last executing test programs: 5.938324007s ago: executing program 3 (id=4534): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000883}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r4) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 5.877007068s ago: executing program 2 (id=4535): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) write$cgroup_devices(r3, 0x0, 0x6) (async) write(r1, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r7 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) (async) write$cgroup_pressure(r7, &(0x7f0000000140)={'full', 0x20, 0x80000000000000, 0x20, 0x2}, 0x2f) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtaction={0x68, 0x1c, 0x1, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_xt={0x50, 0xf, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x68}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x400c890) (rerun: 32) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc821000000000000008000000b707707d37ae997c172831c53d49a83973f4eed51d0ec87bd766051ccc000000000000000000000900000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.577651874s ago: executing program 0 (id=4538): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00f}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x69020e194971bf17}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa8, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x12}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write(r3, &(0x7f0000000000)="cda74562326d2d7c96", 0x9) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=' \x00\x00\x00', 0x4}], 0x1}}], 0x1, 0x4000090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x47c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ff9d, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_VF_PORTS={0x290, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "55c199f0cd3e55573f1f728f3b4e9ec3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "40d08fbe265775b3126867aed1112eee"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '[@-\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "49fbd99be7f8f9fb971ba22ab86809fe"}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "251f7185437f11f164278d3609d8d743"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "df69e903080fb83a20735b2d9a12edcc"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bfa1b97120e51e067792772397c6ee89"}, @IFLA_PORT_PROFILE={0xa, 0x2, ')![&-\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8c332d6c6195e132fc9f83bfdb4d9d64"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x7fff}, @IFLA_PORT_PROFILE={0x9, 0x2, 'xfrm\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b0041ef05f8230c8e0d37e2037b6008c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9ea9dc40228dcc33a0e997888ba1eb7f"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bf83393b57a43b1e41eb92d67e27b63c"}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "047d3616ae4bbed7a7e3f8fa93ebfdf6"}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5ac0aa3ee8983a0ae26868a7c6a23c11"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "03245a708859a54107812af879f3b13a"}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa6}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6321119796f99eb34b5a576556dc9aab"}, @IFLA_PORT_PROFILE={0x9, 0x2, ':\'.#\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x100}, @IFLA_PORT_PROFILE={0x8, 0x2, '{][\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "32742d00001000"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'xfrm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '%+\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d45597d101439da9a5e9995c9ab790b9"}, @IFLA_PORT_VF={0x8, 0x1, 0xf635}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x9, 0x2, 'xfrm\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "94991448b6199b52db29672cc5315250"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'xfrm\x00'}]}]}, @IFLA_VF_PORTS={0x194, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa0}, @IFLA_PORT_PROFILE={0x9, 0x2, 'xfrm\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "02a533c8d36d0f837154afd85166b373"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xa5e7}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0d4e02bfbd261df6f54713fcca6771f6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "16692e14a9b83fefcb043bf415df3c79"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8361f171928a8e4dab77604353047758"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'xfrm\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "318b85dc5d691cc5345e75d6443e4fd5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0xe, 0x2, '&\x1f%!(&*[@\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c61af0da983ac3b260aa60a33bce5b0a"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9f6a4cf96b0f7f091f19c1cd9b0759e4"}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "22e2a10a13df5a26c81379d38d5a8dd6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e08e86bcdcfe903e12587942d93c1154"}, @IFLA_PORT_VF={0x8, 0x1, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "64452f79958462e493a5e4ccac275bfc"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0xff}]}, 0x47c}}, 0xc080) 5.35355525s ago: executing program 2 (id=4539): r0 = socket$inet(0x2, 0x2, 0xa08) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000003c0), &(0x7f0000002000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.150886064s ago: executing program 3 (id=4540): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x40040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept(r1, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x10c, 0x18, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x10c}}, 0x0) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x400) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) (async) unshare(0x20040600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a700000008"], &(0x7f0000000100)='GPL\x00', 0xf}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) r8 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) (async) poll(&(0x7f00000000c0)=[{r7, 0x8088}], 0x1, 0x3) (async) close(r6) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) 5.10706918s ago: executing program 0 (id=4541): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x18}, 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x98, 0x1000000, 0x0, 0x0, 0x400000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x28}}], 0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/246}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x164, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e1f, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x7ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4f68a7840225c11b53b204d1fa78b6ce102aaf86921c33696088632dbd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40016}, 0x2404c884) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000680)={'lo\x00', &(0x7f0000000580)=@ethtool_eeprom={0x48, 0x1, 0xb0bc}}) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018000e0000001080002"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) 4.937499756s ago: executing program 2 (id=4542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0xfffffffffffffffc, 0x0) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000080)=[{0x1, 0x3, {0x0, 0xff, 0x2}, {0x1, 0xff, 0x3}, 0xfd, 0x3}, {0x3, 0x3, {0x0, 0xff}, {0x1, 0xff, 0x4}, 0x0, 0xfd}, {0x1, 0x0, {0x2, 0xf0, 0x1}, {0x2, 0x1, 0x2}, 0x1, 0xfe}, {0x1, 0x3, {0x1, 0xfe, 0x4}, {0x3, 0x1, 0x4}, 0x0, 0x1}], 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200", @ANYRESHEX=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) 4.470611835s ago: executing program 2 (id=4543): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r2, r1, 0x2f}, 0x20) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x92d, 0x0}, 0x8) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f00000004c0), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000580)) pipe(&(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800fffffcffffff00000054bcce6e671ca78c0d", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.347735031s ago: executing program 4 (id=4544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x1000}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000700)={{r5, &(0x7f0000000300)='GPL\x00', 0x214001, &(0x7f00000003c0)={@_ha_fsid={[0xb, 0x26f9]}, {0x7, 0xe9, 0x6, 0xf83}}, 0x6, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x9}, {[0x86b179af, 0x81, 0x1, 0x101]}, 0x5, 0xce, &(0x7f0000000600)=""/206}) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180", @ANYBLOB="7dd68fbd"], 0xa4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.669431418s ago: executing program 3 (id=4545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000400)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x80000000000003, 0x2, 0x0, 0xffffffffffffffff, 0x93], 0x7, &(0x7f00000001c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) ppoll(&(0x7f0000001480)=[{r0, 0x9b}], 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0xf, 0x2, 0x9, &(0x7f00000000c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 3.580624839s ago: executing program 0 (id=4546): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000083) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x20044090}, 0x20048804) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00000429bd7000fedbdf2507000007fe01fd0b0008000008000300", @ANYRES32=r0, @ANYBLOB="0c0016800600060000100000"], 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket(0x25, 0x3, 0x3) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xcc, &(0x7f0000000740)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write(r8, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r8, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="5753fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900317400004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) 3.500375968s ago: executing program 1 (id=4547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) writev(r6, &(0x7f0000003500)=[{0x0}, {&(0x7f0000000080)='C', 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000140)=r3) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="691402000000cda9000000dc4295a4560bdc2d6ab513ac87a30d2e0e97e444f9f04316929c27c3296882c3cd88d01577c3ce1961e3b094d2383dde3bbb5b1b36cdf60371b382310631a951ce805185ed5f447fd83ba7090000000000000000", @ANYRES16=r9, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e30000000000000000000000008000900060000000800080000000000"], 0x3c}}, 0x0) close(r0) 2.076814014s ago: executing program 4 (id=4548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0xf8ff}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2.076399794s ago: executing program 1 (id=4549): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfffff000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000002940), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000001ac0)='GPL\x00', 0x4, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x0) 2.058451138s ago: executing program 2 (id=4550): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000002400)={{0xffffffffffffffff, &(0x7f00000003c0)='GPL\x00', 0x100, &(0x7f0000000400)={@_ha_fsid={[0xc6, 0x7f]}, {0x1, 0x5, 0x0, 0x8}}, 0x6fda, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x9}, {[0xdb1, 0x8, 0x10001, 0x7fffffff]}, 0x27, 0x1000, &(0x7f0000001400)=""/4096}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000280)=ANY=[], 0x33) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x20000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) getgid() syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000004100), 0x0, 0x0) shutdown(r7, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="00b0b3"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000027c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002780)={&(0x7f0000002500)={0x22c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff192}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4cc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.938378531s ago: executing program 3 (id=4551): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x40, @loopback={0xfec0ffffffffffff}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r12 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in=@multicast2, 0x4e23, 0x800, 0x4e21, 0x8001, 0x2, 0x20, 0x80, 0x6, r11, r12}, {0x0, 0x7, 0x81, 0x8, 0x8, 0xffffffffffffffff, 0x7000000000, 0x800}, {0x3, 0x6, 0x7, 0x2}, 0xffffffff, 0x6e6bbe, 0x2, 0x0, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x33}, 0xa, @in=@local, 0x0, 0x5, 0x2, 0xff, 0x40, 0x401, 0x5}}, 0xe8) 1.785330995s ago: executing program 4 (id=4552): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x4, 0xf0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x80, 0xfffffff9, 0x4, 0xde, 0x316a}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/134, &(0x7f0000000140)=0x86) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000180)) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x25, 0x1, 0xf3, 0x398, 0xe, @loopback, @mcast2, 0x10, 0x40, 0x6b, 0x80000001}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1c, 0x80000000, 0x0, 0x8000, 0x8100, r0, 0x20000000, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @value=r0}, 0x50) (async, rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r3) (rerun: 64) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r5, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'syztnl1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000540)="47e02aee6d923e3707dbd01654dded22b02738de7bee33efe2ddf1435bb4a36409ca6f", &(0x7f0000000580)=@tcp6=r0}, 0x20) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newtclass={0x50, 0x28, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfffa, 0xa}, {0xffff, 0x6}, {0xfff1, 0xffff}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x41) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r6, 0x504, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) (async, rerun: 32) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000008c0), 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0x56, 0xfb, &(0x7f0000000900)="138b8b82d86c61c87f0825448bb1f6ee1b2081216a0e4001cde447af4320b6ae698c38a04c3060c1463a683745664e22e64b7921ea2d7bad8634ec197a9b181c52c193912a413742bd08ab29b3e3cecbf57fa8a3a550", &(0x7f0000000980)=""/251, 0x1, 0x0, 0x9b, 0xc4, &(0x7f0000000a80)="8f581ad96038bf424850bf3237bcf950f3757a6964f506da51858be070e6aca8ea5b214059685a5aec50076e6e350a88941746885628633b7761c29621f3d4af28f669722f610444e2f5f895ebac50a226b80b782979a2e1e42aa2537a8bfdf287f09e656013bbb0cd17323c935ac761d4eeff4bb805e1d8563a2143747dcbda0c3f408faaf251c6b654da86bf89093572746d165e217aa06ea817", &(0x7f0000000b40)="5316acf2c1d948372f6c5936503ad9a1f2b144399bcb70119572098bb1edd6d5dc401dbafc47c82356f29354557219bf125a51793cbfd8e9a3bcad39ddbe641b770d54d70ee624c57e07e9ec86034f21a408707640fbf7b70f50898731b04370fd3bdc54eb977474590e82117348db308254760ca328d5225ef01d7de93e9f75102c037d2a4d234d58e3fdf8155265f79617459da956527c46f96b9c9e0e4484ac4d5df2281f9e18e46ad2e4918e54081c2cbd2e9d415329ed6256e7f6ab07f39c2730fb", 0x1, 0x0, 0xc}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="38c95301af5ab54b81b4c564c411d579f8dae1b2e9742e4c2e72d55c21c2a37441675af2525161471e794178bea1b9057c0a77047ea42758", 0x38}], 0x1, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x49}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r4}}}], 0xa0}, 0x20000) (async) write$nbd(r0, &(0x7f0000000e80)={0x67446698, 0x1, 0x2, 0x2, 0x3, "98f6777d9e157b9ffbdf17ea1290ed7d14e9d8d92fd4978abf040116c551f1124fa2cc0695cd6f746ee009a73069ddbda3ab84d807fd79136b36b3161a2e6801448f9caa6495375cbffa29be4f3602e8c2b87b912ced8469186d57d22366156f8df4507e51a92913952dad434ae75798c0fe70624c1113edb911422708c0097264c92d4ce0836bf5324572c0ccbc04bc9340f51a6fd8183954f56fae2235cce9215b9bc0f8cdb54bc509675187a93daa85f353917c93af32b90e5e2792cb9d1048cb48b3eba9e8eb4a3dc1839cddc4411ec5adeeaee426e1cf27f049d7559b7626bcf22ec66a29fdcc891a0a9c"}, 0xfd) (async, rerun: 32) write$tun(r0, &(0x7f0000000f80)={@void, @val={0x0, 0x80, 0x9, 0x959, 0x2, 0x7}, @mpls={[{0xf8001}], @generic="488b33c608c2ee4e2bf7b89d0942c983f1f17def0b995f121ab72801dc20d80489b39c54b9a4782d470dc7f887e29040bdf33f10b42e99ff075624e87f69cb62840af5e167eac2bcebe6789ef0c20e7d68113fd29eef74c47d2c0da3a03a014f0ff838d30fb3a59a94c55e8f3668159865b539dc08d7d2db032c88377e97994020ab678e883a2d225924eec2a8276b9746bd2db54bbb13247ecd35446507de7fe8803384b38d41848a33a2a63efb493269b603fc5b7f7d469bcf25f32d884e3a4c0d93bbf9142223e76907de3057dc2afbcd4fca7b4d7853cb69"}}, 0xe8) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001080)="cf4f3204b0e4df2fa8155e7f9e08322162d827c26a751627a9b49e81489871d62a4b197f58313c810c3633f757f028412107aa896d0e43bdb8f076bbb134589d784cf3c964185a12047c2f0e68cafaa63c6fa5c5acdd7426de6f58a805cffe324282d7e185f9800928cf649acf47d27a396589f17c460d6530ee860f42a8b05c931f4856340b1db4a537022512663b11f735373f29f3c6932810c2230570dff0998b56945976bce7b00797f3cfcda4f7c72272d77698ecbbbd98458a08140de47b1194e01a465753c0efc10f88f38d26f10bb2d7132612332d8fa52a83c0011713be3bb63ffe0b66dd44aafa", 0xec}, {&(0x7f0000001180)="e3367dbfa862d4947c1ce5914c54f90726d36ca65de64fc5b9eae0631ba852fa53349b97e6f05accca79e6d7e21b7ccd7340278615714e9cf8f6d0a5e7589e33e8fde73d4846c25b394d95503d93fa8267bc9eda032fac883f64c26bbef98babd489a9b21038e8f25605965a3752821516a1293d2b296fb86ecdc33cf696668290b8c7e2f0b5ac85", 0x88}], 0x2) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c015}, 0x4000) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000001380)={{0x54, 0x43e6}, 0x100, './file0\x00'}) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001500), r3) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001540)=0x0) (rerun: 32) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f00000017c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1c4, r9, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_SDP={0x1a0, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'netem\x00'}, {0x5, 0x1, '*'}, {0xb, 0x1, 'mqprio\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, '\'+}\\]#+'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, 'mqprio\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0xc, 0x1, 'syztnl1\x00'}]}, {0x84, 0x0, 0x0, 0x1, [{0xe, 0x1, 'NLBL_MGMT\x00'}, {0xd, 0x1, 'mptcp_pm\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x13, 0x1, 'batadv_slave_1\x00'}, {0x13, 0x1, 'batadv_slave_1\x00'}, {0x4}, {0xa, 0x1, '-%\xf1,#@'}, {0x4}, {0x8, 0x1, '\\#({'}, {0xb, 0x1, 'mqprio\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, 'mqprio\x00'}]}, {0x74, 0x0, 0x0, 0x1, [{0xc, 0x1, 'syztnl1\x00'}, {0x5, 0x1, '%'}, {0x6, 0x1, 'Y^'}, {0xa, 0x1, 'netem\x00'}, {0xb, 0x1, 'mqprio\x00'}, {0x13, 0x1, 'batadv_slave_1\x00'}, {0x5, 0x1, '{'}, {0x5, 0x1, '('}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '%'}]}, {0x28, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, 'syztnl1\x00'}, {0x4}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x20008841) 1.76285994s ago: executing program 1 (id=4553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000001e5c00000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.533036931s ago: executing program 1 (id=4554): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101980, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101980, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r5, 0x29, 0x1f, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x2, 0x10000, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0xfffe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000002c0)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="64010000", @ANYRES16=r8, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="1400020073692e0eda63f549add2000000000000040001803c0001801400020076657468315f6d61637674617000000008000300010000001400020076657468305f746f5f627269646765e107000300020000000c00018008000300000000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002006d6163736563300000000000000000002000018014000200767863616e31000000000000000000000800030001000000540001801400020076657468305f746f5f7465616d0000000800030002000000080003009863e52b080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRES16=r6], 0x164}, 0x1, 0x0, 0x0, 0x2004c004}, 0x80804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) (async) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) close(0x3) r11 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r11, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) setsockopt$inet_tcp_buf(r11, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) connect$inet(r11, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) connect$inet(r11, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) unshare(0x20400) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 1.010964195s ago: executing program 0 (id=4555): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r8, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000040) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x10000, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 769.481137ms ago: executing program 4 (id=4556): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x810) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r3, 0xffffe000) listen(r0, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="b00000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc00000008001240000000000d000300686173683a6e6574000000000500050002000000050004"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 768.754385ms ago: executing program 3 (id=4557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0xc001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 765.880807ms ago: executing program 2 (id=4558): syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000400000004000000ffffff0f01000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000ddff00"/28], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffe0, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@getlink={0x20, 0x12, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x428c, 0x2010}}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x17}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8efc0000795e020026bd700061b0ffdbdf250700", @ANYRES32=0x0, @ANYBLOB="80000000004000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="0a00020000000000000000000400220008002900b4e40200"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r9, 0x80809440, &(0x7f0000000740)={&(0x7f00000002c0)=[{&(0x7f0000000240)="53dac87a6641968e2ecbf29b275931600ff044963d5afb3a066310b9b13ad8ee60a25b82b71c66a5447794cc61bc", 0x2e}], 0x1, 0x5, 0x0, 0x6, 0x4, 0x9, 0x7, 0x4}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) 649.649205ms ago: executing program 1 (id=4559): unshare(0x20400) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x20}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000640)={{}, "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"}) (async) write$cgroup_subtree(r6, &(0x7f0000000480)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, r3}, 0x94) (async) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 381.490211ms ago: executing program 3 (id=4560): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0xfffff924, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2000000000000093, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0xffffffff000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000080)={0x80000002}) connect$llc(r7, &(0x7f0000000040)={0x1a, 0xf, 0x0, 0xb, 0x5, 0xf, @random="f991c07fa75a"}, 0x10) listen(r0, 0x6) 380.907795ms ago: executing program 4 (id=4561): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x7, 0x20, 0x9, 0x2, {{0xa, 0x4, 0x2, 0x34, 0x28, 0x66, 0xa, 0x6, 0x2f, 0x0, @local, @remote, {[@ssrr={0x89, 0x13, 0xe, [@empty, @rand_addr=0x64010102, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x2, 0xede, {{0x27, 0x4, 0x3, 0x7, 0x9c, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast2, @remote, {[@ssrr={0x89, 0x1f, 0xf9, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @multicast2, @local, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xe3, [@local]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x2, [0xeb40, 0x48, 0x200]}, @ssrr={0x89, 0x13, 0x5d, [@multicast1, @empty, @local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0xfc, 0x1, 0xd, [{@private=0xa010100, 0x9}, {@rand_addr=0x64010100, 0x5}, {@remote, 0x4}, {@multicast2, 0x4}, {@multicast2, 0xbf2}, {@loopback, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd8, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xd4}, 0x40000) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r9) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r10) (async) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="7824040b16378c0b7d7f47e871e6d8aeee058ecee745d70ddcdefc939c805ff2ef47d56a60da830561d169a38fe4e59072fc571a8f97d90f", @ANYRES8=r8], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r12, &(0x7f0000002e80), 0x0, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) (async) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 357.922254ms ago: executing program 1 (id=4562): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002dbd0600ffdbdb252100", @ANYRES32=r3, @ANYBLOB="0600eb000008000004"], 0x44}}, 0x28000) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) close(0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r4, @ANYRES64=r6], 0xfdef) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="000129bd7000fedbdf257200000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000600010054000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x41) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000002c0)={0x84, @remote, 0x4e24, 0x3, 'rr\x00', 0x1, 0x7f8, 0xf}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000001c0)={0x80}, 0x1) (async) sendmsg$NL80211_CMD_SET_STATION(r0, 0x0, 0x40000cd) (async, rerun: 32) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x19) (rerun: 32) 315.283414ms ago: executing program 0 (id=4563): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'rw\x00'}, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000001dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d80)={&(0x7f0000000d00)={0x1080, 0x42, 0x1, 0x70bd2c, 0x25dfdbff, {0x13}, [@typed={0x8, 0xb0, 0x0, 0x0, @u32=0x3a0}, @nested={0x8, 0x13f, 0x0, 0x1, [@nested={0x4, 0xf0}]}, @nested={0x1050, 0x14c, 0x0, 0x1, [@typed={0x8, 0xf3, 0x0, 0x0, @uid=r4}, @generic="b6e02981344b16c261fc6b7ffa678b0daaca6b1263a49c20c465e090fd89328127fb88fa61f01936a24fa3add75985df9ffdcfb04907d469a0baa40a65ae0b46c27fb7dcecda55f91dee65771a65cb4a86186268c9b7a0ee32b478e75162228461d0a03c5800f879a094f27470bc6c2ff9a48e97f006192149310f7d18bf376105026eb3d0f0c0f6c059e3d9f69e056a4499fad6bf32ec78b05b280a2115cf5a6ba81e30d5718c80a8487429276531b7332c7f5a4ed4826b99696992dccf7d663e9db87081c7312aab98bb508abe9ae5cce986c2c0a7053684f25c05bab9e0e7112322f1b7a1de1ebe28020b03230a478211b741d7b86d6e957ddb6566248236a21061cd0aadb27c14f9a900e2a77327dc44e6e290925f3cbfa915969d1a6c3be4ad34ed298237a75c5fde846cc91b1f8c4da1cc5525bff2753a0d46bcc782480e0f3620e30f7bab6738ffa33deff7db81040da231d4b6916fbf4736ba66bb8711ca36822f13df523a4b7fba90f0f63bf9025cccc3b15987eb1eed65604e191217d2e4c0d8711e0f0639b714fb659d9f5212f1179ef803f7d26cab7e4af4299ed00aaeaf40ee3f9778d96a711cc1a6515124608ed240fca950fdafc7ab78cde4509e8318747ad7a9c1241ce74da124eb101268c57041407453b4933b7372f76d70f14534c2b9a500565ca12f389734fed5ac54c9fddb734f3433a5bb85460116223cc48cb662ec9ec8126a2a6516debd44e8e237f2c0def470f70405fc170d4aa1801fbade31a3052e403ebeb2b80d13bc6619aa2db4d0d60458b9485cd378557e55f96d2856826358e3e8e61faa46242582fa6d4ec7807ff70268bc214377aebcab8542ed4796188eda3e429d457365527cdc9a27cb34a4b81bdb7d44c2711d3782fdbebddde7fcd68eccc4bfe52db90fe7822ec8addbbfcaaa441dc207ab5f1f09eeddf1f4f221e538e3c6e4153fb0b632727767e0dd724cf0c1bcd43e460822f161b98ecab99d3d42721f8318a8c788df35741f8e9b21dad1a135a6850329ee7fc539b5303701ce378d89da78dd3b066ac70467af32555c7e66c34507f29fa7f4dd2a3a8a5b1c98a85dcd21b7fd3443a297136039ce860832a546f9e37d1d5afc5963ff24ea8a8c2c478fc396fcda342843e061e36728f88a46f978939f1f36df57d04c0bd38efe0764bd6b661afb663597d12695c418e034494f0ba1e0e9348650041a01439479a1034a64956b54f2a38d16d44c8456c2a370dc5c0a805813876a051c5e729103969f47475fe2fe6ad94e52e47ccf5d37e3d5888c412e3cc84607663e435842f7c94e810cb9e22d642cac20b1a88561e02d6e9e2d9f9d507aedb5a28b463218bdcbab52acca7a400a7ebe246ae852a4bb2aa8d26d9d2bbf996d9f0ee53e9ea15a92e59d9a4324553cdf966332b8270a6d79b5d77d0416ad46b41a08f3a646aa2fc7f08285ec5943c40782af6a3733ac1947700946ef9b4ed2c6bb0b8d38e290aa2419f2e81ecf8e2fc2c1c9a440993e3e1f68bb01ba046ccb795c069907e4be859aba7e90ad9275cb8aa855abbf5b08c2a4c2e9036d7d3d372bc14d3312348d2a4a5eae66e95f25d216be42c4f9f5b48b7da6006171df0cd4125d6b487851b296016223946a1d3dbe2c3298baed3577e9bcdffc1abfb46053644677a966df28411fcaf532d36553bec3b3562dbfc350455f866fc583689fd8ea6f996748c1143b1f6f0ce3a005f0cd5688dc6ec0eaea339849ef151de7b2c2083d7b0251e5283388ef67b79a573ba71c9c67bbc0fd684c9fafa7a446a3435f2bbd885724d90d42514099edbcb4cddfb82c81e8d118929bf083c5c1cbf47b3525c0117a24d470ef8b67f421efb6242d083bda9a2959bd614c59c077eb48bd0df4fc77fadc416775cca94333dff60ad6937ec3b5cc5c413deb5d0086824d3969a8b5e3df07dcf3b01f72e3a101a2c0dfce3e228702983cc0cf915891e407ba212c7abe67af8482e1d30c6a965e4b143518f2bf4fb0a14a3ddcfadbb63489541d16fc7ea48e7c337e4d7a4b6235ba1b96eb356c0c6d7fbf5c8a6fd59713bc9ada0ec8ce5771533cf148aaeb0430d75b42660043e6eb9e83b7acfccc1664f91877375ba43be151ee81d3e0904ff71c528b115b21f7d1ae1c0c09107ba8e6d71f81ae82dbab1403f4329a20bc61877407700b4b6e31dd85ba3ab1ef6d398a0d2ebb945ab8c71aead65e46422f903b0bfff9f34a2afaccc9909b975dd4914cae5092cd17201838cbb44f46e9f4049b41849ca4582e3021e6afe12aa327474a8c3cbff19b716afb778b082e6ee2ecdfc51140ec58201a13b4f63a2028b9d23c4f74879ad9cc5a69934361dac279766072367de3f51ffe00edc3a1498e0e259bca178d911e8cc6346f26e4f75b8a8948aa55dec66ca83eff963ed841377db8df72f2475738697f41fbaa0aba38d5bff6388fb199518dc84c26dfba98490c5ce43dac6d9fd249bc389e35841acf913734a2b744a9cf169170593bab60cffb5004576fb6d1880488d7f9ef3cd7ff434f0e3a95e33504b09a6e644954b80ae53fc9264df1dfa5b2b7f2f1c1d9aabdd30d3e7ada854371c878b2051e6ea736574d78edce07376f4c7ce0f5fd188afe156fe887566d2f34d2e116a01753ffed8e3ba7dfa1af592db0520a2e290121c490e4fc186cf5ec728342838e127b8cf42fade05afb3601fed244ef83a381a21449a889607d7dc27573f6b327f48fbb9a3a65be1d7f2b795bf0fb4067628f4b8cc2ed1ca6a1aa0b55d3582276ac1241f7e10dd68213fe94aa4cb01af2465d4b24d87f5aa052c0867ac06c187dbb799b12cabac7b05abb2b57b93c4cce07b2c602df6aa8f872c4605f22f95e82db127ef686c5c188c0ce412874a40ea4d78925ab32300a20ed5aeb3e947207975679abad96560ba814a4ab035c22eeab5692ffa30f16172468b3f1228b9e5675a96dd576d4380756f211e0e8aca9c9a186f14f37864f69cb79df6258671e2afc01072806a7fc46080904ef0ae0e7e50ad2b274bb4e16afae4fadfac85e8ed7c469dbf18efd1bf12ad30150a43a9e2c59ec59bebb856bb9e054ee802cf89f0d7f1e3adf76a69657daf34a94e38eacc167763a79af9ed6a642ba2484a78b12e2ef498d3372d40d7a596592467dbfcfd0ae7edb8024e4c0d3e8c2ff56b4c55f64102d678504f715cecf28ec9a53d429ff5bdf953c15892a2cfd2e3eb14a56b92a10705141d5287b35bf8603e3ec2557688466d36d097fcf701667863aea66733a4c7c19c1a36312a3fd68459355bed66db1a110b2816d8d8f9b59aef538cca849cd65eedb0c00f353c39208863bdfc33c8cfac43c66ae09dbbf9b9be1f77a1c02044ce7c14a888aa6d9814a6767e13e181a38d9066c55b536dceb3e09a0a54e4c2e5f8bbc5afa183cfc9f2e52ad7f507f999e1399c49c3c96cbaf1772181ceda44bc893901609fd5987e88b5ecda8d8940b97a939f5e68e1ead47227e67c5a44cd8bb752808eb45b548f2135134f995410cf06a51c356d025e74e5204cabf435de32a0acfb0d2c51bce1ec4fe29f8b4e30792cf7ccfac81764b4ceb620e498750f3eb9a30767b4748ac29a799a14696218c9fbbdd04c34421d66a9159b64548cd1596a8ca4f1756518314fb30869a816681a9c73d9922beb3f6bdeebf54c1d653292b3d237c3b343ee9568505ae75187750802cf1bb77a8ecc688f267a9343d46179e78bbc32c6f919b8ddcc4569b88c1da8d7192f37b93ab94346d89fcd9e8d56e94e4869dc2615e4b80974265c393f9a2c05e2fcb70123da5b09151de4cd6c62906738a6dfda39288dd90ff1fc2e68e2b3c17cb166573c8d2674ae4c5ebd3d59612c0b0e0f12d9728b1372c5f4eaaaf1f8a2f31771e9af404f5eddcb0c2d159aae7e1f84fdf48faf9e89ef63f69ec9c493ce8c6541b8ba56fbd9ff0f6c80633024272462266035b6995e1cff0ba0aefc72e644ace4c218a02d0ad4e24b328866a1ad22eb1113d9d8768b00e198615f64bf017ccaf10ea3e14836bb0f5e6ff9294e82fcc35aff18ddbe35842937ec03133bf6752aca768326c2707d05c689f28e8a1c1011936ac6872ca6bdf8c009dc2acea0c823a929c85f921c7c72ac9d6d43df44e14f6061f9013d9c8c247d2479a777f4666f32a51fcb7f975d00e0e0c605e909b6b30bfc4d5cfad36cc30a28862c0ee43da3877d8622e23bf87793cc5ebda12fe6153a10c4c4a1dceb2c50404ee0e6f192c069628098366bad8d2ad9ad90eab47892c8f5b979433489b5b00426af7be80a6948b7514aa105bb7132c0d3764ddcdffd05274138dfb1c6d98cf5d12cbab7c682db184b0a38b1448949507e3ab3d566d351402697c1622e248baf53476d56b9684813724ecd96d7ace5ce3f82156c0c89e742bb95cd88194a9a9c907256464fe78b6253ddac745668b1bceb31ccdefdecdf4ef145b13c0a916f28a2cc8a37fc6c45e5782d204232225d5cdb25855b55b9a90e3209af5524e61ac30577d0531e837b4b9154d02991c841d2670c5b4a2c3a227683b533dff244527855ce08a8156e2d8ac8a5ec215df016ee8a00139a90607a70873ef0ae8152301fda0794ba5f1dce64ca080b8a6cb8baeda7282f2f6b6ee68f473891aa8209b65a63c996dda13fa3ecc0047258426e732c76c716b48eea4381efdf13b0f7a7afaba38747ca8e464431b467ad8e0e1596ca4f3248b5c5c595a48ad62dab873973f44266eda6ece8bcf08065f6af2d2a41a139f1c58cdbb76cd7c300d8ad0ace3bbf92d350a1d15e32a199b77fcc8785db0ddcb4997ab87647b118fd3bc963621960b96e28117be2bef7ef2e40962e55d3f78f4469bd131d701fcdfeb82133ca83bcc19a37021646b84cef8a406a54734613fc440acd16798284295f8a5442d9a444f59302d074f6a0a59d5625b0d5b8de5506dfea28b9b8c8e411f54c9a2a2e09e30948a0dbce398a42d0295b7d212dff9d63b94c7609bf8fb76607a487bee9dd24851f1c959e9e04065ac6cffeab72ea7c505cd35d90bd3be149cae7ef2b5c86f94875ab44681657c9a4c21b1c389b740e5944b72ddfc85708f6664498aa5e65d5ab2633db763f38263cc131cb38a21321853d2b6649b5de6669c39a7054ed3e7850b5d9cff6246ebe127416842e3d9f0f35e0a0309ed68583ea796936a6147bac2a877c6ffd838e92cb51ae8052bcb287ab7d439ee4cd22d59fb0807ebab9f5274efc9b23256b20f26e8b859fce1998c34ed706338c0d9973e2bd0259a4ef1fd686429a5ab4a1dbd661d5c3e0cd04969f86c26200cd5435a1eb5e92304234d171218117d6950f9e411132477ecc777ad5089ea406956747cc5c8f7e70634bf0f515440c6b09850b111c4621365ff0cc4430e06948cfb11497bb8e96b2430deb304a6904f8bbbe47f48725fc35ef423b01095c003bb4e296ef08a5709c6e68bb4e05ee0f064bae3d210101f0a141553c0cfdca559f4a6cbe7f5ece6bc3d4eefc86eb1c1acc95ed92ae7aec2beceec809a53f677a68aa39a65e8d26250e3bcdd932967dab3e76d31839fb87f7775c3cdecade734d322593281968e8fd35c9c6a104fe89243077a1cdb33b965fad98fc5b3f29048976da8232f3f33738805e09d92b969f78d791cebf332b528999ef7fecfc8b2fcd42c10c62f4c39daf3742d665500daed3ede37c5c24c03be4c086163c60c59b4e3ae4052f5c3fc9537b4940244c7f3fa0ca5d5da437469ce9c2f3a95fed49201122d48c19346096aa6", @generic="5b1e733c0de3f7056b1ede13f6c6b1152e2102491cea1849259f9c3c01663e9254459aa37ce754f257708642291ca6e061ef7526418c5cb65a328b599af9b2e89c12c1a6"]}, @nested={0xc, 0x139, 0x0, 0x1, [@typed={0x7, 0x156, 0x0, 0x0, @str='\\)\x00'}]}]}, 0x1080}, 0x1, 0x0, 0x0, 0x44010}, 0x20008040) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 17.180691ms ago: executing program 0 (id=4564): syz_emit_ethernet(0x4a3, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @esp={{0x13, 0x4, 0x0, 0x8, 0x495, 0x66, 0x0, 0x6, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, {[@timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0x7, [{@empty, 0x683}]}, @generic={0x17, 0xe, "b0d646b1f8c850adecd0e988"}, @ssrr={0x89, 0x13, 0x56, [@empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x86, 0x6, "eecdb0d8"}, @ra={0x94, 0x4, 0x1}]}}, {0x4d6, 0x35, @cc={0x1, 0x0, 0xe, 0x9, 0x61, 0x9, 0xfff, [@ipv6=@tipc_packet={0x4, 0x6, "c0b2de", 0x1f1, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[@hopopts={0xc, 0xc, '\x00', [@generic={0x6c, 0x5b, "65d08e16413e3688e9816828e6ec1fb1e938c002ba0441df79cdcad8386f1c5f1678b3954b8aead2faa7019b099ea78ce56de86f891bb2473e1feea3ef72419934e4209350b16042455e0b66a09c9d78ee2907249774ccf879ceed"}, @pad1]}, @hopopts={0x3a, 0x0, '\x00', [@pad1]}, @fragment={0x32, 0x0, 0x1, 0x0, 0x0, 0x1e, 0x64}, @fragment={0xc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x65}, @dstopts={0x87, 0x1a, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x2, 0xc6, "f50c06dac6d3082a4b075c5907980d342040974745998b19cf195986cbb09eb74b9316ee04173be5e13531373e1352026ea2b0c6a3e78f117de37e0c685be1084c8bb4205661c6049878cbdca7e413a240abd6308bc6549dd7c28cf5bdf4992717351522d525e829bf85acf3f94128a6513ac1f2e61af3e6ba438cd29d0068e6d54d46858da29a09b06369b8857624d7edaeed091ea534f11726b6fcce49159231ba311f717a2d445e478b2a45134265f50585096c1565090e3a67977e79f74d33bca698bf1e"}, @ra={0x5, 0x2, 0x80}]}, @fragment={0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x64}, @srh={0x0, 0xc, 0x4, 0x6, 0x1, 0x10, 0x7, [@dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2b}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, @local]}], @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x2, 0x0, 0x3, 0x8, 0x0, 0x0, 0xc, 0x3ff, 0x4, 0x4e23, 0x4e20}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, @runt="9698f84722ace0ec854aa01a6b2dadff6346caa7eee5865a43a6872b7be2b95f", @runt="8f6a56e050d4b4e3d6f7c03461434d4e06a110b0db2a071697f0ff906e8395cf75acad3b285114b66e422c171f0e4f19e06548512f", @ipv4=@udp={{0x4d, 0x4, 0x1, 0x1, 0x1b3, 0x66, 0x0, 0x5, 0x11, 0x0, @rand_addr=0x64010101, @loopback, {[@cipso={0x86, 0x5d, 0x3, [{0x6, 0x12, "efc61efa7d9a8dac0e80e70c1da75672"}, {0x2, 0xe, "b3adbd56fcbbb57f297a61d2"}, {0x2, 0xa, "7696a4d41aed9150"}, {0x0, 0x4, '.W'}, {0x0, 0x11, "d4055f0f66afe60701d1a7245a71e0"}, {0x7, 0xc, "b317b418152038012e47"}, {0x0, 0x5, "cc541d"}, {0x0, 0x7, "dd6f602d69"}]}, @cipso={0x86, 0x64, 0x1, [{0x5, 0xa, "3b5235a8a45a9e2d"}, {0x6, 0x10, "9c0a89073e3c12d5aea97eb862bf"}, {0x6, 0x12, "b5a93d10200e0c5c565d5362eec8d467"}, {0x5, 0x3, "ff"}, {0x0, 0x12, "1d37eb0cb680e412b72702b1eb01577c"}, {0x1, 0x12, "ceb71141c054dd717c773bcfacee998f"}, {0x1, 0xb, "7c44e6035f38890041"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xd4, [@empty]}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}, @end, @cipso={0x86, 0x3a, 0x1, [{0x5, 0x5, "548c62"}, {0x0, 0x7, "13d2639a21"}, {0x0, 0x2}, {0x5, 0xb, "9caa83d558685b3d38"}, {0x5, 0x9, "98b33141638c70"}, {0x0, 0x8, "8a0fe3a39be7"}, {0x6, 0xa, "2ee2bc445dab8c62"}]}, @generic={0x88, 0x10, "1b12bb08f7c9334ef69f6248fb72"}]}}, {0x4e23, 0x4e20, 0x7f, 0x0, @wg=@data={0x4, 0x0, 0x9, "541aecaad4664785f7ec9da51e953c8807717a1ec94a9459beea13e070789953151e7930eeac9e8d7c07d852e4333574dd8b9bd4732944219bc84c6b6e430d63fddab682dae8208959a6240a4bc4fb02f5fefd6c6fa2e329bfa185d8391a247c61ab991e917e49"}}}]}, "86aaa164b3c1", 0x6}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000100)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000100)=r1, 0x4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in=@remote, 0x4e22, 0x4, 0x4e20, 0x0, 0xa, 0x20, 0x40, 0x1, r4, r5}, {0x8000000000000000, 0x34fd, 0x5, 0x3, 0x2, 0x81, 0x0, 0x2}, {0x8, 0xe, 0x7, 0xfffffffffffffff9}, 0x398, 0x6e6bb1, 0x2, 0xbd238899e1e7f32, 0x22a5fbe9e1a27ec}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x3c}, 0x2, @in6=@private1, 0x3504, 0x1, 0x0, 0x1f, 0x49, 0x165, 0x2}}, 0xe8) 0s ago: executing program 4 (id=4565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd28, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@ip4=@empty, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9020a8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000000240, 0x20000000036e, 0x20000000039e], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40800) kernel console output (not intermixed with test programs): invalid length. [ 408.967330][T18543] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3121'. [ 408.981965][ T9349] udevd[9349]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.139066][T18545] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 409.361657][ T5625] Bluetooth: hci1: command tx timeout [ 409.588567][T18572] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3127'. [ 409.672613][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 410.020301][T17511] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 410.380873][T17511] smc: removing net device erspan0 with user defined pnetid SYZ1 [ 410.413736][T17511] erspan0 (unregistering): left promiscuous mode [ 410.471050][T17511] bond12 (unregistering): (slave erspan1): Releasing active interface [ 410.484297][T17511] erspan1 (unregistering): left promiscuous mode [ 410.518571][T17511] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 410.584608][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 410.686484][T17511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.697472][T17511] bond0 (unregistering): (slave team0): Releasing backup interface [ 410.712394][T17511] bond0 (unregistering): Released all slaves [ 410.724370][T17511] bond1 (unregistering): Released all slaves [ 410.739885][T17511] bond2 (unregistering): Released all slaves [ 410.760202][T17511] bond3 (unregistering): Released all slaves [ 410.779268][T17511] bond4 (unregistering): Released all slaves [ 410.796349][T17511] bond5 (unregistering): Released all slaves [ 410.818928][T17511] bond6 (unregistering): (slave bond7): Releasing backup interface [ 410.827623][T17511] bond6 (unregistering): Released all slaves [ 410.845487][T17511] bond7 (unregistering): Released all slaves [ 410.861370][T17511] bond8 (unregistering): Released all slaves [ 410.884713][T17511] bond9 (unregistering): Released all slaves [ 410.900168][T17511] bond10 (unregistering): (slave bond11): Releasing backup interface [ 410.909089][T17511] bond10 (unregistering): Released all slaves [ 410.929835][T17511] bond11 (unregistering): Released all slaves [ 410.945332][T17511] bond12 (unregistering): Released all slaves [ 410.965317][T17511] bond13 (unregistering): Released all slaves [ 410.980850][T18575] tipc: Invalid UDP bearer configuration [ 410.980894][T18575] tipc: Enabling of bearer rejected, failed to enable media [ 411.000432][T18581] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 411.002407][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 411.059633][T18603] pim6reg: entered allmulticast mode [ 411.232191][T18608] IPv6: Can't replace route, no match found [ 411.260157][T18611] sit0: Master is either lo or non-ether device [ 411.291309][T17511] tipc: Disabling bearer [ 411.308418][T17511] tipc: Left network mode [ 411.442874][ T5625] Bluetooth: hci1: command tx timeout [ 411.526416][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.544285][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.564949][T18482] bridge_slave_0: entered allmulticast mode [ 411.584756][T18482] bridge_slave_0: entered promiscuous mode [ 411.894721][T18632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.916567][T18632] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.955739][T18632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.070324][T18632] bridge_slave_0: entered promiscuous mode [ 412.120849][T18649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3138'. [ 412.135326][T18632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.159384][T18632] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.183531][T18632] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.220071][T18632] veth1_macvtap: left promiscuous mode [ 412.238331][T18632] veth1_macvtap: entered promiscuous mode [ 412.318261][T18632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.368128][T18632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.450144][T18632] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 412.545446][T18632] veth0_to_team: entered promiscuous mode [ 412.679168][T18632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.689262][T18632] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 412.702491][T18632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.716051][T18632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.740418][T18632] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 412.758107][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.765927][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.773561][T18482] bridge_slave_1: entered allmulticast mode [ 412.782012][T18482] bridge_slave_1: entered promiscuous mode [ 412.920922][T18656] syzkaller0: entered promiscuous mode [ 412.932651][T18656] syzkaller0: entered allmulticast mode [ 412.943309][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 413.037998][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3141'. [ 413.049982][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 413.064651][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 413.109727][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'. [ 413.137320][T18696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.160248][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 413.177894][T18698] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3142'. [ 413.524704][ T5625] Bluetooth: hci1: command tx timeout [ 414.791065][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.804011][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.914797][T18482] team0: Port device team_slave_0 added [ 414.959066][T17507] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.982814][T17507] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.990918][ T6444] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 415.018386][T18482] team0: Port device team_slave_1 added [ 415.023085][T18703] netlink: 'syz.0.3146': attribute type 10 has an invalid length. [ 415.037982][T18704] netlink: 'syz.0.3146': attribute type 10 has an invalid length. [ 415.112823][T17511] hsr_slave_0: left promiscuous mode [ 415.133497][T17511] hsr_slave_1: left promiscuous mode [ 415.142832][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.159627][T17511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.187754][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.213361][T17511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.263094][T17511] veth1_macvtap: left promiscuous mode [ 415.270048][T17511] veth0_macvtap: left promiscuous mode [ 415.281904][ T6444] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 415.494824][T17511] team0 (unregistering): Port device 76žÿ removed [ 415.509415][T17511] team0 (unregistering): Port device team_slave_0 removed [ 415.611895][ T5625] Bluetooth: hci1: command tx timeout [ 415.641151][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.648696][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.680320][T18704] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.687557][T18704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.695059][T18704] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.702206][T18704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.715685][T18704] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 415.725302][T18703] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.732678][T18703] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.791544][T17506] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.809950][T17506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.824298][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.843709][ T6444] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 415.852357][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.890932][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.912631][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.919644][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.946575][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.962826][T17507] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.989462][T17507] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.253552][T18482] hsr_slave_0: entered promiscuous mode [ 416.273185][T18482] hsr_slave_1: entered promiscuous mode [ 416.293597][T18482] debugfs: 'hsr0' already exists in 'hsr' [ 416.303460][T18736] netlink: 'syz.4.3155': attribute type 33 has an invalid length. [ 416.307933][T18482] Cannot create hsr debugfs directory [ 416.327300][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'. [ 416.349013][T18736] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 416.396492][T17511] IPVS: stop unused estimator thread 0... [ 416.611958][T18751] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 416.721307][T17517] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.747350][T17517] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.787534][T17517] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.827261][T17517] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.113196][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 417.651601][T18765] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 417.889143][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'. [ 418.726693][T18841] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3173'. [ 419.318892][T18798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.336348][T18798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.361270][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 419.492563][ T1645] block nbd0: Possible stuck request ffff888043547000: control (read@2048,1024B). Runtime 90 seconds [ 419.503809][ T1645] block nbd0: Possible stuck request ffff8880435471c0: control (read@3072,1024B). Runtime 90 seconds [ 419.514793][ T1645] block nbd0: Possible stuck request ffff888043f05080: control (read@0,1024B). Runtime 90 seconds [ 419.525584][ T1645] block nbd0: Possible stuck request ffff888043f05240: control (read@1024,1024B). Runtime 90 seconds [ 419.831981][T18860] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 420.061190][T17511] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.080580][T18881] tc_dump_action: action bad kind [ 420.261279][T17507] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.287911][T17507] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.321566][T17507] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.679603][T18482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.695312][T18482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.704222][T18482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.714430][T18482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.744557][T18482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.761404][T18482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.776190][T18482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.794445][T18482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.834319][T18908] syzkaller0: entered promiscuous mode [ 420.851546][T18908] syzkaller0: entered allmulticast mode [ 421.134773][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.204640][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.259915][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.267176][T17510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.309729][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.316916][T17510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.890947][T18972] netlink: 'syz.4.3197': attribute type 1 has an invalid length. [ 422.009596][T18972] bond18: option mode: invalid value (15) [ 422.040666][T18972] bond18 (unregistering): Released all slaves [ 422.094142][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 422.108977][ T29] audit: type=1804 audit(1787333692.393:9): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3200" name="/newroot/61/cgroup.controllers" dev="tmpfs" ino=334 res=1 errno=0 [ 422.141875][ T29] audit: type=1800 audit(1787333692.393:10): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3200" name="cgroup.controllers" dev="tmpfs" ino=334 res=0 errno=0 [ 422.780212][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 422.832373][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.980683][T18482] veth0_vlan: entered promiscuous mode [ 423.029317][T18482] veth1_vlan: entered promiscuous mode [ 423.135725][T18482] veth0_macvtap: entered promiscuous mode [ 423.166934][T18482] veth1_macvtap: entered promiscuous mode [ 423.234577][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.276678][T19051] netlink: 'syz.2.3211': attribute type 1 has an invalid length. [ 423.285436][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.343392][T17510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.354120][T17510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.358187][T19051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 423.402226][T17510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.512324][T17515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.579361][T17515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.600827][T17515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.615023][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 423.668775][T17507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.684246][T17507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.221246][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 424.301923][T19095] nbd: must specify at least one socket [ 424.354617][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.367057][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.376920][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.387362][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.397208][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.716784][T19120] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3224'. [ 425.486221][T19100] lo speed is unknown, defaulting to 1000 [ 425.502018][T19161] tls_set_device_offload: netdev not found [ 426.364361][T19210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3243'. [ 426.484006][ T50] Bluetooth: hci3: command tx timeout [ 426.628304][T19100] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.657090][T19100] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.672405][T19100] bridge_slave_0: entered allmulticast mode [ 426.680251][T19100] bridge_slave_0: entered promiscuous mode [ 426.688944][T19220] syzkaller0: entered promiscuous mode [ 426.695667][T19220] syzkaller0: entered allmulticast mode [ 426.710159][T19210] tipc: Started in network mode [ 426.715640][T19210] tipc: Node identity 762933d645cb, cluster identity 4711 [ 426.726620][T19210] tipc: Enabled bearer , priority 0 [ 426.734339][T19100] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.750134][T19231] netlink: 'syz.1.3247': attribute type 11 has an invalid length. [ 426.770196][T19100] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.790100][T19100] bridge_slave_1: entered allmulticast mode [ 426.816365][T19211] netlink: 'syz.4.3242': attribute type 10 has an invalid length. [ 426.819458][T19100] bridge_slave_1: entered promiscuous mode [ 426.857389][T19220] tipc: Resetting bearer [ 426.970017][T19224] tipc: Resetting bearer [ 427.046702][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'. [ 427.084486][T19224] tipc: Disabling bearer [ 427.126502][T19100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.167080][T19100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.435570][T19100] team0: Port device team_slave_0 added [ 427.479962][T19100] team0: Port device team_slave_1 added [ 427.687146][T19100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.705041][T19100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.761313][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 427.780568][T19100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.839361][T19100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.861932][T19100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.892947][T19100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.000877][T19305] bond18: Unable to set up delay as MII monitoring is disabled [ 428.014073][T19305] bond18 (unregistering): Released all slaves [ 428.095832][T19100] hsr_slave_0: entered promiscuous mode [ 428.102610][T19100] hsr_slave_1: entered promiscuous mode [ 428.109041][T19100] debugfs: 'hsr0' already exists in 'hsr' [ 428.115020][T19100] Cannot create hsr debugfs directory [ 428.160874][T19309] team0: Port device veth5 added [ 428.420715][T19100] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.434140][T19100] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.485025][T19325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.544489][T19100] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.563918][ T50] Bluetooth: hci3: command tx timeout [ 428.569563][T19100] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.638599][T19100] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.649051][T19100] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.676332][T19100] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.686819][T19100] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.378486][T19265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.473007][T19100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.515483][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.548448][T19100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.580347][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.606153][T19100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.636544][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.645398][ T50] Bluetooth: hci3: command tx timeout [ 430.668253][T19100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.698149][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.718102][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 430.853609][T19100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.888411][T19100] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.903684][T17507] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.910881][T17507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.928086][T17507] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.935301][T17507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.239297][T19365] nftables ruleset with unbound set [ 431.314303][T19350] syzkaller0: entered promiscuous mode [ 431.327043][T19350] syzkaller0: entered allmulticast mode [ 431.611922][T19381] xt_hashlimit: size too large, truncated to 1048576 [ 431.634245][T19381] xt_hashlimit: max too large, truncated to 1048576 [ 431.654392][T19381] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3277'. [ 431.680012][T19387] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3277'. [ 431.838635][T19100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.940633][T19100] veth0_vlan: entered promiscuous mode [ 431.979745][T19100] veth1_vlan: entered promiscuous mode [ 432.080641][T19100] veth0_macvtap: entered promiscuous mode [ 432.136690][T19100] veth1_macvtap: entered promiscuous mode [ 432.195834][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 432.214401][T19100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.233436][T19100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.389301][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 432.466903][T19405] ip6tnl1: entered allmulticast mode [ 432.511930][T17507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.537571][T17507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.556727][T17507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.674122][T17513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.675873][T17517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.696599][T17513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.709852][T17517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.721297][ T50] Bluetooth: hci3: command tx timeout [ 432.762208][T17517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.809923][T19424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3288'. [ 432.901003][T19427] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 432.916833][T19432] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3219'. [ 432.933659][T19432] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3219'. [ 432.947446][T19427] tipc: Started in network mode [ 432.953022][T19427] tipc: Node identity ac14140f, cluster identity 4711 [ 432.969075][T19427] tipc: New replicast peer: 255.255.255.255 [ 432.995522][T19427] tipc: Enabled bearer , priority 10 [ 433.181979][T19447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3295'. [ 433.265534][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'. [ 433.477108][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.492515][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.515146][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.525517][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.533173][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.602175][T19459] bridge_slave_0: left allmulticast mode [ 433.634218][T19459] bridge_slave_0: left promiscuous mode [ 433.656340][T19459] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.903599][T19459] bridge_slave_1: left allmulticast mode [ 433.919694][T19459] bridge_slave_1: left promiscuous mode [ 433.929230][T19459] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.021692][T19459] bond0: (slave bond_slave_0): Releasing backup interface [ 434.036615][T19459] bond0: (slave bond_slave_1): Releasing backup interface [ 434.056529][T19459] team0: Port device team_slave_0 removed [ 434.077848][T19459] team0: Port device team_slave_1 removed [ 434.087986][T19459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 434.110330][T19462] team0: No ports can be present during mode change [ 434.253198][ T5610] syz_tun (unregistering): left allmulticast mode [ 434.268355][ T5610] syz_tun (unregistering): left promiscuous mode [ 434.289220][ T5610] bridge0: port 3(syz_tun) entered disabled state [ 434.333454][T19486] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 434.333454][T19486] Please contact the netfilter-devel mailing list or update your nftables rules. [ 434.377573][ T6441] tipc: Node number set to 2886997007 [ 434.566346][T19497] syzkaller0: entered promiscuous mode [ 434.603169][T19497] syzkaller0: entered allmulticast mode [ 434.810702][T19464] lo speed is unknown, defaulting to 1000 [ 434.877290][T19517] netlink: 'syz.2.3311': attribute type 9 has an invalid length. [ 435.164785][T19464] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.172256][T19464] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.180000][T19464] bridge_slave_0: entered allmulticast mode [ 435.188036][T19464] bridge_slave_0: entered promiscuous mode [ 435.197327][T19464] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.206776][T19464] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.214681][T19464] bridge_slave_1: entered allmulticast mode [ 435.222584][T19464] bridge_slave_1: entered promiscuous mode [ 435.262914][T19464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.277881][T19464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.317339][T19464] team0: Port device team_slave_0 added [ 435.325723][T19464] team0: Port device team_slave_1 added [ 435.358921][T19464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.366205][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.392922][T19464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.408609][T19464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.415749][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.454742][T19464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.563990][T19532] Cannot find add_set index 0 as target [ 435.578894][T19464] hsr_slave_0: entered promiscuous mode [ 435.587834][T19464] hsr_slave_1: entered promiscuous mode [ 435.602016][ T50] Bluetooth: hci0: command tx timeout [ 435.612759][T19464] debugfs: 'hsr0' already exists in 'hsr' [ 435.625626][T19464] Cannot create hsr debugfs directory [ 435.805600][T19541] lo: entered allmulticast mode [ 435.860429][T19539] lo: left allmulticast mode [ 436.072807][T19548] __nla_validate_parse: 2 callbacks suppressed [ 436.072823][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 436.102927][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 436.372262][T19562] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3326'. [ 436.456634][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 436.480672][T19560] bridge_slave_1: left allmulticast mode [ 436.499293][T19560] bridge_slave_1: left promiscuous mode [ 436.519712][T19560] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.533459][T19568] netlink: 'syz.0.3325': attribute type 83 has an invalid length. [ 436.565308][T19562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 436.595262][T19560] bridge_slave_0: left allmulticast mode [ 436.604701][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3328'. [ 436.619468][T19560] bridge_slave_0: left promiscuous mode [ 436.625485][T19560] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.655419][T19560] bond0: (slave bridge0): Releasing backup interface [ 436.890431][T19580] x_tables: duplicate underflow at hook 1 [ 437.000353][T19464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.026851][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.035261][T19464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.119971][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.140900][T19464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.178046][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.218209][T19464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 437.266625][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.288366][ T29] audit: type=1107 audit(1787333707.573:11): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p˜å Ž©@0€îãqT+,·=A½JpíBA¶åiò•Kþ.O‚^¯>KýlV›½Mx´Î`; Ó°nyrBNÉÉ?²Û)ÅdÎ]EêŠ\µCÅáÿ‘áo‡YÏ.WÎ,ÊqÇ­ƒ¤7W­ùÄ€E†ê’L9Àý¾g/Ù³,³…i—Á#™÷ Q3^vf±®ÌPä¡ëAŒ. Ã<,-n­ãÓŒ·<Ð >tr½#Ðm¼ŽŸ:<)¹£3hç#¤ÔBî†i.äXÁ›#ÿ^÷[4)^Gi¶3<ìÀÝý)ò‰òkòZX›…0‹‡2åü³áÎÌ™]Š4R€ÝäãïìEßÊ{iuElƃ9ÖSˆó 8/KãuküªbP©häÊþʸw–\, U"C‡)âQ fÅìùš¢Kc[E:,/Ó5Q‰œœå7º‚i¦V­:›äË«–é»8f™Y{;ƒ­´%7ùS$Úú÷QÇÌùÄ_KD(Qoj§Ô>.÷þT¸ÑK6ân¯P vk© eÀóG' [ 437.374189][ T29] audit: type=1107 audit(1787333707.573:12): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p˜å Ž©@0€îãqT+,·=A½JpíBA¶åiò•Kþ.O‚^¯>KýlV›½Mx´Î`; Ó°nyrBNÉÉ?²Û)ÅdÎ]EêŠ\µCÅáÿ‘áo‡YÏ.WÎ,ÊqÇ­ƒ¤7W­ùÄ€E†ê’L9Àý¾g/Ù³,³…i—Á#™÷ Q3^vf±®ÌPä¡ëAŒ. Ã<,-n­ãÓŒ·<Ð >tr½#Ðm¼ŽŸ:<)¹£3hç#¤ÔBî†i.äXÁ›#ÿ^÷[4)^Gi¶3<ìÀÝý)ò‰òkòZX›…0‹‡2åü³áÎÌ™]Š4R€ÝäãïìEßÊ{iuElƃ9ÖSˆó 8/KãuküªbP©häÊþʸw–\, U"C‡)âQ fÅìùš¢Kc[E:,/Ó5Q‰œœå7º‚i¦V­:›äË«–é»8f™Y{;ƒ­´%7ùS$Úú÷QÇÌùÄ_KD(Qoj§Ô>.÷þT¸ÑK6ân¯P vk© eÀóG' [ 437.381392][T19598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3335'. [ 437.461683][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3335'. [ 437.599429][T19599] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 437.629692][T19599] bond1 (unregistering): Released all slaves [ 437.682047][ T50] Bluetooth: hci0: command tx timeout [ 437.929608][T19464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.980884][T19648] tipc: Can't bind to reserved service type 1 [ 437.998308][T19464] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.027937][T19649] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 438.042693][T17517] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.049937][T17517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.088727][T19649] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3346'. [ 438.106487][T17511] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.113662][T17511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.146249][T19649] NCSI netlink: No device for ifindex 0 [ 438.193488][T19653] Cannot find del_set index 17 as target [ 438.234343][T19651] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 438.254758][T19658] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3348'. [ 439.224777][T19704] Bluetooth: MGMT ver 1.23 [ 439.638936][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 439.730032][T19464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.761434][ T50] Bluetooth: hci0: command tx timeout [ 440.134164][T19743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.221922][T19750] syzkaller0: entered promiscuous mode [ 440.244177][T19750] syzkaller0: entered allmulticast mode [ 440.290535][T19753] xt_connbytes: Forcing CT accounting to be enabled [ 440.363130][T19464] veth0_vlan: entered promiscuous mode [ 440.407018][T19464] veth1_vlan: entered promiscuous mode [ 440.507291][T19464] veth0_macvtap: entered promiscuous mode [ 440.538481][T19464] veth1_macvtap: entered promiscuous mode [ 440.590077][T19464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.625504][T19464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.723432][T17515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.793599][T17510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.827243][T17510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.901666][T17517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.953291][ T9349] udevd[9349]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 441.120707][T19781] bond1: option arp_all_targets: invalid value (3) [ 441.129863][T19781] bond1 (unregistering): Released all slaves [ 441.195078][T17509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.217098][T17509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.294530][T19790] netlink: 'syz.3.3375': attribute type 3 has an invalid length. [ 441.313006][T17509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.348735][T17509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.426132][T19792] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 441.486859][T19792] __nla_validate_parse: 9 callbacks suppressed [ 441.486873][T19792] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3376'. [ 441.520627][T19797] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 441.546175][T19792] NCSI netlink: No device for ifindex 0 [ 441.563748][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 441.637334][T19797] bond2: option mode: invalid value (7) [ 441.654266][T19797] bond2 (unregistering): Released all slaves [ 441.842503][ T50] Bluetooth: hci0: command tx timeout [ 441.866443][T19812] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 442.068764][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 442.208463][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 442.228414][T19830] block nbd1: Unsupported socket: should be TCP or UNIX. [ 442.392667][T19841] netlink: 'syz.2.3386': attribute type 10 has an invalid length. [ 442.771889][T19818] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 442.833648][T19858] bridge1: entered promiscuous mode [ 442.852017][T19858] bridge1: entered allmulticast mode [ 443.165151][T19872] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.226175][T19872] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3397'. [ 443.366784][T19878] netlink: 'syz.2.3396': attribute type 1 has an invalid length. [ 443.382031][T19877] netlink: 'syz.2.3396': attribute type 1 has an invalid length. [ 443.429592][T19877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.512068][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3401'. [ 443.765254][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 443.817207][T19899] TCP: TCP_TX_DELAY enabled [ 444.271560][T19913] netlink: 'syz.3.3408': attribute type 2 has an invalid length. [ 444.368352][T19920] netlink: 'syz.4.3407': attribute type 1 has an invalid length. [ 444.384062][T19918] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 444.476358][T19920] batman_adv: batadv0: Adding interface: veth3 [ 444.533370][T19920] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.565805][T19920] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 444.647499][T19918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.694160][T19937] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 444.731882][T19937] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.819248][T19925] syzkaller0: entered promiscuous mode [ 444.835851][T19925] syzkaller0: entered allmulticast mode [ 444.845347][T19935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.100844][T19955] FAULT_INJECTION: forcing a failure. [ 445.100844][T19955] name failslab, interval 1, probability 0, space 0, times 0 [ 445.104806][T19951] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3418'. [ 445.115574][T19955] CPU: 0 UID: 0 PID: 19955 Comm: syz.2.3419 Not tainted syzkaller #0 PREEMPT(full) [ 445.115635][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.115670][T19955] Call Trace: [ 445.115690][T19955] [ 445.115726][T19955] dump_stack_lvl+0xe8/0x150 [ 445.115896][T19955] should_fail_ex+0x410/0x560 [ 445.116135][T19955] should_failslab+0xa8/0x100 [ 445.116254][T19955] __kmalloc_cache_node_noprof+0xaa/0x630 [ 445.116341][T19955] ? __get_vm_area_node+0x155/0x2f0 [ 445.116395][T19955] ? __get_vm_area_node+0x155/0x2f0 [ 445.116475][T19955] __get_vm_area_node+0x155/0x2f0 [ 445.116553][T19955] ? __pfx_process_measurement+0x10/0x10 [ 445.116741][T19955] __vmalloc_node_range_noprof+0x358/0x1730 [ 445.116799][T19955] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 445.116939][T19955] ? __lock_acquire+0x683/0x2cf0 [ 445.117088][T19955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.117148][T19955] ? aa_file_perm+0x18b/0x15f0 [ 445.117290][T19955] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 445.117350][T19955] __vmalloc_noprof+0xd2/0x120 [ 445.117406][T19955] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 445.117483][T19955] bpf_prog_alloc_no_stats+0x47/0x560 [ 445.117566][T19955] ? bpf_prog_alloc+0x2a/0x1a0 [ 445.117647][T19955] bpf_prog_alloc+0x3c/0x1a0 [ 445.117723][T19955] bpf_prog_load+0x7f8/0x1c20 [ 445.117813][T19955] ? __pfx_bpf_prog_load+0x10/0x10 [ 445.117983][T19955] __sys_bpf+0xd0d/0xd90 [ 445.118082][T19955] ? __pfx___sys_bpf+0x10/0x10 [ 445.118177][T19955] ? __fget_files+0x2a/0x420 [ 445.118313][T19955] ? ksys_write+0x242/0x270 [ 445.118391][T19955] ? __pfx_ksys_write+0x10/0x10 [ 445.118481][T19955] __x64_sys_bpf+0xba/0xd0 [ 445.118550][T19955] do_syscall_64+0x166/0x520 [ 445.118748][T19955] ? trace_irq_disable+0x3b/0x140 [ 445.118813][T19955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.118912][T19955] ? clear_bhb_loop+0x70/0xc0 [ 445.118969][T19955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.119025][T19955] RIP: 0033:0x7f4558f9e0d9 [ 445.119085][T19955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.119134][T19955] RSP: 002b:00007f4559e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.119186][T19955] RAX: ffffffffffffffda RBX: 00007f4559225fa0 RCX: 00007f4558f9e0d9 [ 445.119241][T19955] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 445.119285][T19955] RBP: 00007f4559e94090 R08: 0000000000000000 R09: 0000000000000000 [ 445.119329][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.119373][T19955] R13: 00007f4559226038 R14: 00007f4559225fa0 R15: 00007ffe4f210f28 [ 445.119469][T19955] [ 445.121658][T19955] syz.2.3419: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 445.235295][T19956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 445.241769][T19955] ,cpuset=/,mems_allowed=0-1 [ 445.429984][T19955] CPU: 0 UID: 0 PID: 19955 Comm: syz.2.3419 Not tainted syzkaller #0 PREEMPT(full) [ 445.430020][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.430030][T19955] Call Trace: [ 445.430036][T19955] [ 445.430043][T19955] dump_stack_lvl+0xe8/0x150 [ 445.430082][T19955] warn_alloc+0x24c/0x270 [ 445.430109][T19955] ? __pfx_warn_alloc+0x10/0x10 [ 445.430146][T19955] ? __get_vm_area_node+0x155/0x2f0 [ 445.430171][T19955] ? __get_vm_area_node+0x2a9/0x2f0 [ 445.430187][T19955] ? __pfx_process_measurement+0x10/0x10 [ 445.430219][T19955] __vmalloc_node_range_noprof+0x37d/0x1730 [ 445.430241][T19955] ? __lock_acquire+0x683/0x2cf0 [ 445.430310][T19955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.430331][T19955] ? aa_file_perm+0x18b/0x15f0 [ 445.430359][T19955] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 445.430383][T19955] __vmalloc_noprof+0xd2/0x120 [ 445.430402][T19955] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 445.430429][T19955] bpf_prog_alloc_no_stats+0x47/0x560 [ 445.430453][T19955] ? bpf_prog_alloc+0x2a/0x1a0 [ 445.430480][T19955] bpf_prog_alloc+0x3c/0x1a0 [ 445.430508][T19955] bpf_prog_load+0x7f8/0x1c20 [ 445.430546][T19955] ? __pfx_bpf_prog_load+0x10/0x10 [ 445.430595][T19955] __sys_bpf+0xd0d/0xd90 [ 445.430627][T19955] ? __pfx___sys_bpf+0x10/0x10 [ 445.430662][T19955] ? __fget_files+0x2a/0x420 [ 445.430700][T19955] ? ksys_write+0x242/0x270 [ 445.430727][T19955] ? __pfx_ksys_write+0x10/0x10 [ 445.430758][T19955] __x64_sys_bpf+0xba/0xd0 [ 445.430784][T19955] do_syscall_64+0x166/0x520 [ 445.430805][T19955] ? trace_irq_disable+0x3b/0x140 [ 445.430827][T19955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.430845][T19955] ? clear_bhb_loop+0x70/0xc0 [ 445.430866][T19955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.430884][T19955] RIP: 0033:0x7f4558f9e0d9 [ 445.430902][T19955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.430917][T19955] RSP: 002b:00007f4559e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.430939][T19955] RAX: ffffffffffffffda RBX: 00007f4559225fa0 RCX: 00007f4558f9e0d9 [ 445.430955][T19955] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 445.430969][T19955] RBP: 00007f4559e94090 R08: 0000000000000000 R09: 0000000000000000 [ 445.430982][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.430995][T19955] R13: 00007f4559226038 R14: 00007f4559225fa0 R15: 00007ffe4f210f28 [ 445.431029][T19955] [ 445.431047][T19955] Mem-Info: [ 445.691254][T19955] active_anon:6083 inactive_anon:0 isolated_anon:0 [ 445.691254][T19955] active_file:0 inactive_file:43571 isolated_file:0 [ 445.691254][T19955] unevictable:0 dirty:193 writeback:0 [ 445.691254][T19955] slab_reclaimable:11283 slab_unreclaimable:108637 [ 445.691254][T19955] mapped:29848 shmem:649 pagetables:1397 [ 445.691254][T19955] sec_pagetables:0 bounce:0 [ 445.691254][T19955] kernel_misc_reclaimable:0 [ 445.691254][T19955] free:1311652 free_pcp:12511 free_cma:0 [ 445.736425][T19955] Node 0 active_anon:24332kB inactive_anon:0kB active_file:0kB inactive_file:174080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119392kB dirty:772kB writeback:0kB shmem:2596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14976kB pagetables:5348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.770932][T19955] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.805434][T19955] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.835496][T19955] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 445.845167][T19955] Node 0 DMA32 free:1286020kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24252kB inactive_anon:0kB active_file:0kB inactive_file:174080kB unevictable:0kB writepending:780kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:50796kB local_pcp:29372kB free_cma:0kB [ 445.879836][T19955] lowmem_reserve[]: 0 0 0 0 0 [ 445.884650][T19955] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.916456][T19955] lowmem_reserve[]: 0 0 0 0 0 [ 445.924059][T19955] Node 1 Normal free:3945132kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.955812][T19955] lowmem_reserve[]: 0 0 0 0 0 [ 445.960591][T19955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 445.973319][T19955] Node 0 DMA32: 1247*4kB (U) 257*8kB (UM) 388*16kB (UM) 448*32kB (U) 211*64kB (UM) 98*128kB (UM) 30*256kB (UM) 4*512kB (UME) 6*1024kB (U) 12*2048kB (UME) 291*4096kB (UM) = 1286020kB [ 445.992540][T19955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.005944][T19955] Node 1 Normal: 1*4kB (U) 1*8kB (M) 6*16kB (UM) 4*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3945132kB [ 446.023360][T19955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.032991][T19955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.042356][T19955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.052027][T19955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.061399][T19955] 44216 total pagecache pages [ 446.066129][T19955] 0 pages in swap cache [ 446.070292][T19955] Free swap = 124996kB [ 446.074711][T19955] Total swap = 124996kB [ 446.078924][T19955] 2097051 pages RAM [ 446.082799][T19955] 0 pages HighMem/MovableOnly [ 446.087496][T19955] 428414 pages reserved [ 446.091757][T19955] 0 pages cma reserved [ 446.166478][T19967] netlink: 'syz.2.3420': attribute type 2 has an invalid length. [ 447.916105][T19986] netlink: 'syz.0.3426': attribute type 1 has an invalid length. [ 448.122939][T19995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3429'. [ 448.262658][T17511] IPVS: starting estimator thread 0... [ 448.361332][T20009] IPVS: using max 32 ests per chain, 76800 per kthread [ 448.393628][T20015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3437'. [ 448.414639][T20015] netlink: 'syz.0.3437': attribute type 1 has an invalid length. [ 448.475842][T20015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.523726][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 448.535587][T20025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3440'. [ 448.588032][T20027] netlink: NAT attribute has 5 unknown bytes [ 448.596818][T20027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.635713][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3437'. [ 448.880248][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 448.906600][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 449.037137][T20052] ip_tables: iptables: counters copy to user failed while replacing table [ 449.219582][T20067] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.3454'. [ 449.234915][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3452'. [ 449.248207][T20069] netlink: 'syz.2.3455': attribute type 32 has an invalid length. [ 449.249287][T20062] block nbd1: Unsupported socket: should be TCP or UNIX. [ 449.283644][T20069] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 449.524548][ T1645] block nbd0: Possible stuck request ffff888043547000: control (read@2048,1024B). Runtime 120 seconds [ 449.537652][ T1645] block nbd0: Possible stuck request ffff8880435471c0: control (read@3072,1024B). Runtime 120 seconds [ 449.549527][ T1645] block nbd0: Possible stuck request ffff888043f05080: control (read@0,1024B). Runtime 120 seconds [ 449.568332][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'. [ 449.582629][ T1645] block nbd0: Possible stuck request ffff888043f05240: control (read@1024,1024B). Runtime 120 seconds [ 449.795731][T17513] IPVS: starting estimator thread 0... [ 449.814871][T20093] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:0 [ 449.911687][T20092] IPVS: using max 30 ests per chain, 72000 per kthread [ 450.676313][T20125] syzkaller1: entered promiscuous mode [ 450.716954][T20125] syzkaller1: entered allmulticast mode [ 450.886877][T20135] FAULT_INJECTION: forcing a failure. [ 450.886877][T20135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.916342][T20135] CPU: 1 UID: 0 PID: 20135 Comm: syz.1.3471 Not tainted syzkaller #0 PREEMPT(full) [ 450.916366][T20135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.916377][T20135] Call Trace: [ 450.916385][T20135] [ 450.916392][T20135] dump_stack_lvl+0xe8/0x150 [ 450.916422][T20135] should_fail_ex+0x410/0x560 [ 450.916456][T20135] _copy_to_user+0x31/0xb0 [ 450.916563][T20135] simple_read_from_buffer+0xe1/0x170 [ 450.916595][T20135] proc_fail_nth_read+0x1bb/0x230 [ 450.916641][T20135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.916675][T20135] ? rw_verify_area+0x24a/0x4c0 [ 450.916701][T20135] ? tun_chr_write_iter+0x18a/0x200 [ 450.916784][T20135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.916818][T20135] vfs_read+0x213/0xa80 [ 450.916852][T20135] ? __pfx___mutex_lock+0x10/0x10 [ 450.916904][T20135] ? __pfx_vfs_read+0x10/0x10 [ 450.916933][T20135] ? __fget_files+0x2a/0x420 [ 450.916963][T20135] ? __fget_files+0x3a2/0x420 [ 450.916988][T20135] ? __fget_files+0x2a/0x420 [ 450.917021][T20135] ksys_read+0x150/0x270 [ 450.917051][T20135] ? __pfx_ksys_read+0x10/0x10 [ 450.917090][T20135] do_syscall_64+0x166/0x520 [ 450.917111][T20135] ? trace_irq_disable+0x3b/0x140 [ 450.917136][T20135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.917155][T20135] ? clear_bhb_loop+0x70/0xc0 [ 450.917179][T20135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.917198][T20135] RIP: 0033:0x7f50d435e90e [ 450.917215][T20135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.917230][T20135] RSP: 002b:00007f50d5192fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.917250][T20135] RAX: ffffffffffffffda RBX: 00007f50d51936c0 RCX: 00007f50d435e90e [ 450.917263][T20135] RDX: 000000000000000f RSI: 00007f50d51930a0 RDI: 0000000000000005 [ 450.917275][T20135] RBP: 00007f50d5193090 R08: 0000000000000000 R09: 0000000000000000 [ 450.917286][T20135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.917297][T20135] R13: 00007f50d4626038 R14: 00007f50d4625fa0 R15: 00007ffe6c43ff68 [ 450.917338][T20135] [ 451.299649][T20148] ip_tables: iptables: counters copy to user failed while replacing table [ 451.380552][T20140] openvswitch: netlink: Message has -2 unknown bytes. [ 451.402559][T20140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.507656][T20157] ip_tables: iptables: counters copy to user failed while replacing table [ 451.813833][T20174] hsr_slave_1 (unregistering): left promiscuous mode [ 451.862491][T20179] netlink: 'syz.0.3484': attribute type 40 has an invalid length. [ 452.615177][T20197] bond0: (slave bond_slave_0): Releasing backup interface [ 452.635764][T20197] bond0: (slave bond_slave_1): Releasing backup interface [ 452.716178][T20197] team0: Port device team_slave_0 removed [ 452.813615][T20197] team0: Port device team_slave_1 removed [ 452.847619][T20197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.866612][T20197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.878981][T20197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.910442][T20198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.184128][T20239] __nla_validate_parse: 4 callbacks suppressed [ 453.184148][T20239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'. [ 453.199988][T20239] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3501'. [ 453.396551][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 453.414733][T20250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 453.430418][T20249] netlink: 'syz.0.3505': attribute type 23 has an invalid length. [ 453.477813][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 453.493275][T20248] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 453.574827][T20261] netlink: 'syz.4.3508': attribute type 10 has an invalid length. [ 453.610171][T20261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.646979][T20261] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 453.799581][T20271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3510'. [ 454.069082][T20279] netlink: 'syz.4.3514': attribute type 11 has an invalid length. [ 454.525501][T20305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3522'. [ 454.676696][T20308] pim6reg: entered allmulticast mode [ 454.790280][T20308] ipip0: entered promiscuous mode [ 454.815563][T20310] veth0: entered promiscuous mode [ 454.847715][T20308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3524'. [ 454.895055][T20308] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 454.929531][T20308] pim6reg: left allmulticast mode [ 454.964272][T20309] veth0: left promiscuous mode [ 455.085637][T20329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3528'. [ 455.112990][T20332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3527'. [ 456.215408][T17517] IPVS: starting estimator thread 0... [ 456.233566][T20387] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 456.274086][T20387] net_ratelimit: 1 callbacks suppressed [ 456.274101][T20387] IPVS: lc: FWM 3 0x00000003 - no destination available [ 456.331189][T20388] IPVS: using max 30 ests per chain, 72000 per kthread [ 456.921600][T20406] netlink: 'syz.2.3547': attribute type 21 has an invalid length. [ 457.081993][T20415] netlink: 'syz.3.3544': attribute type 2 has an invalid length. [ 457.113396][T20415] ´: entered promiscuous mode [ 457.552028][T20452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.564134][T20440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 458.270825][T20491] __nla_validate_parse: 7 callbacks suppressed [ 458.270842][T20491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3565'. [ 458.850040][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3566'. [ 460.409802][T20458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.769448][T20550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.805479][T20552] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3576'. [ 460.938564][T20552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 461.131368][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 461.141046][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 461.395712][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 461.431719][T20582] xt_hashlimit: size too large, truncated to 1048576 [ 461.498936][T20590] xt_hashlimit: size too large, truncated to 1048576 [ 462.729802][T20632] netlink: 564 bytes leftover after parsing attributes in process `syz.4.3599'. [ 462.822694][T20632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 463.002063][T20638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3601'. [ 463.024100][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 463.217786][T20646] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 463.348463][T20646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.357713][T20658] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 463.406182][T20646] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 463.423702][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 463.697523][T20669] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3608'. [ 463.825913][T20676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18 [ 464.476851][T20699] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 464.654549][T20707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.106537][T20723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3622'. [ 465.140813][T20723] veth7: entered allmulticast mode [ 465.147040][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'. [ 465.154331][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3622'. [ 465.412156][T20731] syzkaller0: entered promiscuous mode [ 465.422145][T20731] syzkaller0: entered allmulticast mode [ 465.738376][T20741] syzkaller0: entered promiscuous mode [ 465.745016][T20741] syzkaller0: entered allmulticast mode [ 465.874986][T20721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.375019][T20755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3628'. [ 466.437815][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 466.770267][T20785] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3632'. [ 466.932483][T20794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 467.144591][T20807] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3639'. [ 467.572958][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 467.682647][T20836] bond1: option ad_actor_sys_prio: invalid value (0) [ 467.721022][T20836] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 467.736887][T20836] bond1 (unregistering): Released all slaves [ 467.899067][T20848] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 468.050910][T20854] syzkaller0: entered promiscuous mode [ 468.057971][T20854] syzkaller0: entered allmulticast mode [ 468.129239][T20859] netlink: 'syz.3.3650': attribute type 9 has an invalid length. [ 468.235007][T20859] syz_tun: entered promiscuous mode [ 468.258944][T20859] macvlan2: entered promiscuous mode [ 468.280310][T20859] macvlan2: entered allmulticast mode [ 468.291644][T20859] syz_tun: entered allmulticast mode [ 468.610859][T20886] __nla_validate_parse: 4 callbacks suppressed [ 468.610879][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 469.177537][T20911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3665'. [ 469.187133][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 469.317259][T20923] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3667'. [ 469.406942][T20927] syz_tun: entered allmulticast mode [ 469.561948][T20934] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 469.607622][T20936] ip6erspan0: entered allmulticast mode [ 469.848082][T20955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3675'. [ 471.070457][T21019] ip_tables: iptables: counters copy to user failed while replacing table [ 471.258823][T21027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3693'. [ 471.545472][T21046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3700'. [ 471.567883][T21046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3700'. [ 471.959305][T21069] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.979312][T21066] bridge0: port 3(vlan2) entered blocking state [ 471.989137][T21066] bridge0: port 3(vlan2) entered disabled state [ 471.996116][T21061] IPVS: Scheduler module ip_vs_sip not found [ 472.007782][T21066] vlan2: entered allmulticast mode [ 472.017506][T21066] geneve0: entered allmulticast mode [ 472.031329][T21066] vlan2: entered promiscuous mode [ 472.036600][T21066] geneve0: entered promiscuous mode [ 472.202125][T21076] ip_tables: iptables: counters copy to user failed while replacing table [ 472.479260][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'. [ 472.799061][T21094] pimreg: entered allmulticast mode [ 472.930572][T21117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3716'. [ 472.995074][T21093] pimreg: left allmulticast mode [ 473.368457][T21137] netlink: 'syz.2.3721': attribute type 1 has an invalid length. [ 473.391886][T21140] No such timeout policy "syz0" [ 474.127986][T21173] __nla_validate_parse: 2 callbacks suppressed [ 474.128005][T21173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'. [ 474.261355][T17506] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.270568][T21173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'. [ 474.290220][T17506] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.322735][T17506] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.361940][T17506] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.536038][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 474.757573][T21212] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3739'. [ 474.930899][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 474.987040][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 475.036580][T21230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.507092][T21235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 475.593619][T21245] netlink: 'syz.2.3742': attribute type 3 has an invalid length. [ 475.604739][T21245] netlink: 'syz.2.3742': attribute type 3 has an invalid length. [ 475.662770][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 475.863595][T21256] syz_tun (unregistering): left allmulticast mode [ 476.119961][T21270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3752'. [ 476.149412][T21273] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3751'. [ 476.291931][T21275] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3754'. [ 476.401302][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 476.527241][T21293] netlink: 'syz.3.3759': attribute type 1 has an invalid length. [ 476.686856][T21300] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 477.231478][T21326] sctp: [Deprecated]: syz.2.3766 (pid 21326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.231478][T21326] Use struct sctp_sack_info instead [ 477.292137][T21323] syzkaller0: entered promiscuous mode [ 477.325467][T21323] syzkaller0: entered allmulticast mode [ 479.605395][ T1645] block nbd0: Possible stuck request ffff888043547000: control (read@2048,1024B). Runtime 150 seconds [ 479.617126][ T1645] block nbd0: Possible stuck request ffff8880435471c0: control (read@3072,1024B). Runtime 150 seconds [ 479.628267][ T1645] block nbd0: Possible stuck request ffff888043f05080: control (read@0,1024B). Runtime 150 seconds [ 479.639173][ T1645] block nbd0: Possible stuck request ffff888043f05240: control (read@1024,1024B). Runtime 150 seconds [ 479.883305][T21365] netlink: 'syz.3.3775': attribute type 39 has an invalid length. [ 479.970493][T21369] __nla_validate_parse: 3 callbacks suppressed [ 479.970512][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 480.021058][T21369] veth9: entered allmulticast mode [ 480.363201][T21383] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3784'. [ 480.496893][T21393] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3788'. [ 480.665179][T21401] FAULT_INJECTION: forcing a failure. [ 480.665179][T21401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.702665][T21401] CPU: 0 UID: 0 PID: 21401 Comm: syz.1.3790 Not tainted syzkaller #0 PREEMPT(full) [ 480.702704][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.702716][T21401] Call Trace: [ 480.702723][T21401] [ 480.702731][T21401] dump_stack_lvl+0xe8/0x150 [ 480.702763][T21401] should_fail_ex+0x410/0x560 [ 480.702797][T21401] _copy_from_user+0x2d/0xb0 [ 480.702823][T21401] ___sys_sendmsg+0x1c6/0x360 [ 480.702979][T21401] ? __lock_acquire+0x683/0x2cf0 [ 480.703012][T21401] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.703084][T21401] ? __fget_files+0x2a/0x420 [ 480.703110][T21401] ? __fget_files+0x3a2/0x420 [ 480.703143][T21401] __x64_sys_sendmsg+0x1b1/0x290 [ 480.703173][T21401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.703235][T21401] do_syscall_64+0x166/0x520 [ 480.703257][T21401] ? trace_irq_disable+0x3b/0x140 [ 480.703282][T21401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.703302][T21401] ? clear_bhb_loop+0x70/0xc0 [ 480.703326][T21401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.703345][T21401] RIP: 0033:0x7f50d439e0d9 [ 480.703364][T21401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.703381][T21401] RSP: 002b:00007f50d5193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.703402][T21401] RAX: ffffffffffffffda RBX: 00007f50d4625fa0 RCX: 00007f50d439e0d9 [ 480.703416][T21401] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 480.703428][T21401] RBP: 00007f50d5193090 R08: 0000000000000000 R09: 0000000000000000 [ 480.703439][T21401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.703449][T21401] R13: 00007f50d4626038 R14: 00007f50d4625fa0 R15: 00007ffe6c43ff68 [ 480.703479][T21401] [ 481.064918][T21411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3795'. [ 481.283434][T21421] xfrm1: entered allmulticast mode [ 481.299615][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3797'. [ 481.324493][T21425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.389267][T21425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.698623][T21447] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3805'. [ 481.808959][T21450] ip6gretap1: entered allmulticast mode [ 481.816869][T21450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 481.830489][T21450] batman_adv: batadv0: Adding interface: ip6gretap1 [ 481.837609][T21450] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.864758][T21450] batman_adv: batadv0: Interface activated: ip6gretap1 [ 481.881438][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 481.970797][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 482.021275][T21456] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3808'. [ 482.484673][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 482.863232][T21482] syzkaller0: entered promiscuous mode [ 482.882058][T21482] syzkaller0: entered allmulticast mode [ 483.210606][T21490] netlink: 'syz.2.3818': attribute type 1 has an invalid length. [ 483.218737][T21490] netlink: 'syz.2.3818': attribute type 2 has an invalid length. [ 483.401937][ T50] Bluetooth: hci0: link tx timeout [ 483.415581][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.067532][T21526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 484.298903][T21537] netlink: 'syz.4.3834': attribute type 3 has an invalid length. [ 485.166338][T21560] syzkaller0: entered allmulticast mode [ 485.349833][T21586] __nla_validate_parse: 13 callbacks suppressed [ 485.349854][T21586] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3844'. [ 485.441569][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 485.523254][T21592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 485.653309][T21599] netlink: 'syz.2.3848': attribute type 1 has an invalid length. [ 485.857962][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'. [ 485.882916][T21597] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 485.940731][T21608] netlink: 'syz.3.3850': attribute type 11 has an invalid length. [ 485.973105][T21596] netlink: 'syz.4.3847': attribute type 1 has an invalid length. [ 486.021532][T21596] bond1: option mode: invalid value (10) [ 486.035203][T21596] bond1 (unregistering): Released all slaves [ 486.115789][T21600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3847'. [ 486.178650][T21596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3847'. [ 486.393095][T21617] bond1: option arp_all_targets: invalid value (3) [ 486.443766][T21617] bond1 (unregistering): Released all slaves [ 486.644581][T21635] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 486.818468][T21639] netlink: 564 bytes leftover after parsing attributes in process `syz.4.3859'. [ 486.848861][T21641] netlink: 'syz.3.3860': attribute type 1 has an invalid length. [ 486.909152][T21643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 486.960917][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3861'. [ 487.225152][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3865'. [ 487.309219][T21657] tipc: Started in network mode [ 487.327728][T21657] tipc: Node identity c2b5addc5bbb, cluster identity 4711 [ 487.351317][T21657] tipc: Enabled bearer , priority 0 [ 487.435365][T21662] syzkaller0: entered promiscuous mode [ 487.441549][T21662] syzkaller0: entered allmulticast mode [ 487.448831][T21662] tipc: Resetting bearer [ 487.492800][T21662] tipc: Resetting bearer [ 487.968948][T21694] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3873'. [ 488.108944][T21698] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23 [ 489.894037][T21662] tipc: Disabling bearer [ 489.917314][ T6441] tipc: Node number set to 2567876060 [ 490.484439][T21733] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 490.499543][T21732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.512040][T21733] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 490.945451][T21729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.982241][T21759] netlink: 'syz.0.3887': attribute type 1 has an invalid length. [ 491.154192][T21729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.306375][T21729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.528209][T21785] netlink: 'syz.0.3894': attribute type 2 has an invalid length. [ 491.536894][T21785] netlink: 'syz.0.3894': attribute type 8 has an invalid length. [ 491.546760][T21785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3894'. [ 491.584207][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3893'. [ 491.586607][T21729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.961377][T17515] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.979945][T21807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 491.981875][T17515] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.150583][T21816] x_tables: duplicate underflow at hook 2 [ 492.245796][T17513] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.285188][T17513] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.458241][T21825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3903'. [ 492.616620][T21825] netlink: 'syz.2.3903': attribute type 21 has an invalid length. [ 492.624128][T21826] netlink: 'syz.2.3903': attribute type 21 has an invalid length. [ 492.640032][T21826] netlink: 'syz.2.3903': attribute type 1 has an invalid length. [ 492.651867][T21826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3903'. [ 492.671005][T21838] netlink: 'syz.4.3907': attribute type 3 has an invalid length. [ 492.676182][T21825] netlink: 'syz.2.3903': attribute type 1 has an invalid length. [ 492.708306][T21825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3903'. [ 492.764271][T21838] netlink: 'syz.4.3907': attribute type 16 has an invalid length. [ 492.785948][T21838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3907'. [ 492.934192][T21851] x_tables: duplicate underflow at hook 1 [ 493.085858][T21854] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 493.148066][T21854] bond2 (unregistering): Released all slaves [ 493.188075][T21861] netlink: 'syz.3.3913': attribute type 2 has an invalid length. [ 493.929467][T21910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3929'. [ 493.975061][T21910] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.015246][T21910] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.254819][T21933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3936'. [ 494.593582][T21949] sctp: [Deprecated]: syz.1.3941 (pid 21949) Use of int in max_burst socket option. [ 494.593582][T21949] Use struct sctp_assoc_value instead [ 494.649848][T21949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3941'. [ 494.706719][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 494.768779][T21947] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.464242][T21997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input24 [ 495.477427][T22007] openvswitch: netlink: Flow key attribute not present in set flow. [ 496.085141][T22030] syzkaller0: tun_chr_ioctl cmd 35108 [ 496.770664][T22076] x_tables: duplicate underflow at hook 3 [ 496.824334][T22080] __nla_validate_parse: 12 callbacks suppressed [ 496.824352][T22080] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3977'. [ 496.918180][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 497.635092][T22127] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3990'. [ 497.861922][T22137] Cannot find del_set index 4 as target [ 497.912727][T22140] gtp1: entered promiscuous mode [ 497.926888][T22140] gtp1: entered allmulticast mode [ 497.945389][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3995'. [ 497.959864][T22140] team0: Device gtp1 is of different type [ 498.102879][T22149] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3997'. [ 498.231041][T22150] veth0_to_hsr: entered promiscuous mode [ 498.245372][T22150] veth0_to_hsr: left promiscuous mode [ 498.428558][ T29] audit: type=1800 audit(1787333768.713:13): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4001" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=803 res=0 errno=0 [ 498.720074][T22170] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 499.287185][T22188] validate_nla: 1 callbacks suppressed [ 499.287205][T22188] netlink: 'syz.2.4009': attribute type 1 has an invalid length. [ 499.307156][T22188] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4009'. [ 499.316539][T22188] netlink: 'syz.2.4009': attribute type 1 has an invalid length. [ 499.490694][T22193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4010'. [ 499.713101][T22209] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 499.724992][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4014'. [ 499.736291][T22212] tipc: Enabling of bearer rejected, already enabled [ 499.750080][T22209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4014'. [ 499.760142][T22210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4014'. [ 500.183622][T22228] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 500.260714][T22231] netlink: 'syz.2.4020': attribute type 29 has an invalid length. [ 500.745104][T22259] netlink: 'syz.1.4029': attribute type 3 has an invalid length. [ 500.853181][T22262] bond3: Removing last ns target with arp_interval on [ 501.063560][T22275] netlink: 'syz.2.4033': attribute type 8 has an invalid length. [ 501.200307][T22236] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 501.868108][T22311] __nla_validate_parse: 5 callbacks suppressed [ 501.868135][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 501.946785][T22311] bond1: option broadcast_neighbor: invalid value (3) [ 501.960459][T22311] bond1 (unregistering): Released all slaves [ 502.014716][T22322] tipc: Started in network mode [ 502.019891][T22322] tipc: Node identity 3292bc2492aa, cluster identity 4711 [ 502.027585][T22322] tipc: Enabled bearer , priority 0 [ 502.050630][T22321] syzkaller0: entered promiscuous mode [ 502.056364][T22321] syzkaller0: entered allmulticast mode [ 502.106216][T22305] tipc: Resetting bearer [ 502.205397][T22305] tipc: Disabling bearer [ 502.281454][T22324] netlink: 'syz.2.4047': attribute type 2 has an invalid length. [ 502.475833][T22335] netlink: 'syz.3.4052': attribute type 12 has an invalid length. [ 502.484323][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 502.607767][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4053'. [ 502.647896][T22344] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4053'. [ 502.806901][T22349] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 503.019680][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4058'. [ 503.072376][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4058'. [ 503.128939][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 503.368911][T22365] bond1 (unregistering): Released all slaves [ 503.441925][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 503.490287][T22381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.581831][T22373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4062'. [ 503.864612][T22398] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4072'. [ 503.997776][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4074'. [ 504.050556][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4074'. [ 504.151998][T22415] netlink: 'syz.4.4076': attribute type 8 has an invalid length. [ 504.213819][T22416] tipc: Failed to remove unknown binding: 66,0,0/2567876060:4013983238/4013983240 [ 504.229745][T22415] veth1_to_team: entered promiscuous mode [ 504.248894][T22416] tipc: Failed to remove unknown binding: 66,0,0/2567876060:4013983238/4013983239 [ 504.270629][T22416] tipc: Failed to remove unknown binding: 66,0,0/2567876060:4013983238/4013983240 [ 504.280799][T22415] gretap0: entered promiscuous mode [ 504.306385][T22415] veth1_to_team: left promiscuous mode [ 504.314226][T22416] tipc: Failed to remove unknown binding: 66,0,0/2567876060:4013983238/4013983239 [ 504.358295][T22415] gretap0: left promiscuous mode [ 505.638569][T22445] syzkaller0: entered promiscuous mode [ 505.650552][T22445] syzkaller0: entered allmulticast mode [ 505.842878][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 506.038104][T22476] Bluetooth: MGMT ver 1.23 [ 508.352723][T22501] __nla_validate_parse: 3 callbacks suppressed [ 508.352742][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4092'. [ 508.384865][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4092'. [ 508.504670][T22506] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4094'. [ 508.585860][T22506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 508.722722][T22521] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4098'. [ 508.849029][T22528] ip_tables: iptables: counters copy to user failed while replacing table [ 508.878776][T22531] trusted_key: syz.3.4103 sent an empty control message without MSG_MORE. [ 508.892413][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 509.033961][T22537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4103'. [ 509.258341][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4107'. [ 509.291363][T22548] netlink: 121 bytes leftover after parsing attributes in process `syz.4.4107'. [ 509.430232][T22559] syzkaller1: entered promiscuous mode [ 509.439978][T22559] syzkaller1: entered allmulticast mode [ 509.607949][T22567] netlink: 564 bytes leftover after parsing attributes in process `syz.4.4112'. [ 509.659361][T22568] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 509.688046][ T1645] block nbd0: Possible stuck request ffff888043547000: control (read@2048,1024B). Runtime 180 seconds [ 509.701620][ T1645] block nbd0: Possible stuck request ffff8880435471c0: control (read@3072,1024B). Runtime 180 seconds [ 509.713229][ T1645] block nbd0: Possible stuck request ffff888043f05080: control (read@0,1024B). Runtime 180 seconds [ 509.724985][ T1645] block nbd0: Possible stuck request ffff888043f05240: control (read@1024,1024B). Runtime 180 seconds [ 509.766757][T22573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 510.259480][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 510.644148][T22619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27 [ 510.889472][T22631] bond2: option arp_interval: invalid value (18446744073709551615) [ 510.897522][T22631] bond2: option arp_interval: allowed values 0 - 2147483647 [ 510.907029][T22631] bond2 (unregistering): Released all slaves [ 511.057943][T22638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.069094][T22642] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 511.297626][T22657] netlink: 'syz.4.4136': attribute type 10 has an invalid length. [ 511.358691][T22657] syz_tun: entered promiscuous mode [ 511.395658][T22657] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 511.434491][T22654] lo speed is unknown, defaulting to 1000 [ 511.829100][T22678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input28 [ 511.939264][T22681] bond1: (slave bond_slave_1): Device is not our slave [ 512.009591][T22681] bond1: option active_slave: invalid value (bond_slave_1) [ 512.039125][T22681] bond1 (unregistering): Released all slaves [ 512.131031][T22700] netlink: 'syz.0.4143': attribute type 21 has an invalid length. [ 512.155592][T22682] bond1: (slave bond_slave_1): Device is not our slave [ 512.177053][T22682] bond1: option active_slave: invalid value (bond_slave_1) [ 512.188008][T22682] bond1 (unregistering): Released all slaves [ 512.713157][T22719] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 512.769011][T22719] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 512.795905][T22719] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 513.197602][T22743] IPv6: NLM_F_REPLACE set, but no existing node found! [ 513.684440][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 513.986608][T22766] batman_adv: batadv0: Adding interface: gretap1 [ 514.017996][T22766] batman_adv: batadv0: The MTU of interface gretap1 is too small (1396) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.066303][T22782] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 514.090840][T22766] batman_adv: batadv0: Interface activated: gretap1 [ 514.548285][T22803] __nla_validate_parse: 10 callbacks suppressed [ 514.548307][T22803] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4170'. [ 515.090862][ T29] audit: type=1804 audit(1787333785.333:14): pid=22809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4170" name="/newroot/146/memory.events" dev="tmpfs" ino=772 res=1 errno=0 [ 515.450694][T22825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 515.993441][T22825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.020137][T22825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.120327][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4179'. [ 516.186683][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 516.330275][T22825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.352958][T22825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.380435][ T5274] veth0_macvtap: left promiscuous mode [ 516.440462][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4179'. [ 516.453859][T22850] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 516.481729][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 516.493897][T22850] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 516.512783][T22850] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 516.528838][T22825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.549793][T22825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.563757][T22850] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 516.611361][T17509] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.634567][T17509] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.681012][T17509] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.884567][T22825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.938599][T22825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.171303][T17515] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.565833][T17509] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.582647][T17509] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.792274][T22878] netlink: 'syz.0.4185': attribute type 9 has an invalid length. [ 517.882142][T17507] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.935751][T17507] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.983806][T17507] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.028507][T17507] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.171208][T17515] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.215980][T17515] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.577112][T22889] syzkaller0: entered promiscuous mode [ 518.614235][T22889] syzkaller0: entered allmulticast mode [ 518.655432][T22899] tunl0: entered promiscuous mode [ 518.691524][T22899] netlink: 'syz.3.4191': attribute type 4 has an invalid length. [ 518.718270][T22899] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4191'. [ 518.761099][T22908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4194'. [ 521.897904][T22921] syzkaller0: entered promiscuous mode [ 521.993271][T22921] syzkaller0: entered allmulticast mode [ 522.250662][T22938] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 522.391673][T17517] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.438790][T17517] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.503124][T17517] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.559069][T17517] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.645259][T22966] tipc: Enabling of bearer rejected, failed to enable media [ 522.714730][T22966] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 522.856434][T22978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4207'. [ 522.882921][T22966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.997244][T22967] bond5: (slave gretap1): making interface the new active one [ 523.028416][T22967] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 523.081607][T22975] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 523.105979][T22975] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.249982][T22989] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4209'. [ 523.290066][T22982] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4206'. [ 527.799340][T23046] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 527.994841][T23055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.192380][T23055] nbd1: detected capacity change from 0 to 63 [ 528.203563][ T5614] block nbd1: Receive control failed (result -32) [ 528.260454][ T1645] block nbd1: Dead connection, failed to find a fallback [ 528.271324][ T1645] block nbd1: shutting down sockets [ 528.277349][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.289526][ T1645] Buffer I/O error on dev nbd1, logical block 0, async page read [ 528.297826][ T1645] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 528.307514][ T1645] Buffer I/O error on dev nbd1, logical block 1, async page read [ 528.316970][ T1645] Buffer I/O error on dev nbd1, logical block 2, async page read [ 528.325583][ T1645] Buffer I/O error on dev nbd1, logical block 3, async page read [ 528.335142][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 528.344845][ T1645] Buffer I/O error on dev nbd1, logical block 0, async page read [ 528.352813][ T1645] Buffer I/O error on dev nbd1, logical block 1, async page read [ 528.360601][ T1645] Buffer I/O error on dev nbd1, logical block 2, async page read [ 528.368539][ T1645] Buffer I/O error on dev nbd1, logical block 3, async page read [ 528.381745][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 528.391356][ T1645] Buffer I/O error on dev nbd1, logical block 0, async page read [ 528.399103][ T1645] Buffer I/O error on dev nbd1, logical block 1, async page read [ 528.407131][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 528.416976][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 528.428114][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.438296][ T1645] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 528.448874][ T1645] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 528.462396][ T1645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 528.472364][ T9349] ldm_validate_partition_table(): Disk read failed. [ 528.492146][ T9349] Dev nbd1: unable to read RDB block 0 [ 528.505317][ T9349] nbd1: unable to read partition table [ 528.581663][ T9349] ldm_validate_partition_table(): Disk read failed. [ 528.637540][ T9349] Dev nbd1: unable to read RDB block 0 [ 528.663044][ T9349] nbd1: unable to read partition table [ 528.681014][T23073] netlink: 'syz.3.4229': attribute type 5 has an invalid length. [ 528.736370][T23077] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 529.452656][T23106] siw: device registration error -23 [ 529.527228][T23108] netlink: 'syz.0.4236': attribute type 58 has an invalid length. [ 529.535573][T23108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4236'. [ 529.942678][T23100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.325243][T23091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4231'. [ 530.351122][T23091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4231'. [ 530.393892][T23098] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 530.411283][T23098] syzkaller1: linktype set to 769 [ 532.567351][T23133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4242'. [ 532.623592][T23134] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4243'. [ 532.817022][T23142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 533.550385][T23172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4251'. [ 534.174994][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 535.485705][T23137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.105771][T23226] syzkaller0: entered promiscuous mode [ 536.131323][T23226] syzkaller0: entered allmulticast mode [ 536.657198][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 539.189698][T23247] netlink: 'syz.1.4265': attribute type 4 has an invalid length. [ 539.756932][T23280] syzkaller0: entered promiscuous mode [ 539.774829][ T1645] block nbd0: Possible stuck request ffff888043547000: control (read@2048,1024B). Runtime 210 seconds [ 539.786019][ T1645] block nbd0: Possible stuck request ffff8880435471c0: control (read@3072,1024B). Runtime 210 seconds [ 539.797107][ T1645] block nbd0: Possible stuck request ffff888043f05080: control (read@0,1024B). Runtime 210 seconds [ 539.807963][ T1645] block nbd0: Possible stuck request ffff888043f05240: control (read@1024,1024B). Runtime 210 seconds [ 539.825089][T23280] syzkaller0: entered allmulticast mode [ 539.938940][T23296] IPv6: addrconf: prefix option has invalid lifetime [ 540.315904][T23302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 540.406661][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 540.416206][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 540.624123][T23310] netlink: 'syz.3.4279': attribute type 4 has an invalid length. [ 540.666674][T23310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4279'. [ 540.749759][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 541.187172][T23331] vlan0: entered promiscuous mode [ 541.295764][T23328] syzkaller0: entered promiscuous mode [ 541.310382][T23328] syzkaller0: entered allmulticast mode [ 541.342171][T17507] 0: reclassify loop, rule prio 0, protocol 800 [ 541.740499][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4287'. [ 541.793410][T23338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4287'. [ 541.865922][T23343] netlink: 'syz.4.4288': attribute type 2 has an invalid length. [ 541.906267][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 541.936912][T23343] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4288'. [ 541.960568][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4290'. [ 542.322462][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.487820][T23367] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4297'. [ 542.622159][T23362] pim6reg: entered allmulticast mode [ 542.634503][T23365] pim6reg: left allmulticast mode [ 542.665195][T23374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4299'. [ 543.719625][T23394] netlink: 'syz.3.4306': attribute type 3 has an invalid length. [ 543.751122][T23394] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 543.794128][T23394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4306'. [ 543.878241][T23402] netlink: 'syz.3.4306': attribute type 4 has an invalid length. [ 543.922099][T23402] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4306'. [ 543.958292][T23390] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 544.220852][T23395] veth5: entered promiscuous mode [ 544.238534][T23395] veth5: entered allmulticast mode [ 544.249416][T23395] team0: Device veth5 is up. Set it down before adding it as a team port [ 544.921726][T23419] bridge_slave_0: left allmulticast mode [ 544.990220][T23419] bridge_slave_0: left promiscuous mode [ 545.032830][T23434] netlink: 'syz.1.4314': attribute type 1 has an invalid length. [ 545.050373][T23419] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.132101][T23419] bridge_slave_1: left allmulticast mode [ 545.169922][T23419] bridge_slave_1: left promiscuous mode [ 545.190464][T23419] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.248262][T23419] bond0: (slave bond_slave_0): Releasing backup interface [ 545.267985][T23419] bond0: (slave bond_slave_1): Releasing backup interface [ 545.328026][T23419] team0: Port device team_slave_0 removed [ 545.364283][T23419] team0: Port device team_slave_1 removed [ 545.385984][T23419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.411252][T23419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.437470][T23419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.500741][ T5728] syz1: Port: 1 Link DOWN [ 545.507690][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4316'. [ 546.221474][T23470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.422756][T23470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.785826][T23484] __nla_validate_parse: 1 callbacks suppressed [ 546.785846][T23484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4331'. [ 546.849150][T23484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4331'. [ 546.882901][T23488] netlink: 'syz.3.4333': attribute type 1 has an invalid length. [ 546.884385][T23484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4331'. [ 546.911142][T23488] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4333'. [ 546.943940][T23484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4331'. [ 547.170956][T23493] bond0: (slave gretap0): Opening slave failed [ 547.224017][T23495] xt_hashlimit: max too large, truncated to 1048576 [ 547.299950][T23500] xt_bpf: check failed: parse error [ 547.654842][T23513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4338'. [ 547.907608][T23520] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.007863][T23520] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.215793][T23520] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.260897][T23520] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.444682][T23520] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.515707][T23520] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.777303][T23520] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.831754][T23520] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.993083][T23554] bridge0: port 1(syz_tun) entered blocking state [ 549.023209][T23554] bridge0: port 1(syz_tun) entered disabled state [ 549.050469][T23554] syz_tun: entered allmulticast mode [ 549.098666][T23554] syz_tun: entered promiscuous mode [ 549.402984][T23557] syzkaller0: entered promiscuous mode [ 549.437422][T23557] syzkaller0: entered allmulticast mode [ 549.521291][T17511] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.529890][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 549.586084][T17511] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.792483][T17511] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.840055][T17511] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.894040][T17511] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.964878][T17511] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.016740][T17511] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.067997][T17511] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.520749][T23591] syzkaller1: entered promiscuous mode [ 550.539390][T23591] syzkaller1: entered allmulticast mode [ 550.783480][T23599] syzkaller0: entered promiscuous mode [ 550.804958][T23599] syzkaller0: entered allmulticast mode [ 550.863039][T23596] tipc: Enabled bearer , priority 0 [ 550.920796][T23596] tipc: Resetting bearer [ 550.977157][T23595] tipc: Resetting bearer [ 551.094480][T23595] tipc: Disabling bearer [ 551.118495][T23612] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 551.465887][T23612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.598705][T23615] bond1: (slave ip6gretap1): making interface the new active one [ 551.633957][T23615] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 551.910135][T23634] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 551.947010][T23637] ip_tables: iptables: counters copy to user failed while replacing table [ 551.979424][T23639] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 552.440711][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4370'. [ 552.746896][T23656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4372'. [ 552.761688][T23637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.099565][T23661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4374'. [ 553.145691][T23661] hsr_slave_1 (unregistering): left promiscuous mode [ 554.007363][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4381'. [ 554.155362][T23684] openvswitch: netlink: IP tunnel TTL not specified. [ 554.277776][T23688] netlink: 'syz.0.4384': attribute type 1 has an invalid length. [ 554.448889][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'. [ 554.490947][T23696] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 554.811701][T23702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4387'. [ 555.624583][T23724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4395'. [ 555.987437][T23739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4399'. [ 556.054187][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 556.098356][T23736] netlink: 'syz.0.4398': attribute type 10 has an invalid length. [ 556.132292][T23736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4398'. [ 556.171294][T23741] tipc: Started in network mode [ 556.189627][T23741] tipc: Node identity de1906aa5683, cluster identity 4711 [ 556.227476][T23741] tipc: Enabled bearer , priority 0 [ 556.326295][T23743] syzkaller0: entered promiscuous mode [ 556.352323][T23743] syzkaller0: entered allmulticast mode [ 556.492159][T23736] geneve2: entered promiscuous mode [ 556.539618][T23736] geneve2: entered allmulticast mode [ 556.809027][T23743] tipc: Resetting bearer [ 556.907945][T23754] veth1_macvtap: left promiscuous mode [ 557.085418][T23759] tipc: Enabling of bearer rejected, failed to enable media [ 557.222798][T23740] tipc: Resetting bearer [ 557.372811][T23740] tipc: Disabling bearer [ 557.439590][ T5611] tipc: Node number set to 2291795626 [ 557.445186][T23771] netlink: 'syz.4.4407': attribute type 1 has an invalid length. [ 557.549569][T23773] __nla_validate_parse: 2 callbacks suppressed [ 557.549591][T23773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4408'. [ 558.079549][T23798] sit1: entered promiscuous mode [ 558.402783][T23812] netlink: 'syz.4.4417': attribute type 1 has an invalid length. [ 558.415588][T23812] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4417'. [ 558.575040][T23816] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4418'. [ 558.646171][T23816] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4418'. [ 558.727082][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4421'. [ 559.064829][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 559.282355][T23837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4424'. [ 559.778506][ T5274] veth1_macvtap: entered promiscuous mode [ 560.034356][T23862] bond1: option primary_reselect: invalid value (6) [ 560.043755][T23862] bond1 (unregistering): Released all slaves [ 560.616024][T23885] gretap2: entered promiscuous mode [ 560.813980][T23895] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 561.606464][T23886] block nbd0: reconnected socket [ 561.654609][ T5614] block nbd0: Receive control failed (result -32) [ 562.401539][T17511] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.521204][T23927] netlink: 'syz.0.4443': attribute type 2 has an invalid length. [ 562.543670][T17506] bond16: left allmulticast mode [ 562.559020][T17506] bond16: left promiscuous mode [ 562.580240][T17506] bridge0: port 4(bond16) entered disabled state [ 562.624253][T17506] bridge_slave_1: left allmulticast mode [ 562.649330][T17506] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.696000][T17506] bridge_slave_0: left allmulticast mode [ 562.722254][T17506] bridge_slave_0: left promiscuous mode [ 562.740313][T17506] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.767450][T23937] netlink: 'syz.2.4447': attribute type 5 has an invalid length. [ 562.977829][T23932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.357420][T17506] bond4 (unregistering): (slave gretap1): Releasing active interface [ 563.510416][T17506] bond12 (unregistering): (slave bridge2): Releasing backup interface [ 563.547198][T17506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.560821][T17506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.577950][T17506] bond0 (unregistering): Released all slaves [ 563.592810][T17506] bond1 (unregistering): Released all slaves [ 563.613325][T17506] bond2 (unregistering): Released all slaves [ 563.637497][T17506] bond3 (unregistering): Released all slaves [ 563.663742][T17506] bond4 (unregistering): Released all slaves [ 563.698543][T17506] bond5 (unregistering): (slave veth3): Releasing active interface [ 563.706907][T17506] veth0_to_bond: entered promiscuous mode [ 563.717854][T17506] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 563.728201][T17506] bond5 (unregistering): Released all slaves [ 563.754614][T17506] bond6 (unregistering): (slave veth5): Releasing active interface [ 563.763267][T17506] batadv1: entered promiscuous mode [ 563.770928][T17506] bond6 (unregistering): (slave batadv1): Releasing active interface [ 563.783851][T17506] bond6 (unregistering): Released all slaves [ 563.809222][T17506] bond7 (unregistering): Released all slaves [ 563.834313][T17506] bond8 (unregistering): Released all slaves [ 563.859707][T17506] bond9 (unregistering): Released all slaves [ 563.884916][T17506] bond10 (unregistering): Released all slaves [ 563.910684][T17506] bond11 (unregistering): Released all slaves [ 564.006383][T17506] bond12 (unregistering): Released all slaves [ 564.028568][T17506] bond13 (unregistering): Released all slaves [ 564.052398][T17506] bond14 (unregistering): Released all slaves [ 564.077703][T17506] bond15 (unregistering): Released all slaves [ 564.106769][T17506] bond16 (unregistering): Released all slaves [ 564.131472][T17506] bond17 (unregistering): Released all slaves [ 564.202630][T17509] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.233521][T17509] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.273266][T23940] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 564.371180][T17509] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.630827][T17506] tipc: Disabling bearer [ 564.661587][T17506] tipc: Left network mode [ 564.665526][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 564.711592][T23958] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 564.869472][T23957] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 564.926236][T23958] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 565.110956][T23970] gretap2: entered allmulticast mode [ 566.631957][T24011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.656325][T24011] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.666333][T24011] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.685192][T24011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.695650][T24023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.717314][T24011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.763623][T24026] dvmrp0: entered allmulticast mode [ 566.769134][T24011] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.804445][T24031] dvmrp1: entered allmulticast mode [ 566.828090][T24011] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4458'. [ 566.853252][T24026] dvmrp0: left allmulticast mode [ 566.864431][T24026] dvmrp1: left allmulticast mode [ 566.876264][T24011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4458'. [ 567.088435][T17506] hsr_slave_0: left promiscuous mode [ 567.130158][T17506] hsr_slave_1: left promiscuous mode [ 567.143372][T17506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.180079][T17506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.458844][T24047] netlink: 'syz.3.4468': attribute type 15 has an invalid length. [ 567.467096][T24047] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4468'. [ 568.397672][T17515] smbdirect: ib_dev[syz0] removed [ 568.456096][ T5274] veth1_vlan: left promiscuous mode [ 568.525222][T24047] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 569.473437][T17506] IPVS: stop unused estimator thread 0... [ 569.563002][T24074] ip6gre1: entered promiscuous mode [ 569.585097][T24074] ip6gre1: entered allmulticast mode [ 569.653070][T17509] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.701110][ T6441] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.712820][T17509] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.721901][T24063] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 569.823435][ T6441] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.859737][ T1645] block nbd0: Possible stuck request ffff888043547000: control (read@2048,1024B). Runtime 240 seconds [ 569.887515][ T25] block nbd0: Dead connection, failed to find a fallback [ 569.899757][ T1645] block nbd0: Possible stuck request ffff8880435471c0: control (read@3072,1024B). Runtime 240 seconds [ 569.915176][ T25] block nbd0: shutting down sockets [ 569.921179][ T25] blk_print_req_error: 102 callbacks suppressed [ 569.921198][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 569.939024][ T1645] block nbd0: Possible stuck request ffff888043f05080: control (read@0,1024B). Runtime 240 seconds [ 569.950010][ T1645] block nbd0: Possible stuck request ffff888043f05240: control (read@1024,1024B). Runtime 240 seconds [ 569.963972][ T25] buffer_io_error: 138 callbacks suppressed [ 569.963989][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 569.980060][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 569.989689][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 569.999358][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.009111][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 570.017039][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.019550][T24105] __nla_validate_parse: 3 callbacks suppressed [ 570.019601][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4477'. [ 570.026638][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 570.068916][ T1649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 570.078717][ T1649] Buffer I/O error on dev nbd0, logical block 0, async page read [ 570.087597][ T1649] Buffer I/O error on dev nbd0, logical block 1, async page read [ 570.095755][ T1649] Buffer I/O error on dev nbd0, logical block 2, async page read [ 570.103902][ T1649] Buffer I/O error on dev nbd0, logical block 3, async page read [ 570.120376][ T1649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 570.130249][ T1649] Buffer I/O error on dev nbd0, logical block 0, async page read [ 570.138842][ T1649] Buffer I/O error on dev nbd0, logical block 1, async page read [ 570.147321][ T1649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 570.159296][ T1649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 570.169304][ T1649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 570.179690][ T1649] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 570.189833][ T9267] ldm_validate_partition_table(): Disk read failed. [ 570.212073][T24100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.225071][T24108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 570.230645][ T9267] Dev nbd0: unable to read RDB block 0 [ 570.238679][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 570.249883][T24108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 570.258899][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 570.311278][ T9267] nbd0: unable to read partition table [ 570.357869][ T9267] ldm_validate_partition_table(): Disk read failed. [ 570.382029][ T9267] Dev nbd0: unable to read RDB block 0 [ 570.399995][ T9267] nbd0: unable to read partition table [ 570.461370][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 570.574420][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 570.625852][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 570.644170][T24120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4479'. [ 570.695474][T24126] xt_limit: Overflow, try lower: 6/2147483648 [ 570.697776][T24125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4479'. [ 570.725086][ T4997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.800909][T24124] netlink: 'syz.3.4483': attribute type 4 has an invalid length. [ 570.840452][T24124] syzkaller1: entered promiscuous mode [ 570.878870][T24124] syzkaller1: entered allmulticast mode [ 571.030744][T24134] netlink: 'syz.2.4485': attribute type 1 has an invalid length. [ 571.041181][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 571.235506][T24141] netlink: 'syz.4.4484': attribute type 4 has an invalid length. [ 571.463959][T24134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.985951][T24144] tunl0: left promiscuous mode [ 573.121129][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 573.441200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.690538][T24144] ip6gre1: left promiscuous mode [ 574.702294][T24144] ip6gre1: left allmulticast mode [ 574.921560][T17513] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.025103][T17509] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.073833][T17509] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.093896][T24218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4494'. [ 575.121283][T17509] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.165208][T24222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4496'. [ 576.069304][T24241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4500'. [ 576.511003][T24264] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4505'. [ 577.193205][T24286] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 578.229944][T24314] netlink: 'syz.1.4514': attribute type 2 has an invalid length. [ 578.332912][T24320] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 578.446652][T24321] syzkaller0: entered promiscuous mode [ 578.458780][T24321] syzkaller0: entered allmulticast mode [ 578.571703][T24316] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 578.994115][T24316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.592319][T24359] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4524'. [ 580.022708][T24377] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4527'. [ 580.053264][T24377] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4527'. [ 580.599611][T24336] ip_tables: iptables: counters copy to user failed while replacing table [ 580.962000][T24404] netlink: 'syz.4.4530': attribute type 1 has an invalid length. [ 580.986498][T24404] netlink: 'syz.4.4530': attribute type 2 has an invalid length. [ 581.328979][T24419] veth1_to_bond: entered allmulticast mode [ 581.423761][T24419] veth1_to_bond: entered promiscuous mode [ 581.483025][T24419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4534'. [ 581.598988][T24419] veth1_to_bond (unregistering): left promiscuous mode [ 581.677018][T24419] veth1_to_bond (unregistering): left allmulticast mode [ 581.827289][T24432] xfrm2: entered allmulticast mode [ 582.235734][T24442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4540'. [ 582.290785][T24445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4541'. [ 582.466426][T24449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4542'. [ 582.834798][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4543'. [ 583.089518][T24434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.167476][T24434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.622059][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 583.876225][T24460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.941271][T24489] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4546'. [ 584.282706][T24496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 584.459190][T24498] netlink: 'syz.3.4545': attribute type 11 has an invalid length. [ 584.885205][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4545'. [ 585.076412][ T5614] Bluetooth: hci0: link tx timeout [ 585.081993][ T5614] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 585.201589][T17509] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.237453][T17509] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.272199][T17509] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.299057][T17509] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.328196][T17509] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.383910][T17509] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.418362][T17509] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.448218][T17509] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.620050][T24517] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 586.189519][T24515] kthread_run failed with err -4 [ 586.265587][T24539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4555'. [ 586.507402][T24544] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4556'. [ 587.121362][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 587.174723][ T5614] [ 587.177209][ T5614] ====================================================== [ 587.184256][ T5614] WARNING: possible circular locking dependency detected [ 587.191315][ T5614] syzkaller #0 Not tainted [ 587.195759][ T5614] ------------------------------------------------------ [ 587.202813][ T5614] kworker/u9:3/5614 is trying to acquire lock: [ 587.209009][ T5614] ffffffff8ec8c680 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 587.217877][ T5614] [ 587.217877][ T5614] but task is already holding lock: [ 587.225267][ T5614] ffffffff8f5fb280 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 587.233999][ T5614] [ 587.233999][ T5614] which lock already depends on the new lock. [ 587.233999][ T5614] [ 587.244439][ T5614] [ 587.244439][ T5614] the existing dependency chain (in reverse order) is: [ 587.253487][ T5614] [ 587.253487][ T5614] -> #8 (dpm_list_mtx){+.+.}-{4:4}: [ 587.260918][ T5614] __mutex_lock+0x19d/0x1550 [ 587.266068][ T5614] device_pm_add+0x7d/0x350 [ 587.271212][ T5614] device_add+0x4eb/0xb80 [ 587.276105][ T5614] device_create+0x269/0x300 [ 587.281277][ T5614] msr_device_create+0x33/0x50 [ 587.286635][ T5614] cpuhp_invoke_callback+0x434/0x810 [ 587.292512][ T5614] cpuhp_thread_fun+0x362/0x780 [ 587.297920][ T5614] smpboot_thread_fn+0x565/0xa70 [ 587.303439][ T5614] kthread+0x38b/0x480 [ 587.308085][ T5614] ret_from_fork+0x514/0xb70 [ 587.313269][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.318611][ T5614] [ 587.318611][ T5614] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 587.326213][ T5614] cpuhp_thread_fun+0x127/0x780 [ 587.331655][ T5614] smpboot_thread_fn+0x565/0xa70 [ 587.337159][ T5614] kthread+0x38b/0x480 [ 587.341800][ T5614] ret_from_fork+0x514/0xb70 [ 587.346959][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.352301][ T5614] [ 587.352301][ T5614] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 587.360089][ T5614] cpus_read_lock+0x42/0x160 [ 587.365249][ T5614] static_key_slow_inc+0x12/0x30 [ 587.370796][ T5614] nbd_genl_reconfigure+0x1301/0x1e80 [ 587.376827][ T5614] genl_family_rcv_msg_doit+0x233/0x340 [ 587.383033][ T5614] genl_rcv_msg+0x614/0x7a0 [ 587.388116][ T5614] netlink_rcv_skb+0x226/0x4a0 [ 587.393436][ T5614] genl_rcv+0x28/0x40 [ 587.397978][ T5614] netlink_unicast+0x7bd/0x940 [ 587.403389][ T5614] netlink_sendmsg+0x813/0xb40 [ 587.408716][ T5614] sock_sendmsg_nosec+0x13a/0x180 [ 587.414376][ T5614] ____sys_sendmsg+0x54e/0x850 [ 587.419718][ T5614] ___sys_sendmsg+0x2a5/0x360 [ 587.424964][ T5614] __x64_sys_sendmsg+0x1b1/0x290 [ 587.430469][ T5614] do_syscall_64+0x166/0x520 [ 587.435622][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.442097][ T5614] [ 587.442097][ T5614] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 587.449784][ T5614] __mutex_lock+0x19d/0x1550 [ 587.454936][ T5614] nbd_queue_rq+0x373/0x1150 [ 587.460091][ T5614] blk_mq_dispatch_rq_list+0x499/0x1990 [ 587.466299][ T5614] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 587.473269][ T5614] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 587.479803][ T5614] blk_mq_run_work_fn+0x16c/0x300 [ 587.485468][ T5614] process_scheduled_works+0xa88/0x14c0 [ 587.491584][ T5614] worker_thread+0xa47/0xfb0 [ 587.496750][ T5614] kthread+0x38b/0x480 [ 587.501394][ T5614] ret_from_fork+0x514/0xb70 [ 587.506566][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.511911][ T5614] [ 587.511911][ T5614] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 587.519183][ T5614] __mutex_lock+0x19d/0x1550 [ 587.524342][ T5614] nbd_queue_rq+0xc1/0x1150 [ 587.529420][ T5614] blk_mq_dispatch_rq_list+0x499/0x1990 [ 587.535543][ T5614] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 587.542448][ T5614] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 587.548997][ T5614] blk_mq_run_work_fn+0x16c/0x300 [ 587.554603][ T5614] process_scheduled_works+0xa88/0x14c0 [ 587.560712][ T5614] worker_thread+0xa47/0xfb0 [ 587.565873][ T5614] kthread+0x38b/0x480 [ 587.570515][ T5614] ret_from_fork+0x514/0xb70 [ 587.575716][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.581067][ T5614] [ 587.581067][ T5614] -> #3 (set->srcu){.+.+}-{0:0}: [ 587.588245][ T5614] __synchronize_srcu+0xc9/0x2f0 [ 587.593787][ T5614] elevator_switch+0x1e8/0x7b0 [ 587.599194][ T5614] elevator_change+0x2fa/0x480 [ 587.604533][ T5614] elevator_set_default+0x375/0x440 [ 587.610313][ T5614] blk_register_queue+0x3f3/0x4e0 [ 587.616021][ T5614] __add_disk+0x6cb/0xe30 [ 587.620925][ T5614] add_disk_fwnode+0x100/0x3a0 [ 587.626293][ T5614] nbd_dev_add+0x733/0xb60 [ 587.631266][ T5614] nbd_init+0x15f/0x1e0 [ 587.636144][ T5614] do_one_initcall+0x250/0x870 [ 587.641510][ T5614] do_initcall_level+0x10a/0x1a0 [ 587.647055][ T5614] do_initcalls+0x59/0xa0 [ 587.651952][ T5614] kernel_init_freeable+0x29d/0x3e0 [ 587.657713][ T5614] kernel_init+0x22/0x1d0 [ 587.662669][ T5614] ret_from_fork+0x514/0xb70 [ 587.667835][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.673175][ T5614] [ 587.673175][ T5614] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 587.681031][ T5614] __mutex_lock+0x19d/0x1550 [ 587.686195][ T5614] elevator_change+0x1af/0x480 [ 587.691533][ T5614] elevator_set_none+0xb5/0x140 [ 587.696965][ T5614] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 587.703344][ T5614] nbd_start_device+0x189/0xb30 [ 587.708773][ T5614] nbd_genl_connect+0x1597/0x1c10 [ 587.714375][ T5614] genl_family_rcv_msg_doit+0x233/0x340 [ 587.720493][ T5614] genl_rcv_msg+0x614/0x7a0 [ 587.725563][ T5614] netlink_rcv_skb+0x226/0x4a0 [ 587.730881][ T5614] genl_rcv+0x28/0x40 [ 587.735432][ T5614] netlink_unicast+0x7bd/0x940 [ 587.740767][ T5614] netlink_sendmsg+0x813/0xb40 [ 587.746104][ T5614] sock_sendmsg_nosec+0x13a/0x180 [ 587.751701][ T5614] ____sys_sendmsg+0x54e/0x850 [ 587.757047][ T5614] ___sys_sendmsg+0x2a5/0x360 [ 587.762301][ T5614] __x64_sys_sendmsg+0x1b1/0x290 [ 587.767808][ T5614] do_syscall_64+0x166/0x520 [ 587.772968][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.779426][ T5614] [ 587.779426][ T5614] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 587.788089][ T5614] blk_alloc_queue+0x544/0x690 [ 587.793425][ T5614] __blk_mq_alloc_disk+0x194/0x390 [ 587.799110][ T5614] nbd_dev_add+0x494/0xb60 [ 587.804095][ T5614] nbd_init+0x15f/0x1e0 [ 587.808816][ T5614] do_one_initcall+0x250/0x870 [ 587.814144][ T5614] do_initcall_level+0x10a/0x1a0 [ 587.819638][ T5614] do_initcalls+0x59/0xa0 [ 587.824522][ T5614] kernel_init_freeable+0x29d/0x3e0 [ 587.830280][ T5614] kernel_init+0x22/0x1d0 [ 587.835186][ T5614] ret_from_fork+0x514/0xb70 [ 587.840344][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.845680][ T5614] [ 587.845680][ T5614] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 587.852941][ T5614] __lock_acquire+0x1520/0x2cf0 [ 587.858357][ T5614] lock_acquire+0x106/0x350 [ 587.863452][ T5614] fs_reclaim_acquire+0x71/0x100 [ 587.868956][ T5614] __kmalloc_noprof+0xbc/0x720 [ 587.874283][ T5614] kobject_get_path+0xc5/0x2f0 [ 587.879715][ T5614] kobject_move+0x2fa/0x720 [ 587.884822][ T5614] device_move+0xe0/0x720 [ 587.889720][ T5614] hci_conn_del_sysfs+0xb8/0x1a0 [ 587.895297][ T5614] hci_conn_del+0xc3d/0x1200 [ 587.900549][ T5614] hci_abort_conn_sync+0xdd0/0x1190 [ 587.906394][ T5614] hci_cmd_sync_work+0x20b/0x3f0 [ 587.911907][ T5614] process_scheduled_works+0xa88/0x14c0 [ 587.918083][ T5614] worker_thread+0xa47/0xfb0 [ 587.923238][ T5614] kthread+0x38b/0x480 [ 587.927937][ T5614] ret_from_fork+0x514/0xb70 [ 587.933105][ T5614] ret_from_fork_asm+0x1a/0x30 [ 587.938486][ T5614] [ 587.938486][ T5614] other info that might help us debug this: [ 587.938486][ T5614] [ 587.948739][ T5614] Chain exists of: [ 587.948739][ T5614] fs_reclaim --> cpuhp_state-up --> dpm_list_mtx [ 587.948739][ T5614] [ 587.961044][ T5614] Possible unsafe locking scenario: [ 587.961044][ T5614] [ 587.968526][ T5614] CPU0 CPU1 [ 587.973925][ T5614] ---- ---- [ 587.979324][ T5614] lock(dpm_list_mtx); [ 587.983529][ T5614] lock(cpuhp_state-up); [ 587.990419][ T5614] lock(dpm_list_mtx); [ 587.997146][ T5614] lock(fs_reclaim); [ 588.001157][ T5614] [ 588.001157][ T5614] *** DEADLOCK *** [ 588.001157][ T5614] [ 588.009339][ T5614] locks held by kworker/u9:3/5614: 5, last CPU#1: [ 588.015815][ T5614] #0: ffff88805791b140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 588.026646][ T5614] #1: ffffc90003b1fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 588.039241][ T5614] #2: ffff888079c98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 588.049154][ T5614] #3: ffff888079c980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 588.058953][ T5614] #4: ffffffff8f5fb280 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x720 [ 588.067971][ T5614] [ 588.067971][ T5614] stack backtrace: [ 588.073898][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 588.073927][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.073942][ T5614] Workqueue: hci0 hci_cmd_sync_work [ 588.073970][ T5614] Call Trace: [ 588.073978][ T5614] [ 588.073987][ T5614] dump_stack_lvl+0xe8/0x150 [ 588.074020][ T5614] print_circular_bug+0x2e1/0x300 [ 588.074046][ T5614] check_noncircular+0x12e/0x150 [ 588.074071][ T5614] __lock_acquire+0x1520/0x2cf0 [ 588.074110][ T5614] ? __bfs+0x153/0x290 [ 588.074140][ T5614] ? __pfx_hlock_conflict+0x10/0x10 [ 588.074165][ T5614] ? __kmalloc_noprof+0xbc/0x720 [ 588.074189][ T5614] lock_acquire+0x106/0x350 [ 588.074218][ T5614] ? __kmalloc_noprof+0xbc/0x720 [ 588.074244][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 588.074270][ T5614] ? __lock_acquire+0x13e8/0x2cf0 [ 588.074303][ T5614] fs_reclaim_acquire+0x71/0x100 [ 588.074328][ T5614] ? __kmalloc_noprof+0xbc/0x720 [ 588.074352][ T5614] __kmalloc_noprof+0xbc/0x720 [ 588.074376][ T5614] ? get_device_parent+0x20d/0x3a0 [ 588.074405][ T5614] ? kobject_get_path+0xc5/0x2f0 [ 588.074445][ T5614] ? kobject_get_path+0xc5/0x2f0 [ 588.074475][ T5614] kobject_get_path+0xc5/0x2f0 [ 588.074505][ T5614] kobject_move+0x2fa/0x720 [ 588.074534][ T5614] ? __pfx_kobject_move+0x10/0x10 [ 588.074561][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 588.074586][ T5614] ? get_device_parent+0x366/0x3a0 [ 588.074618][ T5614] device_move+0xe0/0x720 [ 588.074653][ T5614] hci_conn_del_sysfs+0xb8/0x1a0 [ 588.074675][ T5614] hci_conn_del+0xc3d/0x1200 [ 588.074704][ T5614] ? hci_abort_conn_sync+0xa7b/0x1190 [ 588.074734][ T5614] hci_abort_conn_sync+0xdd0/0x1190 [ 588.074766][ T5614] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 588.074796][ T5614] ? abort_conn_sync+0x26/0x210 [ 588.074830][ T5614] ? abort_conn_sync+0x26/0x210 [ 588.074861][ T5614] ? abort_conn_sync+0x19c/0x210 [ 588.074892][ T5614] ? __pfx_abort_conn_sync+0x10/0x10 [ 588.074926][ T5614] hci_cmd_sync_work+0x20b/0x3f0 [ 588.074952][ T5614] ? process_scheduled_works+0xa1a/0x14c0 [ 588.074976][ T5614] process_scheduled_works+0xa88/0x14c0 [ 588.075016][ T5614] ? __pfx_process_scheduled_works+0x10/0x10 [ 588.075044][ T5614] ? assign_work+0x3cf/0x5d0 [ 588.075070][ T5614] worker_thread+0xa47/0xfb0 [ 588.075110][ T5614] kthread+0x38b/0x480 [ 588.075140][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 588.075164][ T5614] ? __pfx_kthread+0x10/0x10 [ 588.075195][ T5614] ret_from_fork+0x514/0xb70 [ 588.075227][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 588.075251][ T5614] ? __switch_to+0xc89/0x1420 [ 588.075273][ T5614] ? __pfx_kthread+0x10/0x10 [ 588.075297][ T5614] ret_from_fork_asm+0x1a/0x30 [ 588.075329][ T5614]