last executing test programs: 7.191172067s ago: executing program 2 (id=814): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) r1 = socket$kcm(0xa, 0x3, 0x87) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001640)={{r1, &(0x7f0000000080)='syzkaller1\x00', 0x511203, &(0x7f00000000c0)={@_ha_fsid={[0xffffffff, 0x4]}, {0x4c, 0x6400, 0xc03, 0xffffffff}}, 0x94, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xac}, 0x6, &(0x7f0000001580)=[{0x3, 0x2, &(0x7f00000001c0)='$}!-/\x00', &(0x7f0000000240)="34e9d5b66126cad58f4560510a47b966a1ff1414e860f33201f0a545fdfe87c0c0a5ef", 0x23, 0x10}, {0x1, 0x8001, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="72f7ff7afddec82cfb9d3e24a968f8c4d0a8bfa8cb398a32538513", 0x1b, 0x12}, {0x1, 0x8ee5, &(0x7f0000000300)='*.\x00', &(0x7f0000000340)}, {0x2, 0xff33, &(0x7f0000000380)='#&\x00', &(0x7f00000003c0)="0861145272cfc16cb9a04bfcb1befc0d365c68e66ce494cae7e70034e2a617c0bb13e23175bf75e66d1cd47bec7ae2db6feba62022c2348cf10ba96b9a7f78d94764e769bb51d083aeec14affcedecde2df6bc2602b12157e67ea68adf41a8a086c1163ae85a733eb7e1ec301c08040f76315fcdb6419c7f8e2ac13a9a14efac49bdf0d06a66c1a04a6148869853e921ba", 0x91, 0x20}, {0x2, 0x7ccf, &(0x7f0000000480)='/dev/net/tun\x00', &(0x7f00000004c0)="7a79da4454b0728f7f8897c49f1a50bfcf66246eed1af8d97457433c8a58c65fa1970d33fae8ab4ba8619996aa5333d39416bf7442347edac90d1fcbd082da11e7fcc31d9720f67bab8ef66d8aef8fd9de94904609cb03f1", 0x58, 0x62}, {0x1, 0xfffffffe, &(0x7f0000000540)='syzkaller1\x00', &(0x7f0000000580)="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", 0x1000, 0x2}]}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000016c0)=0x804, 0x4) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xd, 0x7, 0x5, 0xc, 0x5, 0x6}, 0x0, 0x0, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$XFS_IOC_DIOINFO(r7, 0x800c581e, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.539589641s ago: executing program 4 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}}, 0x0) 5.431370938s ago: executing program 2 (id=827): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x6}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x31, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f5}}, @call={0x85, 0x0, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2b89, 0x0, 0x0, 0x0, 0xfe0}, @ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7f}, @call={0x85, 0x0, 0x0, 0x26}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000500)=""/156, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xf, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x1, 0x4, 0x0, 0x4}], 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r1, r0}, 0xc) socket$inet6(0xa, 0x80003, 0xff) close(0x3) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0x51}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa14}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc814) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.192485377s ago: executing program 4 (id=828): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x3}, 0x70001}], 0x1, 0x102, 0x0) (async) recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x3}, 0x70001}], 0x1, 0x102, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x14, r4, 0x321, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x7, 0x0, &(0x7f0000000040)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$sock(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}, {&(0x7f00000004c0)="62c99e05d9", 0x5}], 0x2}}], 0x1, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) (async) openat$cgroup_int(r9, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8000, 0x10, 0x0, 0x1, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0xfffffffffffffcc3, 0xdc, 0x0, 0x2, [0x0, 0x3]}, @end, @lsrr={0x83, 0x17, 0x42, [@loopback, @rand_addr=0x64010100, @broadcast, @empty, @empty]}, @rr={0x7, 0x13, 0x1c, [@broadcast, @local, @empty, @local]}, @timestamp_prespec={0x44, 0x14, 0xf9, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x284}, {@broadcast, 0xf}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8000, 0x10, 0x0, 0x1, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0xfffffffffffffcc3, 0xdc, 0x0, 0x2, [0x0, 0x3]}, @end, @lsrr={0x83, 0x17, 0x42, [@loopback, @rand_addr=0x64010100, @broadcast, @empty, @empty]}, @rr={0x7, 0x13, 0x1c, [@broadcast, @local, @empty, @local]}, @timestamp_prespec={0x44, 0x14, 0xf9, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x284}, {@broadcast, 0xf}]}]}}}}}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x2aef, '\x00', r11, r12, 0x4, 0x3, 0x1}, 0x50) 4.86866488s ago: executing program 2 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x200, @mcast1}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20044800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) 4.789850948s ago: executing program 4 (id=832): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4854}, 0x20004000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884) 4.592488985s ago: executing program 2 (id=834): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x50) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x7, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x1c, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x1, 0x8, 0xb, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x54, '\x00', r2, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000002300)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000002340)=[0x1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002380)=[{0x3, 0x1, 0x3, 0xb}, {0x3, 0x3, 0x6, 0x1}, {0x2, 0x2, 0x0, 0x1}, {0x3, 0x3, 0x0, 0xc}, {0x4, 0x3, 0x6, 0x7}, {0x1, 0x4, 0x2, 0xc}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000024c0)=r5, 0x4) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x39, 0x886, 0xdbc, 0x400, 0x1, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x3, 0x8, 0x5, 0x7fff}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x91fb, 0x8, 0x8032, 0x1}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r7, 0x1, 0x6}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x44090) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x0, 0x800, 0x70bd25, 0x81c00000, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x40012) 4.591160594s ago: executing program 1 (id=835): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x45) 4.264752527s ago: executing program 4 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0xf, 0x6, 0x305, 0x0, 0x0, {0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xd1}, 0x8000) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000780)={&(0x7f0000000100)=0x5, 0x1afb, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x130, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80, 0x6f}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xca, 0x2a, [@tim={0x5, 0xc4, {0x4, 0x67, 0x1, "cb9273b402ed0492541209143b5fddadae84109a54ea1289605794d2941c727b4862cde416eff9dacc27b4a0c41b332a0c31d5063dc6b996aca18594b69be86d65d72baf0242f994886a4a04f179fa5eb8dac4c613169a10e2b9f6460a84b21162a7e1a09ebc681b37cc5480354040c5c5b48f4d4db767da543ff8b3af74b48be2fb961f462309ecd26541f1a785dbdadd796d6ead4004c07d5cb1383f9cf4f20af84caaec805b2c147ad08a76b764e498b9dbfd96efa6c82431882febf0a5fea2"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_MAC={0xa, 0x6, @random="14592ed7e318"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000814}, 0x400c8c5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000a40)='macvlan1\x00', 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x3e, 0x5, 0x9, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) socket$l2tp6(0xa, 0x2, 0x73) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x9c8a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={0x0, 0x97a1}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000e80)={r2, 0xb41, 0x2, 0x600}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x1d, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @alu={0x7, 0x1, 0x2, 0x5, 0x5, 0x8, 0x10}, @map_fd={0x18, 0x6, 0x1, 0x0, r8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0d}, @alu={0x0, 0x1, 0xa, 0x5, 0xb, 0xfffffffffffffff8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='syzkaller\x00', 0x5, 0x13, &(0x7f0000000d40)=""/19, 0x41000, 0x23, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x1, 0x800, 0x45a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000fc0)=[0x1, r10, 0x1, r11, r12, 0x1, r13, r14], &(0x7f0000001000)=[{0x3, 0x4, 0x1, 0xa}], 0x10, 0x8}, 0x94) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x26}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000001200)) syz_emit_ethernet(0xc2, &(0x7f0000001240)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x2, 0x21, 0xb4, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0x4, [{@loopback, 0x1}, {@private=0xa010102, 0x6}]}, @end, @timestamp_prespec={0x44, 0x14, 0xd0, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x1ff}, {@private=0xa010102, 0xffff}]}]}}, {0x11, 0x8, 0x0, @broadcast, "cbe685f3b62a3d59f56c3de122b8c630a2ef5ed75a7b6c8c882db708bf5247bf5c3a9788f18887323f1407677ea5cfa9589ad656c8ca85f1d55fb3f8a67c755c57b2ef6afa25d3e270079d5a3ae7bef935c182ba752cdad28053640d621b8d7cbc36f36b544f71cab02e7aec"}}}}}, &(0x7f0000001340)={0x1, 0x1, [0xd77, 0x605, 0x1a2, 0xd57]}) socket$netlink(0x10, 0x3, 0x12) r15 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001380), &(0x7f00000013c0)=0x10, 0x80000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r12, 0xf517, 0x0) ioctl$SIOCX25GFACILITIES(r15, 0x89e2, &(0x7f0000001400)) socket$kcm(0x29, 0x0, 0x0) 3.771932748s ago: executing program 1 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRESDEC=r0], 0x7c}}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x0) (async) writev(r2, &(0x7f0000000680)=[{&(0x7f00000027c0)="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", 0x1050}, {&(0x7f0000000640)="45569ad16da0de81c71b975b60", 0xd}], 0x2) (async) r3 = socket$kcm(0xa, 0x8, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000300)="e62104fc906436084b83de153268d33187516e369bf859916e50d4a1569a47cb5b59d8c296c333947d127a54e7a29ab1c8a9a92555f28146731d22ee9530b70944f735cfc6590ab28830f48c2bc05e4b789b2d9008cacc94f59ea234f5239c735d97010b6c5b7d54be614d86de", 0x6d) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x20000000) (async) socket$kcm(0x2, 0x3, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="4800000010e40304000000000000000000000000f749f7514aa735c800d83deeff4a18d94f2b785efa48077ec6db809eaf9b0cc5aa0539ccf7e29e9f0ca6f2e4b699258a9770fcd01cff3bf5c8de44390fe5ca63866d9d0a1c41252e9faec2f69ed78cdb78b06c09c3711fbf7e1a3c37f3d12688f54d9e2fd0b0b297015b58", @ANYRES32=r7, @ANYBLOB="00000000000100000a000100aaaaaaaaaa0000001c0012800b00010065727370616e00000c000280080007007f000001", @ANYRES16=r4], 0x48}}, 0x8042) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r7], 0x7c}}, 0x40000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000540)="fbd2b9ed29d8974a6c345aa9badb781d95ebe75f08916ac3b4da17", 0x1b}], 0x1}, 0x0) (async) accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x800) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000380)={0x49, 0x0, 0x6, 0x4, 0x88004000}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) pipe(&(0x7f0000000500)) getpeername$netlink(r0, &(0x7f00000003c0), &(0x7f0000000440)=0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) (async) close(r0) 3.63353573s ago: executing program 0 (id=844): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e25, 0x0, @rand_addr=' \x01\x00', 0xfffffffb}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', r3, 0x1, 0x7, 0x5, 0x2, {{0x11, 0x4, 0x3, 0x2, 0x44, 0x66, 0xe78, 0xd, 0x2f, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x4a, 0x3, 0x7, [{@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x36b9}]}, @end, @timestamp={0x44, 0x10, 0x2f, 0x0, 0x3, [0x7, 0x4, 0x8]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) ioctl$FITHAW(r1, 0xc0045878) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYBLOB="0606010d0000000000"], 0x10) 3.504294328s ago: executing program 1 (id=845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180200007500000000000000020004008500000026000000950000000000000047d2d1b78e5b33557a7db7eeb8e25638c1d2f514361586bb1ce8355df77387a3804481f5b1491dd62a642f7f21b7d269aa9740045ecc6cf75914ae9e9923a28f305580a38d18b4fd7ffd98d2ec9c4f3b48876656505ae4876b520726ab3b1531966fb0d4387be6fd9f44752e11c7b3e320e9fdcd835f66f4c51e609b5c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xd, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7d15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x1, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdb060d9d81020073797a3000000000080041007278650014003300687372300000000000000000000000000900020073797a310000000008004100739c8ff31100330076657468305f746f5f626f6e64000000"], 0x60}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2a, 0x63, &(0x7f0000000080)="5fab413d270cec0465f5fc3f6da4cae37472246135260602e30ec7dc16531b8d0bb99da3dc71504f2176", &(0x7f00000003c0)=""/99, 0x5, 0x0, 0xd4, 0x85, &(0x7f0000000440)="5ae2bb912e49a234ba239fc69950ee7c06cf06fcdffe9a605d42aad4404830fd4ce0fe4bc5499f59528b69eaf04fa334fbe5e0beb95e2fd2b3c199eace71e075a9d5184c34c2f7a7b3a1ece9a4568f9b72cb8e0f4a65a1f0cdfe77586d32064da9e3185148d9431b610b558c094f28185e3187660483528fdcb5a8ae90534537aa1037a34730e02afc2c2c455978ecb0ad06f87fec2b214184ff07c9500cca477061d86a1431c6e5f307d8aeee58cf5928a8fb218d805435663ed681d39f98f7a9dae2def68ad04c413d12e5bd06bf81198841f0", &(0x7f0000000540)="2f4c3e58e889f32f1bb7278987b83562bd5903f37c2239c15ed8c4b48e9d8e6f43efd6306dabbb596e328aa06632c43a7b9e05d89f32957c47bb97f7cfbf4f5cef3c78b318856f1ce78466e4376ace142367efa489f0c8d1ef00cbae898d81cd2e01b9da31a420fb74045e18ff6476e2f6136982a9c59bbadc53b5628cc656f62abfa14fc3", 0x0, 0x0, 0x7f}, 0x50) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000095500100adbd7000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d6e657420a6e2572a25"], 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0xa}, 0x6e) unshare(0x26020480) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000016f558a99b3d22867485aa74875df828fd282452ab775248f67b4bfb24603f67972c6f1929c85f216963c6753c64d9c3421822eaa76f4f0adae54e13d77fe06289ed8c051cc8a2a226d45e8bc60ec3a20eb568c377ec79641c75fe43966f237b3d12be639fb0404013fb179d4aa9a126d42b3baec9cc5234521eac9913158b53ec0b6eb99669e1c0cee5a3ab3c10cf6ca3ab3a4602c04e"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x3, r9}, 0x38) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000014011a80100102803c000180080021c0"], 0x134}, 0x1, 0x0, 0x0, 0x4040010}, 0x20048094) 3.352502768s ago: executing program 0 (id=846): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c40000000000000000000085"], 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000013002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00020200200100"/24], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r2, @ANYRES32=r1], &(0x7f0000000140)=""/162, 0x3e, 0xa2, 0x0, 0x20c59b}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 2.446688827s ago: executing program 0 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x6, @private1, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000008004500002000000000007390780000030009000000000000"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0xe440, 0x7fffffff, 0xffffffff, 0xfffffffb, 0xfffffffc}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r5, @ANYRES8=r3, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x8365432d112f2bbe) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0700000000000000df250600000008000200060100400700020003000000"], 0x24}}, 0x4048801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032abd7000fddbdf2509000000080002010000000040000100000000000000000008000700b3bbecc4136711f3a69d406fc1ca5824117cbec93f5cdf69c6431145a8c1c12b881578ee4b73741db3f6196d809a4a3f6a0893eccc9f4bb7bba6eb6005df51b4cb1ce32b9ff7d7dfbdcb8e50ffcc145facec51a8acd46c6e865ef124494a8c7c65", @ANYRES32=0x0, @ANYBLOB="060005004e240000060005004e23000014000400ff0200000000000000000000000000010500020009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x2}, 0x1, {[0x0, 0x0, 0x0, 0x7ff, 0x0, 0x80000000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000800)="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", 0x1000}], 0x1) setsockopt$MRT_DEL_VIF(r9, 0x0, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xe8, 0x10001, @vifc_lcl_addr=@remote, @rand_addr=0x64010102}, 0x10) 1.453739497s ago: executing program 4 (id=849): unshare(0x62040200) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18010000", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="6c007d801d0003004b4d0c7eef71cae994b4f1f9cfa9f3fa698c64910b61fc7bfe000000450002002705ec8f644883d024aa5008fb892f5f26b19e06e565c9ef0549acb14a74316336b67dc8d09fb195a261174105f18639f2329194452dd0de290cfc3551d662bd6e000000060098000900000080002d800b000000250e8aefc3c2230005000000320000000a00000002020202020200001f000000efaf04ae4b1ad2486dd83e3da0f0f88f85aecf86d638075901159d000a00000001010101010100000a00000001010101010100000a00000002020202020200000a00000001010101010100000a00000001010101010100000600f70008080000"], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80, 0x0}, 0xe07e872400dfefca) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/169, 0xa9}], 0x1, &(0x7f0000000400)=""/58, 0x3a}, 0x100000}, {{&(0x7f0000000700)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/5, 0x5}, {&(0x7f0000000a00)=""/165, 0xa5}], 0x3, &(0x7f0000000b00)=""/91, 0x5b}, 0x4}, {{&(0x7f0000000b80)=@vsock, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/32, 0x20}, {&(0x7f0000000c40)=""/209, 0xd1}, {&(0x7f0000000d40)=""/19, 0x13}, {&(0x7f0000000d80)=""/247, 0xf7}, {&(0x7f0000000e80)=""/6, 0x6}, {&(0x7f0000000ec0)=""/60, 0x3c}], 0x6, &(0x7f0000000f80)=""/245, 0xf5}, 0x1}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001080)=""/73, 0x49}, {&(0x7f0000001100)=""/161, 0xa1}, {&(0x7f00000011c0)=""/168, 0xa8}], 0x3}}], 0x4, 0x300, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000000000)=""/31, 0x1f) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x80000002, 0x10, 0x1, 0xfffffffc}, 0x50) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$kcm(0x2, 0x9, 0x84) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@getlink={0x168, 0x12, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x23900, 0x1002}, [@IFLA_VF_PORTS={0x140, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7ac46b99d5eae47175233738773d309b"}, @IFLA_PORT_PROFILE={0x8, 0x2, '@&\'\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfff}, @IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a5fb00ce8a96d24521acb5ba34f10216"}, @IFLA_PORT_PROFILE={0xa, 0x2, '+&$%%\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '@e}!^r\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cc8e69881a95385e7123565199ba2bd7"}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c52180e0cced3fe3e6fe4ba385243b48"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "75bb5cd9943b3bd40e7acef647417722"}, @IFLA_PORT_VF={0x8, 0x1, 0xb}, @IFLA_PORT_PROFILE={0xe, 0x2, ':).$!-{X!\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7b1bb4e44c3949726a242247b71fc155"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "01787ae8477c7ee59c6c2eb7d2d4300b"}, @IFLA_PORT_PROFILE={0xa, 0x2, '+&$%%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e09c62d1587e5fba6f15b26c795d459f"}]}]}, @IFLA_NET_NS_FD={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x20024084}, 0x240408c0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="72cf1a35ab003d"], 0x9) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) 1.435112907s ago: executing program 0 (id=850): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) close(0x3) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x88c0) recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000980)=""/80, 0x50}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000001840)=""/4079, 0xfef}], 0x5}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}], 0x4, 0x40002002, 0x0) 1.431955893s ago: executing program 1 (id=851): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x8e20, @rand_addr=0x64010102}, 0x10) listen(r1, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r2, 0x3) preadv(r0, &(0x7f0000000100), 0x0, 0x8, 0x30) 1.429187939s ago: executing program 3 (id=852): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 1.373185494s ago: executing program 2 (id=853): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) (async) sendmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async, rerun: 64) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x880) (async, rerun: 64) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) r4 = accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async, rerun: 64) close(0x3) (async) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) 1.206788898s ago: executing program 3 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4014) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={@remote, 0x1, 0x0, 0x90, 0x0, [{@multicast2}, {@broadcast}, {@multicast2}, {}, {@dev}, {@empty}, {@dev}, {@dev}, {@multicast2}]}}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x81, 0x7, 0x7fff, 0xb5b, 0x9, 0xfffffffffffffff4, 0x5, 0xff}, &(0x7f0000000240)={0x817, 0x7fffffff, 0x5, 0x7000000000, 0x6f7, 0x7, 0x3416, 0x8}, &(0x7f0000000280)={0xb35d, 0x80000001, 0xffffffffffffffff, 0x5, 0xe1cf, 0x7096, 0x7, 0x10001}, &(0x7f0000000300)={r1, r2+60000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x8]}, 0x8}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{r0, &(0x7f00000003c0)='sit0\x00', 0x8100, &(0x7f0000000400)={@_ha_fsid={[0xb0, 0x4]}, {0x4, 0xfff5, 0x0, 0x4276eafa}}, 0x7, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xab}, 0x3, &(0x7f0000000680)=[{0x3, 0x2cf, &(0x7f00000004c0)='-{[.\x00', &(0x7f0000000500)="1ac30301dda20661df160ed5cc4498028b1e41b6d93ccd473a0a66", 0x1b, 0x20}, {0x3, 0x2, &(0x7f0000000540)='sit0\x00', &(0x7f0000000580)="aa0104139f9cd81b9f9918e5b36b2940", 0x10, 0x18}, {0x3, 0x457a, &(0x7f00000005c0)=',\x00', &(0x7f0000000600)="d8d692d4791af88a98b7b8c9eb86b6e08d6c1b9eba332e90f0b8e4c3b80bc2e3dc349dae2ae36273dd34ac7649e739a52feb46df4daff9fefee93a6567bf93284c28bbc22105e0e6942c833041", 0x4d, 0x10}]}) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x11}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c26fa1b729b8897}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x10}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x37, r3}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000ac0)={0x0, 0x8b31, 0x7, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000000ec0)={r8, "3a29bb25bc301e7a8f1c67eb76961ecd"}) (async) r9 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0x80049370, &(0x7f0000001ec0)) (async) preadv(0xffffffffffffffff, &(0x7f0000004140)=[{&(0x7f0000001f00)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/95, 0x5f}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/53, 0x35}, {&(0x7f0000004080)=""/155, 0x9b}], 0x6, 0x6b2, 0xa) (async, rerun: 64) setsockopt$inet6_tcp_buf(r3, 0x6, 0x38, &(0x7f00000041c0)="7091665300e2b20e8bb2e148d67e081f6cb5f1e6129a0d8d6dd1765bce859cb962168b6b8b3ec5d78f676f0068e24b20abf80890c4b86f76027cd030d64c3a75ce0122672a45091693a639f2c438804742b703fc771b60ec8ed175023ecb3816e23aceee6c95501d86c79b53dc77e8666ca7d67895ecb341966deac74d8c70054d06b365f2e62f8d44", 0x89) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000004280)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8fc, 0x1, 0x10000, 0x0, 0x48, 0x3}, &(0x7f0000004340)=0x9c) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000043c0), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004400)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_ABORT_SCAN(r10, &(0x7f00000044c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x28, r11, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x401, 0x3a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004540), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000004580)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000004800)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000047c0)={&(0x7f00000046c0)={0xcc, r13, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc4}, 0x4040) 1.198997251s ago: executing program 1 (id=855): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00d216000ae5ba820d086443165a77d8d356c7fc3a01707248af42a52566ba60179399a00e8a251025144026ef9f714ac8bd199c331cf494db9409de8e7cc732a8b5e75c8d7a4ffa92e4a9bcf8a9716790980f100230e53ea007539bb279f295c19fa4b13585b6e3ed6fa854f64165166bb15c6bcc8b33e0a918c3e3ae7c4c6d7fb49e1dcc"], 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000300)=0xc6a, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES16=r4, @ANYRES64=r5, @ANYBLOB="80fd858a", @ANYRES8=r3, @ANYRES8=0x0, @ANYRES64], 0x44}}, 0x7bc58dfa0bc7dd6a) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18f800000000f38b5f784255a7d7f942dfd17500000029a1aab8e424c114"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, 0x0, 0x2d, 0x9, @void}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="798c06d93c5b1fe13cf7c21d4c6bc813a22852a5b39db4e4decb5db65d771e048886a17e08c130ad0f55370562f6ce6c635ebf2489247d6958e4a7236ff43bbcdb86717410d7f3ade461dc10cb6be00c9207a70c7fef2ac7c1d4fd8ff7c8a6d17d994bb18d0c31bbf1bb4ca8e47db65994b4e672b661f5b31f77a39f6ab5c8ad11be4fd5fba10b2cba8b5840004263d8404ea7f40888dc9a71be74bf3113de0380b5acdef9642e9aaafcdc7d75b79f3ffd4f1f79349385841f91fd2b4e2f78cf3d1c15e82ea31b730f3ddbe89d9e0b26425fa950697d8a7f3a2398a217ba2ab88597a12fdfb439d133a2d74f786961bcf054b49241", @ANYBLOB="0100000000080000000054000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES16=r8], 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) 1.137180803s ago: executing program 0 (id=856): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x57f002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fdffffff67000000080001000800000008001500", @ANYRES32=0x0, @ANYBLOB="080bffaa3cf7744919f3c40000000000"], 0x34}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4) getsockname(r1, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101240, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, r1, 0x7b33b000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x4}, {0xf, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 946.288497ms ago: executing program 3 (id=857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="00000000c71bfb230000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = socket(0x2, 0x80805, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$OCFS2_IOC_REFLINK(r6, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', 0x0, 0x6}) unshare(0x22020600) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="000429"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0xfca2238337819a4d) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @local, 0x5}, 0x1c) 595.643427ms ago: executing program 3 (id=858): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000300)) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0xfbffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x20000000) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0xc00090}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x48, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040800) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r8, 0x2f, 0xfe, 0x53, 0x3, 0x58, @mcast2, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x13, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5e4075b4, 0x0, 0x0, 0x0, 0x80000001}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77d0, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000002180)='GPL\x00', 0x8, 0x20, &(0x7f00000021c0)=""/32, 0x41100, 0x18, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0xa, 0x1, 0xb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002280), &(0x7f00000022c0)=[{0x1, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x9}, {0x3, 0x3, 0x6, 0x9}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0x9}, 0x94) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000002440)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{}, &(0x7f0000002080), &(0x7f00000023c0)=r10}, 0x20) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a31000000003400048018000180080001006c6f67002c00028008000540ffffff081800018007000100727400000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001d40)={{r1, &(0x7f0000000040)='\'\x12\'&%,^+&+\\\x00', 0x181400, &(0x7f0000000100)={@align=0x2, {0x5, 0x2, 0x8001, 0x3}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x8}, 0xa, &(0x7f0000001c00)=[{0x1, 0x9, &(0x7f0000000200)='bond\x00', &(0x7f00000002c0)="d162e855f2c2a05f8c715d45f13af8db16497a37bdca683b83abf6fc11583d05c5b3be2011cda7aefb8c7c6ab1c6e80a83da4695a29c8ec72f538a7f8084f8ac86d3a353c90c5f66ddf22b59d1add2ff6144a3e34b333937b577fef91db5f65e53f1fa3e5cd545723cf4ba4c4ad73bffa5ccc1964fe8d39ec2ed3be46b7d14e0931fcd6e4785c8", 0x87, 0x20}, {0x3, 0x80000, &(0x7f0000000380)='syz1\x00', &(0x7f0000000480), 0x0, 0x38}, {0x3, 0x320, &(0x7f0000000500)='[[#\\,,%\xe8{%+:*($\xff-&/\x00', &(0x7f0000000540)="a919e05ae6c46b83e058eec3818bf50b730d59388aa1e37f35e2403b8ea91b3d7d3dea1e466802d4bc69ee5a952a1b97daf8e50cb8fa3787f52fde3bde9797d7f321df898cd161da5190d5ca82c39a63980284204f9e1fc017214b61dca5c2a5e31d86b5346d941a7ef83238d5a068452d433b038c14e3cba4043424634ff48fe66aa933a3ff71", 0x87, 0x2}, {0x2, 0x0, &(0x7f0000000600)='syz2\x00', &(0x7f0000000640)="27cc5a5e8e33b35868e37cb9452749e0c5b0555de9b405b997246f68c63f11a18692aeaa42f776220971d8fe8a2b64ad6e8854967034cda9f698cdf4fde1fda0128651473d3ad5ef26a972a42e374104e5eb5f197b705fefc747bdace892fbcc7606bfe4f439243a6839f1278d7366105cc39f8a699678e6b9a2fcd4196912d2bf61c1bf8755a2", 0x87, 0x20}, {0x1, 0xe3, &(0x7f0000000700)=')\x00', &(0x7f0000000740)="fff429fbf1d4f5ebc8ed603c5ed2439dce0cdd20a1bec33f2f5a99d309233de1ad5305b7dff18655c4b18bce3bfc83c4c47da2196ca43d5a67b45819f40e02f6cf9336ab64da982e9b686f08be81f560604b53a662805bccc3971ea92a52a48de28f28a71f62cd0c8a16c8e85795e2ccfb30240984b1f924e9f7f124580ecd47e96216cc39e6ca219f94a2e1b8ac1a4bbdb98c72ef631241416057d1f34776f871172d3a82df2e993d1d72db2ba8df6b52352472b693787386c0ff2e6bad1dabaeafda4620689c769ac249c3dcb8b77b2260af4958349124a56d895c2738fd4e50e154f3421017c7a4b6282f", 0xec, 0xe}, {0x2, 0x68, &(0x7f0000001980)='sy\x00', &(0x7f0000000880)="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", 0x800, 0x10}, {0x2, 0x9, &(0x7f0000001880)='-)\'#{/\x00', &(0x7f00000018c0)="164cb942861d3c8d8b85beaf88724491e1429e2304785f67b28663b98d537d4c649ad6788650c05ab71952d9f7e742e54e2c7fc25ad44631e563ced8f3f9320685f7865221df338d513d28f6ba4da66c1ff7639720cdfe5c261bf20c9c4c96a18afc23b469c6d75ab80e366394ec2bfc5822a369f92ea71d03e8b68dcd6028f8949d3ab0794f973f6d6c0b1231d6f9f0d7d4a9f213c40c86468318ad80d7ac631d0c6551d6c15545073e2e0e9555318388ddb19fdee7ce2f", 0xb8, 0x20}, {0x1, 0x7f, &(0x7f0000000480)='\x80\xfa\xc9o\x80\x00S\xa1\xb3y\xb9!c|\xb86Y\v\xb2\x9c\xa3\tf\x91Q\xb2\xc6\x98\xa4\xc4Q~\xf6\x90\'\xe8\x88\xc8pA\x80F{@#x\xb3\xfb\xb0\xb3)D\x8e\'\xbfJ/\xc3\x92\xe5\xed\x03\x80\x12\xf3\xb0z\xd4\xc3\x02W\xbc\x9e\xd6\x0f\x88\xfd\vZ:\xb2\xfb\xe0N\x12\xa1\x9b\x87\xb4I', &(0x7f00000019c0)="9ed282859c916be549a4f726cb91e7e012adb99170f76dffab08d5be317d5f5249c902386fdb6ceef46d3143a8b24e234ef46daeda8c95cf", 0x38, 0x40}, {0x1, 0x0, &(0x7f0000001a00)=',\x00', &(0x7f0000001a40)="33f62428cf9794152bb828490ac5d2737a132a3fd0cfecc102401707060ca18d32a25845e8e9e4a491fc66df938e9f2abc2c1b4b0fcd9b91d8e1fa736f6df13e92ae5b50c2ecfae5b388e1236416d2b345f70b48a225a3bdc9cf408e65b351065edefc233d549d010c9effb2a147735640c57e6d8ff4c4cd393fbfa64f189df6dcc8d53e2ddc3fb1ffb65021a821cc64267afa4d0fb7818ad77283170002615f6bab1b6f6bce365009f9bfe64e4e3f133a758b5aaa7e", 0xb6}, {0x2, 0x0, &(0x7f0000001b00)='rt\x00', &(0x7f0000001b40)="973162e786b68d59b1f02dc3f36ae538c1e4303befa4f16762de7d47713dec40ac72bfb24221d50879537490fb8291eac9c6ac493a19e21ef0ad2eb44160e7ab144cb1654cfb3a7cbd9f34b488213e514d01b617fb00ef9db7cfa31de30c8fb435b2fe49733a259493a0faf4f47f959c90409cbbddb6a865b0cb2cb641ebcbd382122d731a7f1e78e7cd59f0181115de156946494d5e5aaab4d72d6a5f4ae53f8967880cf54e02e83afa82ebc2acd5173687a386042451d481", 0xb9}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x25, 0x2006}, 0x20) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000001c00128009000100626f6e64002000000c00028008000300f7fffffff24b28056e7e575da2af1909e2c5b041268faff14b27824ded4fe7461dfa09f84683482fd2b3eef1932db15ddb4e0c0d9fa152f8c8ec62e090c87e2f6200179ab91a19eaf332d4fa1b0bbaa58e3063c7356ed2091d195a3cebc4470ac5b31a9f82197438d3e507d6bf82b0868effe017dd1082"], 0x3c}}, 0x28000000) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) 389.342712ms ago: executing program 4 (id=859): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x8001, 0x43}, 0xffff, [0xde99, 0x8e9, 0xc, 0xbf2, 0x10, 0xfffffffffffffffb, 0x4000000000, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x6, 0x4, 0x6, 0x8, 0x0, 0x4]}) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c35000/0x1000)=nil, 0x1000, 0x3000007, 0x11, r6, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffd}, &(0x7f0000000080)=0x8) 327.99623ms ago: executing program 3 (id=860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000080)='rng\x00', 0x10000, &(0x7f0000000100)={@align=0x4, {0x4, 0x7, 0x6, 0x2}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000200)=0xc}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8800200}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x128, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="56096089033f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="279a59454adc"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d3}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d8da5ad2e7626db2cbbdecc015"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "da09bf0c96ecf54451"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e6e862d4a4b7d70f9eebea7efe"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9074eb9645"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "4c2b3d32ca3665"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "57f945ac9f63bf8fa5e8529c02"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8093a9f5c8"}], @NL80211_ATTR_MAC={0xa, 0x6, @random="19e362d6b20a"}]}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x20000040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) unshare(0x20040400) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x1, 0x47, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000900000085000008000000000020000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 232.260655ms ago: executing program 1 (id=861): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000040), &(0x7f0000000180)=""/137}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000040), &(0x7f0000000180)=""/137}, 0x20) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000480)=@random="ca8ba19ac2920416376d88f5f4e2", 0xe, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) (async) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000201030000000000000000000a00dd363c0002800c00028005000100210000002c00018014000b00fc01000000000000000000000000000114000400fe8000001b00000000000000000000aa7947b62916963ba768315e121e9c77e07c5e4da6de6646bee5650b4e21d716c140b4eb5222cc87ce2e4648b6508bf7410fcc3f2d916928e5c4aebec5bb6c0d7e16d60a0104d4a78d6b363270463a4627ff135bc9ae"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000201030000000000000000000a00dd363c0002800c00028005000100210000002c00018014000b00fc01000000000000000000000000000114000400fe8000001b00000000000000000000aa7947b62916963ba768315e121e9c77e07c5e4da6de6646bee5650b4e21d716c140b4eb5222cc87ce2e4648b6508bf7410fcc3f2d916928e5c4aebec5bb6c0d7e16d60a0104d4a78d6b363270463a4627ff135bc9ae"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000840)={{{@in=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xe8) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010402000200fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="98e400007306000005002100100000001c00168018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c010000fdaf89b208bef84c6efd8ec92600203f3358a981cda3dc1c653ed3e5df6eb29a973e7052e41ccdbf60488bc247dd39c7e1024ddd13f13e98e02b593b24c1ebcee0e6894f79a25f820f60f4ee27a1e9cb411ca01e2111ac4529839939478fc4c18e68b0d39b3b44884253bc9f1b39ff0a2e418e5014542425bc6bdc2013e0d22b9a8f8517012acd", @ANYRES16=r11, @ANYBLOB="010029bd7000fcdbdf250300000008000100000000000c0008000010000000000000"], 0x28}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r6) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="3f9d00000000e3dbdf251700000008000300", @ANYRES32=r15, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800010000000000040003800500020000000000"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRES16=r12, @ANYBLOB="0100af460000fcdbdf25160000000c00060002000000020000000c000600020000000000000008000300", @ANYRES32=r15, @ANYBLOB="0c000600020000006432000008000300", @ANYRES32=r16, @ANYBLOB="0c00060002000000020000000c0006000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x80) 149.129614ms ago: executing program 3 (id=862): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="691a840869b4f05379922630936ba6d27a624d08e85fc4b7caf2b51a99a09cc8bbd04f5027bde7234a8e10aa6226f7b0aa91edacffdf2b16fd65e3", 0x3b}, {&(0x7f00000000c0)="c480a5f7abee17a3c9bbce41acb6b14e3a843969127f7434fe25c4c53c2d001be977e30116ac079ab8194df85fb8842d07877953c5638a2690011730ed14ce6d4e5ac27479390a7706c69f02097a5bc83a03d92f99ba", 0xffd4}, {&(0x7f0000000380)="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", 0x11b}], 0x3) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x24, 0x1, 0x71, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) (async, rerun: 64) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000b0ffffff00000000ffff0000181100004d73dc97cae444d7f6a0f27e494eb3f3b37ae04dde309290417b029fd584b1ce935e7a0db70c718fd209b91d96aa23e8fd94b597e14ebc21dec4ca73ac4e164c98ed5884237bc51e5effe8a5fadd680cd920ace10d1d4c11bfc28b69edb048e69ac9ac48a2b1938ad5e2d087674625080b4fb0348e89483f8b7e2536d4c22fdb5a2359d554e39f7e06d7385442b216146a6cc685a231602200"/182, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000060000000000000001000000b7080000000000007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b70200000000000085000000482fe4c5b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3ef, 0x2f, &(0x7f0000000380)=""/47, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x5, 0x8}, 0x10, 0x1ee, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000440)=[{0x4, 0x2, 0xe, 0x2}, {0x1, 0x3, 0xc, 0x3}, {0x0, 0x1, 0x7, 0x3}, {0x4, 0x2, 0x5, 0x2}, {0x5, 0x1, 0x2, 0xa}, {0x0, 0x2, 0x2, 0xc}], 0x10, 0x79a}, 0x94) (async, rerun: 32) r9 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004041) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r4, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000007c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xa, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000580)='GPL\x00', 0x4, 0xd, &(0x7f00000006c0)=""/13, 0x40f00, 0x9, '\x00', r10, @fallback=0x35, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x800003, 0x80, 0x40}, 0x10, r12, r8, 0x9, &(0x7f0000000cc0)=[r2, r3], &(0x7f0000000d00)=[{0x3, 0x3, 0x0, 0x7}, {0x0, 0x5, 0x1, 0xc}, {0x4, 0x3, 0xe, 0xc}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x1, 0xa, 0x1}, {0x5, 0x5, 0x7, 0x7}, {0x5, 0x3, 0x2, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x3, 0x1, 0x10, 0x7}], 0x10, 0x5}, 0x94) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r0, r4, 0x1d, 0x0, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) (async, rerun: 64) r13 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)={[{0x2b, 'net_cls'}]}, 0x9) (async, rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000e80)={0x8, {{0xa, 0x4e24, 0x8, @empty, 0x6}}}, 0x88) (rerun: 64) 39.433017ms ago: executing program 0 (id=863): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x101, 0x101, 0x1}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x49, 0x3, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x7800, 0x1, 0x3142c7e9, 0x3}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000200)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xd55a0930aa381961, &(0x7f00000002c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@RTM_NEWMDB={0x98, 0x54, 0x808, 0x70bd2a, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x3, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x3, {@ip4=@private=0xa010101}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8edd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getrule={0x14, 0x22, 0x800, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040090) r9 = socket(0x26, 0x3, 0x5) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000700)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f00000007c0)='\x00', 0x464002, &(0x7f0000000800)={@_ha_fsid={[0x4, 0xb4]}, {0x333, 0x9, 0x1, 0x6}}, 0x3ff, &(0x7f0000000840), &(0x7f0000000880)=0x8}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x12, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, [@call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd}, @ldst={0x0, 0x3, 0x0, 0x8, 0x8, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000a40)='syzkaller\x00', 0xdd05, 0x68, &(0x7f0000000a80)=""/104, 0x41000, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x3, 0x372, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, r0, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x2, &(0x7f0000000740)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, @sk_msg=0x7, r10, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x0, 0x5dc2, 0x9}, 0x10, 0x0, r11, 0x7, 0x0, &(0x7f0000000c80)=[{0x0, 0x3, 0x0, 0x1}, {0x0, 0x1, 0xb, 0xc}, {0x4, 0x3, 0xe, 0x1}, {0x4, 0x3, 0x0, 0x7}, {0x0, 0x5, 0xb, 0x8}, {0x1, 0x4, 0xc, 0x9}, {0x2, 0x4, 0x3, 0xa}], 0x10, 0x6}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@loopback}}, &(0x7f0000000ec0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f00)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast1, 0x4e22, 0x218b, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x21, r6, r12}, {0x4, 0x100, 0x2, 0x101, 0x7ff, 0x9, 0x5, 0x2}, {0x27f, 0x7, 0x6, 0x5}, 0x8, 0x6e6bb6, 0x2, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d2, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x2, 0x1, 0x0, 0x80000001, 0x2, 0xd73}}, 0xe8) r13 = openat$cgroup_ro(r10, &(0x7f0000001000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000001040)) preadv(r11, &(0x7f0000001400)=[{&(0x7f0000001080)=""/181, 0xb5}, {&(0x7f0000001140)=""/113, 0x71}, {&(0x7f00000011c0)=""/243, 0xf3}, {&(0x7f00000012c0)=""/2, 0x2}, {&(0x7f0000001300)=""/194, 0xc2}], 0x5, 0x4, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001480)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r11, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001500)=[0x0], &(0x7f0000001540)=[0x0], 0x0, 0xde, &(0x7f0000001580)=[{}, {}], 0x10, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$nci(r13, &(0x7f00000017c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x1, {0x1, 0x1}}, 0x5) syz_emit_ethernet(0x14, &(0x7f0000001800)={@multicast, @remote, @void, {@generic={0x800, "33d0046b70bd"}}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001840)={{{@in=@private=0xa010100, @in6=@loopback, 0x4e22, 0x5, 0x4e24, 0xac, 0xa, 0x20, 0xa0, 0x16, r14, r12}, {0x9, 0x127, 0x9, 0x8, 0xffffffff, 0x3, 0x10, 0x67}, {0x2, 0x1, 0x2, 0x2}, 0x9, 0x6e6bb4, 0x2, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4d6, 0x33}, 0xa, @in6=@mcast2, 0x34ff, 0x4, 0x3, 0x7, 0x3, 0x7, 0x2}}, 0xe8) 0s ago: executing program 2 (id=864): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7, 0x7859, 0x5, 0x0, {{0x1f, 0x4, 0x0, 0x22, 0x7c, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x64, [@empty, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0x7, [{@rand_addr=0x64010102, 0x9}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}]}, @rr={0x7, 0xf, 0x3e, [@multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x67, 0x3, 0x1, [{@remote, 0x7}, {@remote, 0x5b26}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101, 0xa}]}, @lsrr={0x83, 0xb, 0x43, [@dev={0xac, 0x14, 0x14, 0x15}, @remote]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x7, [@enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x4, [{0x6, 0x7fffffff, 0x5975d94f}, {0x6, 0xfff, 0x80000001}, {0x8, 0xfc000000, 0x9}, {0x1, 0xbf8, 0x8}, {0x7, 0x2f, 0x1}, {0xd, 0x5, 0x9}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @volatile={0xf, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x7, 0x5}]}, @fwd={0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x2e, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000480)=""/118, 0xbf, 0x76, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000580)=""/137, 0x89, 0x0, &(0x7f0000000640)=""/255, 0xff}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0x1e, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x6000}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x1, 0x9, 0x8, 0x50, 0x10}, @jmp={0x5, 0x1, 0xa, 0x3, 0xb, 0x2, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x64, &(0x7f0000000240)=""/100, 0x41000, 0x12, '\x00', r2, @flow_dissector=0x11, r3, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x1, &(0x7f0000000940)=[r6, r7, r8], &(0x7f0000000980)=[{0x1, 0x2, 0x9, 0x7}], 0x10, 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000a80)=r9, 0x4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000c00)={&(0x7f0000000ac0)=0x7ff, 0x8, &(0x7f0000000b00)=[{}], &(0x7f0000000bc0)}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x2cc, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x131, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x1ff, @void, @val=0x1c, @void}}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x9, 0x80000000, @broadcast, 0x3, @value, 0x10d, 0x3a03, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0xa8f2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1}, @device_b, 0xea3}, {{0x0, 0x0, 0x1}, @device_a, 0x1000}]}}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x7, 0x6}}, @tim={0x5, 0xc4, {0x9, 0xe7, 0x4, "6420e2085524e78bca084b711dd3e5630b279066fdba51ec56b4a404384bda09310f45ab513a4f2aa50a7f844f01b15e2dab9a492a0a368e57ad44a35a060a4910ea1a4f3895559424fb2a989316e45ff1c9df7d52a103c3bad59b8cdaa4f6e4ec41ab55f3aba3ccd2ac435b2f6d0c3e3a5836dd497547cd999d79149d193fc44cedaa71f5a6e09aee2858c401e4f48acd18035b17fcd0107e9cbd609442b6ffe94c02e95253dcd181df1a8a567f3625450de65e75b28cf2bcf2c524b8809be526"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x84, 0x2}}, @dsss={0x3, 0x1, 0xaf}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@tim={0x5, 0x11, {0x3c, 0xd, 0xc, "ef68fd0ebb9fc4930200544ff9e8"}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0xbe, 0x8, 0x7653, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x8f, 0x60}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x6, 0x66, @broadcast, 0x4, 0x2, 0x6f50ab85}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0xae, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x3, 0x20}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x98, 0x4, @device_b, 0x80000000, @value=@broadcast, 0x4, 0x2, @device_a, 0x3}}, @dsss={0x3, 0x1, 0xb7}]}, @NL80211_ATTR_IE={0xfe, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xc9, {0x6, 0xd, [{{}, @broadcast, 0x4, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x41}, {{}, @device_a, 0x1, @void, 0x27}, {{}, @device_a, 0xce, @void, 0x1c}, {{}, @device_b, 0x1, @void, 0xb}, {{}, @device_b, 0x1a, @void, 0x20}, {{}, @broadcast, 0x992d80f7, @void, 0x16}, {{}, @device_b, 0x4, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x2d}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x1f}, {{0x0, 0x1}, @device_a, 0xde, @value=@device_b, 0x3a}, {{}, @device_a, 0x8, @void, 0x10}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xff, 0x8, @device_a, 0x3, @value, 0x100, 0x0, @broadcast, 0x3}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4084}, 0x4000010) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) sendmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000001080)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001100)="1a9e12a1649c2648d2be857ef43884ac6815760ce180966bb9", 0x19}, {&(0x7f0000001140)="8bf2d7dec8a0d7a59ab9cab764b5472a599895690f52a75356e1d41f508d614a649b3efb8e506952420ef3544887cda9b358e27ba7800dae4004679ff30bdac4b7fd00412e23115df43939342563dd08550014ebb6da750c9281404068b885760321aa507893b453b5a9616417541b4fb5cc252e45affe64669e51e52fcf9c616202177a5717ba056c4453db9d9eeb0e7b87c0093053ded1f09f871307a4bb5e03796b4af1efe92b89d7fcfccf3b84542fceb261b43bd440424887af5ee5ff154c0914a81e51cf11dcd159541dddc92d", 0xd0}, {&(0x7f0000001240)="c6b70a6a8080c3618da8cdb27ee33af6b0ab8a0fe6bbd49aa61c6c2d1aa1a5e4859d3afd7c78e5e36489e9cb84ca36da6293d2adede7d86a768812ef1e47fc259dcb5f21840c37afa110", 0x4a}, {&(0x7f00000012c0)="3ca4e935bc00e360e03fc9592e520804282aaed8b9b9e6e55a1a1772f64dd8740b3fbf7ddefa4eac", 0x28}, {&(0x7f0000001300)="c11454710bf37c16837894b13c4d0dac25f1f2152837b8f9df0b8e8d1baede1f7da4dfd7926a4335c46c6f9803f2732326e10dbfb0f0d42b21add0950aab25868ab2bfee1a7283af0c538ed2", 0x4c}], 0x5}, 0xc111) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r11, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004034) r12 = accept(r0, &(0x7f0000001540)=@ethernet={0x0, @multicast}, &(0x7f00000015c0)=0x80) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r13, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x773d, 0xd36, 0x24, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r14 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r14, 0xc038586a, &(0x7f0000001840)={r8, &(0x7f0000001740)='ip_vti0\x00', 0x101440, &(0x7f0000001780)={@_ha_fsid={[0x58000000, 0xfffffe00]}, {0x0, 0x5, 0x80000000, 0x21b}}, 0x8, &(0x7f00000017c0), &(0x7f0000001800)=0xfffffc01}) r16 = socket$key(0xf, 0x3, 0x2) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000018c0), r15) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r16, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, r17, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000000}, 0x10) r18 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a00)=@o_path={&(0x7f00000019c0)='./file0\x00', 0x0, 0x8, r14}, 0x18) sendfile(r3, r18, &(0x7f0000001a40)=0x5, 0x9) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000001a80)=0x1, 0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x0, 0x301, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 78.047888][ T5617] cgroup: Unknown subsys name 'net' [ 78.164353][ T5617] cgroup: Unknown subsys name 'cpuset' [ 78.173789][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.839494][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.168581][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.177345][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.185255][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.194370][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.202180][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.229738][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.238631][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.248006][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.255485][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.264458][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.271170][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.279163][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.284145][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.293952][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.303681][ T4947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.303698][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.320370][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.330162][ T4947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.330693][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.344500][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.356035][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.363680][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.387529][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.396332][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.404254][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.205755][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.213825][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.221225][ T5635] bridge_slave_0: entered allmulticast mode [ 84.228763][ T5635] bridge_slave_0: entered promiscuous mode [ 84.277038][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.284359][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.291707][ T5635] bridge_slave_1: entered allmulticast mode [ 84.298987][ T5635] bridge_slave_1: entered promiscuous mode [ 84.354563][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.362335][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.370643][ T5631] Bluetooth: hci0: command tx timeout [ 84.374758][ T5636] bridge_slave_0: entered allmulticast mode [ 84.383977][ T5636] bridge_slave_0: entered promiscuous mode [ 84.431897][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.439123][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.441718][ T5631] Bluetooth: hci2: command tx timeout [ 84.446812][ T5645] Bluetooth: hci4: command tx timeout [ 84.452458][ T5631] Bluetooth: hci1: command tx timeout [ 84.458386][ T5650] Bluetooth: hci3: command tx timeout [ 84.463922][ T5636] bridge_slave_1: entered allmulticast mode [ 84.475999][ T5636] bridge_slave_1: entered promiscuous mode [ 84.495322][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.502531][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.509865][ T5633] bridge_slave_0: entered allmulticast mode [ 84.517224][ T5633] bridge_slave_0: entered promiscuous mode [ 84.528425][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.566297][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.573637][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.581294][ T5633] bridge_slave_1: entered allmulticast mode [ 84.588960][ T5633] bridge_slave_1: entered promiscuous mode [ 84.599128][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.659965][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.669284][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.676686][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.683980][ T5634] bridge_slave_0: entered allmulticast mode [ 84.691441][ T5634] bridge_slave_0: entered promiscuous mode [ 84.733446][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.742942][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.750784][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.757991][ T5634] bridge_slave_1: entered allmulticast mode [ 84.766507][ T5634] bridge_slave_1: entered promiscuous mode [ 84.787198][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.798908][ T5635] team0: Port device team_slave_0 added [ 84.829250][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.836708][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.844255][ T5629] bridge_slave_0: entered allmulticast mode [ 84.851896][ T5629] bridge_slave_0: entered promiscuous mode [ 84.861751][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.872948][ T5635] team0: Port device team_slave_1 added [ 84.900263][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.907536][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.915330][ T5629] bridge_slave_1: entered allmulticast mode [ 84.924291][ T5629] bridge_slave_1: entered promiscuous mode [ 84.954349][ T5636] team0: Port device team_slave_0 added [ 84.962687][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.008282][ T5636] team0: Port device team_slave_1 added [ 85.016344][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.050969][ T5633] team0: Port device team_slave_0 added [ 85.057767][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.064908][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.092259][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.130088][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.142271][ T5633] team0: Port device team_slave_1 added [ 85.148534][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.155611][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.181950][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.207340][ T5634] team0: Port device team_slave_0 added [ 85.215788][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.244756][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.251829][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.278013][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.291925][ T5634] team0: Port device team_slave_1 added [ 85.321159][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.328273][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.354423][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.366868][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.374101][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.400560][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.434979][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.442244][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.468268][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.510843][ T5629] team0: Port device team_slave_0 added [ 85.526846][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.534119][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.560819][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.584780][ T5629] team0: Port device team_slave_1 added [ 85.604527][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.611701][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.637867][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.655049][ T5635] hsr_slave_0: entered promiscuous mode [ 85.661787][ T5635] hsr_slave_1: entered promiscuous mode [ 85.720455][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.727436][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.753460][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.792360][ T5633] hsr_slave_0: entered promiscuous mode [ 85.799254][ T5633] hsr_slave_1: entered promiscuous mode [ 85.805867][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 85.811756][ T5633] Cannot create hsr debugfs directory [ 85.817993][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.825206][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.851165][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.880212][ T5636] hsr_slave_0: entered promiscuous mode [ 85.886657][ T5636] hsr_slave_1: entered promiscuous mode [ 85.893138][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 85.898899][ T5636] Cannot create hsr debugfs directory [ 85.972032][ T5634] hsr_slave_0: entered promiscuous mode [ 85.978515][ T5634] hsr_slave_1: entered promiscuous mode [ 85.985638][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 85.991523][ T5634] Cannot create hsr debugfs directory [ 86.157583][ T5629] hsr_slave_0: entered promiscuous mode [ 86.164454][ T5629] hsr_slave_1: entered promiscuous mode [ 86.171003][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 86.177279][ T5629] Cannot create hsr debugfs directory [ 86.450156][ T5645] Bluetooth: hci0: command tx timeout [ 86.519971][ T5648] Bluetooth: hci4: command tx timeout [ 86.519994][ T5631] Bluetooth: hci3: command tx timeout [ 86.525848][ T5650] Bluetooth: hci2: command tx timeout [ 86.536747][ T5645] Bluetooth: hci1: command tx timeout [ 86.629082][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.646719][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.654823][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.667995][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.676712][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.687126][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.695222][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.706512][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.790467][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.802620][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.811141][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.823187][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.831828][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.843018][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.851273][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.862794][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.973891][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.989283][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.009841][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.023410][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.051025][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.064800][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.096122][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.110812][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.204549][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.217349][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.227180][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.238389][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.248212][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.260697][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.295154][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.308161][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.390718][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.495250][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.505264][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.515657][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.527715][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.541885][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.549420][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.561916][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.570880][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.580611][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.613517][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.621262][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.635969][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.669265][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.676434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.727382][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.744867][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.777134][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.784361][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.822493][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.829724][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.840548][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.874308][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.881522][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.905685][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.917071][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.924296][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.018568][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.068299][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.075546][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.104625][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.112040][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.158347][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.251407][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.312112][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.319334][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.354287][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.361514][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.519958][ T5650] Bluetooth: hci0: command tx timeout [ 88.603241][ T5650] Bluetooth: hci3: command tx timeout [ 88.609352][ T5645] Bluetooth: hci2: command tx timeout [ 88.609382][ T5631] Bluetooth: hci1: command tx timeout [ 88.614870][ T5648] Bluetooth: hci4: command tx timeout [ 89.213068][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.466010][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.608345][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.728013][ T5636] veth0_vlan: entered promiscuous mode [ 89.788862][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.809154][ T5636] veth1_vlan: entered promiscuous mode [ 89.844720][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.903635][ T5633] veth0_vlan: entered promiscuous mode [ 89.974758][ T5633] veth1_vlan: entered promiscuous mode [ 89.983246][ T5636] veth0_macvtap: entered promiscuous mode [ 90.002645][ T5636] veth1_macvtap: entered promiscuous mode [ 90.043777][ T5634] veth0_vlan: entered promiscuous mode [ 90.062776][ T5629] veth0_vlan: entered promiscuous mode [ 90.077344][ T5634] veth1_vlan: entered promiscuous mode [ 90.100505][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.130465][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.141022][ T5629] veth1_vlan: entered promiscuous mode [ 90.161612][ T5635] veth0_vlan: entered promiscuous mode [ 90.174677][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184641][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.203792][ T5633] veth0_macvtap: entered promiscuous mode [ 90.215074][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224395][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.241397][ T5633] veth1_macvtap: entered promiscuous mode [ 90.252382][ T5635] veth1_vlan: entered promiscuous mode [ 90.328943][ T5634] veth0_macvtap: entered promiscuous mode [ 90.362294][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.388127][ T5634] veth1_macvtap: entered promiscuous mode [ 90.408388][ T5629] veth0_macvtap: entered promiscuous mode [ 90.425975][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.446701][ T5629] veth1_macvtap: entered promiscuous mode [ 90.464764][ T5635] veth0_macvtap: entered promiscuous mode [ 90.485232][ T5635] veth1_macvtap: entered promiscuous mode [ 90.492050][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.503249][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.514867][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526713][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.548956][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.558146][ T1162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.570097][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.600125][ T5631] Bluetooth: hci0: command tx timeout [ 90.612695][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.621771][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.663950][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.674144][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.674850][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.682415][ T5631] Bluetooth: hci1: command tx timeout [ 90.691244][ T5645] Bluetooth: hci2: command tx timeout [ 90.695324][ T5631] Bluetooth: hci3: command tx timeout [ 90.702113][ T5645] Bluetooth: hci4: command tx timeout [ 90.725472][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.742073][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.751423][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.778692][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.796517][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806064][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.843397][ T5636] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.863179][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.873800][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.895792][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.907073][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.928472][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.950641][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.953023][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.967759][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.013191][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036889][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.160628][ T1351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.185170][ T1351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.309761][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.330540][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.384177][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.399427][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.481633][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.514633][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.632662][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.652003][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.695151][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.721430][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.867026][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.887735][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.081854][ T994] cfg80211: failed to load regulatory.db [ 92.527909][ T5869] syzkaller0: entered promiscuous mode [ 92.541884][ T5869] syzkaller0: entered allmulticast mode [ 93.044172][ T5885] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 93.560453][ T5918] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 93.895901][ T5928] Zero length message leads to an empty skb [ 94.122463][ T5920] syz.1.14 (5920) used greatest stack depth: 17216 bytes left [ 94.151579][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.262578][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.294885][ T5936] syz.4.21 uses obsolete (PF_INET,SOCK_PACKET) [ 94.318473][ T5936] syzkaller1: entered promiscuous mode [ 94.339377][ T5936] syzkaller1: entered allmulticast mode [ 94.406313][ T5936] netlink: 'syz.4.21': attribute type 8 has an invalid length. [ 94.727235][ T5940] syzkaller0: entered promiscuous mode [ 94.739925][ T5940] syzkaller0: entered allmulticast mode [ 94.844756][ T5953] netlink: 'syz.4.26': attribute type 7 has an invalid length. [ 95.772383][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 96.565867][ T5953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.698012][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 96.746120][ T5989] gretap0: entered allmulticast mode [ 96.889963][ T5953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.063455][ T5994] veth1_macvtap: renamed from vlan0 [ 97.212397][ T5953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.303923][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.391312][ T5953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.429478][ T6013] bridge_slave_0: left allmulticast mode [ 97.437576][ T6013] bridge_slave_0: left promiscuous mode [ 97.444048][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.464687][ T6013] bridge_slave_1: left allmulticast mode [ 97.470793][ T6013] bridge_slave_1: left promiscuous mode [ 97.476728][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.497093][ T6013] bond0: (slave bond_slave_0): Releasing backup interface [ 97.512364][ T6013] bond0: (slave bond_slave_1): Releasing backup interface [ 97.534144][ T6013] team0: Port device team_slave_0 removed [ 97.550373][ T6013] team0: Port device team_slave_1 removed [ 97.557322][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.567496][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.587482][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.601066][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.624763][ T6013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.655262][ T6020] netlink: 240 bytes leftover after parsing attributes in process `syz.1.41'. [ 97.665618][ T6020] netlink: 'syz.1.41': attribute type 9 has an invalid length. [ 97.688641][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 97.698770][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 97.747311][ T6014] ip6gre1: entered allmulticast mode [ 97.759313][ T6014] team0: Port device ip6gre1 added [ 98.127784][ T84] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.275388][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.277082][ T6030] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 98.351028][ T84] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.404550][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.532262][ T141] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.655686][ T6051] Bluetooth: MGMT ver 1.23 [ 98.671537][ T6030] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.702092][ T6048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.45'. [ 98.712307][ T6030] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.734492][ T6030] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.774756][ T6030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.873428][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.47'. [ 98.897239][ T6030] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.321170][ T6073] tipc: Started in network mode [ 99.339977][ T6073] tipc: Node identity ac1414aa, cluster identity 4711 [ 99.372573][ T6073] tipc: Enabled bearer , priority 10 [ 99.507812][ T6081] Unsupported ieee802154 address type: 0 [ 99.519835][ T6079] __nla_validate_parse: 2 callbacks suppressed [ 99.519853][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 100.480851][ T5641] tipc: Node number set to 2886997162 [ 120.795369][ T6152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.57'. [ 120.886566][ T6157] netlink: 56 bytes leftover after parsing attributes in process `syz.2.55'. [ 120.917923][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.55'. [ 121.026419][ T6148] bond1: option miimon: invalid value (18446744073709551607) [ 121.063401][ T6148] bond1: option miimon: allowed values 0 - 2147483647 [ 121.089209][ T6148] bond1 (unregistering): Released all slaves [ 121.164719][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 121.277792][ T6147] pim6reg: entered allmulticast mode [ 121.283758][ T6160] pim6reg: left allmulticast mode [ 121.475575][ T6182] netlink: 'syz.4.61': attribute type 3 has an invalid length. [ 121.721312][ T6182] block nbd4: NBD_DISCONNECT [ 122.092471][ T6208] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 122.210616][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 122.305785][ T6218] geneve2: entered promiscuous mode [ 122.360196][ T6206] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 122.430432][ T6231] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 122.580190][ T6232] syzkaller1: entered promiscuous mode [ 122.597518][ T6232] syzkaller1: entered allmulticast mode [ 123.374981][ T6245] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 123.486300][ T6246] veth3: entered allmulticast mode [ 123.552806][ T6252] netlink: 'syz.0.77': attribute type 3 has an invalid length. [ 123.650171][ T6256] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 123.737440][ T6261] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 124.101285][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.244636][ T6256] team0: Device dummy0 is of different type [ 124.341811][ T6261] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.553224][ T6287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.930936][ T6305] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.169068][ T6287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.440001][ T6320] netlink: 14 bytes leftover after parsing attributes in process `syz.1.86'. [ 125.603299][ T6287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.787255][ T6323] netlink: 280 bytes leftover after parsing attributes in process `syz.4.88'. [ 125.890519][ T6287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.274839][ T141] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.639299][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.729984][ T6364] netlink: 'syz.0.97': attribute type 3 has an invalid length. [ 126.744136][ T141] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.763883][ T6364] netlink: 666 bytes leftover after parsing attributes in process `syz.0.97'. [ 126.871319][ T141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.464406][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 127.493757][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 127.533002][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 127.563978][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 128.304057][ T6430] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 128.705772][ T6449] veth1_macvtap: left promiscuous mode [ 128.722058][ T6449] macsec0: entered promiscuous mode [ 128.727364][ T6449] macsec0: entered allmulticast mode [ 128.775407][ T6452] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 128.776438][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 128.808763][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 128.880505][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.114'. [ 129.535553][ T6483] netlink: 'syz.1.119': attribute type 6 has an invalid length. [ 130.290580][ T29] bridge0: entered promiscuous mode [ 130.923179][ T6489] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 131.762497][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 131.799921][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 131.958693][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.138'. [ 132.112549][ T6595] netlink: 548 bytes leftover after parsing attributes in process `syz.2.139'. [ 132.138560][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 132.312499][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 133.003419][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012859][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.600198][ T6526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.610975][ T6576] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 133.620457][ T6576] netlink: 88 bytes leftover after parsing attributes in process `syz.0.134'. [ 133.634483][ T6576] netlink: 1 bytes leftover after parsing attributes in process `syz.0.134'. [ 133.644316][ T6576] netlink: 658 bytes leftover after parsing attributes in process `syz.0.134'. [ 133.952241][ T6648] Cannot find set identified by id 0 to match [ 134.187913][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 134.202424][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 134.292743][ T6664] bond1: entered promiscuous mode [ 134.301200][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.462535][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.486549][ T6664] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 134.501787][ T6682] netlink: 'syz.1.156': attribute type 6 has an invalid length. [ 134.515995][ T6682] netlink: 'syz.1.156': attribute type 6 has an invalid length. [ 134.526502][ T6664] bond1: (slave sit1): Error -95 calling set_mac_address [ 134.534026][ T6682] netlink: 'syz.1.156': attribute type 6 has an invalid length. [ 134.745937][ T6696] netlink: 'syz.4.160': attribute type 11 has an invalid length. [ 134.787112][ T6695] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 134.804010][ T6695] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 135.105634][ T6673] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 135.339932][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.609176][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.651992][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.952734][ T6721] ip6gre1: entered promiscuous mode [ 135.964216][ T6721] ip6gre1: entered allmulticast mode [ 136.231090][ T141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.334343][ T141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.376458][ T141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.419401][ T141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.521240][ T5645] Bluetooth: hci0: command 0x0401 tx timeout [ 136.833218][ T6785] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 136.863438][ T6787] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20003 [ 137.207579][ T6797] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 137.227759][ T6797] __nla_validate_parse: 7 callbacks suppressed [ 137.227778][ T6797] netlink: 244 bytes leftover after parsing attributes in process `syz.2.187'. [ 137.328746][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 137.413215][ T6803] netlink: 17 bytes leftover after parsing attributes in process `syz.2.187'. [ 137.458824][ T6803] netlink: 'syz.2.187': attribute type 10 has an invalid length. [ 137.477171][ T6803] netlink: 228 bytes leftover after parsing attributes in process `syz.2.187'. [ 137.851493][ T6810] : renamed from wg2 (while UP) [ 138.118171][ T6826] Cannot find set identified by id 0 to match [ 138.179628][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.193'. [ 138.319370][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 138.431638][ T6840] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 138.487705][ T6840] bond1 (unregistering): Released all slaves [ 138.517194][ T6858] netlink: 'syz.4.200': attribute type 2 has an invalid length. [ 138.529376][ T6859] netlink: 'syz.3.199': attribute type 4 has an invalid length. [ 138.627546][ T6864] netlink: 'syz.3.199': attribute type 4 has an invalid length. [ 138.949135][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 139.067368][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.075208][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.630716][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.662984][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.928423][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.018013][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.142108][ T141] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.152310][ T994] syz1: Port: 1 Link DOWN [ 140.176652][ T141] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.213604][ T141] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.254714][ T141] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.152214][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.938326][ T6974] warning: `syz.1.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.240275][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.220'. [ 142.712690][ T7001] netlink: 'syz.1.224': attribute type 3 has an invalid length. [ 143.063918][ T7018] x_tables: duplicate underflow at hook 2 [ 143.196657][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 143.829400][ T7039] syzkaller0: entered promiscuous mode [ 143.843155][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 143.867435][ T7039] syzkaller0: entered allmulticast mode [ 143.902825][ T7031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.947752][ T1351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.187518][ T7055] netlink: 'syz.0.237': attribute type 58 has an invalid length. [ 144.264780][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 144.363153][ T7063] xt_hashlimit: size too large, truncated to 1048576 [ 144.402453][ T7057] xt_hashlimit: size too large, truncated to 1048576 [ 144.734211][ T7063] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 145.494548][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 145.662156][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 145.727792][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 146.153286][ T7116] netlink: 'syz.0.252': attribute type 3 has an invalid length. [ 146.211795][ T7120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.254'. [ 146.245343][ T7118] netlink: 'syz.1.253': attribute type 5 has an invalid length. [ 146.281453][ T7118] Bluetooth: MGMT ver 1.23 [ 146.440997][ T7129] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 146.523445][ T7129] netlink: 256 bytes leftover after parsing attributes in process `syz.4.254'. [ 146.635372][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 146.837202][ T7137] xt_policy: too many policy elements [ 147.480630][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.268'. [ 147.494364][ T7164] bridge0: left promiscuous mode [ 147.508545][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.533199][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.634235][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.644117][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.658010][ T7164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.677081][ T7164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.695954][ T7164] veth1_vlan: left promiscuous mode [ 147.704676][ T7164] veth0_vlan: left promiscuous mode [ 147.717577][ T7164] veth0_vlan: entered promiscuous mode [ 147.738236][ T7164] veth1_vlan: entered promiscuous mode [ 147.757662][ T7164] veth1_macvtap: left promiscuous mode [ 147.764938][ T7164] veth0_macvtap: left promiscuous mode [ 147.772407][ T7164] veth0_macvtap: entered promiscuous mode [ 147.780419][ T7164] veth1_macvtap: entered promiscuous mode [ 147.812448][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.832650][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.844373][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.853558][ T7164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.875953][ T7160] bridge0: entered promiscuous mode [ 147.882864][ T7186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.935063][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.942449][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.968611][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.976011][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.052797][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 148.082835][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 148.140772][ T1351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.152324][ T1351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.253272][ T7193] ip6erspan0: entered allmulticast mode [ 148.280620][ T1351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.315775][ T1351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.458853][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 148.647294][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'. [ 148.870098][ T7231] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 148.892163][ T7232] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 148.947501][ T7225] bond2: entered allmulticast mode [ 149.068258][ T7226] macvlan2: entered promiscuous mode [ 149.082696][ T7226] macvlan2: entered allmulticast mode [ 149.090472][ T7226] bond2: entered promiscuous mode [ 149.101287][ T7226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.110137][ T7218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.134723][ T7243] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 149.155721][ T7226] bond2: left promiscuous mode [ 149.162599][ T7218] netlink: 288 bytes leftover after parsing attributes in process `syz.1.280'. [ 149.179672][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'. [ 149.202192][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 149.313172][ T7232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.365550][ T7240] bond2: (slave dummy0): making interface the new active one [ 149.381773][ T7240] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 149.396806][ T7243] dummy0: entered promiscuous mode [ 149.407906][ T7243] bond2: (slave dummy0): Releasing active interface [ 149.759193][ T7255] syzkaller0: entered promiscuous mode [ 149.782514][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 149.791551][ T7255] syzkaller0: entered allmulticast mode [ 150.180696][ T5645] Bluetooth: hci4: link tx timeout [ 150.187968][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.411884][ T5645] Bluetooth: hci4: link tx timeout [ 150.417174][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.441648][ T5645] Bluetooth: hci4: link tx timeout [ 150.446878][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.573903][ T7279] syzkaller0: entered promiscuous mode [ 150.586015][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 150.603159][ T7279] syzkaller0: entered allmulticast mode [ 150.973586][ T7310] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 151.001008][ T7310] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 151.034671][ T5645] Bluetooth: hci4: link tx timeout [ 151.041818][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.156531][ T7306] bond3: option all_slaves_active: invalid value (127) [ 151.168855][ T7306] bond3 (unregistering): Released all slaves [ 151.287357][ T5645] Bluetooth: hci4: link tx timeout [ 151.292944][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.852340][ T5645] Bluetooth: hci4: link tx timeout [ 151.857692][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.940960][ T7358] syzkaller1: entered promiscuous mode [ 151.969089][ T7358] syzkaller1: entered allmulticast mode [ 152.283203][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 152.618386][ T7407] netlink: 'syz.3.319': attribute type 21 has an invalid length. [ 152.626473][ T7407] __nla_validate_parse: 7 callbacks suppressed [ 152.626490][ T7407] netlink: 128 bytes leftover after parsing attributes in process `syz.3.319'. [ 152.642338][ T7407] netlink: 3 bytes leftover after parsing attributes in process `syz.3.319'. [ 152.720775][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 152.753117][ T7400] hsr0: entered promiscuous mode [ 152.761856][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 152.774363][ T7411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.320'. [ 152.888488][ T7417] netlink: 'syz.1.316': attribute type 1 has an invalid length. [ 152.927583][ T7417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.936201][ T7417] IPv6: NLM_F_CREATE should be set when creating new route [ 152.954377][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.038570][ T7421] netlink: 'syz.2.322': attribute type 89 has an invalid length. [ 153.602435][ T7437] netlink: 'syz.0.323': attribute type 25 has an invalid length. [ 153.621599][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 153.678851][ T7437] netlink: 'syz.0.323': attribute type 25 has an invalid length. [ 153.684031][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.706394][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 153.718075][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.728027][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.755216][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.790568][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 153.853056][ T7441] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 153.868234][ T7441] bond3 (unregistering): Released all slaves [ 154.193817][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 154.295753][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 156.134188][ T7436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.548279][ T30] audit: type=1107 audit(1779032459.557:2): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' 0XjXFU H\^dhfl6?QbA[' [ 156.568615][ T5834] IPVS: starting estimator thread 0... [ 156.660784][ T7494] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.311595][ T7536] netlink: 'syz.1.352': attribute type 20 has an invalid length. [ 157.527367][ T7537] syzkaller1: entered promiscuous mode [ 157.546990][ T7537] syzkaller1: entered allmulticast mode [ 157.901658][ T24] IPVS: starting estimator thread 0... [ 158.000548][ T7562] IPVS: using max 29 ests per chain, 69600 per kthread [ 158.061192][ T7569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.256961][ T7582] __nla_validate_parse: 5 callbacks suppressed [ 158.256979][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 158.301959][ T7582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.372323][ T7582] bond2: entered promiscuous mode [ 158.379016][ T7582] bond2: entered allmulticast mode [ 158.398960][ T7582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.408990][ T7582] team0: Port device bond2 added [ 158.414546][ T7589] team_slave_1: entered promiscuous mode [ 158.433037][ T7589] team0: Port device team_slave_1 removed [ 158.455803][ T7589] team_slave_1: entered allmulticast mode [ 158.468512][ T7589] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 158.592933][ T7592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.366'. [ 160.520853][ T7546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.703505][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.715391][ T7597] netlink: 'syz.2.367': attribute type 2 has an invalid length. [ 160.769358][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 161.201658][ T7626] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 161.289267][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.297279][ T7624] tipc: Started in network mode [ 161.302783][ T7624] tipc: Node identity 4a6a696edd01, cluster identity 4711 [ 161.311279][ T7624] tipc: Enabled bearer , priority 0 [ 161.322685][ T7628] syzkaller0: entered promiscuous mode [ 161.344449][ T7628] syzkaller0: entered allmulticast mode [ 161.403895][ T7624] tipc: Resetting bearer [ 161.432275][ T7624] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 161.450644][ T7634] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 161.482618][ T7634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.543899][ T7621] tipc: Resetting bearer [ 161.584269][ T7621] tipc: Disabling bearer [ 161.847883][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 161.925060][ T7646] block nbd0: Unsupported socket: should be TCP or UNIX. [ 161.982875][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 162.012605][ T7643] bond3: entered promiscuous mode [ 162.032451][ T7643] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.119311][ T7650] bridge1: entered promiscuous mode [ 162.137567][ T7650] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 162.152402][ T7655] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 162.205693][ T7655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.210949][ T7659] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 162.231198][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 162.256330][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.352611][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.536539][ T7659] bond2: (slave batadv1): Opening slave failed [ 162.596608][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 162.965782][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 163.107929][ T7686] bond3: (slave bond_slave_1): Device is not our slave [ 163.117579][ T7686] bond3: option active_slave: invalid value (bond_slave_1) [ 163.130303][ T7686] bond3 (unregistering): Released all slaves [ 163.145988][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'. [ 163.471441][ T7716] vxcan0: tx address claim with different name [ 163.518748][ T7708] bond3: option fail_over_mac: invalid value (3) [ 163.558667][ T7708] bond3 (unregistering): Released all slaves [ 163.614998][ T7723] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 164.477059][ T7764] netlink: 296 bytes leftover after parsing attributes in process `syz.2.405'. [ 165.099736][ T7798] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 165.163782][ T7798] bond3: entered promiscuous mode [ 165.183610][ T7798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.554148][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 165.677440][ T7807] bond3: (slave bridge1): making interface the new active one [ 165.686220][ T7807] bridge1: entered promiscuous mode [ 165.694203][ T7807] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 165.705422][ T7815] netlink: 'syz.3.414': attribute type 3 has an invalid length. [ 165.795082][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.414'. [ 166.402116][ T7856] veth0_to_batadv: entered allmulticast mode [ 166.425333][ T7856] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 166.512449][ T7854] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 166.669203][ T7874] netlink: 'syz.4.425': attribute type 61 has an invalid length. [ 166.685513][ T7874] netlink: 'syz.4.425': attribute type 62 has an invalid length. [ 166.698832][ T7874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.988959][ T7885] siw: device registration error -23 [ 167.075397][ T7885] smbdirect: ib_dev[syz1] removed [ 167.464469][ T7906] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 167.490287][ T7906] netlink: 'syz.2.432': attribute type 2 has an invalid length. [ 167.515946][ T7906] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 167.543475][ T7905] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 167.549058][ T7906] netlink: 'syz.2.432': attribute type 3 has an invalid length. [ 167.641155][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'. [ 167.655269][ T7917] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 167.676763][ T7917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 167.846930][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.0.440'. [ 167.873669][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 167.882953][ T7927] nbd: couldn't find a device at index 65546 [ 167.896059][ T7905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.988256][ T7913] bond3: (slave veth3): Enslaving as an active interface with a down link [ 168.120053][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 168.238528][ T7940] netlink: 'syz.1.443': attribute type 19 has an invalid length. [ 168.255087][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 168.291814][ T7942] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 168.659042][ T7950] syzkaller0: entered promiscuous mode [ 168.675669][ T7950] syzkaller0: entered allmulticast mode [ 169.104759][ T84] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.122442][ T84] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.144350][ T84] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.165352][ T84] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.191355][ T7990] pimreg: entered allmulticast mode [ 169.452090][ T7990] pimreg: left allmulticast mode [ 169.714601][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 169.743080][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 170.068201][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 170.205076][ T8038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.231578][ T8038] bond4: (slave bond5): making interface the new active one [ 170.254470][ T8038] bond4: (slave bond5): Enslaving as an active interface with an up link [ 170.487545][ T8057] v: renamed from ip_vti0 (while UP) [ 170.595718][ T30] audit: type=1804 audit(1779032473.607:3): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.469" name="/newroot/97/cgroup.controllers" dev="tmpfs" ino=514 res=1 errno=0 [ 170.634844][ T30] audit: type=1800 audit(1779032473.637:4): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.469" name="cgroup.controllers" dev="tmpfs" ino=514 res=0 errno=0 [ 170.884587][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 171.017374][ T8079] netlink: 27 bytes leftover after parsing attributes in process `syz.0.474'. [ 171.211519][ T8085] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.264755][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 171.308121][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 171.363261][ T8095] xt_TCPMSS: Only works on TCP SYN packets [ 171.390058][ T8092] syzkaller1: entered promiscuous mode [ 171.403098][ T8092] syzkaller1: entered allmulticast mode [ 172.062638][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 172.607874][ T8162] netlink: 41 bytes leftover after parsing attributes in process `syz.2.492'. [ 172.620688][ T8162] netlink: 120 bytes leftover after parsing attributes in process `syz.2.492'. [ 173.239366][ T8192] syz.3.499: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.262107][ T8192] CPU: 0 UID: 0 PID: 8192 Comm: syz.3.499 Not tainted syzkaller #0 PREEMPT(full) [ 173.262133][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.262152][ T8192] Call Trace: [ 173.262164][ T8192] [ 173.262172][ T8192] dump_stack_lvl+0xe8/0x150 [ 173.262209][ T8192] warn_alloc+0x249/0x340 [ 173.262239][ T8192] ? stack_trace_save+0xa9/0x100 [ 173.262271][ T8192] ? __pfx_warn_alloc+0x10/0x10 [ 173.262301][ T8192] ? kasan_save_track+0x4f/0x80 [ 173.262325][ T8192] ? kasan_save_track+0x3e/0x80 [ 173.262349][ T8192] ? __kasan_kmalloc+0x93/0xb0 [ 173.262376][ T8192] ? __kmalloc_cache_noprof+0x31c/0x660 [ 173.262402][ T8192] ? xskq_create+0x56/0x170 [ 173.262427][ T8192] ? xsk_setsockopt+0x54c/0x990 [ 173.262449][ T8192] ? do_sock_setsockopt+0x17c/0x1b0 [ 173.262478][ T8192] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 173.262526][ T8192] ? do_syscall_64+0x15f/0xf80 [ 173.262560][ T8192] __vmalloc_node_range_noprof+0x132/0x1750 [ 173.262621][ T8192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.262657][ T8192] ? __kasan_kmalloc+0x93/0xb0 [ 173.262691][ T8192] vmalloc_user_noprof+0xad/0xe0 [ 173.262718][ T8192] ? xskq_create+0xbf/0x170 [ 173.262746][ T8192] xskq_create+0xbf/0x170 [ 173.262776][ T8192] xsk_init_queue+0x8a/0xe0 [ 173.262804][ T8192] xsk_setsockopt+0x54c/0x990 [ 173.262832][ T8192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.262857][ T8192] ? __pfx_aa_sk_perm+0x10/0x10 [ 173.262889][ T8192] ? aa_sock_opt_perm+0xff/0x1a0 [ 173.262919][ T8192] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 173.262947][ T8192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.262973][ T8192] do_sock_setsockopt+0x17c/0x1b0 [ 173.263009][ T8192] __x64_sys_setsockopt+0x13d/0x1b0 [ 173.263043][ T8192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.263065][ T8192] do_syscall_64+0x15f/0xf80 [ 173.263093][ T8192] ? trace_irq_disable+0x3b/0x140 [ 173.263123][ T8192] ? clear_bhb_loop+0x40/0x90 [ 173.263148][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.263168][ T8192] RIP: 0033:0x7f0e7e59ce59 [ 173.263206][ T8192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.263223][ T8192] RSP: 002b:00007f0e7f47f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.263247][ T8192] RAX: ffffffffffffffda RBX: 00007f0e7e815fa0 RCX: 00007f0e7e59ce59 [ 173.263262][ T8192] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 173.263274][ T8192] RBP: 00007f0e7e632d6f R08: 0000000000000004 R09: 0000000000000000 [ 173.263286][ T8192] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.263297][ T8192] R13: 00007f0e7e816038 R14: 00007f0e7e815fa0 R15: 00007ffcb9182fb8 [ 173.263332][ T8192] [ 173.263344][ T8192] Mem-Info: [ 173.552859][ T8192] active_anon:5650 inactive_anon:6 isolated_anon:0 [ 173.552859][ T8192] active_file:2693 inactive_file:40326 isolated_file:0 [ 173.552859][ T8192] unevictable:768 dirty:126 writeback:0 [ 173.552859][ T8192] slab_reclaimable:10304 slab_unreclaimable:96827 [ 173.552859][ T8192] mapped:29341 shmem:1289 pagetables:1218 [ 173.552859][ T8192] sec_pagetables:0 bounce:0 [ 173.552859][ T8192] kernel_misc_reclaimable:0 [ 173.552859][ T8192] free:1327483 free_pcp:11938 free_cma:0 [ 173.609564][ T8192] Node 0 active_anon:22600kB inactive_anon:24kB active_file:10772kB inactive_file:161104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117764kB dirty:500kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13520kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.653472][ T8201] validate_nla: 2 callbacks suppressed [ 173.653491][ T8201] netlink: 'syz.2.501': attribute type 58 has an invalid length. [ 173.677445][ T8192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.720278][ T8192] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.753700][ T8192] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 173.765144][ T8192] Node 0 DMA32 free:1355540kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22500kB inactive_anon:24kB active_file:10772kB inactive_file:161104kB unevictable:1536kB writepending:500kB zspages:0kB present:3129332kB managed:2552436kB mlocked:0kB bounce:0kB free_pcp:47840kB local_pcp:27108kB free_cma:0kB [ 173.830388][ T8197] tc_dump_action: action bad kind [ 173.951636][ T8192] lowmem_reserve[]: 0 0 0 0 0 [ 173.964257][ T8207] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 173.985669][ T8192] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 174.050618][ T8192] lowmem_reserve[]: 0 0 0 0 0 [ 174.079567][ T8192] Node 1 Normal free:3939032kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.257027][ T8192] lowmem_reserve[]: 0 0 0 0 0 [ 174.273889][ T8192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.307004][ T8192] Node 0 DMA32: 1823*4kB (UME) 1570*8kB (UME) 583*16kB (UE) 241*32kB (UME) 298*64kB (UME) 200*128kB (UME) 148*256kB (UM) 100*512kB (UME) 57*1024kB (UM) 41*2048kB (UME) 250*4096kB (UM) = 1336988kB [ 174.367313][ T8192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 174.389939][ T8192] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 5*16kB (UM) 6*32kB (UM) 6*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3939032kB [ 174.417460][ T8192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.438174][ T8192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.499601][ T8192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.534721][ T8192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.572706][ T8192] 44304 total pagecache pages [ 174.587783][ T8192] 0 pages in swap cache [ 174.615683][ T8192] Free swap = 124996kB [ 174.632726][ T8192] Total swap = 124996kB [ 174.640952][ T8192] 2097051 pages RAM [ 174.650177][ T8192] 0 pages HighMem/MovableOnly [ 174.665112][ T8192] 427162 pages reserved [ 174.683669][ T8192] 0 pages cma reserved [ 174.725749][ T8239] __nla_validate_parse: 1 callbacks suppressed [ 174.725768][ T8239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.512'. [ 174.787978][ T8243] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 175.166659][ T8265] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 175.266213][ T8271] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 175.274144][ T8271] netlink: 'syz.1.519': attribute type 8 has an invalid length. [ 175.282239][ T8271] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 175.290657][ T8271] netlink: 164 bytes leftover after parsing attributes in process `syz.1.519'. [ 175.300822][ T8271] NCSI netlink: No device for ifindex 0 [ 175.338035][ T8265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.379749][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.517'. [ 175.504271][ T8279] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 175.511399][ T8269] bond3: (slave veth7): Enslaving as an active interface with a down link [ 175.747651][ T8273] bond3: (slave veth9): Enslaving as an active interface with a down link [ 175.788536][ T8265] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 175.857332][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.523'. [ 176.079318][ T8301] erspan0: entered allmulticast mode [ 176.313879][ T8316] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 176.461947][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 176.486367][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 176.663423][ T8325] dummy0: left promiscuous mode [ 176.767247][ T8325] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 176.788071][ T8325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.854189][ T8325] bond3: left promiscuous mode [ 176.859188][ T8325] bridge1: left promiscuous mode [ 176.906110][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 177.103109][ T8349] netlink: 52 bytes leftover after parsing attributes in process `syz.3.536'. [ 177.116024][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 177.719678][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 177.748898][ T8370] netlink: 84 bytes leftover after parsing attributes in process `syz.4.540'. [ 177.786620][ T8370] netlink: 84 bytes leftover after parsing attributes in process `syz.4.540'. [ 178.521886][ T5641] hsr0: entered promiscuous mode [ 178.568057][ T8415] bridge3: entered allmulticast mode [ 179.048140][ T8446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 179.576187][ T8474] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 179.767086][ T8462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.805021][ T8484] sctp: [Deprecated]: syz.1.571 (pid 8484) Use of int in maxseg socket option. [ 179.805021][ T8484] Use struct sctp_assoc_value instead [ 180.145217][ T8462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.318661][ T8462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.358638][ T8500] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 180.515767][ T8462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.618648][ T8516] __nla_validate_parse: 4 callbacks suppressed [ 180.618668][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 180.679746][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.843614][ T8526] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 180.854567][ T8528] netlink: 'syz.4.582': attribute type 4 has an invalid length. [ 180.869595][ T8528] netlink: 17 bytes leftover after parsing attributes in process `syz.4.582'. [ 180.954563][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 180.968955][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 181.005441][ T8532] gretap1: entered allmulticast mode [ 181.033004][ T8532] bond4: (slave gretap1): making interface the new active one [ 181.052695][ T8532] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 181.142601][ T5911] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.311117][ T8549] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 181.320781][ T8542] netlink: 'syz.1.585': attribute type 3 has an invalid length. [ 181.340758][ T84] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.349142][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 181.432207][ T3332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.540364][ T3332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.565924][ T8567] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.589'. [ 181.584463][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.589'. [ 181.596947][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.589'. [ 181.646745][ T8571] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 181.685804][ T8571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.397193][ T8613] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 182.651849][ T8614] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 182.730171][ T8613] bond4: (slave gretap1): making interface the new active one [ 182.751797][ T8613] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 183.181486][ T8664] netlink: 112 bytes leftover after parsing attributes in process `syz.3.611'. [ 183.333502][ T8672] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 184.052741][ T8704] netlink: 'syz.2.622': attribute type 3 has an invalid length. [ 184.261968][ T8703] 5n: entered promiscuous mode [ 185.279010][ T8738] IPv6: addrconf: prefix option has invalid lifetime [ 185.617223][ T8749] tipc: Enabling of bearer rejected, failed to enable media [ 185.916911][ T8761] netlink: 152 bytes leftover after parsing attributes in process `syz.3.636'. [ 185.999431][ T8761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.636'. [ 186.018023][ T8765] sctp: [Deprecated]: syz.1.639 (pid 8765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.018023][ T8765] Use struct sctp_sack_info instead [ 186.206940][ T8771] hmac(sha2: entered promiscuous mode [ 186.242579][ T8776] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 186.259606][ T8776] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.641'. [ 186.514401][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.646'. [ 186.650684][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'. [ 187.353349][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 187.387474][ T8813] netlink: 80 bytes leftover after parsing attributes in process `syz.1.651'. [ 187.465194][ T8816] netlink: 'syz.2.652': attribute type 10 has an invalid length. [ 187.576709][ T8816] team0: Port device dummy0 added [ 188.117832][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 188.194519][ T8852] syz.1.661 (8852) used obsolete PPPIOCDETACH ioctl [ 188.363010][ T8854] veth3: left allmulticast mode [ 188.465170][ T8854] bond2: left promiscuous mode [ 188.494722][ T8854] team_slave_1: left promiscuous mode [ 188.514955][ T8854] bond2: left allmulticast mode [ 188.536480][ T8854] team_slave_1: left allmulticast mode [ 188.640138][ T8854] bridge3: left allmulticast mode [ 188.677752][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'. [ 188.686971][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.708382][ T8854] gretap1: left allmulticast mode [ 188.750697][ T1162] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.788736][ T1162] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.821047][ T8856] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 188.964054][ T1162] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.042744][ T8856] veth0_vlan: left promiscuous mode [ 189.078524][ T8856] veth0_vlan: entered promiscuous mode [ 189.155909][ T8856] team0: Device veth0_vlan failed to register rx_handler [ 189.224843][ T1162] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.312559][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 189.330707][ T5641] hid-generic 0005:0B57:0A0E.0001: item fetching failed at offset 0/1 [ 189.349192][ T5641] hid-generic 0005:0B57:0A0E.0001: probe with driver hid-generic failed with error -22 [ 190.934297][ T8947] __nla_validate_parse: 3 callbacks suppressed [ 190.934316][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 191.134737][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 191.186080][ T8946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.228538][ T8946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.425464][ T8961] ip6t_srh: unknown srh invflags 4000 [ 191.566339][ T8971] x_tables: duplicate underflow at hook 1 [ 191.613139][ T8973] netlink: 100 bytes leftover after parsing attributes in process `syz.2.690'. [ 191.636743][ T8973] trusted_key: syz.2.690 sent an empty control message without MSG_MORE. [ 192.163610][ T8995] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 192.227376][ T8996] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 192.252732][ T8996] netlink: 224 bytes leftover after parsing attributes in process `syz.1.694'. [ 192.302452][ T8991] netlink: 'syz.2.693': attribute type 6 has an invalid length. [ 192.313587][ T9002] netlink: 72 bytes leftover after parsing attributes in process `syz.1.694'. [ 192.519429][ T9010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.698'. [ 192.682280][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 192.851984][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 192.964710][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 193.005005][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 195.434416][ T9010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.855691][ T9051] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.889091][ T9061] bond6: (slave veth3): Enslaving as an active interface with an up link [ 196.052123][ T9072] __nla_validate_parse: 4 callbacks suppressed [ 196.052143][ T9072] netlink: 200 bytes leftover after parsing attributes in process `syz.4.708'. [ 196.122199][ T9051] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 196.182203][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 196.200558][ T9081] netlink: 'syz.2.710': attribute type 11 has an invalid length. [ 196.233482][ T9081] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.710'. [ 196.504281][ T9095] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 196.553999][ T9095] tipc: Started in network mode [ 196.567234][ T9095] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 196.579243][ T9095] tipc: Enabling of bearer rejected, failed to enable media [ 196.678686][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 196.743127][ T9097] smc: net device wlan0 applied user defined pnetid SYZ0 [ 197.028598][ T30] audit: type=1804 audit(1779032500.037:5): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.720" name="/newroot/134/cgroup.controllers" dev="tmpfs" ino=705 res=1 errno=0 [ 197.106385][ T30] audit: type=1800 audit(1779032500.037:6): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.720" name="cgroup.controllers" dev="tmpfs" ino=705 res=0 errno=0 [ 197.356116][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 197.375761][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 197.386806][ T9134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.728'. [ 197.408597][ T9126] netlink: 58 bytes leftover after parsing attributes in process `syz.2.726'. [ 197.421480][ T9134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.626965][ T9087] infiniband syz2: set down [ 197.666181][ T9087] infiniband syz2: added syzkaller0 [ 197.712324][ T9146] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 197.765770][ T9087] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 197.781554][ T9087] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 197.807011][ T9087] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 197.858392][ T9087] RDS/IB: syz2: added [ 197.869130][ T9087] smc: adding ib device syz2 with port count 1 [ 197.876280][ T9087] smc: ib device syz2 port 1 has no pnetid [ 197.968994][ T9146] "syz.2.732" (9146) uses obsolete ecb(arc4) skcipher [ 200.019855][ T9149] syzkaller0: entered promiscuous mode [ 200.026366][ T9149] syzkaller0: entered allmulticast mode [ 200.423772][ T9170] netlink: 'syz.3.736': attribute type 30 has an invalid length. [ 200.446026][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.736'. [ 200.484148][ T9170] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 200.500984][ T9170] bond5 (unregistering): Released all slaves [ 200.842206][ T5645] Bluetooth: hci4: link tx timeout [ 200.849312][ T5645] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 201.614766][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 201.685076][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 201.773281][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'. [ 202.263140][ T3332] smc: removing ib device syz2 [ 202.381199][ T3332] smbdirect: ib_dev[syz2] removed [ 202.588910][ T9208] netlink: 'syz.3.747': attribute type 2 has an invalid length. [ 202.617959][ T9208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.747'. [ 202.655211][ T9200] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 202.919594][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 203.364551][ T9227] netlink: 'syz.1.751': attribute type 7 has an invalid length. [ 203.374511][ T9227] netlink: 'syz.1.751': attribute type 8 has an invalid length. [ 203.399690][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.746467][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.753'. [ 203.880841][ T5648] Bluetooth: hci0: command 0x0401 tx timeout [ 204.038442][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 204.454279][ T9273] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 204.476068][ T9273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.427693][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 205.860805][ T9316] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 206.054749][ T9323] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 206.261421][ T9332] netlink: 52 bytes leftover after parsing attributes in process `syz.3.773'. [ 206.761865][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 206.768461][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 206.775155][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 206.781787][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 206.891751][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.936184][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.358034][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 207.512600][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 208.250692][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 208.503778][ T9436] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 208.729170][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 209.150173][ T9460] syzkaller1: entered promiscuous mode [ 209.169961][ T9460] syzkaller1: entered allmulticast mode [ 209.958213][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 209.997115][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 211.025610][ T9553] netlink: 10 bytes leftover after parsing attributes in process `syz.1.823'. [ 211.125111][ T9557] xt_hashlimit: size too large, truncated to 1048576 [ 211.372307][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 211.413944][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 211.744435][ T9575] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 212.115599][ T9588] : renamed from lo (while UP) [ 212.355195][ T9600] xfrm1: entered allmulticast mode [ 212.441439][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 212.742983][ T9630] lo speed is unknown, defaulting to 1000 [ 212.791271][ T9630] lo speed is unknown, defaulting to 1000 [ 212.857076][ T9630] lo speed is unknown, defaulting to 1000 [ 212.882319][ T9630] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 212.918796][ T9630] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 212.963840][ T9630] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 212.991177][ T9630] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 213.011754][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 213.194400][ T9630] lo speed is unknown, defaulting to 1000 [ 213.203306][ T9630] lo speed is unknown, defaulting to 1000 [ 213.213284][ T9630] lo speed is unknown, defaulting to 1000 [ 213.223614][ T9630] lo speed is unknown, defaulting to 1000 [ 213.232176][ T9630] lo speed is unknown, defaulting to 1000 [ 213.424443][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 213.750406][ T9663] xt_CT: No such helper "netbios-ns" [ 213.816401][ T9676] netlink: 'syz.0.846': attribute type 16 has an invalid length. [ 213.846234][ T9679] netlink: 80 bytes leftover after parsing attributes in process `syz.1.845'. [ 215.563448][ T9632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.877569][ T9698] lo speed is unknown, defaulting to 1000 [ 216.034174][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'. [ 216.301666][ T9727] tipc: Started in network mode [ 216.307620][ T9727] tipc: Node identity 1e9873cafb45, cluster identity 4711 [ 216.315566][ T9727] tipc: Enabled bearer , priority 0 [ 216.415815][ T9727] tipc: Disabling bearer [ 217.050237][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.062668][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.067597][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e347800: rx timeout, send abort [ 217.082060][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e347800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 217.129985][ T6897] ------------[ cut here ]------------ [ 217.137107][ T6897] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 217.147078][ T6897] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/0:17/6897 [ 217.158045][ T6897] Modules linked in: [ 217.163465][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: kworker/0:17 Not tainted syzkaller #0 PREEMPT(full) [ 217.173057][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.183274][ T6897] Workqueue: mld mld_ifc_work [ 217.188039][ T6897] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 217.194402][ T6897] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 217.214200][ T6897] RSP: 0018:ffffc9001ba066f8 EFLAGS: 00010246 [ 217.220480][ T6897] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 217.228492][ T6897] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9042c130 [ 217.236675][ T6897] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.244828][ T6897] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888021edaa28 [ 217.252972][ T6897] R13: 0000000000000000 R14: ffffffff9042c130 R15: ffff88805d6e3258 [ 217.261040][ T6897] FS: 0000000000000000(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 217.270057][ T6897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.276743][ T6897] CR2: 00007f775e1456b8 CR3: 000000005f8e8000 CR4: 00000000003526f0 [ 217.284823][ T6897] Call Trace: [ 217.288411][ T6897] [ 217.291449][ T6897] rate_control_send_low+0x1a7/0x7b0 [ 217.296794][ T6897] rate_control_get_rate+0x20b/0x5d0 [ 217.302266][ T6897] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 217.307987][ T6897] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 217.314177][ T6897] ? __skb_flow_dissect+0x668e/0x6e80 [ 217.319730][ T6897] invoke_tx_handlers_late+0xba/0x18a0 [ 217.325274][ T6897] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 217.331292][ T6897] ieee80211_tx_dequeue+0x403e/0x54d0 [ 217.336804][ T6897] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 217.342643][ T6897] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.348416][ T6897] ? ieee80211_queue_skb+0x182d/0x22c0 [ 217.354005][ T6897] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 217.359993][ T6897] ieee80211_queue_skb+0x1a1f/0x22c0 [ 217.365373][ T6897] ieee80211_tx+0x2c2/0x4b0 [ 217.369986][ T6897] ? __pfx_ieee80211_tx+0x10/0x10 [ 217.375095][ T6897] ? ieee80211_xmit+0x315/0x400 [ 217.380062][ T6897] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 217.386135][ T6897] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 217.392413][ T6897] ? process_scheduled_works+0xb5d/0x1860 [ 217.398215][ T6897] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 217.404717][ T6897] ? skb_network_protocol+0x23d/0x400 [ 217.410172][ T6897] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 217.416594][ T6897] ieee80211_subif_start_xmit+0xf3/0x570 [ 217.422319][ T6897] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 217.428626][ T6897] ? __pfx_netif_skb_features+0x10/0x10 [ 217.434362][ T6897] dev_hard_start_xmit+0x2cd/0x830 [ 217.439593][ T6897] __dev_queue_xmit+0x14d9/0x3950 [ 217.444686][ T6897] ? __dev_queue_xmit+0x2b6/0x3950 [ 217.449905][ T6897] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.455338][ T6897] ? neigh_resolve_output+0x438/0x750 [ 217.460893][ T6897] ? eth_header+0x11b/0x200 [ 217.465484][ T6897] ? __asan_memcpy+0x40/0x70 [ 217.470272][ T6897] ? ip6_output+0x126/0x550 [ 217.474866][ T6897] ip6_output+0x340/0x550 [ 217.479282][ T6897] ? __pfx_ip6_output+0x10/0x10 [ 217.484217][ T6897] NF_HOOK+0x177/0x4f0 [ 217.488338][ T6897] ? __pfx_NF_HOOK+0x10/0x10 [ 217.493030][ T6897] ? __pfx_dst_output+0x10/0x10 [ 217.497943][ T6897] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.503238][ T6897] ? __local_bh_enable_ip+0xd0/0x130 [ 217.508618][ T6897] ? icmp6_dst_alloc+0x3a6/0x440 [ 217.513659][ T6897] mld_sendpack+0x8b4/0xe40 [ 217.518426][ T6897] ? mld_sendpack+0x213/0xe40 [ 217.523199][ T6897] ? __pfx_mld_sendpack+0x10/0x10 [ 217.528310][ T6897] mld_ifc_work+0x835/0xe70 [ 217.533082][ T6897] ? process_scheduled_works+0xa70/0x1860 [ 217.538964][ T6897] process_scheduled_works+0xb5d/0x1860 [ 217.544646][ T6897] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.550770][ T6897] ? assign_work+0x3d5/0x5e0 [ 217.555529][ T6897] worker_thread+0xa53/0xfc0 [ 217.560321][ T6897] kthread+0x389/0x470 [ 217.564446][ T6897] ? __pfx_worker_thread+0x10/0x10 [ 217.569782][ T6897] ? __pfx_kthread+0x10/0x10 [ 217.574433][ T6897] ret_from_fork+0x514/0xb70 [ 217.579077][ T6897] ? __pfx_ret_from_fork+0x10/0x10 [ 217.584314][ T6897] ? __switch_to+0xc79/0x1410 [ 217.589055][ T6897] ? __pfx_kthread+0x10/0x10 [ 217.593748][ T6897] ret_from_fork_asm+0x1a/0x30 [ 217.598588][ T6897] [ 217.601717][ T6897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.609034][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: kworker/0:17 Not tainted syzkaller #0 PREEMPT(full) [ 217.618530][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.628628][ T6897] Workqueue: mld mld_ifc_work [ 217.633369][ T6897] Call Trace: [ 217.636690][ T6897] [ 217.639666][ T6897] vpanic+0x56c/0xa60 [ 217.643698][ T6897] ? __pfx__printk+0x10/0x10 [ 217.648332][ T6897] ? __pfx_vpanic+0x10/0x10 [ 217.652864][ T6897] ? is_bpf_text_address+0x292/0x2b0 [ 217.658182][ T6897] ? is_bpf_text_address+0x26/0x2b0 [ 217.663409][ T6897] panic+0xc5/0xd0 [ 217.667162][ T6897] ? __pfx_panic+0x10/0x10 [ 217.671708][ T6897] ? ret_from_fork_asm+0x1a/0x30 [ 217.676685][ T6897] __warn+0x315/0x4c0 [ 217.680698][ T6897] ? __rate_control_send_low+0x524/0x800 [ 217.686373][ T6897] ? __rate_control_send_low+0x524/0x800 [ 217.692037][ T6897] __report_bug+0x29a/0x540 [ 217.696578][ T6897] ? __rate_control_send_low+0x524/0x800 [ 217.702281][ T6897] ? __pfx___report_bug+0x10/0x10 [ 217.707346][ T6897] ? __lock_acquire+0x6b5/0x2cf0 [ 217.712313][ T6897] report_bug_entry+0x19a/0x290 [ 217.717193][ T6897] ? __rate_control_send_low+0x5bb/0x800 [ 217.722848][ T6897] ? __rate_control_send_low+0x5c0/0x800 [ 217.728595][ T6897] handle_bug+0xce/0x200 [ 217.732864][ T6897] exc_invalid_op+0x1a/0x50 [ 217.737392][ T6897] asm_exc_invalid_op+0x1a/0x20 [ 217.742264][ T6897] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 217.748533][ T6897] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 217.768159][ T6897] RSP: 0018:ffffc9001ba066f8 EFLAGS: 00010246 [ 217.774341][ T6897] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 217.782329][ T6897] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9042c130 [ 217.790317][ T6897] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.798311][ T6897] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888021edaa28 [ 217.806297][ T6897] R13: 0000000000000000 R14: ffffffff9042c130 R15: ffff88805d6e3258 [ 217.814396][ T6897] ? __rate_control_send_low+0x58d/0x800 [ 217.820085][ T6897] rate_control_send_low+0x1a7/0x7b0 [ 217.825493][ T6897] rate_control_get_rate+0x20b/0x5d0 [ 217.830813][ T6897] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 217.836493][ T6897] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 217.842616][ T6897] ? __skb_flow_dissect+0x668e/0x6e80 [ 217.848046][ T6897] invoke_tx_handlers_late+0xba/0x18a0 [ 217.853550][ T6897] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 217.859487][ T6897] ieee80211_tx_dequeue+0x403e/0x54d0 [ 217.865043][ T6897] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 217.870806][ T6897] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.876225][ T6897] ? ieee80211_queue_skb+0x182d/0x22c0 [ 217.881723][ T6897] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 217.887654][ T6897] ieee80211_queue_skb+0x1a1f/0x22c0 [ 217.893095][ T6897] ieee80211_tx+0x2c2/0x4b0 [ 217.897696][ T6897] ? __pfx_ieee80211_tx+0x10/0x10 [ 217.902764][ T6897] ? ieee80211_xmit+0x315/0x400 [ 217.907645][ T6897] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 217.913658][ T6897] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 217.919850][ T6897] ? process_scheduled_works+0xb5d/0x1860 [ 217.926201][ T6897] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 217.932644][ T6897] ? skb_network_protocol+0x23d/0x400 [ 217.938047][ T6897] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 217.944321][ T6897] ieee80211_subif_start_xmit+0xf3/0x570 [ 217.950008][ T6897] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 217.956345][ T6897] ? __pfx_netif_skb_features+0x10/0x10 [ 217.961955][ T6897] dev_hard_start_xmit+0x2cd/0x830 [ 217.967141][ T6897] __dev_queue_xmit+0x14d9/0x3950 [ 217.972219][ T6897] ? __dev_queue_xmit+0x2b6/0x3950 [ 217.977387][ T6897] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.982802][ T6897] ? neigh_resolve_output+0x438/0x750 [ 217.988218][ T6897] ? eth_header+0x11b/0x200 [ 217.992764][ T6897] ? __asan_memcpy+0x40/0x70 [ 217.997428][ T6897] ? ip6_output+0x126/0x550 [ 218.002066][ T6897] ip6_output+0x340/0x550 [ 218.006442][ T6897] ? __pfx_ip6_output+0x10/0x10 [ 218.011422][ T6897] NF_HOOK+0x177/0x4f0 [ 218.015644][ T6897] ? __pfx_NF_HOOK+0x10/0x10 [ 218.020275][ T6897] ? __pfx_dst_output+0x10/0x10 [ 218.025157][ T6897] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.030388][ T6897] ? __local_bh_enable_ip+0xd0/0x130 [ 218.035703][ T6897] ? icmp6_dst_alloc+0x3a6/0x440 [ 218.040687][ T6897] mld_sendpack+0x8b4/0xe40 [ 218.045244][ T6897] ? mld_sendpack+0x213/0xe40 [ 218.049952][ T6897] ? __pfx_mld_sendpack+0x10/0x10 [ 218.055019][ T6897] mld_ifc_work+0x835/0xe70 [ 218.059555][ T6897] ? process_scheduled_works+0xa70/0x1860 [ 218.065309][ T6897] process_scheduled_works+0xb5d/0x1860 [ 218.070941][ T6897] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.077045][ T6897] ? assign_work+0x3d5/0x5e0 [ 218.081665][ T6897] worker_thread+0xa53/0xfc0 [ 218.086304][ T6897] kthread+0x389/0x470 [ 218.090402][ T6897] ? __pfx_worker_thread+0x10/0x10 [ 218.095534][ T6897] ? __pfx_kthread+0x10/0x10 [ 218.100152][ T6897] ret_from_fork+0x514/0xb70 [ 218.104775][ T6897] ? __pfx_ret_from_fork+0x10/0x10 [ 218.109999][ T6897] ? __switch_to+0xc79/0x1410 [ 218.114805][ T6897] ? __pfx_kthread+0x10/0x10 [ 218.119436][ T6897] ret_from_fork_asm+0x1a/0x30 [ 218.124241][ T6897] [ 218.128138][ T6897] Kernel Offset: disabled [ 218.132481][ T6897] Rebooting in 86400 seconds..