 191.374179][ T9721] ip6gretap1: entered allmulticast mode [ 191.379891][ T9721] batman_adv: batadv0: Adding interface: ip6gretap1 [ 191.379907][ T9721] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.379937][ T9721] batman_adv: batadv0: Interface activated: ip6gretap1 [ 191.684135][ T9744] block nbd1: Unsupported socket: should be TCP or UNIX. [ 191.947959][ T9754] __nla_validate_parse: 4 callbacks suppressed [ 191.947980][ T9754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.863'. [ 192.102664][ T9760] tc_dump_action: action bad kind [ 192.176702][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.865'. [ 192.330937][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 192.548789][ T9778] netlink: 'syz.0.871': attribute type 15 has an invalid length. [ 192.584327][ T9779] netlink: 'syz.0.871': attribute type 15 has an invalid length. [ 193.009321][ T9796] netlink: 'syz.3.877': attribute type 5 has an invalid length. [ 193.025653][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.877'. [ 193.213686][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.213708][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.408306][ T9817] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.776127][ T9827] netlink: NAT attribute has 8 unknown bytes [ 193.776163][ T9827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.778934][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 194.026284][ T9808] syz.2.879 (9808) used greatest stack depth: 18024 bytes left [ 194.255697][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255771][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.362942][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 194.362966][ T9854] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.365530][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 194.536486][ T5622] block nbd1: Receive control failed (result -107) [ 194.592720][ T9858] wg2 speed is unknown, defaulting to 1000 [ 196.233031][ T9930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.349210][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 196.599293][ T9960] IPv6: addrconf: prefix option has invalid lifetime [ 196.817804][ T9972] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 196.894897][ T9972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.921340][ T9979] bond2: (slave bridge0): Enslaving as an active interface with a down link [ 197.501091][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 197.529937][T10005] veth1_to_team: entered promiscuous mode [ 197.538685][T10005] veth1_to_team: left promiscuous mode [ 198.098239][T10023] netlink: 666 bytes leftover after parsing attributes in process `syz.0.928'. [ 198.559087][T10032] ovs-s!: entered promiscuous mode [ 199.148527][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 199.148555][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 199.284019][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 199.999305][T10070] syzkaller0: entered promiscuous mode [ 199.999331][T10070] syzkaller0: entered allmulticast mode [ 200.031313][T10070] 0: reclassify loop, rule prio 0, protocol 800 [ 200.165522][T10076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.349972][T10078] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 200.350077][T10078] syzkaller1: linktype set to 825 [ 200.431252][T10080] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 200.431402][T10080] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 200.431499][T10080] syzkaller1: linktype set to 825 [ 200.568922][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 200.900326][T10109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.952'. [ 201.499065][T10119] Bluetooth: MGMT ver 1.23 [ 201.701203][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'. [ 201.736842][T10138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.751986][T10138] macvlan2: entered promiscuous mode [ 201.752008][T10138] macvlan2: entered allmulticast mode [ 202.719172][T10179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.978'. [ 202.845334][T10187] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 202.910529][T10185] [ 202.912924][T10185] ====================================================== [ 202.919970][T10185] WARNING: possible circular locking dependency detected [ 202.927028][T10185] syzkaller #0 Not tainted [ 202.931467][T10185] ------------------------------------------------------ [ 202.938522][T10185] syz.1.977/10185 is trying to acquire lock: [ 202.944523][T10185] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 202.953716][T10185] [ 202.953716][T10185] but task is already holding lock: [ 202.961105][T10185] ffff8880366ae9b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 202.970655][T10185] [ 202.970655][T10185] which lock already depends on the new lock. [ 202.970655][T10185] [ 202.981094][T10185] [ 202.981094][T10185] the existing dependency chain (in reverse order) is: [ 202.990137][T10185] [ 202.990137][T10185] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 202.997743][T10185] __might_fault+0xcb/0x130 [ 203.002829][T10185] _copy_from_user+0x28/0xb0 [ 203.007980][T10185] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 203.014516][T10185] ip_generic_getfrag+0x149/0x2d0 [ 203.020099][T10185] __ip6_append_data+0x3b26/0x40c0 [ 203.025772][T10185] ip6_append_data+0x108/0x270 [ 203.031090][T10185] rawv6_sendmsg+0x1298/0x18c0 [ 203.036414][T10185] sock_sendmsg_nosec+0x10e/0x180 [ 203.041990][T10185] ____sys_sendmsg+0x54e/0x850 [ 203.047299][T10185] ___sys_sendmsg+0x2a5/0x360 [ 203.052517][T10185] __x64_sys_sendmsg+0x1b1/0x290 [ 203.058006][T10185] do_syscall_64+0x166/0x520 [ 203.063137][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.069577][T10185] [ 203.069577][T10185] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 203.077327][T10185] lock_sock_nested+0x41/0x100 [ 203.082633][T10185] inet_shutdown+0x6a/0x390 [ 203.087680][T10185] nbd_mark_nsock_dead+0x2cb/0x550 [ 203.093329][T10185] recv_work+0x1cee/0x1e10 [ 203.098283][T10185] process_scheduled_works+0xc3d/0x1630 [ 203.104372][T10185] worker_thread+0xa47/0xfb0 [ 203.109499][T10185] kthread+0x38b/0x480 [ 203.114095][T10185] ret_from_fork+0x514/0xb70 [ 203.119214][T10185] ret_from_fork_asm+0x1a/0x30 [ 203.124509][T10185] [ 203.124509][T10185] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 203.132171][T10185] __mutex_lock+0x19d/0x1550 [ 203.137302][T10185] nbd_queue_rq+0x373/0xff0 [ 203.142334][T10185] blk_mq_dispatch_rq_list+0x499/0x1990 [ 203.148421][T10185] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 203.155286][T10185] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 203.161798][T10185] blk_mq_run_work_fn+0x16c/0x300 [ 203.167370][T10185] process_scheduled_works+0xc3d/0x1630 [ 203.173453][T10185] worker_thread+0xa47/0xfb0 [ 203.178588][T10185] kthread+0x38b/0x480 [ 203.183191][T10185] ret_from_fork+0x514/0xb70 [ 203.188311][T10185] ret_from_fork_asm+0x1a/0x30 [ 203.193619][T10185] [ 203.193619][T10185] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 203.200849][T10185] __mutex_lock+0x19d/0x1550 [ 203.205981][T10185] nbd_queue_rq+0xc1/0xff0 [ 203.210932][T10185] blk_mq_dispatch_rq_list+0x499/0x1990 [ 203.217021][T10185] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 203.223894][T10185] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 203.230427][T10185] blk_mq_run_work_fn+0x16c/0x300 [ 203.236002][T10185] process_scheduled_works+0xc3d/0x1630 [ 203.242086][T10185] worker_thread+0xa47/0xfb0 [ 203.247250][T10185] kthread+0x38b/0x480 [ 203.251856][T10185] ret_from_fork+0x514/0xb70 [ 203.256997][T10185] ret_from_fork_asm+0x1a/0x30 [ 203.262301][T10185] [ 203.262301][T10185] -> #3 (set->srcu){.+.+}-{0:0}: [ 203.269439][T10185] __synchronize_srcu+0xc9/0x2f0 [ 203.274914][T10185] elevator_switch+0x1e8/0x7b0 [ 203.280206][T10185] elevator_change+0x2fa/0x480 [ 203.285497][T10185] elevator_set_default+0x375/0x440 [ 203.291221][T10185] blk_register_queue+0x3f3/0x4e0 [ 203.296785][T10185] __add_disk+0x6b8/0xdb0 [ 203.301653][T10185] add_disk_fwnode+0x100/0x3a0 [ 203.306949][T10185] nbd_dev_add+0x733/0xb60 [ 203.311898][T10185] nbd_init+0x168/0x1f0 [ 203.316596][T10185] do_one_initcall+0x250/0x870 [ 203.321923][T10185] do_initcall_level+0x10a/0x1a0 [ 203.327413][T10185] do_initcalls+0x59/0xa0 [ 203.332294][T10185] kernel_init_freeable+0x29d/0x3e0 [ 203.338028][T10185] kernel_init+0x22/0x1d0 [ 203.342891][T10185] ret_from_fork+0x514/0xb70 [ 203.348012][T10185] ret_from_fork_asm+0x1a/0x30 [ 203.353316][T10185] [ 203.353316][T10185] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 203.361159][T10185] __mutex_lock+0x19d/0x1550 [ 203.366291][T10185] elevator_change+0x1af/0x480 [ 203.371586][T10185] elevator_set_none+0xb5/0x140 [ 203.376980][T10185] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 203.383339][T10185] nbd_start_device+0x189/0xb30 [ 203.388746][T10185] nbd_genl_connect+0x167d/0x1cd0 [ 203.394299][T10185] genl_family_rcv_msg_doit+0x233/0x340 [ 203.400385][T10185] genl_rcv_msg+0x614/0x7a0 [ 203.405465][T10185] netlink_rcv_skb+0x226/0x4a0 [ 203.410760][T10185] genl_rcv+0x28/0x40 [ 203.415302][T10185] netlink_unicast+0x7bd/0x940 [ 203.420610][T10185] netlink_sendmsg+0x813/0xb40 [ 203.425911][T10185] sock_sendmsg_nosec+0x13a/0x180 [ 203.431478][T10185] ____sys_sendmsg+0x54e/0x850 [ 203.436782][T10185] ___sys_sendmsg+0x2a5/0x360 [ 203.442016][T10185] __x64_sys_sendmsg+0x1b1/0x290 [ 203.447498][T10185] do_syscall_64+0x166/0x520 [ 203.452634][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.459063][T10185] [ 203.459063][T10185] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 203.467685][T10185] blk_alloc_queue+0x544/0x690 [ 203.472990][T10185] __blk_mq_alloc_disk+0x194/0x390 [ 203.478643][T10185] nbd_dev_add+0x494/0xb60 [ 203.483592][T10185] nbd_init+0x168/0x1f0 [ 203.488295][T10185] do_one_initcall+0x250/0x870 [ 203.493619][T10185] do_initcall_level+0x10a/0x1a0 [ 203.499093][T10185] do_initcalls+0x59/0xa0 [ 203.503960][T10185] kernel_init_freeable+0x29d/0x3e0 [ 203.509689][T10185] kernel_init+0x22/0x1d0 [ 203.514555][T10185] ret_from_fork+0x514/0xb70 [ 203.519696][T10185] ret_from_fork_asm+0x1a/0x30 [ 203.525001][T10185] [ 203.525001][T10185] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 203.532223][T10185] __lock_acquire+0x164c/0x2de0 [ 203.537634][T10185] lock_acquire+0x115/0x350 [ 203.542678][T10185] fs_reclaim_acquire+0x71/0x100 [ 203.548154][T10185] prepare_alloc_pages+0x149/0x600 [ 203.553796][T10185] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 203.560144][T10185] alloc_pages_mpol+0x21e/0x390 [ 203.565532][T10185] alloc_pages_noprof+0xb1/0x2b0 [ 203.571011][T10185] pte_alloc_one+0x22/0x370 [ 203.576062][T10185] __pte_alloc+0x25/0x1a0 [ 203.580935][T10185] do_pte_missing+0x2db7/0x34b0 [ 203.586322][T10185] handle_mm_fault+0x1a53/0x3750 [ 203.591801][T10185] do_user_addr_fault+0x746/0x1340 [ 203.597452][T10185] exc_page_fault+0x6a/0xc0 [ 203.602497][T10185] asm_exc_page_fault+0x26/0x30 [ 203.607889][T10185] fault_in_readable+0x8e/0x130 [ 203.613279][T10185] fault_in_iov_iter_readable+0x1c8/0x310 [ 203.619538][T10185] generic_perform_write+0x7a0/0x8f0 [ 203.625367][T10185] shmem_file_write_iter+0xf8/0x120 [ 203.631108][T10185] vfs_write+0x612/0xba0 [ 203.635908][T10185] ksys_write+0x150/0x270 [ 203.640776][T10185] do_syscall_64+0x166/0x520 [ 203.645911][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.652337][T10185] [ 203.652337][T10185] other info that might help us debug this: [ 203.652337][T10185] [ 203.662575][T10185] Chain exists of: [ 203.662575][T10185] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 203.662575][T10185] [ 203.675194][T10185] Possible unsafe locking scenario: [ 203.675194][T10185] [ 203.682657][T10185] CPU0 CPU1 [ 203.688030][T10185] ---- ---- [ 203.693403][T10185] rlock(&mm->mmap_lock); [ 203.697839][T10185] lock(sk_lock-AF_INET6); [ 203.704874][T10185] lock(&mm->mmap_lock); [ 203.711739][T10185] lock(fs_reclaim); [ 203.715741][T10185] [ 203.715741][T10185] *** DEADLOCK *** [ 203.715741][T10185] [ 203.723896][T10185] locks held by syz.1.977/10185: 3, last CPU#0: [ 203.730162][T10185] #0: ffff8880683b6460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 203.739074][T10185] #1: ffff88802a15b8d0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 203.750237][T10185] #2: ffff8880366ae9b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 203.760181][T10185] [ 203.760181][T10185] stack backtrace: [ 203.766087][T10185] CPU: 0 UID: 0 PID: 10185 Comm: syz.1.977 Not tainted syzkaller #0 PREEMPT(full) [ 203.775394][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.785472][T10185] Call Trace: [ 203.788775][T10185] [ 203.791718][T10185] dump_stack_lvl+0xe8/0x150 [ 203.796338][T10185] print_circular_bug+0x2e2/0x300 [ 203.801382][T10185] check_noncircular+0x12f/0x150 [ 203.806361][T10185] __lock_acquire+0x164c/0x2de0 [ 203.811244][T10185] ? stack_trace_save+0xa9/0x100 [ 203.816199][T10185] ? __pfx_stack_trace_save+0x10/0x10 [ 203.821589][T10185] lock_acquire+0x115/0x350 [ 203.826126][T10185] ? prepare_alloc_pages+0x149/0x600 [ 203.831433][T10185] ? __update_page_owner_handle+0x5a/0x580 [ 203.837261][T10185] fs_reclaim_acquire+0x71/0x100 [ 203.842221][T10185] ? prepare_alloc_pages+0x149/0x600 [ 203.847524][T10185] prepare_alloc_pages+0x149/0x600 [ 203.852672][T10185] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 203.858501][T10185] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.864853][T10185] ? __pfx_policy_nodemask+0x10/0x10 [ 203.870166][T10185] ? __lock_acquire+0x747/0x2de0 [ 203.875216][T10185] alloc_pages_mpol+0x21e/0x390 [ 203.880095][T10185] alloc_pages_noprof+0xb1/0x2b0 [ 203.885053][T10185] pte_alloc_one+0x22/0x370 [ 203.889587][T10185] __pte_alloc+0x25/0x1a0 [ 203.893936][T10185] ? __pfx_cmp_ex_search+0x10/0x10 [ 203.899078][T10185] ? rep_movs_alternative+0x4a/0xa0 [ 203.904291][T10185] do_pte_missing+0x2db7/0x34b0 [ 203.909164][T10185] ? mtree_range_walk+0x707/0x8b0 [ 203.914219][T10185] handle_mm_fault+0x1a53/0x3750 [ 203.919188][T10185] ? handle_mm_fault+0xf1/0x3750 [ 203.924155][T10185] ? __pfx_handle_mm_fault+0x10/0x10 [ 203.929470][T10185] ? lock_mm_and_find_vma+0xa7/0x340 [ 203.934778][T10185] do_user_addr_fault+0x746/0x1340 [ 203.939908][T10185] exc_page_fault+0x6a/0xc0 [ 203.944436][T10185] asm_exc_page_fault+0x26/0x30 [ 203.949319][T10185] RIP: 0010:fault_in_readable+0x8e/0x130 [ 203.954972][T10185] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 60 bc ac ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 203.974599][T10185] RSP: 0018:ffffc9000325faa8 EFLAGS: 00050202 [ 203.980702][T10185] RAX: ffffffff821b2201 RBX: 0000000000000200 RCX: ffff888052655dc0 [ 203.988697][T10185] RDX: 0000000000000002 RSI: 0000200000200000 RDI: 0000200000200200 [ 203.996681][T10185] RBP: ffffc9000325fc01 R08: ffff888052655dc0 R09: 0000000000000002 [ 204.004673][T10185] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 204.012661][T10185] R13: 0000200000200000 R14: 0000200000200000 R15: 0000200000200200 [ 204.020664][T10185] ? fault_in_readable+0x11/0x130 [ 204.025725][T10185] ? fault_in_readable+0x80/0x130 [ 204.030774][T10185] fault_in_iov_iter_readable+0x1c8/0x310 [ 204.036509][T10185] generic_perform_write+0x7a0/0x8f0 [ 204.041824][T10185] ? __pfx_generic_perform_write+0x10/0x10 [ 204.047650][T10185] ? do_raw_spin_unlock+0xf5/0x200 [ 204.052786][T10185] ? mnt_put_write_access_file+0xc3/0x100 [ 204.058524][T10185] ? file_update_time_flags+0x3ab/0x440 [ 204.064083][T10185] shmem_file_write_iter+0xf8/0x120 [ 204.069325][T10185] vfs_write+0x612/0xba0 [ 204.073601][T10185] ? __pfx_vfs_write+0x10/0x10 [ 204.078393][T10185] ? __pfx_do_futex+0x10/0x10 [ 204.083091][T10185] ? kmem_cache_free+0x182/0x650 [ 204.088056][T10185] ksys_write+0x150/0x270 [ 204.092418][T10185] ? __pfx_ksys_write+0x10/0x10 [ 204.097294][T10185] do_syscall_64+0x166/0x520 [ 204.101906][T10185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.107984][T10185] ? clear_bhb_loop+0x70/0xc0 [ 204.112678][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.118590][T10185] RIP: 0033:0x7fb02179e159 [ 204.123022][T10185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.142635][T10185] RSP: 002b:00007fb022728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.151086][T10185] RAX: ffffffffffffffda RBX: 00007fb021a25fa0 RCX: 00007fb02179e159 [ 204.159075][T10185] RDX: 0000000000806000 RSI: 0000200000000200 RDI: 0000000000000005 [ 204.167058][T10185] RBP: 00007fb02183506b R08: 0000000000000000 R09: 0000000000000000 [ 204.175051][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.183040][T10185] R13: 00007fb021a26038 R14: 00007fb021a25fa0 R15: 00007ffe97628dd8 [ 204.191032][T10185]