last executing test programs: 33.01232009s ago: executing program 2 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@deltclass={0x4cc, 0x29, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xc, 0xc}, {0xfff1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9b}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x1, 0x4, 0xbd34, 0x9, 0x9}, {0x2, 0x0, 0x7fff, 0x4, 0x8, 0x1}, 0x9, 0x9, 0x0, 0x6, 0x2}}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x4, 0xff, 0x3ff, 0x67, 0x5fd3, 0x3, 0x6, 0x100, 0x10000, 0x401, 0xffffffff, 0xff, 0x4, 0x5, 0x5, 0x6, 0x80000001, 0x4, 0xcd1d, 0x8, 0x1, 0x3, 0x4, 0x8, 0xa95, 0x7, 0x0, 0x1, 0x9, 0xff, 0xffff2c36, 0x0, 0xb, 0x1, 0xffff, 0x2, 0x2, 0x3, 0x1000, 0x81, 0x3, 0x7, 0x4, 0x2, 0x9, 0x10001, 0x7ff, 0x0, 0x3ff, 0xfffff001, 0xffffff4f, 0x7ff, 0x8000, 0xfffeffff, 0x857, 0xf721, 0x81, 0x4, 0x3, 0x5, 0x2, 0x9, 0xa8f, 0x5, 0x2, 0x6, 0x1f9, 0x7, 0x0, 0x10001, 0x4, 0x417, 0x2, 0x6a0, 0xdd, 0x600, 0x10, 0x5, 0x1, 0x1, 0x4, 0x7, 0x0, 0x7, 0x2, 0x7fffffff, 0x6, 0x3, 0x0, 0x0, 0x4, 0x1ff, 0x7, 0x5, 0x5, 0x7fff, 0x6, 0x0, 0x3, 0xfffffff7, 0x7, 0xf, 0x7, 0x7, 0x1, 0x8000, 0x101, 0x200, 0x0, 0x2, 0xe0e5, 0xb0, 0x5, 0x34ad, 0x8, 0x3, 0xcd1, 0x9, 0x2, 0x8001, 0x3, 0xd3, 0x4, 0x9, 0x0, 0xfffff775, 0x101, 0x1000, 0x8, 0x3000, 0x587, 0x9, 0x3, 0x347, 0x1, 0x6, 0x4, 0x5ba, 0x3, 0xffff, 0x9, 0x5, 0x400, 0x0, 0xffff, 0x9, 0x3468, 0xfffffff7, 0x80000000, 0x8, 0x2, 0x1f3, 0x80000000, 0xfffffff9, 0x8, 0x3, 0x40, 0xdc, 0xc, 0x7fff, 0x7, 0x40, 0x1ff, 0x4, 0x8, 0x200, 0x5683bd77, 0xf0d9f600, 0xfffffff3, 0x6, 0x8, 0x1, 0x2, 0x1, 0x7f, 0x4665, 0xffffffff, 0x8000, 0x10001, 0x3, 0x8e7a, 0xffffff81, 0x9, 0x7, 0x10, 0x8000, 0x1, 0x6, 0xa25c, 0x1, 0x1ff, 0x0, 0x92, 0xa, 0x0, 0x8, 0x0, 0x3006, 0x5868, 0x7, 0x9, 0x4, 0x10, 0x7f, 0xb, 0xa, 0x3, 0xf, 0x5, 0x5, 0xc, 0x2, 0x6, 0x7da, 0x58, 0x1, 0x3, 0x2, 0x9, 0x8, 0x200, 0x5, 0x80, 0x400, 0x7fff, 0x7, 0xffffffff, 0xb1a, 0x6, 0x401, 0x2, 0x9, 0x3c27, 0x7fff, 0x7ff, 0x6, 0x2, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x1ff, 0xffffffff, 0x2e0, 0x3, 0x2, 0x101, 0xfffffffc, 0x100, 0x4, 0x80000000, 0x7, 0x200, 0xd]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xfb}}, @TCA_RATE={0x6, 0x5, {0x7, 0xfb}}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x0, 0xc, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xc0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xac, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1036, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700003150"], 0x48) getpid() 29.047663344s ago: executing program 2 (id=1884): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'team_slave_1\x00', {0xfffffff6}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c045}, 0x4000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r3) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x556d088362477755, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'security\x00', 0x0, [0x4, 0x91, 0x3, 0x10001, 0x8]}, &(0x7f00000003c0)=0x54) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000400)={0x8, 'wlan1\x00', {'veth0_vlan\x00'}, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x7, 0x3, {{0x57, 0x4, 0x2, 0x7, 0x15c, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@noop, @timestamp_prespec={0x44, 0x4c, 0xf3, 0x3, 0x2, [{@broadcast, 0x401}, {@loopback, 0x7ff}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0xffffff7f}, {@broadcast}, {@local, 0x3ff}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010102, 0xb}]}, @timestamp_addr={0x44, 0x14, 0x54, 0x1, 0xf, [{@local, 0x2}, {@private=0xa010102, 0xffff0001}]}, @timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x4, [{@rand_addr=0x64010100, 0x7}, {@remote}, {@multicast1, 0x1}, {@local, 0xa7bb}, {@broadcast, 0x200}]}, @generic={0x82, 0xc, "adb65b61de61abeb1210"}, @timestamp={0x44, 0xc, 0x71, 0x0, 0x2, [0x1, 0xffffffff]}, @rr={0x7, 0x13, 0xdf, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @empty]}, @generic={0xf, 0xe, "0683ca0eff5adb536ec73514"}, @timestamp_addr={0x44, 0x34, 0xb7, 0x1, 0x0, [{@remote, 0x8}, {@multicast1, 0x2}, {@loopback, 0x3}, {@private=0xa010102, 0x3}, {@local, 0x7f}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0x21, 0x1, 0x0, [{@remote, 0x86c}, {@empty}, {@multicast2, 0x4}, {@multicast2, 0x5}, {@empty, 0x3}, {@remote, 0x7}, {@multicast1, 0xfff}, {@multicast2, 0xffffffff}, {@multicast1}]}]}}}}}) sendmmsg$inet(r5, &(0x7f0000000700)=[{{&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480), 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x124a0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}], 0x70}}], 0x1, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x224, r2, 0x4, 0x70bd28, 0x49, {{}, {@void, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1ff, 0x7f, 0x6, 0x5, 0x80, 0x5, 0x1]}}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x0, 0x3, 0x8, 0x7, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x6, 0x9}, {0x3}, {0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x12}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x4, 0x7}, {0x2, 0x1f}, {0x6, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x2}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x5, 0x18}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x6, 0x69, 0x5, 0x3, 0xd, 0xff]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xb, 0x5, 0xff, 0x800, 0x8, 0x6b6c, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x40, 0x1000, 0xfbc4, 0x3, 0x6, 0x3, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7b1b, 0x1af0, 0xde2e, 0x80, 0x6, 0x8, 0x6, 0xfbe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x50, 0x5, 0xf49c, 0x5, 0x0, 0xfff4, 0x8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x40, 0xf0, 0xff, 0xbe3a, 0x3ff, 0x5, 0xfff8]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x47, 0x1, 0x9, 0x36, 0xb, 0x4, 0x2, 0x12, 0x5, 0xb, 0x48, 0x1, 0x5, 0x4, 0x5, 0x9, 0x4, 0x9, 0x1, 0x30, 0x4, 0x12, 0x0, 0x18, 0x48, 0x3, 0x24, 0x48, 0x30, 0x30]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x1, 0xfffa, 0x80, 0x101, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0xa}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0x8}, {0x3}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {}, {0x1, 0x7}, {0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x6}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x8}, {0x7}, {0x1, 0x5}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0x2}, {0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x18, 0x60, 0xb, 0x2, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x32, 0x1, 0x0, 0x80, 0xbdd, 0x44]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@ipv6_newnexthop={0x24, 0x68, 0x300, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x3, 0x0, 0x22}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000018}, 0x11) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%pS \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)=@o_path={&(0x7f0000000dc0)='./file0\x00', r9, 0x4000, r0}, 0x18) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000f00)={@empty, @initdev}, &(0x7f0000000f40)=0xc) sendmsg$nl_route(r8, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x4, 0x5, 0x0, 0x0, 0x3, 0x10009}, [@FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r9, 0xffffffffffffffff}, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x78, r11, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080d0}, 0x8000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000c4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f0000001340)="cc7e5b0464d3d65df74f5c4ca3e3ca9a9169bbe4424215d33d042721a2b456f283cd87267275cebe11a53481d0a0736b57", &(0x7f0000001380)=""/37, &(0x7f00000013c0)="b70368f2218675e504ed43f0401a3882288c400128096d815fcefd030f26883b448e8e57a6264b27e88207e668f623244434978b312d049ab573debf78a43c019e0d76a5562f11a2ec01cc1d54b2c4cb692a26002322f0ebdfc87db3d0628cdf57a51622983321", &(0x7f0000001440)="cbb8963b8cc30e0b0b69dfb0285b6a2bf753da52f43bd33f05a537a7ee37257de29cc9b973497877453381e6805204539215897182ff156e4b39cedadf398182e1fe5a2fae06df0cd127674231e6bf6fbbded5251e72d8d203d2565d35f05601745b0587e22418dc2edf47684a2959d2e28892f9beab2f4535062d4d6e855e5a52e7f1c32966bbc502f206574b9d742446aade4048cfcd4271689551e290ad3343082c32c3825a7cd7e705d18507ddc14f8c5eac41ced8b0b66068bb56b3800afdcbcd8d17e586c1d99cf26edc0a28e1721df91949a994ea3253d6ac295f4faa2c3c14dd5f1280c9f774", 0x0, r10}, 0x38) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x8c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 28.655188934s ago: executing program 2 (id=1886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x3, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4008810) 25.903363417s ago: executing program 4 (id=1893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ad51356c4ff000000007110bf00000000000800000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 25.558419309s ago: executing program 2 (id=1896): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0004a50035c2586d5770fc8f60ad89f7610a43001349777a9eb528a463e13145f93b8bccbf30249730fa52e17eadfa08c74206ec8f7c4207b601e9e1d235c7b51d65b87aa146f6cc8d185a4470cbc07935ede4964347d958792e89bcef754ac8ee6b5d4801e50d551e4841bbb4a1b11c7207fee7b7a209c78628b46aad38d5c683456221a226d98181a075539ee964811f189efd71fa1a3cd5d8dfff5b8f128dda6e431e2fdadb071012b6efcb84563d13358f0ca57d22b1c458e365b37679d95dd197927da331a6bd6c5c705dceea91cab7279094e8e319dd6d7ecfda521399169a4a38375b22a1dfb28cce6e"], 0x18}, 0x0) 25.32473118s ago: executing program 4 (id=1897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x5}, 0x10) close(r8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x883, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x5, 0x0, 0x0, 0xd}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x4000005, 0x9, 0x8de3, 0x9, 0x3}}]}]}}}]}, 0x94}}, 0x0) 25.172674378s ago: executing program 2 (id=1899): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x2e, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xdb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x1e, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10, r0, r1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001000)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x4}, @hci={0x1f, 0xffffffffffffffff}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)='team_slave_0\x00', 0x61c, 0x80000001, 0x9}) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000580)=0x63, 0x2) connect$bt_sco(r5, &(0x7f00000000c0), 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r7, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x100, 0x70bd26, 0x0, {0x2, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x659}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x759c}], 0x68) 24.084779006s ago: executing program 4 (id=1903): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc044000}, 0x4000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$igmp6(0xa, 0x3, 0x2) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="1c002d800500040000000000040001000f0000000800020003000000"], 0x38}, 0x1, 0x0, 0x0, 0x4042440}, 0x4910) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 24.006121427s ago: executing program 1 (id=1904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000015c0)=ANY=[@ANYBLOB="80020000", @ANYRES16=r2, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x824, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x7f8, 0x2, 0x0, 0x1, [@nested={0x7f1, 0x1, 0x0, 0x1, [@generic="e898ab790edf940f19ffb1463e", @generic="94877d479048e70b4d24bbf9662b361943be9c5ea468345fa7714a518f1eb7673a23402c68644fd29312d85d401f2bacecd21e95d809ca862a26142be908d8f04a51f14b8c8849e1bb016fe6f62e2158f1d26969d601572b0602a4cf1e34bafe92371e6bba2d0b8172e726ce0a6e78ae8bbe20e3812baecac15a1be8c6c7ce08b230e4e280b8b7767eb140d326a0cad45b1a9040230b0bfad1e236c18e6b0c42d7511b0d20a926b830da0e131361b649ac449ae938e3dc4e18e1ef10aa2aead5", @typed={0x4, 0xb}, @typed={0x8, 0xb9, 0x0, 0x0, @uid}, @generic="322bde9ae74cbd97904c08945dbfac737f60eb40799b002b677c9f4a8165931f12c4e194e19046c1fa88457c5475d21ca8305d8b23b99f983ef73fe219ad8b2f57cbf141fde497e1d12466e8e0e04a6fae48080e4b8bc1f7f6430fc0ade18b58f588ba1a5fad5f14a7b5f50a243229df0be93cee847bb0d8f84c860933dceff2f291661464477425d7d26c88f5f9aaefaa9f97cbd0c8fc44da009a4ea7f635be211b710f9e556e36ade6184d860bacd48dbe1e6cd02bf35e5d537baf8107bac64b31086659b09bfbb2cf3dccda966c601373b89b938534c29af19e3728875903c6a60145f6bdf3c4dce211", @generic="6b3789f470e4784cc52ea95e7c0aa933d63c6073f199c64e63d308e0e90a733a7fed91015a67b1a933347ec7dffb283c7bfc51387effd488fc2901453c58b43963de4cc1b35d093c4282027cce49aecef6e19d7db200253d32f8c34ab65552052d", @typed={0x8, 0xf3, 0x0, 0x0, @fd=r1}, @nested={0x16d, 0x37, 0x0, 0x1, [@generic="5ba9feab6bb2e326fc67bcf1beb999492d02fbfc77e14aa14a9a133ed19cae6a3c1f90fa2ab75b61f4274dff37696b1764380c0289c9c99af555d67e9a5650d4fd48ed5b06c020dd7bddb8728a00c9057eefc7060dcaeb91ea025c643ad78ddd19dd646697c747284ea38be7820dbff9180037d23e78ac3dbdcff539de8d9a9b0472b3e66a3715dcdb4fccbc8041646ee7e01641940e522b920f2e71750435ac8d8ff79a9ce2cc50ef5cdaeec6", @nested={0xba, 0xcc, 0x0, 0x1, [@typed={0x14, 0x15c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}, @generic="e621976d47f7d95e404bc68ef285c2f30b41658a65cdb1a7f056ccfb37097bdbf0609cad04deca28a488e961b2f7d9f4a42412e0050527cbe3be5b9222117a417abbc38c0094736cbe6245373b0e0e1c49aa2c5903050341e3d80b7eb4b65bf66b765ceb6bb43ff9d6f971651f4a4c62d4e7550a9714545ced4c198e5a04315f553d7616211fce3d9085", @nested={0x4, 0xb1}, @typed={0x8, 0x6, 0x0, 0x0, @fd=r1}, @generic, @nested={0x4, 0x137}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x2}]}]}, @nested={0x450, 0x71, 0x0, 0x1, [@generic="6c82ed25863c6754db28a3023c7cebea0faa2b93836414be3716372a75bf736c8b2095f0c01623008bdb229d23a8a54bdfcd383eda75e2c16f160752bf449f8deaa943989bb9992f6bb556242c1b157bf836b506aa44fac98161f714b687fe5d2350c95cdb3354f0f65c90dfda8d23f5e50398ebd64bde1fc77c76ea09d0b5efc0de1381e9dc05fde727de5a2842363aa623c1d307bb89673ae15369d6c137962f170b80667af014c8abe19662ccab3be024aaa40860da5e00a928f9471c36f982432701de52fe2a5972928d9e99005401cc4599ae47885d05f9ad280d20b7ea73b1c7be2267f1b009349f33a43eca1081", @generic="0132d9be1e9a8f79575148028487b39ed3465fe1c27a9f4b91ca807b55a7597a029f19cc", @generic="eb2a8b1f77d191b7eb8c9c644c91758ee367338e68a569ae308cc589d7e7f5133779fff77208600f9cacc155f90303255a7d5253cdfe60ad7845294891ca089722741b78f06abee084ae08679d480f44315360772d54dce75826d8f989104e897b9160900e1b30efac62613100b734c46dc4681000b54fd19944dce74663728dac0bd0328c06a25acb4ee2abe903e7e63133ff65bf8091c902595b1e1526a8b1e6bd2eb069967247bb1f49db96218da9bc6db3da983eba7f350ffb9ca856b3759791df7dd95f7f80fbf4a4b3ffbaf065616707f7b15cd9d0110a843bd90614cbb488002b172a0f9e50556188173434bb", @generic="e1cd6fed1cd89a02a359920577eeb1d38d7b2540ea65e3d0aae8c2881f1d7bc7ff9ad5249cbaa430a30f23fa7ed658a135385e7997e3c15c881da5406fe9a1c312f426dd2ed70cc67dc3ce640405d89c43bf50eb8534b4ad7d23ba6e0ad49f5f05889a955163e9c3c79eb37f39b9f0c7cc024eeacca86f4ad8856432ebad2437ac6fdb546ec9224522a117bf8683b163f5faaaf8", @generic="dd0c53fbb996b9c8214c2bc3bca9051049ab2c4afbfc9cb8325c89104aeea436ae4b1471b7888b74e023956c2f5e1e06fd69a2129877b38d23a29b77523b681114f984d0350d9edac71924fd215388b77d0c", @generic="593c239f9d27c86759378cfb98", @typed={0x8, 0x36, 0x0, 0x0, @uid}, @nested={0x14c, 0x11d, 0x0, 0x1, [@generic="25921588b2288e476ad999ad6c2eafe270b02d3d32b2724b9de2be2296e0ad43c32e231423b2b67caa9d99159b1ba7b734b9c73aeac6977cda7b021e6ba8403e6daf95cf59189867aa6687d3ce7a3896aa5a355fbed7d6195281de004e0f58144262a1ec7f2f726cfd1a586df821c07b786a65ad1ca9b5cfebf01b8b783e26a53c1a04d50531f45a58712e969b6fd75b93dc0ad44012b6eaa340570d77e6f33c8e2c4ffc3060b065f7a2157c30375c62fb3319ec04ef3fc55bdbc07f38fe21d6d7063c1c9d2358ea48eb7f45", @generic="f65de1196f0d5320c758eda26a62670fd4c63e8d3b885f1eb8916ab292aa10bfad36cf685c309cd27e8390d3f08cc7e2166b1a9cb6a516cc1d90ccfef7c74184b041bd23f5068c880ec866ce3e606be8a048d1183434e30e4b1cafed", @typed={0x4, 0x92}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xeb}, @typed={0xc, 0x9b, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xfc}]}]}]}]}]}, 0x824}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ffff0000", @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r14, &(0x7f0000000000)=ANY=[], 0x1000d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5e00880135c00c4d2f80b10175a557793df4b032842c68fc869bb54a16a1b514a662ec53b1d21b86c9c3764f00098e92cce6c65b771a7159622fa84f36302229d8ad9e5be3c306460ef1353a65120935b0dfae3f32577365c3c218b40b0a2d75f82c0e76b4", @ANYRES16=r6, @ANYBLOB="010000000000030000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c009900000000002b0000000500180129000000050019010800000008002600710900000800270000000000"], 0x48}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x8000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="080029bd7000fddbdf25600000000800030095410644c96f7fc6370058f6fd80256ab1c6f879181503df988271a5500ddc9a3d1fa018a7fe5dfb1f4c465148cd7b0f4d2544e54d4586690d88e6251a78620d83b4db174ae4b281d9177ee18e45b0257d40391c5ee47d7c598af1445d6739f17ae99755a715b18c3058414e8f906f94a461d2088e2fb99e8d4f37508665b530916352067523d8fae6d631d2bad8ad53c721c390bbc15521c3d2b42c3e1c42f9f04c06fb9f378375b5", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x22004004}, 0x40001) 23.995192641s ago: executing program 3 (id=1905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="803f000000000000000000000000000000000000457d0391ad345dc347ad2a328f147c472e96893cad80f311b7b1a390907057bc3be77b0efb8629ae8fcab43731f06637a379a23bb9257f5024722e80d35640dae8533a7901696c553a2995756798c843a149cd1f06a8ddfa6569ed449ab85f9fe6173763071ab43f587d41ec3da94293ce9b8d96a83b3997440759006903da7cb66f98ac2e530248ea4d1e5b51e9d68f3cc66d25c03a229d29104f8cb5c7ffbe01ef0c3c1e1266f3bacb2e3caa212d2829ad232facfc", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200000000001400030067656e65766531000000000000000000"], 0x50}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000380)={r1, &(0x7f0000000280)='hsr0\x00', 0x240000, &(0x7f00000002c0)={@align=0x8, {0x1, 0xe, 0xffff8000, 0x100000001}}, 0x8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x661}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x25, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}], 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000000000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a402a85fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a300000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000000001100010000000000000000000100000a00"/218], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0x410, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x6, 0xfff1}, {0x8, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3c, 0xf1}}, @filter_kind_options=@f_u32={{0x8}, {0x3dc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}, @TCA_U32_SEL={0x3c4, 0x5, {0x4, 0x4, 0xd, 0x101, 0xd, 0xddd6, 0x5, 0xefc, [{0xa00000, 0xfffffffb, 0x8, 0x80000000}, {0x7, 0xe4b6, 0x100, 0x4}, {0x5, 0x2, 0x80, 0x7}, {0x5, 0xb, 0x5, 0x6}, {0x2, 0x8, 0x4, 0x3}, {0x3ff, 0x7, 0x4405, 0x3}, {0x3a0, 0x4, 0x10000, 0x5}, {0x2800000, 0x3, 0x6cf, 0x5}, {0x2, 0x80, 0xb49}, {0x1e5efcb7, 0x854f, 0x9}, {0x40, 0x1, 0x2, 0x200}, {0x1, 0x6aa7, 0xfffffff7, 0x7}, {0x8, 0x8, 0x6, 0x4}, {0x76319162, 0x7, 0x49, 0x4}, {0x2, 0x5, 0x3, 0x71}, {0xc211, 0xb, 0x9, 0xa}, {0xfffffffc, 0x9, 0x1000, 0x8000}, {0x8, 0x83, 0x11c, 0x3}, {0x3, 0x490d, 0x4, 0x3}, {0x6, 0x40, 0x64000000, 0x4}, {0x1, 0x5, 0x0, 0x101}, {0x8, 0x5, 0x80000000, 0x7}, {0x3ff, 0x2, 0x4, 0xfffffff7}, {0xffff9313, 0x5, 0x7, 0x1}, {0x5, 0x80000001, 0x6, 0x7}, {0x5, 0x0, 0x7, 0x7}, {0x6, 0x9, 0xb, 0x5}, {0x9, 0x4, 0xfffffffb, 0x8}, {0x8001, 0xfffff800, 0x1, 0x1}, {0xff, 0xbb3, 0xffffffff}, {0x10000, 0x5, 0x9, 0x9}, {0x6, 0x7, 0x3ff, 0x6}, {0x12000, 0x6, 0x4811, 0x5}, {0x7, 0x9b0, 0x10000, 0xa}, {0xb, 0xc, 0x2b01a1b2, 0x9}, {0xfa, 0x3, 0x5, 0x533}, {0xb, 0x4, 0x3, 0x100}, {0x200000, 0x1, 0x3, 0x2218}, {0x6, 0x3a1, 0x400, 0x7f}, {0x8, 0x400, 0x5, 0x5}, {0x4, 0x3, 0x0, 0xa}, {0x0, 0x666, 0x5, 0x8}, {0x1, 0x1, 0x2, 0xa}, {0x100, 0x9, 0x8000, 0xfffffff3}, {0x7fff, 0x3, 0x10000}, {0x8, 0x40, 0x2, 0x9}, {0x100, 0xffffff40, 0xffff0000, 0x7}, {0x9, 0x3, 0xf, 0x7}, {0x7, 0x7, 0x5, 0xfffffff3}, {0xd, 0x10, 0xf, 0x4}, {0x400, 0x5b9, 0x4, 0x8}, {0xfffffffc, 0x3, 0x6, 0xb}, {0x1, 0x7fff, 0x7ff, 0x4}, {0x0, 0x3, 0x0, 0xab}, {0x0, 0x6a, 0x1, 0x5}, {0x0, 0x0, 0x9, 0xffffffff}, {0x6, 0x7ff, 0x0, 0x5}, {0x6, 0x4, 0xf, 0x9}, {0x1, 0x7, 0x7, 0x2}]}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 23.948583381s ago: executing program 2 (id=1906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000003e00)={{0x14}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc1f8c0c}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xec, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xb4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0xa}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x290}}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01012cbd7000fddbdf25030000000c00040002000000000200000c00030000000000000000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0006000300000000000000080001000000000008000100000000000800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 22.533092377s ago: executing program 4 (id=1908): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000040)={0x18, 0x1402, 0x1, 0x0, 0xffffffff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x28000000) 22.480907186s ago: executing program 3 (id=1909): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x90, &(0x7f0000000080)=""/144, 0x41000, 0x30, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x8, 0xff, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x7fff}, 0x94) close(r0) 22.295061906s ago: executing program 3 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x3, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), 0x0, 0x2}, 0x20) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x891e, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1120}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 22.282135253s ago: executing program 4 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x40, 0x10, 0xfffffffb, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 22.065375262s ago: executing program 4 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x2008000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0xc}, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4, 0x1, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c005}, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400), &(0x7f0000000440)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x76}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="f7e0336de481"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c13dfe2d999097f8ae71536629"}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000740), &(0x7f0000000780)=0x4) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000800)=0x10000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000840)={0x8, [0x8, 0x2c, 0xb, 0x7b0, 0xa35, 0x1000, 0x5, 0x0]}, 0x14) socket$inet6(0xa, 0x1, 0x6) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000880)=0x10000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x3, 0xd, 0x1, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001ac0)=[{0x0, 0x3, 0xd}, {0x4, 0x2, 0x7, 0x5}], 0x10, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r9, 0x0, 0x9a, 0x0, &(0x7f0000001bc0)="6fc3dcb2d87d9505be54fded2d181d4e29862be96431129f81d8e8bf3c331652f6e5a5ab66b3881ecb974fd8240e4b7d8cfa59aa5a3fd639ded68d1d16cfbdf7e9a08fe56c94e6ed96e016a654113d6b1bbb9e5e1e0a6fa3bfeead501410a525f75605b538ef13eb6bb648b1db90c7c14650531912b4ed62e9d000c001eaa3752d0814000658e00d92ed6d0b3608f197a67763f05be463602b64", &(0x7f0000001c80), 0x2, 0x0, 0xcb, 0x1a, &(0x7f0000001cc0)="3f86b22345e329655ba8ffcf27c3eb3d02a42783563a463f8afea5139bd39f02099e19f83022e0694c02156017f3608468e04a12350bfdb29b83e4e7cb7afff8c4afdcd2cf3f811f13d2a9bf34ad14b9694b92142947a0578f489a57f213763c4b1f420f470ef008d3e1279a4f9acb6eb029b55de0774fe389373e8e08d7319583fed127985bcec9cf077f0e84e60bb471caa6b15c0cf2300c747e34cd2e24eb77198a6082a1bae0b5f2e043c8593460126767e2902e4cf1c575a232ff0c715f1e5762232442dae96047c7", &(0x7f0000001dc0)="1ebd880c1395ef5141498fea6a6eac6df9e8c322c799b0e9f720", 0x0, 0x0, 0x6}, 0x50) write$rfkill(r8, &(0x7f0000001e80)={0x7, 0x7, 0x1, 0x1, 0x1}, 0x8) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001ec0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r10, &(0x7f0000001f00), 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x20100, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0x104) openat$cgroup_freezer_state(r10, &(0x7f0000001f80), 0x2, 0x0) socket(0x1, 0x7, 0x8000) 21.568485756s ago: executing program 3 (id=1915): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x2}, 0x3, 0xc, 0x6, 0xa, 0x1b, 'syz0\x00', "5b48d0bc6961ce77de09c1cc4f92f709073bb94723247a734cdbfc05e1b0539a", "322e89ef5c293c9e24b67a1639954878287ac9266596ad9142867b9db8d36fd8", [{0x1, 0xf872, {0x1, 0x40}}, {0xe, 0xfffc, {0x0, 0x6}}, {0x3, 0x0, {0x1, 0xce20}}, {0x3, 0x6, {0x1, 0x3}}, {0xfffa, 0x40, {0x2, 0x2}}, {0x401, 0xcf, {0x0, 0x6}}, {0x45, 0x80, {0x2, 0x7fffffff}}, {0x7bac, 0x5, {0x1, 0xe5}}, {0x1, 0xa, {0x0, 0x1}}, {0x4, 0xb, {0x3, 0x2}}, {0x6ac7, 0x5, {0x1, 0x9}}, {0x3, 0xc8, {0x3, 0xfffffff9}}, {0x5, 0x4, {0x3, 0x2}}, {0x9e3, 0x81, {0x3, 0x6}}, {0x23dd, 0x1, {0x3}}, {0x4, 0x8001, {0x0, 0x1}}, {0x0, 0xa, {0x0, 0x3}}, {0x2, 0x7, {0x3, 0xfffffff1}}, {0xdc1, 0x8, {0x1, 0x4}}, {0x8, 0x0, {0x3, 0x9267}}, {0x99, 0x2, {0x1, 0x6}}, {}, {0x7f, 0x8, {0x1, 0x5}}, {0x0, 0x4, {0x3, 0x1}}, {0x8, 0xe, {0x3, 0x8}}, {0x4, 0x7fff, {0x3, 0x159f}}, {0x9, 0x101, {0x0, 0x5}}, {0x5, 0x4, {0x3, 0xfffff0af}}, {0x1, 0x2, {0x3, 0x6}}, {0x3, 0xfff8, {0x1}}, {0x9, 0x5, {0x3, 0x8}}, {0x7, 0x5, {0x0, 0x6}}, {0x23, 0x0, {0x1, 0xf887}}, {0x3, 0x1, {0x2, 0x8}}, {0x800, 0x40, {0x1, 0x5}}, {0x5, 0x2, {0x1, 0xfffffffe}}, {0x8, 0x6, {0x3, 0x80000001}}, {0x9fc, 0x0, {0x0, 0xb1}}, {0x6, 0xfffd, {0x3, 0x20b9abb1}}, {0x0, 0x7ff}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008054) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x100}, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x10, "57c255c053093342ac5ab503dbf01c76"}, &(0x7f0000000100)=0x18) 21.568042239s ago: executing program 1 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="99465dd0aa140000001000010000000000000000000080000a20000000000a03000000000000000000010000000900010073797a300000000054000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021180011800b00010074617267657400000800028004000300140000001000010000000000000000"], 0x9c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff2}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xfffffffffffffd85}]}, 0x6}, 0x1, 0x0, 0x0, 0xdc}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 21.257977563s ago: executing program 3 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 21.080919309s ago: executing program 0 (id=1919): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000fde815c5e414584400000000004b16b102a5a0ffff0100000085200000050000000450ff7f000000009975ffff", @ANYRES32, @ANYBLOB="000000000b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1000, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x2, 0x6d}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000280)=[{0x0, 0x1, 0x10, 0x6}, {0x2, 0x1, 0x3, 0x4}, {0x0, 0x3, 0xd, 0x9}, {0x3, 0x2, 0x3, 0x9}, {0x5, 0x5, 0xa, 0x4}, {0x2, 0x2, 0x10, 0x5}, {0x4, 0x1, 0x4, 0x8}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0x9d2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x4b, 0xa, &(0x7f00000003c0)="ec3be1e3992925b7c370e8ed0e34733d7260f171b3dc639f62db1394d3595865b82ad898ca67c2e20a00a51e8453301adbd528e2e4d6d0df5c095aed3a9c5f6e9d308b2591d8e633eb7b54", &(0x7f0000000440)=""/10, 0x2267, 0x0, 0xde, 0xed, &(0x7f0000000480)="37c5cba613c579785e9fb8ee4b6053f82cd78d634b909673b9a93ae289b875bb8b6b3d9dcc655edc4ad9149c514dfccbf594bb0a5a4adc8577acc416e6314e297838873ff5cf6550b51553cd59cd172f706b94d161d7bd20f65a67f400a2ec86ca2b401670e965734e8d878f6ace262ed94eb36659adad515a0030c5849a531d9b511d68c19baf87f1be079812479fd41f28a3d7680262b994087e62933c372430c8cc9cf3e6ce83b692e0633642e005b9528b2a7853c9d05e5fd1bc496c279faf9831f8ba992a22cfe377271b1dbfcad463da47e92f0eb3c032e5b160f0", &(0x7f0000000600)="9f5aa9945dffd7054901e0bfa4d999a9f80563c26ec78522dd7e64de9c202f5bcdda1dc3f1d42906c5ee9f2b0813122af9e1387dd70e62cefd0c8a0669536bc9295b3fa379cefa4a107cae09ec606c91f15ca8e8aa8b6fa3d29dc4e9ef98755cbb79e5942ed311ee970a50580f93d0ea96f385e427f52f5dad761f8e8a9bdce00bb9d02016e1f12aa7094dd34c4d1f2088660d397d78486cd53e7a7020e5b811bda8270abb1126feaade982f2a159c5049e6840bfc49558a10c309bfd11f01aca9e5b62d20a24909dae95843bad8fe16a345eb2862c5af0f1d7b4268aa19b8408d0ef60e64dd60f7822aafd0c3", 0x1, 0x0, 0xfffffffc}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'vcan0\x00', 0x200}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32], 0x40}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000080)=@ethtool_cmd={0x4a, 0x1, 0x5f3e, 0x81, 0xee, 0xaf, 0x80, 0x5, 0xc, 0x7f, 0x200, 0x6, 0x3, 0x9, 0xa3, 0x3ad3, [0x1ff, 0xcbc]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 20.860908933s ago: executing program 3 (id=1920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r2, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @loopback, 0x8}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)="2e52af44ee95d6eee6a089ec1df0c901299036ef31c8a2de1a79decf370404e817ddbbcbc9563c1c82f6cb074744850535651876481d90f3edbf6be790c63526dba326984785896ab3ea0b649e2d8428a7648646a2335d2e298ebd8c29ff9fe265d90c35ec3037ed89a3ab4e6e8216709c4b039db47e4556aae061788463ea57c2af35fe3a6b6523fdf740c757ad0a298356e25441f7b4fff7c516ba59b61ed30e1689b340eef3ffc47ec9cc7452ec5c8883a732e26cd6a95da7f76b5815747d1711596541053b10c0", 0xc9}, {&(0x7f0000000440)="2861d33791547154f5b136dd008f20b03a855e43aab59845e50449e0e814efe4e309e72eb2c7a1061aea5459afc0abcd4d501c9d856685cab0a968e773849a17b784b1afe8b5300b4d52eb2d466f686a9acfa36e8a941d4399e2d0e0036b01d23da5bfd818d8d920b9b286b6787cc91998dee4b2e42d5b5384b5c8c7b65c5c420ad30c3f", 0x84}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000000240)="ff4a9e5c7817df485454ed7bd18d87e76466f8ab4d02dd9f2b5127e0f341f5c1ade71171b80c78", 0x27}, {&(0x7f0000000840)="9452dc0beffc02e6b3bf64fdefc8b413dc8c008e3d6d2bcc82a7c04b57d8d6ebde5e20b0c32f1e67e35c65ab762ef6cf9a317351db34e897ed080e62481c4ef3ab8ce34a5485fe5e7fcd2754bc843424f706f7e23fd8a4c54d08c44c77a2bee6ac34788b8fc3b761e3bb1db2d9df54d30660423ddb944b44a716c3f28b10fc886c25e2e4b30ef01b634124ba25e7473a", 0x90}, {&(0x7f0000000540)="78cc64e878c8bbb76aaa7beca407929e83947aad112aab69071521348e306a0b29c0d4cc951ea2ad04b97d3939cdf2aa836e93e3d25b8620feafd544ea06d02baa5c02027fb654ab7bf06479447f834c7d5974b7ba1deb2b50e15524082196b4c2d3d7cb05b1a1fc71a2202917559631a2886b82b9cc1af956cf025f899b", 0x7e}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000000900)="f6516019787bfcff5e3a5ad13b6c27fd96ad2fea2ffeeb2acee2a35ceef1659a5fd7f18ad186379cdd1645fb445e68bd8bff8e8964e79505491f89ca5b8b81b70436d85df94fc119f1954e1c14a79d7d43a80b1151bb6c8545aa0739c94c26635fef5971b7b405b8d49fb6e93370c5454719958505a18584cf168b", 0x7b}, {&(0x7f0000000980)="3da2fcdd39a36fd65db68a008964c075f146", 0x12}, {&(0x7f00000009c0)="3a4006f54fe099470cfe853f11358d67647af92f8fc07009db0a5b65b0bd10f95545c0f6c34d92efee83faa9c9d26fbfcc9a92fa9c31495780a7f407afa0da66d2f00fad8989d5d727b642af8dc4a77be96490505172f540aad7ad8d3a91ee032d7d782357d7c77b5b60d2292e6e7d403ee7d63287008913fe56fa81d85847f97e5cf3646ee1bac639e2e72d0f8ed05bde3a13fbb38aa996d99e0d9b52ee8cc3aefd9eb62c1d4eb3989b339bf5ea1c0f15401d1c65074b92ed432e16d9fd2501c9cd043ed74494ac0969abd4f6890a82563892e8d2ea04540eb2998c", 0xdc}], 0xa, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2400000}}], 0xc0}}], 0x1, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60010000120008080000000000000025e8000000", @ANYRES32=r4, @ANYBLOB="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"], 0x160}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0x3cc3590e7fd9df2f, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x58}}, 0x200448d4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002120000000090a030b0000000000000000050000070900010073797a3100000000540400000b0a05000000000000000000070000093400098008000140000000080800014000000009200002801c0001800800014000000600080001400000407708000140fffffff8080007400000001608030980e40002804400018008000140000000000800014000000007080001400000000108000140000006c40800014000007dfb08000140000001010800014000000001080001400000cb6e340001800800014000000002080001400000000208000140fffffc000800014000000800080001400000000408000140000000052c000180080001400000000808000140ffffffff08001840000000ff080001400000001008000140000000093c000180080001400c0000000800014000000002080001400000000408000140000004130800014000000009080001400000000c08000140000000013c0102801c000180080001400000057c080001400000000208000140800000000c00018008000140000000030c000180080001400000000344000180080001400000010d080001400000000008000140000000090800014000000fff080001400000000008100140000000060800014000007fff0800014000000006240001800800014000004ca708000140000061a908000140000000050800014000000a781400018008000140ffffffff0800014000000006440001800800014000010001080001400000000408000140800000010800014000000ac5080001400000000008000140fffff0000800014000000c3108000140000000804400018008000140000000030800014000003b4b08000140000000040800014000000005080001400000040008000140000000080800014000000005080001400000000908000140000000c5b400028014000180080001400021c20008000140000000054400018008000140ffffffff0800014003a66d57080001400000000508000140000008000800014000000006080001400000000308000140ffffff0b080001400100000034000180080001400000000408000140ffffffff0800014000000006080001400000000608000140000000010800014000000ea12400018008000140000001000800014000000009080001400c000000080001400000000808000140000005f00800014000000002100002800c0001800800014000000008080001400000ffff08000f4000000005080006400000000008000440000000030900010073797a3000000000090002"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) 19.809992578s ago: executing program 1 (id=1921): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000040)=0xb, 0x12) sendfile(r0, r0, 0x0, 0x3) socketpair(0x1, 0x6, 0x3bf61bcc, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x8, 0x5}, {0xfff1}}, ["", "", "", ""]}, 0x24}}, 0x20000040) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) 19.45375475s ago: executing program 1 (id=1922): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0x80) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0xe, 0x0, 0x3, 0x9cd, 0x1, 0x0, [{0x1, 0x2, 0x5, '\x00', 0x401}]}) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xe, @private0, 0x5}, 0x1c) 19.30615291s ago: executing program 1 (id=1923): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000001c0), 0x4) unshare(0x6a040000) 16.676456436s ago: executing program 0 (id=1924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000200)=0x3) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @empty=0x300, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) 16.540940939s ago: executing program 0 (id=1925): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) 16.513816031s ago: executing program 0 (id=1926): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="b311df2d000000000a004e2300000001fe8000000000007f86280000000000000000000000000000000000000000000000000000000000000000000000000000000000eb9f205e6a1d7f57e3c3568c99b1be81ff0000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000"], 0x90) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/ipc\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000180)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f", 0x19}], 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x82, "e35dcbd53d06098e6d3708d91d8f0e88a8715c57d97346081b8f3a5c7d1f515455363ea40e25a81961ec9774b219491496264c9efee717c89c19cabda4af6203d67f8d8196cb0641e2e480b96995adc942e2b4506d4bb561001ae3ae7b9c67a54c051792c8b4d592c4b2e4750e708d589d3c9f5e79e57c9309b6c1914ff9a5ebbb03"}, &(0x7f0000000080)=0x8a) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r10, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) 16.411835232s ago: executing program 0 (id=1927): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x840, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001800dd8d0000000000000000021400000000fe06ec00000008001e0000860a000800050064010100"], 0x2c}}, 0x0) 15.764738991s ago: executing program 1 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xcc, r1, 0x1, 0x2000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xcc}}, 0x0) 15.396886713s ago: executing program 0 (id=1929): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x75, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x1, 0x7, 0x20, @private0, @rand_addr=' \x01\x00', 0x7, 0x7, 0x4, 0x8001}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xeb, 0x7, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x1, 0x8000, 0x2e5}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x220, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x87}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x3, 0x5}, {0x8, 0x9, 0x2, 0x5}, {0x1, 0x8, 0x8, 0x7f}, {0x7, 0x3b, 0x8, 0x5}, {0x9, 0xf9, 0x7, 0xfff}, {0x7, 0x7d, 0x80, 0xfffffe00}, {0x7, 0x7f, 0x8, 0x6}, {0x8, 0x8, 0x6, 0x5}, {0x4, 0x3, 0x3, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x24000850}, 0x26004004) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x3, 0x2}, {0x1, 0x7}, {0x8, 0x1}, {0x9, 0x3}, {0x3, 0x3}, {0xfe, 0x5}, {0x95, 0x1}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x7}, {0x5}, {0x3, 0x5}, {0x81, 0x6}, {0x5, 0x6}, {0xb, 0x2}, {0x9, 0x4}, {0x1, 0x7}, {0x1, 0x5}], "17ec7314560addea"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000800050003"], 0x50}}, 0x0) 8.169370125s ago: executing program 32 (id=1906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000003e00)={{0x14}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc1f8c0c}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xec, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xb4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0xa}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x290}}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01012cbd7000fddbdf25030000000c00040002000000000200000c00030000000000000000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0006000300000000000000080001000000000008000100000000000800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 5.841977709s ago: executing program 33 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x2008000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0xc}, 0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x4, 0x1, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c005}, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400), &(0x7f0000000440)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x76}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="f7e0336de481"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c13dfe2d999097f8ae71536629"}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000740), &(0x7f0000000780)=0x4) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000800)=0x10000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000840)={0x8, [0x8, 0x2c, 0xb, 0x7b0, 0xa35, 0x1000, 0x5, 0x0]}, 0x14) socket$inet6(0xa, 0x1, 0x6) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000880)=0x10000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x3, 0xd, 0x1, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001ac0)=[{0x0, 0x3, 0xd}, {0x4, 0x2, 0x7, 0x5}], 0x10, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r9, 0x0, 0x9a, 0x0, &(0x7f0000001bc0)="6fc3dcb2d87d9505be54fded2d181d4e29862be96431129f81d8e8bf3c331652f6e5a5ab66b3881ecb974fd8240e4b7d8cfa59aa5a3fd639ded68d1d16cfbdf7e9a08fe56c94e6ed96e016a654113d6b1bbb9e5e1e0a6fa3bfeead501410a525f75605b538ef13eb6bb648b1db90c7c14650531912b4ed62e9d000c001eaa3752d0814000658e00d92ed6d0b3608f197a67763f05be463602b64", &(0x7f0000001c80), 0x2, 0x0, 0xcb, 0x1a, &(0x7f0000001cc0)="3f86b22345e329655ba8ffcf27c3eb3d02a42783563a463f8afea5139bd39f02099e19f83022e0694c02156017f3608468e04a12350bfdb29b83e4e7cb7afff8c4afdcd2cf3f811f13d2a9bf34ad14b9694b92142947a0578f489a57f213763c4b1f420f470ef008d3e1279a4f9acb6eb029b55de0774fe389373e8e08d7319583fed127985bcec9cf077f0e84e60bb471caa6b15c0cf2300c747e34cd2e24eb77198a6082a1bae0b5f2e043c8593460126767e2902e4cf1c575a232ff0c715f1e5762232442dae96047c7", &(0x7f0000001dc0)="1ebd880c1395ef5141498fea6a6eac6df9e8c322c799b0e9f720", 0x0, 0x0, 0x6}, 0x50) write$rfkill(r8, &(0x7f0000001e80)={0x7, 0x7, 0x1, 0x1, 0x1}, 0x8) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001ec0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r10, &(0x7f0000001f00), 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x20100, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0x104) openat$cgroup_freezer_state(r10, &(0x7f0000001f80), 0x2, 0x0) socket(0x1, 0x7, 0x8000) 4.619097118s ago: executing program 34 (id=1920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r2, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @loopback, 0x8}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)="2e52af44ee95d6eee6a089ec1df0c901299036ef31c8a2de1a79decf370404e817ddbbcbc9563c1c82f6cb074744850535651876481d90f3edbf6be790c63526dba326984785896ab3ea0b649e2d8428a7648646a2335d2e298ebd8c29ff9fe265d90c35ec3037ed89a3ab4e6e8216709c4b039db47e4556aae061788463ea57c2af35fe3a6b6523fdf740c757ad0a298356e25441f7b4fff7c516ba59b61ed30e1689b340eef3ffc47ec9cc7452ec5c8883a732e26cd6a95da7f76b5815747d1711596541053b10c0", 0xc9}, {&(0x7f0000000440)="2861d33791547154f5b136dd008f20b03a855e43aab59845e50449e0e814efe4e309e72eb2c7a1061aea5459afc0abcd4d501c9d856685cab0a968e773849a17b784b1afe8b5300b4d52eb2d466f686a9acfa36e8a941d4399e2d0e0036b01d23da5bfd818d8d920b9b286b6787cc91998dee4b2e42d5b5384b5c8c7b65c5c420ad30c3f", 0x84}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000000240)="ff4a9e5c7817df485454ed7bd18d87e76466f8ab4d02dd9f2b5127e0f341f5c1ade71171b80c78", 0x27}, {&(0x7f0000000840)="9452dc0beffc02e6b3bf64fdefc8b413dc8c008e3d6d2bcc82a7c04b57d8d6ebde5e20b0c32f1e67e35c65ab762ef6cf9a317351db34e897ed080e62481c4ef3ab8ce34a5485fe5e7fcd2754bc843424f706f7e23fd8a4c54d08c44c77a2bee6ac34788b8fc3b761e3bb1db2d9df54d30660423ddb944b44a716c3f28b10fc886c25e2e4b30ef01b634124ba25e7473a", 0x90}, {&(0x7f0000000540)="78cc64e878c8bbb76aaa7beca407929e83947aad112aab69071521348e306a0b29c0d4cc951ea2ad04b97d3939cdf2aa836e93e3d25b8620feafd544ea06d02baa5c02027fb654ab7bf06479447f834c7d5974b7ba1deb2b50e15524082196b4c2d3d7cb05b1a1fc71a2202917559631a2886b82b9cc1af956cf025f899b", 0x7e}, {&(0x7f0000002ec0)="191145573bc2b177ff52bda3cf42d953b501ae2fd467484fa50a114341fb140debf7eb1426619e8f81f044deb3e58aa1f8a8b74c58660213423804ca0764efbe533744345afe2b891d43917ffab78509bcf17cbed9b1f67ba0bd2f61360ef5049dd4fe47763cc536a8e25f3327217cdc4b39cb54581d9b82fb057438841efb2f30203a68aa827b1734f590d7417c97dd62d2564bfd9e1c9822839af7fd30435558fff02fc7d4bd55f9d7a00d653babe932cfe339b10a859fac16e33d3ef506d70264540c461d843a9cd27ea081ed174245ac8c2575b635a3f4cc5c6ebbee15d7f8e2b81226c38f89b0e6e6789e1760e951cf4b506ddcf609ace7dbf31fda298b22a1af2e511b24fe5b1b095a7fc9245d2b4919ba7e03ba318662bb1fb82424a17bb44b4c8c4d7e2897fa5effbf13899cf54f5de4bf73647b2fac416cbea6278062a58fc8bd11727b452dc9991ce370debb551ef7f4bffc1b52d2576d0bfb46c376e8bdfe6599fd4d5377a80dc056beb834bc3ce2a3dbe73c649eb1f9659a73571034d1b85d667fe49f49f81fc467684fb42f7fb935d2d6389b681a87de385ed6b50698a453c1eb933be069462c76bcd3191060d4ebe48696344eaba76da779867d7d148a5074fd10b0a89f506320d9bae6f27fb84e6ad7a921e30c4bed0065e3a62e2455e02c20df1ee07164015a71aa51a6f3e2bd8fcba5aae47417e2aa4120be1e6569f31be0b087e621a9e6ca5e981e06730bb47219d4d39f050f2bab7380602ec8d00f2a7eaa96ffa73ba305a17e16326f6938b79d607ebc03809574d55d74c0550f85bce5069c58c49702f049b0ece55f5ce2b767427da4b665f0677d8af001ac59b9a536fb6e0f7526b0e54efbc425179266aee8a35765bbea09d564aab01fd06244426b692da97d65dfef3c6b00c7802a1f5f7ac21da4130084b325bb86f863dab7615cf47c2ce7143e64421bc832c57156493c8b516a42a055217a5aa71857d711b11a2f799482d2c8e983c5c049d16ca8ecf7f81624e0236e5e4f0ada205b2a3aca810c9fb1bb4ec784ddc8b6fc7921f4fcc54362b8d86e9544afcaaa42d5bbb67ae5c47c4bf1d9538d9373f0a157167478ba8dc76a235f9eeda260fc7312ba2938acb6a6514087fc42edb82dec533d8644cd7376f26e6329b9dc9a60ce44952cc8414d476535a297f55d272cbf10c2eb7cc691ee774be4712c7c6b519b13b07707b5c35d87ff362e14c5a8d30abb2b5c73d7bd5e292f2e4bd587c9b01071a3dfe5d6809eb6647bfd927159f90d0390d5a8be9a166e153b0b07709f1190903e3b92dac0efe63d30e4f492e111a5ef5799b47caec6d39af3108527b90385302a0a53979003fa7702f613daae16e4fafbb2f9ed7fce2b8ee76c3b4193f991022ed327d097420e44a58bd7ad04395ad990fc11021c74b9399987255b93cf4ea0cde3df900023ccff04e45117c8da0b16c1a03d111a1227f25f81cc1410f0042ca78b72896b3667bb867f78a788537c2c612501e2ce99b39c2d88622693e65142336aa723eb53e7576fbe9b632d4054b10224f76dec31bc7c174cd8161b45912903ddcc2d4d770f2032aecfc49b71c5a7c72391db896263972be1a19425d69cdaca55db1e6dbd0664d333ec539dfc1f7aaa5b7c45553ca136f9efd3efe51a4f1c894cbbae5af2da05182c54b75c8471ec72f6a3d45865a54b2d98617f82e2befea9fcd0b0eabe3cfa4ad95e81ecde1b1896d8f2f6eff5bfe481d85bbd8acee7463f3d1e621a284b906ed6a9a7425b7abb218e4ee9ed3b560fc858b09334fc9d3491f258057e495cce77fdc94023c594bff616206be16a656c54265fabbfe032e22872bb6c8aae94fabb490491d45ac271d494836a9f8f178b29e4cf8382a8aea6662ba70d817f550264b2652add906073362f2fea86a42b56ecb46d650e70160f677c09bcea372396cfa5df4c06bd9da89d7c9859f5b89a6ebf1f5030c10e847fd000cf4882daa2ea936ece5ac21229da610f234e95602b6a8d8c1086b46b41b4a6729dc98dba7243ceef4dfa1ca52b110805124c9cd23ebe7745a8bf09f898226479ac6631e065dc7a415d09528c9ee95b1dd48d0f14ee6a4520602831fd50bff77baf7294a55a3ae21449b5b798d1771ce7fcb878893e879b754748b9d2ebb9f7b3690fd8d47986f3bdea92a4d9ecf5ce456e07cc51e350defd258344a9f6beca4aaeb16edce2686367000ec2a3db2e9521603a3ab53d7b66f78a978b665cf144fc641aacaed3bc160192d3bddd813fa3772dc4813bb8ee89890df9fa2b312d5615c0300d52a32f3a3dcc36401987d7afa58d23ce122a82179cb9f03d0aea45340f05038f5c7320ee38c7d9833d3be6a5d1e29de23677cf73f694624113545c4508320fa27cb79b2828f03dc7081c43d99edf89fb4a36898fa705693faece2eeed4335fc3acf2706d47094331ce9f5f45f65535c8957790bd1bd683e0ef66683f363b414b1578c19d3174fd245077fa1b74c105af36dc532ab5042fcf06b55ac3d79656ab538f56b3ef2da3cc2abe5daf9a88c2747e1fa61f543c6d7463d895f29ef559c6084b2d293d7e126160c18d97bc419da62ec06340be258bdca9ea1a6cb3847b628645ab520f9fcdf305217d8093e6515602bd9c15c794c6d05a111331fc7dac0dde0a30ec53ca30bf8eeb28447681a29a73bff75699e98b1772fcaf496a1218d2630ce6cb1b2d8e4a007cbfd9b87aa592a7e89d05bebb4a8132e4a1114cde631d3738db81d92171f3a1878b8c74f3b8b3ced2a34f968efeaedd1884c0e25ac9c11ee0062e6ff30c26dd576cab862e28185e1bb290bd77cb52b64e7060153ed7106b800bfe8c7598960ac9c8776385d0a27680064dadb8286865051e6cb83e4fbf217aaa4277af20d4fa18bd60d6243328e912069c5caf369c644c22d75b00baa2da5a9ae87c5e8ff9124d33b2c62c046eb472914e8a65af0fb11fb908472fd6420168a3788a73dc23ad200702686cfd04a00de1219958589fdebf1931e9a3bf25cf89b159005939a0bc4fdf58a00449fef02fe82e12d60fd9b54db572f227f07e7cdc225f57a7ab2ff2a191d1aaa44ccd0fdf73dd56b3b9f5a6f1c0bb3dd327536663fe9e97927827037188193f10609fd625c2658fd21b9d24cedda04ca5010b56fe0de11cccce1735b5c7294d0629dceba1f8a2e85f301710228c7cb189be858b7f0aea5897fb088d9cf34242b3200d873bf30193eeb6aceb670ed1aa72284d5911a82e3deb803185a9debc4b413999f6ab095148e0efcfa32907929336e8e01b5a7f4da69fe1053cc492192c90c94f196b18b5bf003f7e607b8c6aee07771ae67510c3c288890087ab3b2dca4cdf0c1e5492587cba42e3d908e4de99bf185193f7c1d14e3d24835d3c6eb3b9ab173e4576a806966dce9c7851417e4efaca51491e5826ac24386f9b42e472b48fce1e3fe01ce084e28455190d0d45562506d313bb32837d23a6bf17247154a28e2a2a110279c6325e62d33916a28597ec1d3fa907121630c091a9894c135422ee3f74ca4e54a7caa7e44113e4ff323b66d98de8d26d14d077a93193cffb44f6561c656d2984c8a6a2182ded2fae3f21a5d1574663bdcc2205e2583376f383c46326f620fd613ebd3b995e4a0969c1171503587afcda79455507cd270fd48dc1bc4e46fbceeb3dc571f29753ac24a75703a034cf2469a42a5896494828f3f0f0bfa9ee9aecc3be7bebf0ef06a518f36b190c0186c9970a089d8f3dfb9668ba03cce701639a931d8084d989d08013c9b3734ef299df5f25642567e0e9ac0407ab53687ec4db6ce38b5b34ea8f544b2ca28ad2cf86e259a75461063175211075b25329a7e0f4dccbdbd6c2857e30565bf761b4f9b4c25c79206bfe1e23196f4289e0ea0d6e913524ed409947f73fbf057c126dbc50ecadab4f76d7d6e2a5b6a9d78833e96c5bb0c4c7896c5022548b38171eaa83c96cc71b5a1eca1c9e7649ee4f8245a77d09c84c9f3ea3062711174028c66e7df42ede7d0b8b53cf131133b6c840f2eff9729ec3d8766c18efb38b85177f41dac605b843d4c07a7f3447ee675b78112870c226fd93e10481b057fa9d63180c03ff431b00a9fc1c7698e4626435a5b302ac901adfebf86c32670229fcf1ebac035ce2e839bd6289154e62993f5a7dc3685db1941e26a4a4c75b7616f20f236d4ef4d59e2e6b155cbb96ca8116798197f024193bd5619744df3a5affa935caa5bd9ea1c52a09005920c1ece310070f9ff9705cc8f2e7ee0877706497bd3c5332332cc7b8e14925b0358adbb173954a30ac9d6dcd318ed3cbf1e4f0eb0ccede5c47a49edf2de76e49837594a92dc74148bb864232fa79bcf1033340fbe0da6cc1eeaf8f1ff90c31e82c523a65392f683b38cb48d5a925efcd66b413446f1ca1cddac167866f3a82a700e8ebf782dc34e5ae034acd5ee6eded67afe286100d2ccf588b2d8f4903753938f7a4dbbe00890e2d006181d93c435a668001a6797a38fd2dff87096035f2c593413c90ebb83f32a8d14720aeaaaff9ddc2730af143fbb2928dc756bf77bcedecf04e6706b1b911083bb7931a195c056261aebeed2f85831eb9bb244373f0d54076a21503761ccc085832be46afe2892aa1d4b69784550138d8d0822d184ecef223746c4310a5d2f70f98aa433d7e103f89d60854fe671ab78ef614229394054112f4669d60f8853c3c816aba03aaf3c8b3ccf0a08f7b3bfc7de2bb526578db151ca28384c1c47a2f80e5b40c39a678df6b113fe14b9c258b2578f4241ffcc6b00c6abc1bf8508b3a36712b4ef9a7d3ca5473230fa086b7ae1aca66287db0098cddf8d1d69252d34d61547a2e87a67b60490fe404846f06035bdedf8d658f136e78b3b86fb96c27f79f9e4ae2d6a10ab547cdc2a86bf91af8ad8a8bf46e242f2e24b1da656955232255b3c4eaa17c3e9d44eaecca1ebebc114b57b83d1636d29d47c313f492e28730afd49b0f3cdf223c42a09f06ee222028eb416b7ba839f8d88c3b14111447bd5fea6defa8d1bc162a6839677c667ef3c7ccadc616589a39a60a0bec81d595583ed1c9cc76b9d8743f9b129d9b6805b624de02ac73ba5dcbb4b597dcf7b02e75ac5946d5a2406eef4b7ab460c0d8f3f8a6f738c7fe32e9db03bb1d85d52c7c48c2f9f3aa82f7eaedaaa0f7778bf9549830d8159f12bc422a485efda1eb51e9413df04cc5e0e56fb43ccdd8d8ab43534083dd814d875f70d2ce9baf48146dbfa7d24c3087047c32f6c781bd23d5118746e95e260d85657ea1f2a03f4f9edd50a81d437be872e15c8cde11abc1e89139adae50e4fdc85fdbb436411fa9ec532decbc73cd30f481709d529fee3c8d2c901087b7b935d00101736478d38b574621caf1700bef152ba216ba4c972c580cc7da4b26402d6665bea90778d040183578862f7e5fc7e0725efd9b55c9f81c0659b412faf50d3f668e18ebe2b01513b8340e0e569d485b5644876c896b2e604db2674d7cdc74edf10f6012bfe6f87065aaeb073fa17b047c432965d9c371833d4633d7b90e153e17fd2c009f0794d7837f90d4b143cfa3bdaf0ade144e9e30678de6bf20ac9f2a58c084d0de505d996fbd83c068918e862dd84f3ee0da9194b0924bcd4b4055a70143e302313dd81b269cc17c5b8974062c3848f666c44ff02494ffc2e8a9a46623eae96ad6e281533a65870f03ca12856edb3cfe4526242e5b5a30479b525a958494df1506585df6f95488af25029b0b720cb6bb", 0x1000}, {&(0x7f0000000900)="f6516019787bfcff5e3a5ad13b6c27fd96ad2fea2ffeeb2acee2a35ceef1659a5fd7f18ad186379cdd1645fb445e68bd8bff8e8964e79505491f89ca5b8b81b70436d85df94fc119f1954e1c14a79d7d43a80b1151bb6c8545aa0739c94c26635fef5971b7b405b8d49fb6e93370c5454719958505a18584cf168b", 0x7b}, {&(0x7f0000000980)="3da2fcdd39a36fd65db68a008964c075f146", 0x12}, {&(0x7f00000009c0)="3a4006f54fe099470cfe853f11358d67647af92f8fc07009db0a5b65b0bd10f95545c0f6c34d92efee83faa9c9d26fbfcc9a92fa9c31495780a7f407afa0da66d2f00fad8989d5d727b642af8dc4a77be96490505172f540aad7ad8d3a91ee032d7d782357d7c77b5b60d2292e6e7d403ee7d63287008913fe56fa81d85847f97e5cf3646ee1bac639e2e72d0f8ed05bde3a13fbb38aa996d99e0d9b52ee8cc3aefd9eb62c1d4eb3989b339bf5ea1c0f15401d1c65074b92ed432e16d9fd2501c9cd043ed74494ac0969abd4f6890a82563892e8d2ea04540eb2998c", 0xdc}], 0xa, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2400000}}], 0xc0}}], 0x1, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60010000120008080000000000000025e8000000", @ANYRES32=r4, @ANYBLOB="0000040010030100cc0034801400350076657468305f746f5f627269646765001400350064766d727031000000000000000000001400350073797a6b616c6c6572310000000000001400350070696d367265670000000000000000001400350076657468315f746f5f6261746164760014003500627269646765300000000000000000001400350070696d72656730000000000000000000140035007665746830000000000000000000000014003500766c616e30000000000000000000000014003500776732000000000000000000000000000400140024000e0001010000000000000000000000000000070000000200000000000706000000000800200001010000080004000900000008000d000700000008001f0004000000140012800b0001006c6f7770616e00000400028008002e000400000008001b00090000000800040081000000"], 0x160}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0x3cc3590e7fd9df2f, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x58}}, 0x200448d4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) 473.758637ms ago: executing program 35 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xcc, r1, 0x1, 0x2000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xcc}}, 0x0) 0s ago: executing program 36 (id=1929): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x75, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x1, 0x7, 0x20, @private0, @rand_addr=' \x01\x00', 0x7, 0x7, 0x4, 0x8001}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xeb, 0x7, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x1, 0x8000, 0x2e5}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x220, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x87}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x3, 0x5}, {0x8, 0x9, 0x2, 0x5}, {0x1, 0x8, 0x8, 0x7f}, {0x7, 0x3b, 0x8, 0x5}, {0x9, 0xf9, 0x7, 0xfff}, {0x7, 0x7d, 0x80, 0xfffffe00}, {0x7, 0x7f, 0x8, 0x6}, {0x8, 0x8, 0x6, 0x5}, {0x4, 0x3, 0x3, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x24000850}, 0x26004004) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x3, 0x2}, {0x1, 0x7}, {0x8, 0x1}, {0x9, 0x3}, {0x3, 0x3}, {0xfe, 0x5}, {0x95, 0x1}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x7}, {0x5}, {0x3, 0x5}, {0x81, 0x6}, {0x5, 0x6}, {0xb, 0x2}, {0x9, 0x4}, {0x1, 0x7}, {0x1, 0x5}], "17ec7314560addea"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000800050003"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): [ T7205] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 119.125010][ T7205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.175245][ T7217] __nla_validate_parse: 7 callbacks suppressed [ 119.175265][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 119.204165][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 120.334909][ T7213] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 120.345157][ T7213] bond1: entered allmulticast mode [ 120.362421][ T7218] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 120.373950][ T7226] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 120.382234][ T7237] netem: change failed [ 120.493233][ T7242] bridge0: port 3(bond0) entered blocking state [ 120.522948][ T7242] bridge0: port 3(bond0) entered disabled state [ 120.532980][ T7242] bond0: entered allmulticast mode [ 120.538158][ T7242] bond_slave_0: entered allmulticast mode [ 120.560538][ T7242] bond_slave_1: entered allmulticast mode [ 120.574410][ T7242] bond0: entered promiscuous mode [ 120.594992][ T7242] bond_slave_0: entered promiscuous mode [ 120.616818][ T7242] bond_slave_1: entered promiscuous mode [ 120.626522][ T7242] bridge0: port 3(bond0) entered blocking state [ 120.633318][ T7242] bridge0: port 3(bond0) entered forwarding state [ 120.664474][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 120.835692][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 120.995906][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 121.067585][ T7267] netlink: 'syz.2.380': attribute type 83 has an invalid length. [ 121.169455][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 121.222739][ T7279] macvlan0: entered promiscuous mode [ 121.847225][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 122.096312][ T7319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.354772][ T7328] bond2: (slave vcan1): refused to change device type [ 122.435728][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 122.563928][ T7344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.604997][ T7349] tipc: Started in network mode [ 122.610723][ T7349] tipc: Node identity 4, cluster identity 4711 [ 122.616930][ T7349] tipc: Node number set to 4 [ 122.680604][ T7354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.406'. [ 122.740074][ T7353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.406'. [ 122.813038][ T7354] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.029831][ T7373] IPVS: set_ctl: invalid protocol: 28 172.20.20.187:10 [ 123.054033][ T7371] netlink: 'syz.2.410': attribute type 11 has an invalid length. [ 123.109299][ T7377] netlink: 'syz.1.412': attribute type 23 has an invalid length. [ 123.405818][ T7392] delete_channel: no stack [ 123.459053][ T7392] syzkaller0: entered promiscuous mode [ 123.464960][ T7392] syzkaller0: entered allmulticast mode [ 123.682491][ T7407] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 124.271973][ T7433] __nla_validate_parse: 6 callbacks suppressed [ 124.271994][ T7433] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.431'. [ 124.292280][ T7432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.675040][ T7454] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 125.007056][ T7471] netlink: 'syz.2.443': attribute type 3 has an invalid length. [ 125.253728][ T7489] netlink: 108 bytes leftover after parsing attributes in process `syz.3.447'. [ 125.268566][ T7490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.276321][ T7490] IPv6: NLM_F_CREATE should be set when creating new route [ 125.792298][ T7518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.456'. [ 125.908229][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 125.961807][ T7521] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 125.973601][ T7516] "syz.1.456" (7516) uses obsolete ecb(arc4) skcipher [ 125.989258][ T7521] netlink: 'syz.4.458': attribute type 2 has an invalid length. [ 126.287925][ T796] IPVS: starting estimator thread 0... [ 126.344414][ T7549] dvmrp0: entered allmulticast mode [ 126.399058][ T7548] IPVS: using max 27 ests per chain, 64800 per kthread [ 126.455222][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 126.514714][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 126.572750][ T7561] netlink: 108 bytes leftover after parsing attributes in process `syz.4.469'. [ 126.980803][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 127.137056][ T7600] syz.1.474 uses old SIOCAX25GETINFO [ 127.510517][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 127.765771][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 128.103735][ T7649] vlan2: entered promiscuous mode [ 128.112761][ T7649] bridge0: entered promiscuous mode [ 128.299121][ T7652] netlink: 'syz.4.492': attribute type 10 has an invalid length. [ 128.376383][ T7667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.383748][ T7667] IPv6: NLM_F_CREATE should be set when creating new route [ 128.391163][ T7667] IPv6: NLM_F_CREATE should be set when creating new route [ 128.785140][ T7690] sctp: [Deprecated]: syz.1.502 (pid 7690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.785140][ T7690] Use struct sctp_sack_info instead [ 129.187395][ T7713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.281312][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.379232][ T7717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.495010][ T7720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.566082][ T7725] 8021q: VLANs not supported on ipvlan1 [ 129.948772][ T7740] pim6reg: entered allmulticast mode [ 129.988424][ T7740] pim6reg: left allmulticast mode [ 130.214340][ T7747] net_ratelimit: 135 callbacks suppressed [ 130.214363][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.683541][ T7763] __nla_validate_parse: 9 callbacks suppressed [ 130.683563][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 130.773286][ T7763] netem: change failed [ 130.948540][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 131.168583][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'. [ 131.193513][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 131.213884][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 131.281987][ T7789] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 131.323074][ T7790] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 131.403167][ T7798] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 131.411744][ T7798] bond2: option packets_per_slave: allowed values 0 - 65535 [ 131.430879][ T7798] bond2 (unregistering): Released all slaves [ 131.466865][ T7800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 131.480308][ T7799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 131.952402][ T7819] bridge2: entered promiscuous mode [ 131.957852][ T7819] bridge2: entered allmulticast mode [ 132.240596][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 132.254007][ T7837] syzkaller0: entered promiscuous mode [ 132.272049][ T7837] 0: reclassify loop, rule prio 0, protocol 800 [ 132.362441][ T7846] sctp: [Deprecated]: syz.1.552 (pid 7846) Use of int in max_burst socket option. [ 132.362441][ T7846] Use struct sctp_assoc_value instead [ 132.510948][ T7843] syzkaller0: entered promiscuous mode [ 132.517835][ T7843] syzkaller0: entered allmulticast mode [ 132.691353][ T7862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.554'. [ 132.895537][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902899][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151034][ T7873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.883942][ T7856] veth3: entered allmulticast mode [ 133.904588][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.936793][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.945189][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.115674][ T7883] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 134.174269][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.199521][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.434324][ T1330] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.796035][ T7917] netlink: 'syz.2.571': attribute type 4 has an invalid length. [ 135.034229][ T7934] netlink: 49 bytes leftover after parsing attributes in process `syz.0.576'. [ 135.339888][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.520541][ T7961] netlink: 'syz.4.582': attribute type 39 has an invalid length. [ 135.968074][ T7975] __nla_validate_parse: 66 callbacks suppressed [ 135.968106][ T7975] netlink: 194360 bytes leftover after parsing attributes in process `syz.3.588'. [ 136.199057][ T7987] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 136.207159][ T7987] netlink: 'syz.3.593': attribute type 2 has an invalid length. [ 136.219050][ T7987] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 136.232436][ T7987] netlink: 'syz.3.593': attribute type 3 has an invalid length. [ 136.251126][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 136.330053][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'. [ 136.373622][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 136.388791][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 136.916763][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 136.966111][ T8029] syzkaller0: entered promiscuous mode [ 136.984045][ T8029] syzkaller0: entered allmulticast mode [ 137.011935][ T796] IPVS: starting estimator thread 0... [ 137.109817][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 137.157139][ T8032] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.163234][ T8043] xt_hashlimit: size too large, truncated to 1048576 [ 137.280149][ T8049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.769551][ T8073] netlink: 'syz.3.621': attribute type 11 has an invalid length. [ 137.835006][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 137.878046][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 137.946971][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 138.642760][ T8114] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 138.661744][ T8110] xt_TCPMSS: Only works on TCP SYN packets [ 138.685710][ T8115] netlink: 'syz.1.636': attribute type 9 has an invalid length. [ 138.696225][ T8115] netlink: 'syz.1.636': attribute type 6 has an invalid length. [ 138.896197][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 139.095273][ T8140] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.104256][ T8140] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 139.636527][ T8173] validate_nla: 1 callbacks suppressed [ 139.636548][ T8173] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 139.650364][ T8169] syzkaller0: entered promiscuous mode [ 139.687012][ T8169] syzkaller0: entered allmulticast mode [ 139.701527][ T8173] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 139.952853][ T8194] team0: Device ip6gre2 is of different type [ 139.994134][ T8193] netlink: 'syz.0.663': attribute type 2 has an invalid length. [ 142.412120][ T8159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.642128][ T8208] tun0: tun_chr_ioctl cmd 1074025675 [ 142.656071][ T8208] tun0: persist disabled [ 142.674616][ T8216] Bluetooth: MGMT ver 1.23 [ 142.684759][ T8216] __nla_validate_parse: 8 callbacks suppressed [ 142.684779][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 142.744619][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 142.838436][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 142.925157][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 142.953573][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 142.965198][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 142.971284][ T8229] netlink: 'syz.0.676': attribute type 3 has an invalid length. [ 142.993833][ T8233] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 143.007061][ T8227] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 143.028092][ T8227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.676'. [ 143.261924][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 143.470289][ T8256] IPv6: sit1: Disabled Multicast RS [ 143.477050][ T8256] sit1: entered allmulticast mode [ 143.696576][ T8280] "syz.2.690" (8280) uses obsolete ecb(arc4) skcipher [ 143.706291][ T8279] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 143.716495][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 143.739254][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 143.748121][ T8279] netlink: 'syz.0.691': attribute type 2 has an invalid length. [ 143.770413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 143.783215][ T8279] netlink: 'syz.0.691': attribute type 2 has an invalid length. [ 143.813439][ T8279] netlink: 'syz.0.691': attribute type 2 has an invalid length. [ 143.889107][ T8286] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20000 [ 144.016120][ T8293] nbd: illegal input index -8454144 [ 144.413056][ T8307] netlink: 'syz.4.697': attribute type 10 has an invalid length. [ 144.432101][ T8307] veth0_macvtap: left promiscuous mode [ 144.619042][ T8310] geneve3: entered promiscuous mode [ 144.627292][ T8310] geneve3: entered allmulticast mode [ 144.636182][ T35] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.645794][ T35] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.657364][ T35] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.676196][ T35] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.710729][ T8312] netlink: 'syz.4.699': attribute type 2 has an invalid length. [ 144.827171][ T8319] netlink: 'syz.4.702': attribute type 3 has an invalid length. [ 144.837849][ T8318] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 145.135095][ T8331] syzkaller1: entered promiscuous mode [ 145.149141][ T8331] syzkaller1: entered allmulticast mode [ 145.332889][ T8345] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.201582][ T8382] netlink: 'syz.0.723': attribute type 12 has an invalid length. [ 146.610321][ T8396] syzkaller0: entered promiscuous mode [ 146.619138][ T8396] syzkaller0: entered allmulticast mode [ 146.667883][ T8406] IPVS: set_ctl: invalid protocol: 98 172.30.0.5:20000 [ 148.099440][ T8491] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 148.116562][ T8491] __nla_validate_parse: 7 callbacks suppressed [ 148.116583][ T8491] netlink: 144 bytes leftover after parsing attributes in process `syz.2.754'. [ 148.543510][ T8509] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 148.605400][ T8505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 148.846753][ T8509] bond3: entered promiscuous mode [ 148.868296][ T8509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.915162][ T8505] bond3: entered allmulticast mode [ 149.092644][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'. [ 149.683088][ T8549] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 149.724061][ T8549] bond2: entered promiscuous mode [ 149.729803][ T8549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.749545][ T8549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.756792][ T8549] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 149.768302][ T8549] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 149.783114][ T8549] bond2: (slave vti0): making interface the new active one [ 149.793722][ T8549] vti0: entered promiscuous mode [ 149.796870][ T8553] xt_l2tp: missing protocol rule (udp|l2tpip) [ 149.806622][ T8549] bond2: (slave vti0): Enslaving as an active interface with an up link [ 149.829299][ T8549] netlink: 'syz.0.768': attribute type 4 has an invalid length. [ 149.957701][ T8562] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.969628][ T8565] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 150.004689][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 150.042179][ T8567] bond3: entered promiscuous mode [ 150.047828][ T8567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.272769][ T8578] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 150.309420][ T8581] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 150.325847][ T8571] : entered promiscuous mode [ 150.367604][ T8578] bond2: entered promiscuous mode [ 150.373300][ T8578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.406233][ T8582] bond2: (slave bridge2): making interface the new active one [ 150.414617][ T8582] bridge2: entered promiscuous mode [ 150.421444][ T8582] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 150.940059][ T8593] xt_TCPMSS: Only works on TCP SYN packets [ 151.080987][ T8624] netlink: 168 bytes leftover after parsing attributes in process `syz.0.788'. [ 153.839926][ T8605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.937577][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 154.290475][ T8655] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 154.361045][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'. [ 154.399364][ T8655] bond4: entered promiscuous mode [ 154.405734][ T8655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.413923][ T8657] bond4: left promiscuous mode [ 154.440006][ T8655] bond4: (slave bridge4): making interface the new active one [ 154.450188][ T8655] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 154.618884][ T8670] netlink: 1 bytes leftover after parsing attributes in process `syz.2.801'. [ 154.999278][ T8681] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 155.007883][ T8695] netlink: 'syz.3.806': attribute type 21 has an invalid length. [ 155.018508][ T8695] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.136800][ T8700] netlink: 212 bytes leftover after parsing attributes in process `syz.2.808'. [ 155.302034][ T8708] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.320342][ T8708] bond5: (slave lo): Enslaving as an active interface with an up link [ 155.332801][ T8708] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 155.594203][ T8726] netlink: 96 bytes leftover after parsing attributes in process `syz.0.817'. [ 155.731708][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 155.785613][ T8733] netlink: 'syz.0.820': attribute type 5 has an invalid length. [ 155.805515][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 155.840724][ T8741] tls_set_device_offload_rx: netdev not found [ 156.165153][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 156.197811][ T8756] tipc: Enabling of bearer rejected, failed to enable media [ 156.303407][ T8760] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.831'. [ 156.314964][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 156.379527][ T8769] netlink: 'syz.2.832': attribute type 3 has an invalid length. [ 156.852639][ T8795] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 156.950257][ T8799] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 157.022002][ T8806] veth0: entered promiscuous mode [ 157.027856][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 157.125305][ T8806] veth0 (unregistering): left promiscuous mode [ 157.458292][ T13] tipc: Subscription rejected, illegal request [ 157.550505][ T8834] netlink: 'syz.3.853': attribute type 9 has an invalid length. [ 157.598614][ T8832] block nbd3: NBD_DISCONNECT [ 157.737726][ T8852] tipc: Started in network mode [ 157.769280][ T8852] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 157.807927][ T8852] tipc: Enabled bearer , priority 10 [ 157.874318][ T8860] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 157.882301][ T8860] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 157.895166][ T8860] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 157.911482][ T8860] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 158.066833][ T8871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.373338][ T8880] block nbd0: not configured, cannot reconfigure [ 158.799856][ T8892] wg1 speed is unknown, defaulting to 1000 [ 158.825449][ T8892] wg1 speed is unknown, defaulting to 1000 [ 158.908982][ T8892] wg1 speed is unknown, defaulting to 1000 [ 158.958810][ T8892] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.970950][ T58] wlan1: Trigger new scan to find an IBSS to join [ 158.997731][ T9] tipc: Node number set to 4269801492 [ 159.067601][ T8892] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.338457][ T8892] wg1 speed is unknown, defaulting to 1000 [ 159.372240][ T8892] wg1 speed is unknown, defaulting to 1000 [ 159.390318][ T8892] wg1 speed is unknown, defaulting to 1000 [ 159.442589][ T8892] wg1 speed is unknown, defaulting to 1000 [ 159.505985][ T8892] wg1 speed is unknown, defaulting to 1000 [ 159.611172][ T8912] __nla_validate_parse: 10 callbacks suppressed [ 159.611194][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 159.703757][ T8917] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 159.885663][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 159.921776][ T1330] wlan1: Creating new IBSS network, BSSID ba:7b:42:ec:24:67 [ 160.015794][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.877'. [ 160.372686][ T8945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.356370][ T8953] wg1 speed is unknown, defaulting to 1000 [ 161.864383][ T8967] syzkaller0: entered promiscuous mode [ 161.883568][ T8967] syzkaller0: entered allmulticast mode [ 161.903390][ T8985] : renamed from hsr0 (while UP) [ 162.163078][ T8998] validate_nla: 2 callbacks suppressed [ 162.163099][ T8998] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 162.186015][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 165.000623][ T9006] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20002 [ 165.096650][ T9010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.186683][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.897'. [ 165.492429][ T9016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.499763][ T9016] IPv6: NLM_F_CREATE should be set when creating new route [ 165.613311][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 165.677571][ T9024] bond0: left allmulticast mode [ 165.731137][ T9024] bond_slave_0: left allmulticast mode [ 165.746948][ T9024] bond_slave_1: left allmulticast mode [ 165.793021][ T9024] bond0: left promiscuous mode [ 165.836487][ T9024] bond_slave_0: left promiscuous mode [ 165.859402][ T9024] bond_slave_1: left promiscuous mode [ 165.873703][ T9024] bridge0: port 3(bond0) entered disabled state [ 165.905140][ T9024] bridge_slave_1: left allmulticast mode [ 165.919123][ T9024] bridge_slave_1: left promiscuous mode [ 165.937651][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.988639][ T9024] bridge_slave_0: left allmulticast mode [ 166.067777][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 166.072214][ T9024] bridge_slave_0: left promiscuous mode [ 166.135670][ T9047] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 166.199230][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.335729][ T9052] netlink: 'syz.4.906': attribute type 11 has an invalid length. [ 166.349960][ T9052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.906'. [ 166.453947][ T9039] tap0: tun_chr_ioctl cmd 1074025672 [ 166.482299][ T9039] tap0: ignored: set checksum disabled [ 166.716052][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 166.755693][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 166.783149][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 166.872851][ T9060] erspan0: entered promiscuous mode [ 166.916694][ T9060] gretap0: entered promiscuous mode [ 166.935787][ T9060] debugfs: 'hsr1' already exists in 'hsr' [ 166.985481][ T9060] Cannot create hsr debugfs directory [ 167.267400][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 168.024145][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 168.038496][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 168.250956][ T9098] xfrm1: entered promiscuous mode [ 168.287791][ T9098] xfrm1: entered allmulticast mode [ 168.535007][ T9118] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 168.613674][ T9119] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 170.433630][ T9169] netlink: 'syz.0.941': attribute type 58 has an invalid length. [ 170.508234][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 170.544105][ T9172] netlink: 'syz.3.942': attribute type 15 has an invalid length. [ 170.585148][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.942'. [ 170.844056][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 171.069247][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 171.416635][ T9186] netlink: 204 bytes leftover after parsing attributes in process `syz.0.947'. [ 171.616535][ T9189] nbd: illegal input index 2958377 [ 171.827675][ T9196] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 171.883248][ T9196] netlink: 'syz.4.951': attribute type 3 has an invalid length. [ 171.950061][ T9196] netlink: 172 bytes leftover after parsing attributes in process `syz.4.951'. [ 171.985553][ T9196] NCSI netlink: No device for ifindex 813332851 [ 171.989057][ C1] sched: DL replenish lagged too much [ 172.108365][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 172.154132][ T9206] netlink: 'syz.3.955': attribute type 4 has an invalid length. [ 172.631711][ T9224] IPVS: stopping backup sync thread 8233 ... [ 172.682717][ T9218] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.956'. [ 172.705575][ T9224] netlink: 144 bytes leftover after parsing attributes in process `syz.3.959'. [ 172.884204][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.960'. [ 172.982357][ T9228] delete_channel: no stack [ 173.441299][ T9244] Cannot find add_set index 65532 as target [ 173.494546][ T9246] netlink: 'syz.1.967': attribute type 4 has an invalid length. [ 173.591833][ T9246] netlink: 'syz.1.967': attribute type 4 has an invalid length. [ 173.695687][ T9253] netlink: 'syz.1.967': attribute type 2 has an invalid length. [ 173.728807][ T9258] netlink: 'syz.4.969': attribute type 6 has an invalid length. [ 173.767774][ T9253] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 174.195204][ T9271] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 174.461349][ T9275] bond6: invalid ARP target 0.0.0.0 specified for addition [ 174.667741][ T9275] bond6: option arp_ip_target: invalid value (0) [ 174.771488][ T9275] bond6 (unregistering): Released all slaves [ 175.315071][ T9294] 8021q: VLANs not supported on lo [ 175.736834][ T9315] __nla_validate_parse: 5 callbacks suppressed [ 175.736856][ T9315] netlink: 84 bytes leftover after parsing attributes in process `syz.1.983'. [ 175.897022][ T9315] netlink: 252 bytes leftover after parsing attributes in process `syz.1.983'. [ 175.954189][ T9322] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 177.111982][ T9351] pimreg: entered allmulticast mode [ 177.117478][ T9350] netlink: 68 bytes leftover after parsing attributes in process `syz.4.995'. [ 177.145585][ T9353] xt_HMARK: spi-set and port-set can't be combined [ 177.573137][ T9365] syzkaller0: entered promiscuous mode [ 177.595192][ T9365] syzkaller0: entered allmulticast mode [ 177.980691][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 178.949430][ T9392] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1008'. [ 179.015655][ T9398] netlink: 'syz.3.1009': attribute type 4 has an invalid length. [ 179.101125][ T9400] netlink: 'syz.3.1009': attribute type 4 has an invalid length. [ 181.091773][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 181.147837][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1025'. [ 181.289262][ T5829] Bluetooth: hci2: command tx timeout [ 182.630847][ T9483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.684975][ T9503] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1036'. [ 182.995067][ T9483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.335842][ T9483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.552688][ T9520] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 183.654678][ T9483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.751800][ T9526] netlink: 'syz.4.1042': attribute type 28 has an invalid length. [ 183.760251][ T9526] netlink: 'syz.4.1042': attribute type 3 has an invalid length. [ 183.768117][ T9526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1042'. [ 184.184023][ T9535] ip6tnl2: entered allmulticast mode [ 184.217099][ T1330] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.486071][ T1330] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.505112][ T9555] netlink: 'syz.1.1050': attribute type 24 has an invalid length. [ 184.605140][ T1330] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.706030][ T9558] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1048'. [ 184.727071][ T521] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.834251][ T9563] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 184.890608][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 185.357042][ T9574] netlink: zone id is out of range [ 185.374960][ T9574] netlink: zone id is out of range [ 185.431091][ T9573] netlink: 'syz.1.1056': attribute type 10 has an invalid length. [ 185.467297][ T9574] netlink: zone id is out of range [ 185.493054][ T9574] netlink: zone id is out of range [ 185.519103][ T9573] netlink: 396 bytes leftover after parsing attributes in process `syz.1.1056'. [ 185.562801][ T9574] netlink: zone id is out of range [ 185.585797][ T9574] netlink: zone id is out of range [ 185.622377][ T9574] netlink: zone id is out of range [ 185.643231][ T9574] netlink: zone id is out of range [ 185.662555][ T9574] netlink: zone id is out of range [ 185.686021][ T9574] netlink: zone id is out of range [ 186.636768][ T9597] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 186.752350][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 187.239434][ T9597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.287107][ T9598] vlan2: entered promiscuous mode [ 187.303454][ T9598] bond6: entered promiscuous mode [ 187.362395][ T9598] vlan2: entered allmulticast mode [ 187.378230][ T9598] bond6: entered allmulticast mode [ 187.479499][ T9603] bond6: (slave bridge2): making interface the new active one [ 187.487381][ T9603] bridge2: entered promiscuous mode [ 187.493545][ T9603] bridge2: entered allmulticast mode [ 187.500704][ T9603] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 187.915987][ T9615] netlink: 'syz.3.1062': attribute type 9 has an invalid length. [ 188.542761][ T9637] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1067'. [ 189.788639][ T9681] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1076'. [ 189.801309][ T9680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1075'. [ 189.848347][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 189.953009][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.169709][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 190.207650][ T9691] netlink: 'syz.0.1077': attribute type 5 has an invalid length. [ 190.232556][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1077'. [ 190.557840][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 191.441851][ T9717] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 191.510877][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1087'. [ 191.668117][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 191.854400][ T9726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1087'. [ 192.148862][ T9746] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1092'. [ 193.630061][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 193.673432][ T9788] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 193.706522][ T9788] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.1102'. [ 194.023832][ T9788] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 194.307710][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 194.349444][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357679][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.495276][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 194.561380][ T9812] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 194.660090][ T9812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.867247][ T9816] bond2: entered allmulticast mode [ 195.583714][ T5911] IPVS: starting estimator thread 0... [ 195.611883][ T9842] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1115'. [ 195.660168][ T9841] net_ratelimit: 52 callbacks suppressed [ 195.660201][ T9841] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 195.719074][ T9844] IPVS: using max 24 ests per chain, 57600 per kthread [ 196.127072][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 196.169318][ T9868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.214345][ T9865] netlink: 'syz.3.1121': attribute type 8 has an invalid length. [ 196.273841][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 196.342646][ T9865] netlink: 'syz.3.1121': attribute type 29 has an invalid length. [ 196.389885][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 196.930679][ T9893] __nla_validate_parse: 1 callbacks suppressed [ 196.930702][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1127'. [ 196.992621][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 197.081007][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 197.091138][ T9893] openvswitch: netlink: Flow key attr not present in new flow. [ 197.134847][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1127'. [ 197.182695][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1129'. [ 197.209473][ T9897] openvswitch: netlink: Flow key attr not present in new flow. [ 197.241268][ T9894] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1129'. [ 197.296991][ T9900] syzkaller0: entered promiscuous mode [ 197.331570][ T9900] syzkaller0: entered allmulticast mode [ 197.586249][ T9912] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1132'. [ 197.670434][ T9912] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 197.726022][ T9919] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 197.762024][ T9912] netlink: 'syz.1.1132': attribute type 11 has an invalid length. [ 197.903385][ T9920] tls_set_device_offload: netdev not found [ 198.937514][ T9947] wg1 speed is unknown, defaulting to 1000 [ 199.158991][ T9956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.453954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.262000][ T9988] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 200.787775][ T9998] syzkaller0: entered promiscuous mode [ 200.819062][ T9998] syzkaller0: entered allmulticast mode [ 200.876676][T10006] netlink: 'syz.4.1155': attribute type 17 has an invalid length. [ 200.911015][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 201.038358][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1155'. [ 201.162442][T10017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1156'. [ 201.190839][T10006] gretap0: entered promiscuous mode [ 201.271145][T10006] gretap0: left promiscuous mode [ 201.927850][T10037] syzkaller1: entered promiscuous mode [ 201.986530][T10037] syzkaller1: entered allmulticast mode [ 202.124859][T10044] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 202.831997][T10058] __nla_validate_parse: 1 callbacks suppressed [ 202.832021][T10058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1168'. [ 202.963879][T10061] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1169'. [ 203.023009][T10065] tipc: Enabled bearer , priority 2 [ 203.104162][T10068] netdevsim netdevsim3 : renamed from netdevsim0 [ 203.593788][T10078] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1174'. [ 203.642233][T10081] x_tables: duplicate underflow at hook 1 [ 203.692061][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.786006][T10081] x_tables: duplicate underflow at hook 1 [ 203.824556][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.869815][T10087] sctp: [Deprecated]: syz.1.1171 (pid 10087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.869815][T10087] Use struct sctp_sack_info instead [ 204.263890][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1176'. [ 204.797153][T10103] netlink: 'syz.3.1180': attribute type 21 has an invalid length. [ 204.808670][T10102] lo speed is unknown, defaulting to 1000 [ 204.842747][T10103] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1180'. [ 204.857332][T10102] lo speed is unknown, defaulting to 1000 [ 204.901614][T10102] lo speed is unknown, defaulting to 1000 [ 204.934325][T10105] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1182'. [ 205.106110][T10110] syzkaller0: entered promiscuous mode [ 205.199034][T10110] syzkaller0: entered allmulticast mode [ 205.230259][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 205.301903][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.588864][T10121] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.1184'. [ 205.776319][T10121] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:24096 [ 205.919753][T10123] veth15: entered allmulticast mode [ 205.994662][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.046716][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.105002][T10127] wg1 speed is unknown, defaulting to 1000 [ 206.122430][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.183833][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.492681][T10102] infiniband syz0: set active [ 206.549086][T10102] infiniband syz0: added lo [ 206.617113][ T1608] lo speed is unknown, defaulting to 1000 [ 206.654894][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 206.661177][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 206.669902][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 206.685147][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 206.783897][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 206.827871][T10102] RDS/IB: syz0: added [ 206.839132][T10146] netlink: 'syz.2.1192': attribute type 7 has an invalid length. [ 206.869647][T10102] smc: adding ib device syz0 with port count 1 [ 206.886522][T10102] smc: ib device syz0 port 1 has no pnetid [ 207.056040][ T1608] lo speed is unknown, defaulting to 1000 [ 207.088542][T10102] lo speed is unknown, defaulting to 1000 [ 208.072895][T10102] lo speed is unknown, defaulting to 1000 [ 208.129636][T10174] netlink: 'syz.2.1197': attribute type 3 has an invalid length. [ 208.163341][T10174] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 208.199076][T10174] __nla_validate_parse: 2 callbacks suppressed [ 208.199096][T10174] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1197'. [ 208.241599][T10174] NCSI netlink: No device for ifindex 813332851 [ 208.973719][T10102] lo speed is unknown, defaulting to 1000 [ 209.092902][T10196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1203'. [ 209.352860][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 209.734091][T10102] lo speed is unknown, defaulting to 1000 [ 209.996461][T10102] lo speed is unknown, defaulting to 1000 [ 210.261278][T10102] lo speed is unknown, defaulting to 1000 [ 210.562872][T10210] syzkaller0: entered promiscuous mode [ 210.568492][T10210] syzkaller0: entered allmulticast mode [ 211.214122][T10224] netlink: 'syz.2.1211': attribute type 33 has an invalid length. [ 211.251040][T10227] netlink: 'syz.2.1211': attribute type 33 has an invalid length. [ 211.850782][T10252] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 211.894874][T10252] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1217'. [ 212.030040][T10252] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 212.037877][T10252] netlink: 'syz.1.1217': attribute type 8 has an invalid length. [ 212.150456][T10252] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1217'. [ 212.188834][T10252] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1217'. [ 212.294497][T10264] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 212.425876][T10269] sctp: [Deprecated]: syz.2.1222 (pid 10269) Use of int in maxseg socket option. [ 212.425876][T10269] Use struct sctp_assoc_value instead [ 212.598796][T10266] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 212.631733][T10266] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 212.843377][T10266] bond4: (slave ip6gre1): making interface the new active one [ 212.887081][T10266] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 220.972661][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.116271][T10338] netlink: 'syz.3.1242': attribute type 11 has an invalid length. [ 235.143077][T10338] netlink: 'syz.3.1242': attribute type 11 has an invalid length. [ 235.167062][T10338] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1242'. [ 235.863639][T10357] SET target dimension over the limit! [ 235.989490][T10364] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1249'. [ 236.597921][T10387] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.644464][T10372] nbd0: detected capacity change from 0 to 127 [ 236.679044][T10379] bond6: invalid ARP target 0.0.0.0 specified for addition [ 236.741580][T10391] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1252'. [ 236.787845][T10379] bond6: option arp_ip_target: invalid value (0) [ 236.880517][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 236.917609][T10379] bond6 (unregistering): Released all slaves [ 237.152571][ T5837] block nbd0: Receive control failed (result -104) [ 237.394882][T10397] wg1 speed is unknown, defaulting to 1000 [ 237.540438][T10398] wg1 speed is unknown, defaulting to 1000 [ 237.580666][T10397] lo speed is unknown, defaulting to 1000 [ 237.600059][T10406] netlink: 'syz.0.1260': attribute type 17 has an invalid length. [ 237.609949][T10405] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1259'. [ 237.646352][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 237.672048][T10405] netlink: Conntrack attr has 3 unknown bytes [ 237.699192][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 237.725654][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 237.761374][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 237.809840][T10406] gretap0: entered promiscuous mode [ 237.827909][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 237.845232][T10406] gretap0: left promiscuous mode [ 238.647961][T10398] lo speed is unknown, defaulting to 1000 [ 238.687669][T10425] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 238.719401][T10425] netlink: 'syz.1.1266': attribute type 11 has an invalid length. [ 239.067296][T10437] netlink: 'syz.1.1269': attribute type 30 has an invalid length. [ 239.367922][T10437] bond6: option arp_missed_max: invalid value (0) [ 239.406682][T10437] bond6: option arp_missed_max: allowed values 1 - 255 [ 240.638768][T10437] bond6 (unregistering): Released all slaves [ 241.162867][T10469] netlink: 'syz.3.1279': attribute type 2 has an invalid length. [ 241.216782][T10469] __nla_validate_parse: 3 callbacks suppressed [ 241.216802][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 241.378212][T10469] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1279'. [ 241.681952][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1283'. [ 242.114241][T10496] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 242.153923][T10496] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1284'. [ 242.910530][T10513] netlink: 'syz.2.1288': attribute type 4 has an invalid length. [ 242.936702][T10517] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 242.949894][T10519] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1291'. [ 242.980354][T10513] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1288'. [ 242.996042][T10517] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 243.010009][T10521] openvswitch: netlink: IP tunnel dst address not specified [ 243.074532][T10513] .`: renamed from bond0 (while UP) [ 243.315030][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 243.693558][T10533] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1294'. [ 244.232210][T10546] netlink: 'syz.0.1299': attribute type 6 has an invalid length. [ 244.638414][T10563] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 245.232306][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 245.385548][T10582] ip6gre2: entered allmulticast mode [ 245.989987][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 246.623568][T10617] __nla_validate_parse: 1 callbacks suppressed [ 246.623588][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 246.696371][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 247.652689][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.716954][T10654] raw_sendmsg: syz.0.1329 forgot to set AF_INET. Fix it! [ 248.219272][T10660] netlink: 'syz.1.1332': attribute type 3 has an invalid length. [ 248.932023][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 250.083176][T10735] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1352'. [ 252.546315][T10804] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 252.635584][T10808] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 252.694194][T10808] netlink: 'syz.1.1370': attribute type 2 has an invalid length. [ 252.786568][T10808] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 252.916801][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 252.934690][T10804] bond6: entered promiscuous mode [ 252.935370][T10804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.081467][T10821] bond6: (slave bridge5): making interface the new active one [ 253.096408][T10821] bridge5: entered promiscuous mode [ 253.205441][T10821] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 253.298859][T10832] --map-set only usable from mangle table [ 255.779097][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785504][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.809044][T10814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.818272][T10822] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 256.230967][T10852] netlink: 'syz.2.1382': attribute type 4 has an invalid length. [ 256.997556][T10880] netlink: 'syz.3.1391': attribute type 8 has an invalid length. [ 257.552265][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 258.775464][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1402'. [ 259.456932][T10952] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1408'. [ 259.914523][T10966] syzkaller1: entered promiscuous mode [ 259.944548][T10966] syzkaller1: entered allmulticast mode [ 260.223754][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 262.097428][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 262.139118][T11037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.146568][T11037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.221538][T11037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.256654][T11037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.312440][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 262.392455][T11042] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 262.404016][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 262.441510][T11042] bond3 (unregistering): Released all slaves [ 262.568500][T11055] macsec1: entered promiscuous mode [ 262.600105][T11055] macsec1: entered allmulticast mode [ 262.611528][T11055] bridge0: entered allmulticast mode [ 262.631896][T11055] bridge0: port 3(macsec1) entered blocking state [ 262.656710][T11055] bridge0: port 3(macsec1) entered disabled state [ 262.725870][T11055] bridge0: left allmulticast mode [ 263.406840][T11075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1444'. [ 263.736405][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 263.761327][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 263.808845][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1448'. [ 264.039239][T11099] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 264.047067][T11099] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.1451'. [ 264.294809][T11103] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 264.309269][ T5897] syzkaller1: tun_net_xmit 90 [ 264.316679][T11103] syzkaller1: Linktype set failed because interface is up [ 264.707812][T11117] veth1_macvtap: left promiscuous mode [ 265.110404][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.225386][T11116] sock: sock_set_timeout: `syz.3.1457' (pid 11116) tries to set negative timeout [ 265.440614][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'. [ 265.519944][T11132] block nbd1: Unsupported socket: should be TCP or UNIX. [ 265.819390][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 266.753461][T11157] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1467'. [ 267.272934][T11171] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1472'. [ 267.289949][ T1037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.417742][T11157] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 268.031593][T11200] sctp: [Deprecated]: syz.0.1479 (pid 11200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.031593][T11200] Use struct sctp_sack_info instead [ 268.105611][T11201] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 268.494095][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 268.593617][T11220] netlink: 'syz.3.1484': attribute type 9 has an invalid length. [ 268.635694][T11220] netlink: 'syz.3.1484': attribute type 11 has an invalid length. [ 268.672668][T11220] netlink: 'syz.3.1484': attribute type 12 has an invalid length. [ 268.719363][T11220] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1484'. [ 268.757014][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 268.866102][T11228] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1486'. [ 268.909375][T11228] syzkaller0: entered promiscuous mode [ 268.923117][T11228] syzkaller0: entered allmulticast mode [ 268.945310][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.952505][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.959372][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.966217][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.973032][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.979847][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.986645][T11228] tc action pedit offset must be on 32 bit boundaries [ 268.993491][T11228] tc action pedit offset must be on 32 bit boundaries [ 269.000416][T11228] tc action pedit offset must be on 32 bit boundaries [ 269.007204][T11228] tc action pedit offset must be on 32 bit boundaries [ 269.014140][T11228] 0: reclassify loop, rule prio 0, protocol 800 [ 269.133263][ T521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.143795][ T521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.243941][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 270.132334][T11261] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 270.241699][T11261] xt_policy: too many policy elements [ 270.598383][T11275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1502'. [ 270.640594][T11277] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 271.306901][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1503'. [ 271.583770][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1509'. [ 272.971797][ T521] wlan0: Trigger new scan to find an IBSS to join [ 272.990588][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'. [ 273.152941][T11355] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1521'. [ 273.249821][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 273.383930][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 273.459591][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1526'. [ 274.142920][T11382] wg1 speed is unknown, defaulting to 1000 [ 274.165547][T11382] lo speed is unknown, defaulting to 1000 [ 274.440019][T11400] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 275.103656][T11401] syzkaller0: entered promiscuous mode [ 275.110223][T11401] syzkaller0: entered allmulticast mode [ 275.707117][T11421] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1536'. [ 276.438281][T11439] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.660371][T11467] netlink: 'syz.2.1546': attribute type 14 has an invalid length. [ 277.683726][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 277.717354][T11468] netlink: 'syz.2.1546': attribute type 14 has an invalid length. [ 277.751449][T11467] netlink: 'syz.2.1546': attribute type 14 has an invalid length. [ 277.778231][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 277.869409][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 277.961704][T11468] netlink: 'syz.2.1546': attribute type 14 has an invalid length. [ 277.980886][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 278.014816][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 278.051544][T11477] atomic_op ffff888058533998 conn xmit_atomic 0000000000000000 [ 278.583608][T11497] syzkaller0: entered promiscuous mode [ 278.605370][T11497] syzkaller0: entered allmulticast mode [ 280.127682][T11555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.659900][T11572] syzkaller0: entered promiscuous mode [ 280.707813][T11572] syzkaller0: entered allmulticast mode [ 280.987380][T11583] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1571'. [ 281.035568][T11583] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1571'. [ 281.175933][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1572'. [ 281.187536][T11592] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.271841][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 281.331889][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.340096][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.356384][T11593] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 281.461178][T11599] netlink: 'syz.0.1574': attribute type 3 has an invalid length. [ 281.545692][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 282.148416][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 282.355230][T11627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1581'. [ 282.524741][T11632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1583'. [ 282.610510][T11632] unsupported nlmsg_type 40 [ 282.991561][T11644] netlink: 'syz.3.1586': attribute type 25 has an invalid length. [ 283.145654][T11647] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1587'. [ 283.484457][T11661] netlink: 'syz.4.1591': attribute type 4 has an invalid length. [ 283.809297][T11674] veth0: entered promiscuous mode [ 283.839692][T11674] veth0: left promiscuous mode [ 284.059530][T11674] openvswitch: netlink: IPv4 tunnel dst address is zero [ 285.842181][T11712] syzkaller1: entered promiscuous mode [ 285.871391][T11712] syzkaller1: entered allmulticast mode [ 286.032985][T11734] syz.1.1602: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 286.160094][T11734] CPU: 0 UID: 0 PID: 11734 Comm: syz.1.1602 Not tainted syzkaller #0 PREEMPT(full) [ 286.160129][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.160151][T11734] Call Trace: [ 286.160160][T11734] [ 286.160175][T11734] dump_stack_lvl+0xe8/0x150 [ 286.160220][T11734] warn_alloc+0x249/0x340 [ 286.160247][T11734] ? stack_trace_save+0xa9/0x100 [ 286.160273][T11734] ? __pfx_warn_alloc+0x10/0x10 [ 286.160305][T11734] ? kasan_save_track+0x4f/0x80 [ 286.160326][T11734] ? kasan_save_track+0x3e/0x80 [ 286.160346][T11734] ? __kasan_kmalloc+0x93/0xb0 [ 286.160368][T11734] ? __kmalloc_cache_noprof+0x31c/0x660 [ 286.160390][T11734] ? xskq_create+0x56/0x170 [ 286.160419][T11734] ? xsk_setsockopt+0x54c/0x990 [ 286.160444][T11734] ? do_sock_setsockopt+0x17c/0x1b0 [ 286.160475][T11734] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 286.160505][T11734] ? do_syscall_64+0x14d/0xf80 [ 286.160530][T11734] __vmalloc_node_range_noprof+0x132/0x1730 [ 286.160588][T11734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.160620][T11734] ? __kasan_kmalloc+0x93/0xb0 [ 286.160650][T11734] vmalloc_user_noprof+0xad/0xe0 [ 286.160674][T11734] ? xskq_create+0xbf/0x170 [ 286.160703][T11734] xskq_create+0xbf/0x170 [ 286.160742][T11734] xsk_init_queue+0x8a/0xe0 [ 286.160774][T11734] xsk_setsockopt+0x54c/0x990 [ 286.160805][T11734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 286.160833][T11734] ? __pfx_aa_sk_perm+0x10/0x10 [ 286.160864][T11734] ? aa_sock_opt_perm+0xff/0x1a0 [ 286.160896][T11734] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 286.160925][T11734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 286.160955][T11734] do_sock_setsockopt+0x17c/0x1b0 [ 286.160993][T11734] __x64_sys_setsockopt+0x13d/0x1b0 [ 286.161031][T11734] do_syscall_64+0x14d/0xf80 [ 286.161050][T11734] ? trace_irq_disable+0x3b/0x150 [ 286.161080][T11734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.161102][T11734] ? clear_bhb_loop+0x40/0x90 [ 286.161128][T11734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.161149][T11734] RIP: 0033:0x7f122719c799 [ 286.161179][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.161203][T11734] RSP: 002b:00007f122807f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.161226][T11734] RAX: ffffffffffffffda RBX: 00007f1227416090 RCX: 00007f122719c799 [ 286.161241][T11734] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 286.161254][T11734] RBP: 00007f1227232c99 R08: 0000000000000004 R09: 0000000000000000 [ 286.161267][T11734] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.161280][T11734] R13: 00007f1227416128 R14: 00007f1227416090 R15: 00007fff68576038 [ 286.161315][T11734] [ 286.161327][T11734] Mem-Info: [ 286.597156][T11746] netlink: 'syz.3.1604': attribute type 4 has an invalid length. [ 286.678569][T11734] active_anon:5648 inactive_anon:0 isolated_anon:0 [ 286.678569][T11734] active_file:2569 inactive_file:39997 isolated_file:0 [ 286.678569][T11734] unevictable:768 dirty:37 writeback:0 [ 286.678569][T11734] slab_reclaimable:11072 slab_unreclaimable:105803 [ 286.678569][T11734] mapped:29184 shmem:1355 pagetables:1314 [ 286.678569][T11734] sec_pagetables:0 bounce:0 [ 286.678569][T11734] kernel_misc_reclaimable:0 [ 286.678569][T11734] free:1320793 free_pcp:12189 free_cma:0 [ 286.730905][T11734] Node 0 active_anon:22592kB inactive_anon:0kB active_file:10276kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116736kB dirty:148kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13592kB pagetables:5100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.764854][T11734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.797434][T11734] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.833115][T11734] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 286.840115][T11734] Node 0 DMA32 free:1322456kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22592kB inactive_anon:0kB active_file:10276kB inactive_file:159780kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:48128kB local_pcp:22260kB free_cma:0kB [ 286.879896][T11734] lowmem_reserve[]: 0 0 0 0 0 [ 286.884938][T11734] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 286.919698][T11734] lowmem_reserve[]: 0 0 0 0 0 [ 286.924643][T11734] Node 1 Normal free:3945116kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.961032][T11734] lowmem_reserve[]: 0 0 0 0 0 [ 286.966087][T11734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.981829][T11734] Node 0 DMA32: 853*4kB (UME) 1301*8kB (UME) 1391*16kB (UM) 242*32kB (UME) 317*64kB (UME) 196*128kB (UM) 269*256kB (UM) 211*512kB (UM) 141*1024kB (UME) 60*2048kB (UME) 193*4096kB (UM) = 1323884kB [ 287.002079][T11734] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 287.016874][T11734] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 4*16kB (UM) 6*32kB (UM) 6*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945116kB [ 287.035698][T11734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.046944][T11734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.058359][T11734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.068842][T11734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.078828][T11734] 43917 total pagecache pages [ 287.087433][T11734] 0 pages in swap cache [ 287.092359][T11734] Free swap = 124996kB [ 287.096695][T11734] Total swap = 124996kB [ 287.101451][T11734] 2097051 pages RAM [ 287.105706][T11734] 0 pages HighMem/MovableOnly [ 287.111629][T11734] 427026 pages reserved [ 287.117719][T11734] 0 pages cma reserved [ 291.763212][T11742] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 292.389996][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 292.423857][T11778] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 292.499132][T11778] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 292.542504][T11778] gretap2: entered promiscuous mode [ 292.578437][T11778] gretap2: entered allmulticast mode [ 294.404809][T11841] ipvlan2: entered allmulticast mode [ 294.439796][T11841] batadv_slave_1: entered allmulticast mode [ 294.493312][T11841] batman_adv: batadv0: Adding interface: ipvlan2 [ 294.552248][T11841] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.666973][T11854] x_tables: duplicate underflow at hook 4 [ 294.686587][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.727734][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.767308][T11841] batman_adv: batadv0: Interface activated: ipvlan2 [ 295.485675][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1641'. [ 295.548086][T11877] netlink: 'syz.4.1641': attribute type 3 has an invalid length. [ 295.565903][T11877] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 295.594207][T11880] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.1642'. [ 295.662166][T11880] openvswitch: netlink: Flow key attr not present in new flow. [ 295.836571][T11885] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 296.441989][T11909] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 296.446850][T11913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'. [ 296.485115][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1651'. [ 296.796568][T11928] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1654'. [ 296.843701][T11930] netlink: 'syz.0.1655': attribute type 11 has an invalid length. [ 297.011416][T11909] bond3: entered promiscuous mode [ 297.017364][T11909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.084234][T11924] bond3: (slave bridge7): making interface the new active one [ 297.093260][T11924] bridge7: entered promiscuous mode [ 297.100692][T11924] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 297.155417][T11936] bridge0: port 3(syz_tun) entered blocking state [ 297.164429][T11935] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1656'. [ 297.176567][T11936] bridge0: port 3(syz_tun) entered disabled state [ 297.252588][T11936] syz_tun: entered allmulticast mode [ 297.362622][T11936] syz_tun: entered promiscuous mode [ 297.498372][T11951] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 297.506817][T11951] netlink: 396 bytes leftover after parsing attributes in process `syz.0.1660'. [ 297.527429][T11952] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1659'. [ 297.546697][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 297.726522][T11940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.196513][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'. [ 298.210343][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'. [ 298.373440][T11965] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 298.389469][T11530] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.444679][T11965] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 298.480758][T11965] team0: Failed to send options change via netlink (err -105) [ 298.518797][T11965] team0: Port device batadv2 added [ 298.637177][T11975] netlink: 'syz.3.1669': attribute type 39 has an invalid length. [ 298.819248][T11978] netlink: 'syz.2.1670': attribute type 5 has an invalid length. [ 299.303732][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 299.609579][T12003] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 299.638765][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 299.664299][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 300.869606][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 300.886947][T12026] xt_cgroup: path and classid specified [ 300.912507][T12024] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1684'. [ 301.086146][T12037] netlink: 'syz.4.1686': attribute type 21 has an invalid length. [ 302.313792][T12078] netlink: 'syz.2.1699': attribute type 2 has an invalid length. [ 302.323518][T12078] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 302.734596][T12084] __nla_validate_parse: 3 callbacks suppressed [ 302.734615][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 302.812325][T12087] netlink: 'syz.2.1700': attribute type 12 has an invalid length. [ 305.548166][T12087] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 305.593377][T12101] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 306.090977][T12120] netlink: 'syz.0.1710': attribute type 3 has an invalid length. [ 306.121231][T12123] tipc: Disabling bearer [ 306.572116][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 306.697532][T12164] netlink: 'syz.1.1714': attribute type 10 has an invalid length. [ 306.793800][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.289339][T12164] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 307.556973][T12169] bridge4: entered promiscuous mode [ 307.574087][T12169] bridge4: entered allmulticast mode [ 307.613333][T12171] wg1 speed is unknown, defaulting to 1000 [ 307.917617][T12200] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1722'. [ 307.997750][T12201] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 308.218543][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 308.728427][T12222] netlink: 186332 bytes leftover after parsing attributes in process `syz.0.1729'. [ 308.781793][T12230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.832197][T12230] x_tables: duplicate underflow at hook 1 [ 308.986751][T12238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.279974][T12250] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1736'. [ 309.318328][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1738'. [ 309.365927][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 309.445654][T12253] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1739'. [ 309.496923][T12254] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1739'. [ 309.654277][T12257] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 309.770321][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 309.825695][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 309.843008][T12264] x_tables: unsorted underflow at hook 4 [ 309.926011][T12257] bond6: entered promiscuous mode [ 309.959215][T12257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.142730][T12300] bond3: Unable to set up delay as MII monitoring is disabled [ 311.214716][T12306] netlink: 'syz.2.1752': attribute type 83 has an invalid length. [ 311.225896][T12300] bond3 (unregistering): Released all slaves [ 311.307692][T12311] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 311.408435][T12311] team0: Device vxcan1 is of different type [ 311.716451][T12319] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 311.774433][T12318] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 312.156311][T12328] wg1 speed is unknown, defaulting to 1000 [ 312.164373][T12328] lo speed is unknown, defaulting to 1000 [ 312.763377][T12347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.793517][T12349] tipc: Enabling of bearer rejected, failed to enable media [ 313.139903][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.216093][T12358] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.510334][T12364] __nla_validate_parse: 6 callbacks suppressed [ 313.510356][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1770'. [ 313.964349][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 314.085380][T12375] netlink: 208372 bytes leftover after parsing attributes in process `syz.2.1773'. [ 314.658011][T12395] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 314.746160][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 315.334633][T12412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1782'. [ 315.428588][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 316.000111][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 316.224218][T12440] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 316.574836][T12447] bond4: (slave geneve4): making interface the new active one [ 316.617129][T12447] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 316.661834][ T521] netdevsim netdevsim3 : set [1, 2] type 2 family 0 port 20004 - 0 [ 316.893525][T12455] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 317.054580][T12455] bond3 (unregistering): Released all slaves [ 317.221488][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.379918][ T521] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 317.441698][ T521] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 317.960129][T12465] syzkaller0: entered promiscuous mode [ 318.020789][T12465] syzkaller0: entered allmulticast mode [ 318.294773][T12505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 321.323316][ T5194] udevd[5194]: worker [10345] /devices/virtual/block/nbd0 is taking a long time [ 321.602254][ T521] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 321.656243][T12488] syzkaller1: entered promiscuous mode [ 321.669672][T12488] syzkaller1: entered allmulticast mode [ 321.964990][T12524] xt_hashlimit: size too large, truncated to 1048576 [ 322.464669][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 322.523437][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 322.647520][T12538] netlink: 'syz.0.1808': attribute type 1 has an invalid length. [ 322.669734][T12538] netlink: 'syz.0.1808': attribute type 2 has an invalid length. [ 322.691289][T12543] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1809'. [ 322.892552][T12537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.016167][T12555] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1813'. [ 323.043191][T12555] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1813'. [ 323.069790][T12556] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1812'. [ 323.112109][T12558] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 323.146660][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 323.181153][T12558] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1812'. [ 323.207413][T12558] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 323.644133][T12575] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 324.303325][T12599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1824'. [ 324.363197][ T1608] IPVS: starting estimator thread 0... [ 324.389332][T12602] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1826'. [ 324.446489][T12602] netlink: Unknown conntrack attr (type=2304, max=9) [ 324.467504][T12599] gretap1: entered promiscuous mode [ 324.499724][T12609] IPVS: using max 28 ests per chain, 67200 per kthread [ 324.524516][T12599] gretap1: entered allmulticast mode [ 324.913009][T12616] team0: No ports can be present during mode change [ 325.292104][T12628] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 325.890494][T12639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.724124][T12698] TC_ACT_REPEAT abuse ? [ 328.070337][T12712] netlink: 'syz.1.1856': attribute type 24 has an invalid length. [ 328.107018][T12708] __nla_validate_parse: 38 callbacks suppressed [ 328.107041][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 328.812258][T12720] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 329.264636][T12726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.405550][ T521] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.493064][T12737] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1862'. [ 329.817559][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 329.901160][T12742] netlink: 'syz.1.1864': attribute type 5 has an invalid length. [ 329.911787][T12737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.961508][T12737] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 330.064545][T12737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.107605][T12737] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 330.122839][T12743] vlan3: entered allmulticast mode [ 330.169257][T12743] bridge0: entered allmulticast mode [ 330.214217][T12758] bridge0: port 1(erspan0) entered blocking state [ 330.265045][T12737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.283489][T12758] bridge0: port 1(erspan0) entered disabled state [ 330.319616][T12737] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 330.336909][T12758] erspan0: entered allmulticast mode [ 330.416354][T12737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.424121][T12758] erspan0: entered promiscuous mode [ 330.459177][T12758] bridge0: port 1(erspan0) entered blocking state [ 330.465902][T12758] bridge0: port 1(erspan0) entered forwarding state [ 330.474786][T12737] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 333.156766][T12829] netlink: 'syz.1.1880': attribute type 6 has an invalid length. [ 333.578311][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'. [ 335.218171][T12870] netlink: 'syz.0.1887': attribute type 4 has an invalid length. [ 335.306647][T12870] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1887'. [ 335.371709][T12879] netlink: 'syz.4.1889': attribute type 2 has an invalid length. [ 337.881616][T12923] blkio.reset_stats is deprecated [ 338.997651][T12935] netlink: 'syz.3.1900': attribute type 2 has an invalid length. [ 339.429409][T12957] TCP: TCP_TX_DELAY enabled [ 339.466090][T12959] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 339.505161][T12959] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 339.514517][T12967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 341.247724][T13004] sctp: [Deprecated]: syz.4.1913 (pid 13004) Use of int in max_burst socket option. [ 341.247724][T13004] Use struct sctp_assoc_value instead [ 341.727622][T13016] sctp: [Deprecated]: syz.3.1915 (pid 13016) Use of int in max_burst socket option. [ 341.727622][T13016] Use struct sctp_assoc_value instead [ 341.786198][T13019] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 341.841855][T13019] bridge_slave_1: left allmulticast mode [ 341.887806][T13019] bridge_slave_1: left promiscuous mode [ 341.918138][T13019] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.253954][T13036] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1919'. [ 342.286985][T13019] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 342.798840][T13052] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1920'. [ 343.229599][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 344.090940][T13064] wg1 speed is unknown, defaulting to 1000 [ 344.108074][T13064] lo speed is unknown, defaulting to 1000 [ 346.561657][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 346.575317][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 355.214077][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.224219][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.236836][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.248746][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.258573][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.330862][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.346227][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.354073][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.364480][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.376901][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.488365][T13135] wg1 speed is unknown, defaulting to 1000 [ 355.512203][T13135] lo speed is unknown, defaulting to 1000 [ 355.954721][T13135] chnl_net:caif_netlink_parms(): no params data found [ 356.083977][T13135] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.091948][T13135] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.100142][T13135] bridge_slave_0: entered allmulticast mode [ 356.108509][T13135] bridge_slave_0: entered promiscuous mode [ 356.124056][T13135] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.136709][T13135] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.145938][T13135] bridge_slave_1: entered allmulticast mode [ 356.154771][T13135] bridge_slave_1: entered promiscuous mode [ 356.201706][T13135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.215096][T13135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.273245][T13135] team0: Port device team_slave_0 added [ 356.282639][T13135] team0: Port device team_slave_1 added [ 356.326700][T13135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.335022][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.366632][T13135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.380183][T13135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.387175][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.419695][T13135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.492569][T13135] hsr_slave_0: entered promiscuous mode [ 356.500534][T13135] hsr_slave_1: entered promiscuous mode [ 357.449615][ T5829] Bluetooth: hci5: command tx timeout [ 357.539706][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.551022][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.560146][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.570307][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.579670][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.648481][T13146] wg1 speed is unknown, defaulting to 1000 [ 357.656492][T13146] lo speed is unknown, defaulting to 1000 [ 358.083868][T13146] chnl_net:caif_netlink_parms(): no params data found [ 358.223864][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.231311][T13146] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.238691][T13146] bridge_slave_0: entered allmulticast mode [ 358.248123][T13146] bridge_slave_0: entered promiscuous mode [ 358.258282][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.272479][T13146] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.283166][T13146] bridge_slave_1: entered allmulticast mode [ 358.291708][T13146] bridge_slave_1: entered promiscuous mode [ 358.340778][T13146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.354053][T13146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.403719][T13146] team0: Port device team_slave_0 added [ 358.415109][T13146] team0: Port device team_slave_1 added [ 358.454892][T13146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.462026][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.502757][T13146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.516551][T13146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.524660][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.552010][T13146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.700694][T13146] hsr_slave_0: entered promiscuous mode [ 358.730290][T13146] hsr_slave_1: entered promiscuous mode [ 358.739968][T13146] debugfs: 'hsr0' already exists in 'hsr' [ 358.745831][T13146] Cannot create hsr debugfs directory [ 358.878572][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.889277][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.897482][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.913033][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.921476][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.138368][T13155] wg1 speed is unknown, defaulting to 1000 [ 359.146918][T13155] lo speed is unknown, defaulting to 1000 [ 359.529759][ T5829] Bluetooth: hci5: command tx timeout [ 359.609601][ T5829] Bluetooth: hci6: command tx timeout [ 359.793018][T13155] chnl_net:caif_netlink_parms(): no params data found [ 359.925270][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.937647][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.949190][T13155] bridge_slave_0: entered allmulticast mode [ 359.960418][T13155] bridge_slave_0: entered promiscuous mode [ 359.969949][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.978381][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.986434][T13155] bridge_slave_1: entered allmulticast mode [ 359.995804][T13155] bridge_slave_1: entered promiscuous mode [ 360.045580][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.062266][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.117146][T13155] team0: Port device team_slave_0 added [ 360.126405][T13155] team0: Port device team_slave_1 added [ 360.174045][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.182041][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.209722][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.224731][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.232446][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.264537][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.332292][T13155] hsr_slave_0: entered promiscuous mode [ 360.340087][T13155] hsr_slave_1: entered promiscuous mode [ 360.346620][T13155] debugfs: 'hsr0' already exists in 'hsr' [ 360.353510][T13155] Cannot create hsr debugfs directory [ 360.969376][ T5829] Bluetooth: hci7: command tx timeout [ 361.610083][ T5829] Bluetooth: hci5: command tx timeout [ 361.689528][ T5829] Bluetooth: hci6: command tx timeout [ 362.913875][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 362.953045][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 362.996760][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 363.049932][ T5837] Bluetooth: hci7: command tx timeout [ 363.071088][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 363.093223][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 363.165991][T13164] wg1 speed is unknown, defaulting to 1000 [ 363.216524][T13164] lo speed is unknown, defaulting to 1000 [ 363.390322][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 363.400133][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 363.408350][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 363.417734][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 363.425895][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 363.495999][T13167] wg1 speed is unknown, defaulting to 1000 [ 363.690219][ T5829] Bluetooth: hci5: command tx timeout [ 363.770177][ T5829] Bluetooth: hci6: command tx timeout [ 363.828374][T13167] lo speed is unknown, defaulting to 1000 [ 364.228453][T13164] chnl_net:caif_netlink_parms(): no params data found [ 364.456724][T13164] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.468056][T13164] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.476736][T13164] bridge_slave_0: entered allmulticast mode [ 364.485436][T13164] bridge_slave_0: entered promiscuous mode [ 364.511553][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.518800][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.527058][T13164] bridge_slave_1: entered allmulticast mode [ 364.536241][T13164] bridge_slave_1: entered promiscuous mode [ 364.621998][T13164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.652303][T13164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.723411][T13164] team0: Port device team_slave_0 added [ 364.740892][T13164] team0: Port device team_slave_1 added [ 364.826945][T13164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.835170][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.863234][T13164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.903863][T13164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.911340][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.939126][T13164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.033383][T13164] hsr_slave_0: entered promiscuous mode [ 365.040540][T13164] hsr_slave_1: entered promiscuous mode [ 365.047192][T13164] debugfs: 'hsr0' already exists in 'hsr' [ 365.054669][T13164] Cannot create hsr debugfs directory [ 365.129973][ T5829] Bluetooth: hci8: command tx timeout [ 365.136247][ T5829] Bluetooth: hci7: command tx timeout [ 365.294221][T13167] chnl_net:caif_netlink_parms(): no params data found [ 365.449839][ T5829] Bluetooth: hci9: command tx timeout [ 365.611611][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.620023][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.627338][T13167] bridge_slave_0: entered allmulticast mode [ 365.637033][T13167] bridge_slave_0: entered promiscuous mode [ 365.651037][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.658233][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.667066][T13167] bridge_slave_1: entered allmulticast mode [ 365.675495][T13167] bridge_slave_1: entered promiscuous mode [ 365.732521][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.746220][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.806649][T13167] team0: Port device team_slave_0 added [ 365.817714][T13167] team0: Port device team_slave_1 added [ 365.849842][ T5837] Bluetooth: hci6: command tx timeout [ 365.871299][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.878296][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.906479][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.920801][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.927882][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.964667][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.036131][T13167] hsr_slave_0: entered promiscuous mode [ 366.043734][T13167] hsr_slave_1: entered promiscuous mode [ 366.050793][T13167] debugfs: 'hsr0' already exists in 'hsr' [ 366.056559][T13167] Cannot create hsr debugfs directory [ 367.209931][ T5829] Bluetooth: hci7: command tx timeout [ 367.215407][ T5829] Bluetooth: hci8: command tx timeout [ 367.529169][ T5829] Bluetooth: hci9: command tx timeout [ 369.289279][ T5829] Bluetooth: hci8: command tx timeout [ 369.609735][ T5829] Bluetooth: hci9: command tx timeout [ 371.369266][ T5829] Bluetooth: hci8: command tx timeout [ 371.689404][ T5829] Bluetooth: hci9: command tx timeout [ 378.657117][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.664415][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.500466][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 415.531697][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 415.551992][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 415.610937][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 415.651587][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 415.783330][T13185] wg1 speed is unknown, defaulting to 1000 [ 415.791229][T13185] lo speed is unknown, defaulting to 1000 [ 416.227135][T13185] chnl_net:caif_netlink_parms(): no params data found [ 416.372646][T13185] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.380912][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.388494][T13185] bridge_slave_0: entered allmulticast mode [ 416.418075][T13185] bridge_slave_0: entered promiscuous mode [ 416.427360][T13185] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.435551][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.444668][T13185] bridge_slave_1: entered allmulticast mode [ 416.453290][T13185] bridge_slave_1: entered promiscuous mode [ 416.503222][T13185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.521072][T13185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.572876][T13185] team0: Port device team_slave_0 added [ 416.583210][T13185] team0: Port device team_slave_1 added [ 416.632571][T13185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.639727][T13185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.668000][T13185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.681460][T13185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.688468][T13185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.717063][T13185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.806988][T13185] hsr_slave_0: entered promiscuous mode [ 416.815653][T13185] hsr_slave_1: entered promiscuous mode [ 416.824417][T13185] debugfs: 'hsr0' already exists in 'hsr' [ 416.831316][T13185] Cannot create hsr debugfs directory [ 417.769558][ T5837] Bluetooth: hci10: command tx timeout [ 418.552677][ T5829] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 418.573307][ T5829] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 418.599636][ T5829] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 418.640122][ T5829] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 418.679595][ T5829] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 418.784329][T13194] wg1 speed is unknown, defaulting to 1000 [ 418.793393][T13194] lo speed is unknown, defaulting to 1000 [ 419.255132][T13194] chnl_net:caif_netlink_parms(): no params data found [ 419.440249][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.448061][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.460273][T13194] bridge_slave_0: entered allmulticast mode [ 419.468524][T13194] bridge_slave_0: entered promiscuous mode [ 419.479793][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.487038][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.505670][T13194] bridge_slave_1: entered allmulticast mode [ 419.521150][T13194] bridge_slave_1: entered promiscuous mode [ 419.634781][T13194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.664789][T13194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.768761][T13194] team0: Port device team_slave_0 added [ 419.796285][T13194] team0: Port device team_slave_1 added [ 419.837474][T13194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.849793][ T5829] Bluetooth: hci10: command tx timeout [ 419.876010][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.903200][T13194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.916530][T13194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.924055][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.955883][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 419.965550][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 419.974439][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 419.983332][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 419.991453][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 420.023235][T13194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.110869][T13203] wg1 speed is unknown, defaulting to 1000 [ 420.118638][T13203] lo speed is unknown, defaulting to 1000 [ 420.162282][T13194] hsr_slave_0: entered promiscuous mode [ 420.192510][T13194] hsr_slave_1: entered promiscuous mode [ 420.201478][T13194] debugfs: 'hsr0' already exists in 'hsr' [ 420.207264][T13194] Cannot create hsr debugfs directory [ 420.812675][ T5837] Bluetooth: hci11: command tx timeout [ 420.997799][T13203] chnl_net:caif_netlink_parms(): no params data found [ 421.283844][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.295064][T13203] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.302981][T13203] bridge_slave_0: entered allmulticast mode [ 421.311818][T13203] bridge_slave_0: entered promiscuous mode [ 421.322495][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.329954][T13203] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.337508][T13203] bridge_slave_1: entered allmulticast mode [ 421.346590][T13203] bridge_slave_1: entered promiscuous mode [ 421.403993][T13203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.418164][T13203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.465055][T13203] team0: Port device team_slave_0 added [ 421.475518][T13203] team0: Port device team_slave_1 added [ 421.522261][T13203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.537854][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.565446][T13203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.581044][T13203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.588033][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.620778][T13203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.694283][T13203] hsr_slave_0: entered promiscuous mode [ 421.702932][T13203] hsr_slave_1: entered promiscuous mode [ 421.710167][T13203] debugfs: 'hsr0' already exists in 'hsr' [ 421.715945][T13203] Cannot create hsr debugfs directory [ 421.930250][ T5837] Bluetooth: hci10: command tx timeout [ 422.090384][ T5837] Bluetooth: hci12: command tx timeout [ 422.889956][ T5837] Bluetooth: hci11: command tx timeout [ 423.756064][ T5829] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 423.773308][ T5829] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 423.804846][ T5829] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 423.873703][ T5144] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 423.901237][ T5144] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 423.903102][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 423.927517][ T5837] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 423.937458][ T5837] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 423.958073][ T5837] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 423.966195][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 424.010025][ T5837] Bluetooth: hci10: command tx timeout [ 424.057403][T13215] wg1 speed is unknown, defaulting to 1000 [ 424.080333][T13213] wg1 speed is unknown, defaulting to 1000 [ 424.087755][T13215] lo speed is unknown, defaulting to 1000 [ 424.169894][ T5837] Bluetooth: hci12: command tx timeout [ 424.357088][T13213] lo speed is unknown, defaulting to 1000 [ 424.722909][T13215] chnl_net:caif_netlink_parms(): no params data found [ 424.969928][ T5837] Bluetooth: hci11: command tx timeout [ 425.170757][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.177944][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.186811][T13215] bridge_slave_0: entered allmulticast mode [ 425.195424][T13215] bridge_slave_0: entered promiscuous mode [ 425.217795][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.225248][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.239850][T13215] bridge_slave_1: entered allmulticast mode [ 425.251961][T13215] bridge_slave_1: entered promiscuous mode [ 425.338497][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.385996][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.491497][T13215] team0: Port device team_slave_0 added [ 425.501196][T13215] team0: Port device team_slave_1 added [ 425.570547][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.588424][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.621386][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.634941][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.642919][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.669981][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.736966][T13213] chnl_net:caif_netlink_parms(): no params data found [ 425.857383][T13215] hsr_slave_0: entered promiscuous mode [ 425.865191][T13215] hsr_slave_1: entered promiscuous mode [ 425.872720][T13215] debugfs: 'hsr0' already exists in 'hsr' [ 425.878521][T13215] Cannot create hsr debugfs directory [ 426.012222][ T5837] Bluetooth: hci14: command tx timeout [ 426.018520][ T5837] Bluetooth: hci13: command tx timeout [ 426.048796][T13213] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.057814][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.069527][T13213] bridge_slave_0: entered allmulticast mode [ 426.077749][T13213] bridge_slave_0: entered promiscuous mode [ 426.109594][T13213] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.116859][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.125960][T13213] bridge_slave_1: entered allmulticast mode [ 426.134712][T13213] bridge_slave_1: entered promiscuous mode [ 426.217544][T13213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.237813][T13213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.249492][ T5837] Bluetooth: hci12: command tx timeout [ 426.362005][T13213] team0: Port device team_slave_0 added [ 426.372890][T13213] team0: Port device team_slave_1 added [ 426.657724][T13213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.666236][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.693983][T13213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.717956][T13213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.728460][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.760535][T13213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.977140][T13213] hsr_slave_0: entered promiscuous mode [ 426.984492][T13213] hsr_slave_1: entered promiscuous mode [ 426.993138][T13213] debugfs: 'hsr0' already exists in 'hsr' [ 426.999546][T13213] Cannot create hsr debugfs directory [ 427.050456][ T5837] Bluetooth: hci11: command tx timeout [ 427.143593][ T5194] udevd[5194]: worker [10345] /devices/virtual/block/nbd0 timeout; kill it [ 427.166910][ T5194] udevd[5194]: seq 14778 '/devices/virtual/block/nbd0' killed [ 428.089337][ T5837] Bluetooth: hci13: command tx timeout [ 428.094986][ T5837] Bluetooth: hci14: command tx timeout [ 428.329525][ T5837] Bluetooth: hci12: command tx timeout [ 430.170176][ T5829] Bluetooth: hci13: command tx timeout [ 430.175904][ T5837] Bluetooth: hci14: command tx timeout [ 432.249186][ T5829] Bluetooth: hci13: command tx timeout [ 432.254767][ T5837] Bluetooth: hci14: command tx timeout [ 440.096406][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102870][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.492270][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 476.523566][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 476.538222][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 476.557319][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 476.573179][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 476.662280][T13233] wg1 speed is unknown, defaulting to 1000 [ 476.671248][T13233] lo speed is unknown, defaulting to 1000 [ 477.154498][T13233] chnl_net:caif_netlink_parms(): no params data found [ 477.305064][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.313064][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.321083][T13233] bridge_slave_0: entered allmulticast mode [ 477.329670][T13233] bridge_slave_0: entered promiscuous mode [ 477.340621][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.348057][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.360449][T13233] bridge_slave_1: entered allmulticast mode [ 477.379137][T13233] bridge_slave_1: entered promiscuous mode [ 477.438690][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.455909][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.510430][T13233] team0: Port device team_slave_0 added [ 477.520935][T13233] team0: Port device team_slave_1 added [ 477.561711][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.569436][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.598149][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.615003][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.626421][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.653891][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.736365][T13233] hsr_slave_0: entered promiscuous mode [ 477.744320][T13233] hsr_slave_1: entered promiscuous mode [ 477.751656][T13233] debugfs: 'hsr0' already exists in 'hsr' [ 477.757523][T13233] Cannot create hsr debugfs directory [ 478.009667][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 478.649238][ T5829] Bluetooth: hci15: command tx timeout [ 479.570866][ T5840] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 479.607313][ T5840] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 479.622687][ T5840] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 479.670732][ T5840] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 479.732748][ T5840] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 479.868739][T13242] wg1 speed is unknown, defaulting to 1000 [ 479.877814][T13242] lo speed is unknown, defaulting to 1000 [ 480.373400][T13242] chnl_net:caif_netlink_parms(): no params data found [ 480.639298][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.650191][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.657840][T13242] bridge_slave_0: entered allmulticast mode [ 480.691018][T13242] bridge_slave_0: entered promiscuous mode [ 480.703222][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.717482][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.726033][T13242] bridge_slave_1: entered allmulticast mode [ 480.734853][ T5840] Bluetooth: hci15: command tx timeout [ 480.745115][T13242] bridge_slave_1: entered promiscuous mode [ 480.800650][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.820022][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.866469][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 480.877492][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 480.886249][ T5829] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 480.895716][ T5829] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 480.905797][ T5829] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 480.925082][T13242] team0: Port device team_slave_0 added [ 480.935943][T13242] team0: Port device team_slave_1 added [ 480.976308][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.006944][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.044189][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.075360][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.082922][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.109967][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.186623][T13242] hsr_slave_0: entered promiscuous mode [ 481.194605][T13242] hsr_slave_1: entered promiscuous mode [ 481.202331][T13242] debugfs: 'hsr0' already exists in 'hsr' [ 481.208109][T13242] Cannot create hsr debugfs directory [ 481.357646][T13251] wg1 speed is unknown, defaulting to 1000 [ 481.389605][T13251] lo speed is unknown, defaulting to 1000 [ 481.850531][ T5144] Bluetooth: hci16: command tx timeout [ 482.212982][T13251] chnl_net:caif_netlink_parms(): no params data found [ 482.367768][T13251] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.379981][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.387402][T13251] bridge_slave_0: entered allmulticast mode [ 482.396513][T13251] bridge_slave_0: entered promiscuous mode [ 482.408390][T13251] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.416434][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.424177][T13251] bridge_slave_1: entered allmulticast mode [ 482.437900][T13251] bridge_slave_1: entered promiscuous mode [ 482.495929][T13251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.510787][T13251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.561233][T13251] team0: Port device team_slave_0 added [ 482.586524][T13251] team0: Port device team_slave_1 added [ 482.631475][T13251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.638502][T13251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.669103][T13251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.689700][T13251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.696701][T13251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.727361][T13251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.795740][T13251] hsr_slave_0: entered promiscuous mode [ 482.803022][T13251] hsr_slave_1: entered promiscuous mode [ 482.809744][ T5144] Bluetooth: hci15: command tx timeout [ 482.824125][T13251] debugfs: 'hsr0' already exists in 'hsr' [ 482.833576][T13251] Cannot create hsr debugfs directory [ 483.053361][ T5144] Bluetooth: hci17: command tx timeout [ 483.141137][ T5837] Bluetooth: hci7: command 0x0406 tx timeout [ 483.147442][ T5144] Bluetooth: hci6: command 0x0406 tx timeout [ 483.930639][ T5840] Bluetooth: hci16: command tx timeout [ 484.817149][ T5829] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 484.855200][ T5144] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 484.873270][ T5144] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 484.881773][ T5837] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 484.893443][ T5837] Bluetooth: hci15: command tx timeout [ 484.901310][ T5837] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 484.910972][ T5837] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 484.923901][ T5837] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 484.933415][ T5837] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 484.943866][ T5829] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 484.954315][ T5829] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 485.017814][T13261] wg1 speed is unknown, defaulting to 1000 [ 485.026494][T13261] lo speed is unknown, defaulting to 1000 [ 485.129201][T13265] Bluetooth: hci17: command tx timeout [ 485.635618][T13261] chnl_net:caif_netlink_parms(): no params data found [ 485.805112][T13261] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.813901][T13261] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.822025][T13261] bridge_slave_0: entered allmulticast mode [ 485.832323][T13261] bridge_slave_0: entered promiscuous mode [ 485.842314][T13261] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.852405][T13261] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.861339][T13261] bridge_slave_1: entered allmulticast mode [ 485.880379][T13261] bridge_slave_1: entered promiscuous mode [ 485.898041][T13263] wg1 speed is unknown, defaulting to 1000 [ 485.925847][T13263] lo speed is unknown, defaulting to 1000 [ 485.985063][T13261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.010940][T13265] Bluetooth: hci16: command tx timeout [ 486.023351][T13261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.133192][T13261] team0: Port device team_slave_0 added [ 486.144007][T13261] team0: Port device team_slave_1 added [ 486.170550][ T30] INFO: task syz.2.1906:12972 blocked for more than 143 seconds. [ 486.178426][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.192263][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.219665][ T30] task:syz.2.1906 state:D stack:26240 pid:12972 tgid:12958 ppid:5833 task_flags:0x480140 flags:0x00080002 [ 486.359067][ T30] Call Trace: [ 486.362510][ T30] [ 486.385095][ T30] __schedule+0x15dd/0x52d0 [ 486.559070][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 486.564225][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.599851][ T30] ? __pfx___schedule+0x10/0x10 [ 486.604799][ T30] ? schedule+0x90/0x360 [ 486.614204][ T30] schedule+0x164/0x360 [ 486.618698][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 486.625866][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 486.632415][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 486.638558][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 486.659459][ T30] nbd_set_size+0x454/0x680 [ 486.664237][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 486.676706][ T30] ? nla_memcpy+0x5b/0xc0 [ 486.681822][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 486.687225][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 486.700705][ T30] ? rcu_is_watching+0x15/0xb0 [ 486.705557][ T30] ? trace_kmalloc+0x2a/0x110 [ 486.715022][ T30] ? __nla_parse+0x40/0x60 [ 486.720068][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 486.726551][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 486.741795][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.748056][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 486.753701][ T30] genl_rcv_msg+0x61c/0x7a0 [ 486.758285][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.764615][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 486.770910][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 486.775915][ T30] netlink_rcv_skb+0x232/0x4b0 [ 486.781318][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.786402][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.797804][ T30] ? down_read+0x272/0x2e0 [ 486.805382][ T30] ? genl_rcv+0xd/0x40 [ 486.815536][ T30] genl_rcv+0x28/0x40 [ 486.821514][ T30] netlink_unicast+0x80f/0x9b0 [ 486.826352][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 486.832201][ T30] ? netlink_sendmsg+0x650/0xb40 [ 486.837194][ T30] ? skb_put+0x11b/0x210 [ 486.842912][ T30] netlink_sendmsg+0x813/0xb40 [ 486.847771][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.854383][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.860183][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.865529][ T30] ____sys_sendmsg+0x972/0x9f0 [ 486.870826][ T30] ? futex_unqueue+0x211/0x240 [ 486.875656][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.882248][ T30] ? import_iovec+0x73/0xa0 [ 486.886891][ T30] ___sys_sendmsg+0x2a5/0x360 [ 486.893557][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.899389][ T30] ? futex_wait+0x29a/0x380 [ 486.904003][ T30] ? __fget_files+0x2a/0x420 [ 486.908726][ T30] ? __fget_files+0x3a0/0x420 [ 486.919476][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.924572][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.931595][ T30] ? rcu_is_watching+0x15/0xb0 [ 486.936438][ T30] do_syscall_64+0x14d/0xf80 [ 486.942347][ T30] ? trace_irq_disable+0x3b/0x150 [ 486.947438][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.954902][ T30] ? clear_bhb_loop+0x40/0x90 [ 486.960120][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.966166][ T30] RIP: 0033:0x7fe9d619c799 [ 486.973688][ T30] RSP: 002b:00007fe9d704e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.982702][ T30] RAX: ffffffffffffffda RBX: 00007fe9d6416270 RCX: 00007fe9d619c799 [ 486.991070][ T30] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000007 [ 487.000153][ T30] RBP: 00007fe9d6232c99 R08: 0000000000000000 R09: 0000000000000000 [ 487.008166][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.016815][ T30] R13: 00007fe9d6416308 R14: 00007fe9d6416270 R15: 00007ffcdbeda698 [ 487.028262][ T30] [ 487.032979][ T30] INFO: task syz.4.1913:13004 blocked for more than 144 seconds. [ 487.051085][ T5837] Bluetooth: hci19: command tx timeout [ 487.057244][ T5837] Bluetooth: hci18: command tx timeout [ 487.098997][ T30] Not tainted syzkaller #0 [ 487.104089][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.133110][ T30] task:syz.4.1913 state:D stack:23880 pid:13004 tgid:13003 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 487.145659][ T30] Call Trace: [ 487.150744][ T30] [ 487.153727][ T30] __schedule+0x15dd/0x52d0 [ 487.158407][ T30] ? __pfx___schedule+0x10/0x10 [ 487.164078][ T30] ? schedule+0x90/0x360 [ 487.168386][ T30] schedule+0x164/0x360 [ 487.173150][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.178667][ T30] __mutex_lock+0x7fe/0x1300 [ 487.184590][ T30] ? __mutex_lock+0x5ac/0x1300 [ 487.190699][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 487.195440][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.201088][ T30] ? radix_tree_lookup+0x240/0x290 [ 487.206614][ T30] genl_rcv_msg+0x10b/0x7a0 [ 487.213050][ T5837] Bluetooth: hci17: command tx timeout [ 487.219362][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.224620][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 487.230261][ T30] netlink_rcv_skb+0x232/0x4b0 [ 487.235094][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.243875][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.249822][ T30] ? down_read+0x272/0x2e0 [ 487.254475][ T30] ? genl_rcv+0xd/0x40 [ 487.258587][ T30] genl_rcv+0x28/0x40 [ 487.267907][ T30] netlink_unicast+0x80f/0x9b0 [ 487.274075][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 487.279824][ T30] ? netlink_sendmsg+0x650/0xb40 [ 487.284824][ T30] ? skb_put+0x11b/0x210 [ 487.296206][ T30] netlink_sendmsg+0x813/0xb40 [ 487.302337][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.307690][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.313203][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.318547][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.324397][ T30] __sys_sendto+0x672/0x710 [ 487.330020][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 487.335328][ T30] ? exc_page_fault+0x6a/0xc0 [ 487.344775][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 487.353381][ T30] __x64_sys_sendto+0xde/0x100 [ 487.358254][ T30] do_syscall_64+0x14d/0xf80 [ 487.364136][ T30] ? trace_irq_disable+0x3b/0x150 [ 487.373341][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.390072][ T30] ? clear_bhb_loop+0x40/0x90 [ 487.395075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.409826][ T30] RIP: 0033:0x7fdd7615cfce [ 487.414498][ T30] RSP: 002b:00007fdd770fde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.439154][ T30] RAX: ffffffffffffffda RBX: 00007fdd770ff6c0 RCX: 00007fdd7615cfce [ 487.447213][ T30] RDX: 0000000000000020 RSI: 00007fdd770fe000 RDI: 0000000000000005 [ 487.489003][ T30] RBP: 0000000000000000 R08: 00007fdd770fdf04 R09: 000000000000000c [ 487.509549][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 487.517595][ T30] R13: 00007fdd770fdf58 R14: 00007fdd770fe000 R15: 0000000000000000 [ 487.545697][ T30] [ 487.564726][ T30] INFO: task syz.3.1920:13049 blocked for more than 144 seconds. [ 487.580843][ T30] Not tainted syzkaller #0 [ 487.585904][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.629537][ T30] task:syz.3.1920 state:D stack:27144 pid:13049 tgid:13044 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 487.681621][ T30] Call Trace: [ 487.684948][ T30] [ 487.687910][ T30] __schedule+0x15dd/0x52d0 [ 487.720325][ T30] ? __pfx___schedule+0x10/0x10 [ 487.725323][ T30] ? schedule+0x90/0x360 [ 487.740540][ T30] schedule+0x164/0x360 [ 487.744745][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.772258][ T30] __mutex_lock+0x7fe/0x1300 [ 487.777032][ T30] ? __mutex_lock+0x5ac/0x1300 [ 487.831055][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 487.835881][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.882475][ T30] ? radix_tree_lookup+0x240/0x290 [ 487.887689][ T30] genl_rcv_msg+0x10b/0x7a0 [ 487.898603][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.923554][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 487.928551][ T30] netlink_rcv_skb+0x232/0x4b0 [ 487.972789][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.977884][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.001843][ T30] ? down_read+0x272/0x2e0 [ 488.006475][ T30] ? genl_rcv+0xd/0x40 [ 488.050208][ T30] genl_rcv+0x28/0x40 [ 488.054352][ T30] netlink_unicast+0x80f/0x9b0 [ 488.089544][ T5837] Bluetooth: hci16: command tx timeout [ 488.119693][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 488.125035][ T30] ? netlink_sendmsg+0x650/0xb40 [ 488.162823][ T30] ? skb_put+0x11b/0x210 [ 488.167229][ T30] netlink_sendmsg+0x813/0xb40 [ 488.192217][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.197562][ T30] ? __se_sys_ioctl+0x47/0x170 [ 488.242029][ T30] ? do_syscall_64+0x14d/0xf80 [ 488.246842][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.261783][ T5840] Bluetooth: hci9: command 0x0406 tx timeout [ 488.267905][ T5837] Bluetooth: hci8: command 0x0406 tx timeout [ 488.296460][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.371682][ T30] ____sys_sendmsg+0x972/0x9f0 [ 488.376530][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.402470][ T30] ? import_iovec+0x73/0xa0 [ 488.407033][ T30] ___sys_sendmsg+0x2a5/0x360 [ 488.425216][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.461954][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 488.467726][ T30] ? __fget_files+0x2a/0x420 [ 488.501969][ T30] ? __fget_files+0x3a0/0x420 [ 488.506744][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.531328][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.536834][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.560395][ T30] ? __pfx_kcov_ioctl+0x10/0x10 [ 488.565422][ T30] do_syscall_64+0x14d/0xf80 [ 488.581295][ T30] ? trace_irq_disable+0x3b/0x150 [ 488.586390][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.640704][ T30] ? clear_bhb_loop+0x40/0x90 [ 488.645529][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.663043][ T30] RIP: 0033:0x7fb536d9c799 [ 488.667504][ T30] RSP: 002b:00007fb537b76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.710000][ T30] RAX: ffffffffffffffda RBX: 00007fb537016090 RCX: 00007fb536d9c799 [ 488.718018][ T30] RDX: 0000000004004000 RSI: 0000200000000100 RDI: 000000000000000b [ 488.752230][ T30] RBP: 00007fb536e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 488.789770][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.797800][ T30] R13: 00007fb537016128 R14: 00007fb537016090 R15: 00007ffdf571bde8 [ 488.851706][ T30] [ 488.854904][ T30] [ 488.854904][ T30] Showing all locks held in the system: [ 488.882862][ T30] 1 lock held by khungtaskd/30: [ 488.887891][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 488.953488][ T30] 2 locks held by getty/5580: [ 488.958247][ T30] #0: ffff888036c2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 489.000701][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 489.041755][ T30] 5 locks held by kworker/u9:2/5829: [ 489.047069][ T30] #0: ffff888078c85948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 489.121264][ T30] #1: ffffc90003cd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 489.139904][ T5837] Bluetooth: hci19: command tx timeout [ 489.140014][T13265] Bluetooth: hci18: command tx timeout [ 489.181534][ T30] #2: ffff88802abf8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 489.229945][ T30] #3: ffff88802abf80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 489.260937][ T30] #4: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 489.289730][T13265] Bluetooth: hci17: command tx timeout [ 489.296857][ T30] 1 lock held by udevd/10345: [ 489.311458][ T30] #0: ffff888026a6c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 489.349732][ T30] 6 locks held by syz.2.1906/12972: [ 489.354993][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.392493][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.429696][ T30] #2: ffff888026a79278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 489.451731][ T30] #3: ffff888026999048 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 489.522830][ T30] #4: ffff8880269989e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 489.550077][ T30] #5: ffff888026998a20 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 489.591694][ T30] 2 locks held by syz.4.1913/13004: [ 489.596924][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.639558][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.648635][ T30] 2 locks held by syz.3.1920/13049: [ 489.654788][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.663572][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.673965][ T30] 2 locks held by syz.1.1928/13114: [ 489.679810][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.688096][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.699937][ T30] 2 locks held by syz.0.1929/13126: [ 489.705185][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.714859][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.728496][ T30] 2 locks held by syz-executor/13135: [ 489.734350][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.743643][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.753842][ T30] 2 locks held by syz-executor/13146: [ 489.760897][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.772584][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.782214][ T30] 2 locks held by syz-executor/13155: [ 489.788070][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.796944][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.807270][ T30] 2 locks held by syz-executor/13164: [ 489.819067][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.827603][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.842295][ T30] 2 locks held by syz-executor/13167: [ 489.847727][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.875297][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.884806][ T30] 2 locks held by syz-executor/13185: [ 489.891289][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.900040][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.909738][ T30] 2 locks held by syz-executor/13194: [ 489.915180][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.924712][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.937765][ T30] 2 locks held by syz-executor/13203: [ 489.943932][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.957583][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.967148][ T30] 2 locks held by syz-executor/13213: [ 489.973053][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.982491][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.992283][ T30] 2 locks held by syz-executor/13215: [ 489.997813][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 490.006668][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 490.020563][ T30] 2 locks held by syz-executor/13233: [ 490.026006][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 490.034782][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 490.045010][ T30] 2 locks held by syz-executor/13242: [ 490.051551][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 490.067474][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 490.077632][ T30] 2 locks held by syz-executor/13251: [ 490.083405][ T30] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 490.093311][ T30] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 490.103591][ T30] 5 locks held by syz-executor/13261: [ 490.109497][ T30] #0: ffff88802635cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 490.119958][ T30] #1: ffff88802635c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 490.131004][ T30] #2: ffffffff8fd59f68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 490.141624][ T30] #3: ffff88808597aaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 490.151505][ T30] #4: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 490.164514][ T30] 1 lock held by syz-executor/13263: [ 490.174805][ T30] #0: ffffffff8fbbe830 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 490.184888][ T30] [ 490.187260][ T30] ============================================= [ 490.187260][ T30] [ 490.197719][ T30] NMI backtrace for cpu 0 [ 490.197743][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.197767][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.197780][ T30] Call Trace: [ 490.197788][ T30] [ 490.197797][ T30] dump_stack_lvl+0xe8/0x150 [ 490.197832][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 490.197861][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.197892][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 490.197923][ T30] sys_info+0x135/0x170 [ 490.197946][ T30] watchdog+0xfd9/0x1030 [ 490.197985][ T30] ? watchdog+0x21a/0x1030 [ 490.198025][ T30] kthread+0x388/0x470 [ 490.198046][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.198076][ T30] ? __pfx_kthread+0x10/0x10 [ 490.198098][ T30] ret_from_fork+0x51e/0xb90 [ 490.198128][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 490.198155][ T30] ? __switch_to+0xc7d/0x1450 [ 490.198183][ T30] ? __pfx_kthread+0x10/0x10 [ 490.198204][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.198252][ T30] [ 490.198260][ T30] Sending NMI from CPU 0 to CPUs 1: [ 490.313014][ C1] NMI backtrace for cpu 1 [ 490.313034][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 490.313055][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.313067][ C1] RIP: 0010:mark_lock+0x95/0x190 [ 490.313097][ C1] Code: 83 3d 52 f3 6f 0e 00 75 13 48 8d 3d d5 18 73 0e 48 c7 c6 29 23 01 8e 67 48 0f b9 3a 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 <85> 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 490.313114][ C1] RSP: 0018:ffffc900001d77a8 EFLAGS: 00000006 [ 490.313131][ C1] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff93ca5bb0 [ 490.313143][ C1] RDX: 0000000000000004 RSI: ffff88801dec8b58 RDI: ffff88801dec8000 [ 490.313155][ C1] RBP: 0000000000000010 R08: ffffffff89801042 R09: ffff8880b873ca10 [ 490.313167][ C1] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffffffffffffff03 [ 490.313181][ C1] R13: ffff88801dec8b58 R14: ffff88801dec8000 R15: ffff88801dec8b58 [ 490.313194][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 490.313209][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.313220][ C1] CR2: 00007fd209545000 CR3: 000000007ed40000 CR4: 00000000003526f0 [ 490.313237][ C1] Call Trace: [ 490.313244][ C1] [ 490.313255][ C1] __lock_acquire+0x689/0x2cf0 [ 490.313285][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 490.313305][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.313336][ C1] lock_acquire+0xf0/0x2e0 [ 490.313358][ C1] ? process_backlog+0x1012/0x1950 [ 490.313383][ C1] ? process_backlog+0x3eb/0x1950 [ 490.313407][ C1] ? rcu_is_watching+0x15/0xb0 [ 490.313433][ C1] ? process_backlog+0x3eb/0x1950 [ 490.313457][ C1] _raw_spin_lock_irq+0x3d/0x50 [ 490.313481][ C1] ? process_backlog+0x1012/0x1950 [ 490.313512][ C1] process_backlog+0x1012/0x1950 [ 490.313547][ C1] __napi_poll+0xae/0x340 [ 490.313568][ C1] ? skb_defer_free_flush+0x233/0x260 [ 490.313592][ C1] net_rx_action+0x627/0xf70 [ 490.313616][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 490.313649][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 490.313681][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 490.313710][ C1] handle_softirqs+0x22a/0x870 [ 490.313735][ C1] ? run_ksoftirqd+0x36/0x60 [ 490.313763][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 490.313788][ C1] run_ksoftirqd+0x36/0x60 [ 490.313811][ C1] smpboot_thread_fn+0x541/0xa50 [ 490.313837][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 490.313866][ C1] kthread+0x388/0x470 [ 490.313882][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 490.313907][ C1] ? __pfx_kthread+0x10/0x10 [ 490.313923][ C1] ret_from_fork+0x51e/0xb90 [ 490.313948][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 490.313969][ C1] ? __switch_to+0xc7d/0x1450 [ 490.313991][ C1] ? __pfx_kthread+0x10/0x10 [ 490.314008][ C1] ret_from_fork_asm+0x1a/0x30 [ 490.314042][ C1] [ 490.633661][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 490.640589][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.649740][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.659865][ T30] Call Trace: [ 490.663183][ T30] [ 490.666168][ T30] vpanic+0x56c/0xa60 [ 490.670222][ T30] ? __pfx___schedule+0x10/0x10 [ 490.675116][ T30] ? __pfx_vpanic+0x10/0x10 [ 490.679659][ T30] ? __pfx_console_unlock+0x10/0x10 [ 490.684911][ T30] panic+0xc5/0xd0 [ 490.688671][ T30] ? __pfx_panic+0x10/0x10 [ 490.693131][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 490.698556][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 490.704757][ T30] watchdog+0x1023/0x1030 [ 490.709144][ T30] ? watchdog+0x21a/0x1030 [ 490.713616][ T30] kthread+0x388/0x470 [ 490.717722][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.722443][ T30] ? __pfx_kthread+0x10/0x10 [ 490.727244][ T30] ret_from_fork+0x51e/0xb90 [ 490.731877][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 490.737024][ T30] ? __switch_to+0xc7d/0x1450 [ 490.741776][ T30] ? __pfx_kthread+0x10/0x10 [ 490.746400][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.751222][ T30] [ 490.754499][ T30] Kernel Offset: disabled [ 490.758870][ T30] Rebooting in 86400 seconds..