last executing test programs: 3m44.751534719s ago: executing program 3 (id=3953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r1, 0x34da2000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000002000016d363238d16a0071020000009fbc2288"], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3m44.572040617s ago: executing program 3 (id=3958): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe8, 0x67, &(0x7f0000000540)="17d5f2fc4705439a2fac44ca6fa88c2037a569baef34bcc1b7d79bcf6b826bee04583a074058f43a53ff7f3d70fbff227c9aeef89e70692fd790d7fbae438766ff397ee8fd98a15ba131895677f8119b8f7e7c1627faba0f93db43ddb7365a071e4ed7f94a8519718e596c38c4dcd36c259f4606201afe43bcb19a78c403fad12b3104a17ebf2108e4d7cfc62e0637e4998a1a91ffbe91b48bcf97f78b74c51ab972a403ce5e11753ba95574dc6e2ce9218e8f9f1f4c2300a637357e2cfe5e1ed073c1d7f49e10c10155ed6dc4ffce511f9a05b1c20c64cd191c7f69986c923bba43cf044d80fa6b", &(0x7f00000000c0)=""/103, 0x7, 0x0, 0x91, 0xf0, &(0x7f0000000440)="1f9d72b08835f3b6fae2e8bb5dc51e35da8391925bbad7fc105f6230b39dadcc4f428612b7e1bf29925b939942bcbd30e973f75195ff084109c8b38f45220bf1d44c47799786d1899df34a33f57456d4a3d7aa13e7cfeb9dc6e322c926923fb90a40b22cac268aaf6b65ac97323b73158edcecd0f5f246794bcf39c243122d55ef05b340abfc5776db1e91339b7f48af7a", &(0x7f0000000640)="806392f38f1ba1a8a9a1a2a51a9cc7914e81181cb1a1671956d67ba509b7de0933520923e39cf248ad47d7dab254af43c01ed199a233cf273d0a965a4e31b13a8551b6077a271b4a6901ed24ff80804980a8a6ef16ca8b604234a3d2f610e7bb5cc71b8078f0f6e5f5b8226fd70d77da778f7cea5af79ec6f52ce78d686af1f009655a9a4387682c2b0e10570cb2a86a46c2b83a0e2c7fd906694af09ef5926fdf3b3c4e3b44ca69d169ff2847e6cfe83f48e3361f2da2f2c7f1b1de2db5d60d8af6ec368ffd57450dc3df429784ce20b236a9373f754b38b23d6832b65145f6c7dcd3ce7ada0e38b869e0ddd07d11a9", 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x70bd29, 0x7, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r5, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x18a, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tipc={{0x2b, 0x4, 0x0, 0x3b, 0x17c, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x28, 0x6e, 0x0, 0x6, [0x2, 0x3, 0x1, 0x3434, 0xdc, 0x4, 0x5, 0x9, 0x8]}, @generic={0x0, 0x4, '^6'}, @end, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0x6, [{@loopback, 0x810000}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010102, 0x5}, {@local}, {@broadcast, 0x20}, {@remote, 0x9}, {@private=0xa010102, 0x92e}, {@multicast2, 0x8}, {@rand_addr=0x64010102, 0x85f}, {@local, 0x26e484db}]}, @rr={0x7, 0x13, 0xd1, [@dev={0xac, 0x14, 0x14, 0x1}, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2]}]}}, @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3, 0x0, 0x0, 0x2, 0x4, 0x0, 0x4e21, 0x4e24, 0x0, 0x3}, [{0x1d1d, 0x7fffffff, 0x1000, 0x9, 0xfbec, 0x2, 0x1, 0x40}, {0x101, 0x1, 0x10, 0x5, 0xfffffff9, 0xccd7, 0xb, 0xdec}, {0x5, 0xcef4, 0x0, 0x101, 0x401, 0x6, 0x5, 0x2}, {0x0, 0x5, 0x1, 0x4, 0x6, 0x800, 0x4, 0x5}, {0xff, 0x1, 0x7fff, 0xadf4, 0x3, 0x0, 0x0, 0x9}, {0x6, 0x4, 0x6, 0x6, 0x1, 0x80000001, 0x2, 0x10}]}}}}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) accept4$tipc(r6, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 3m44.395535834s ago: executing program 3 (id=3963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 3m44.163269071s ago: executing program 3 (id=3967): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x281}], 0x1}, 0x4001) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r0}, &(0x7f0000001400), &(0x7f0000001440)=r3}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000800000000000000000000000000000c0015005a"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff}, {0x3}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x4, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3m44.047391631s ago: executing program 3 (id=3969): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000003f524def0000000000000000000000000000002f17ca14c493c033ce19b348c8d0911864a107983603a7e2641c8e17e8c73249aef708167664c345b1724ebb3b59fc245718b890880eb86e2c73fd5650b1ebc0fea13fe2eb6116365acb04a88ff43ed784be66364e06c779d268a914e8159c"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r1, 0x12504000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) sendto$inet6(r7, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r4, 0xc, 0xf8, 0x5, 0x10001, 0x6}, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) 3m43.023583676s ago: executing program 3 (id=3976): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000000800010000000000"], 0x30}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000000800010000000000"], 0x30}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7653f4d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f37c745}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eafd6d8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4504085d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e92}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x373e3a4e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d8c24db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1884}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58dee4af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59490b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2013c310}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237c8c9e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) 3m27.860319003s ago: executing program 32 (id=3976): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000000800010000000000"], 0x30}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000000800010000000000"], 0x30}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7653f4d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f37c745}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eafd6d8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4504085d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e92}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x373e3a4e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d8c24db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1884}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58dee4af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59490b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2013c310}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237c8c9e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) 2m34.975304255s ago: executing program 1 (id=4867): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)=' \x00\x00', 0x3, 0x20000840, &(0x7f0000000080)={0xa, 0x4e24, 0x8b7a, @local, 0x208}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000071401c643aee40000000000"], 0x10}}, 0x0) 2m34.224090538s ago: executing program 1 (id=4875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x18, 0x68, 0x300, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x3a}}, 0x18}}, 0x44050) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendfile(r4, r5, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, 0x6, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m34.029452537s ago: executing program 1 (id=4876): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r3, 0x0) openat$cgroup_devices(r2, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) getsockname$qrtr(r3, &(0x7f0000000040), &(0x7f0000000100)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r10}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x202, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r3, 0x0) (async) openat$cgroup_devices(r2, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) (async) getsockname$qrtr(r3, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r10}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x202, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) 2m32.315075239s ago: executing program 1 (id=4882): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2m31.959818487s ago: executing program 1 (id=4888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {0x1}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000500)={0xfffffffffffffffe, 0x101}) r3 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x10, r3, 0xa0c04000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmsg(r1, &(0x7f0000000980)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/196, 0xc4}], 0x8, &(0x7f0000000280)=""/23, 0x17}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x800) 2m31.780148991s ago: executing program 1 (id=4891): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244746bd4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4004000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x698, 0x1c0, 0xd0, 0xd0, 0x1c0, 0x2e8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x33}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'veth1_to_bond\x00', {0x80}}}}, {{@ipv6={@local, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xb}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, 0xd, 0x2b, 0x5d}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) 2m16.633015193s ago: executing program 33 (id=4891): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244746bd4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4004000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0080220294bbf164"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x698, 0x1c0, 0xd0, 0xd0, 0x1c0, 0x2e8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x33}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'veth1_to_bond\x00', {0x80}}}}, {{@ipv6={@local, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xb}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, 0xd, 0x2b, 0x5d}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) 1m28.091912672s ago: executing program 0 (id=5842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, &(0x7f0000000100)=""/101, 0x65, 0x40000061, &(0x7f0000000000), 0x20) 1m27.052750834s ago: executing program 0 (id=5847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="660ac4ff0000000071105b00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1m26.807228187s ago: executing program 0 (id=5853): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 1m26.610516519s ago: executing program 0 (id=5854): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$netlink(0x10, 0x3, 0xf) 1m26.39273108s ago: executing program 0 (id=5858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010000c6d00feb00000000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070020010000000000000000000000000000140035006772653000"/56], 0x50}}, 0x0) 1m26.183930171s ago: executing program 0 (id=5860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r5, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/204, 0xcc}, &(0x7f0000000300), 0x8}, 0x20) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x270000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000003c0)={'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7100fedb0008000300200000239da591000000000000", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="0c000600020000000000000005001a00000000000c00060003000000030000000c000600020000000200000008000300", @ANYRES32=r7, @ANYBLOB="05001a0001000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) 1.557542295s ago: executing program 2 (id=7129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) (async) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x6}}}}, 0xfffffffffffffd48}}, 0x4) 1.29966414s ago: executing program 6 (id=7136): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0xb, 0x2, {{0x17, 0x4, 0x0, 0x7, 0x5c, 0x68, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x88, 0x1, 0x4, [{@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x8001}, {@rand_addr=0x64010101, 0xd}, {@multicast1, 0x1000000}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0xf, [{@loopback, 0x1}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0}, 0x94) 1.175980754s ago: executing program 6 (id=7138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.011755658s ago: executing program 6 (id=7142): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004881}, 0x80) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004881}, 0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000400d}, 0x40004) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20200880}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20200880}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r2, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="6b2015b48b5a"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0b3f32280090ba85a885413297d25eef"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="1bd2d955d8ed"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}, @NL80211_ATTR_SSID={0xb, 0x34, @random="967af03733941c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1a7a608df49231ae00b0db9d4f5fbf6a"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d787ebf3ba290ffeb6deca0b4db78dfc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8ec13930a3b6153def8ba5c813eeeaff"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004440) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004440) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000008c0)={0x0, "0cb92481ebef314a0479dcec0250c8f8"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000018c0)={r6}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x64, r2, 0x602, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x70}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x60048014}, 0x80) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x8010) r8 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000001f40)) bind(r8, &(0x7f0000001f80)=@vsock, 0x80) (async) bind(r8, &(0x7f0000001f80)=@vsock, 0x80) clock_gettime(0x0, &(0x7f00000020c0)) (async) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002000)={0x51b2, 0x9, 0xfffffffffffffffb, 0x9, 0x2, 0x5622, 0x401}, &(0x7f0000002040)={0x7, 0x6, 0xa96, 0x3, 0x100, 0x4, 0x1, 0x8}, &(0x7f0000002080)={0x36, 0x8, 0x5, 0x3ff, 0x8, 0x7, 0x1, 0x401}, &(0x7f0000002100)={r9, r10+10000000}, &(0x7f0000002180)={&(0x7f0000002140)={[0x9]}, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000021c0)={0x0, r8, 0x1, 0x4, 0x3ff, 0x7}) (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000021c0)={0x0, r8, 0x1, 0x4, 0x3ff, 0x7}) pipe(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000002240)={0x1, 0x8001, 0x201, 0xffff66b3, 0xc, 0x2, 0x1d59183d, 0xe3}, &(0x7f0000002280)=0x20) connect$inet(r11, &(0x7f00000022c0)={0x2, 0x4e24, @loopback}, 0x10) (async) connect$inet(r11, &(0x7f00000022c0)={0x2, 0x4e24, @loopback}, 0x10) bind$netlink(r11, &(0x7f0000002300)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002380), r12) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x30, r13, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000002480)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f00000024c0)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7, 0x0, 0x6a, 0x0, 0x8001, 0x10000, r14}) 847.637246ms ago: executing program 6 (id=7146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "635cce56f444ad2cb198a0d1a5969f69c44c4c2df5704f72ddde3512e110d1dfe39ed205bce5fb00013ff6795f6f213d7505e0e8a3b137e7d2c38da7d321dd3ebde92807f54765487117caa564a9982a35f17ac63efce4a2a91a10eccfa349c2363a1643b0ccd68cbc0c534a2ca6e24b4eafc658f60bb732ffc0aa858c1ae80886a39684d53b14bfa2f18d12d5cf4d4b72d411ddda8baf24bba0364c3c6a5b04302a509d0c9b11ea"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x44}]}, 0x68}}, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r4, 0x2d, 0x8, 0x9, 0x8, 0x22, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8000, 0x7800, 0x6, 0x7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@initdev, @empty, 0x0}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1b8, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r0) r9 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r9, &(0x7f0000000940)={0x22, 0x9f, 0x7, 0x6, 0x9}, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000980)={0x0, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x90}}, 0x2, 0x10, 0xffff29b1, 0x80000000, 0xc0, 0x3, 0x4}, &(0x7f0000000a40)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a80)={r10, @in6={{0xa, 0x4e21, 0xef9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x341d1b40, 0x3, 0x7, 0x80000000, 0x8, 0x9, 0x9}, &(0x7f0000000b40)=0x9c) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1b4, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x178, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2de0867e0a4cf92d07808f296ec76c3b768de200b6a6270286b37e318a311679"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2a14df73d2922702fb9b753b75afadd9da3a630c56a19350f8e8e17f1975674a"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x30a01fef, @mcast2, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a6c0c69615f10862833029efcca7e9a243d152e6187c031a3c1a0389fdf5a9d1"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x1ff, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, &(0x7f0000000e00)={'ip6tnl0\x00', {0x2, 0x0, @empty}}) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r12, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004884}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x4001) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000c) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000001200)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f00000012c0)={{r0}, r13, 0xc, @inherit={0x60, &(0x7f0000001240)={0x0, 0x3, 0x4, 0x7, {0x21, 0x1ff, 0x503, 0xa28, 0x6}, [0x6ab, 0x10001, 0x6]}}, @name="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"}) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000022c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x44, r14, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x44}}, 0x24000010) getsockname$packet(0xffffffffffffffff, &(0x7f0000002480), &(0x7f00000024c0)=0x14) 840.237146ms ago: executing program 6 (id=7147): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000680)="4f2ff5368b0de9d88c54c58fb35405cad0d26b199002054fac0d3caed8d97dbd0755822375abb74ae78fd0c0fda1fb887209024ead94bc7acce422c657f909309056d1e28d5920d6ffaeb4e8cc098c6cb9c40a011473deea2355d0c7c5c4dbd7adec89cab7e1901ea40f1758a3a243262c8bee308159e44ff7ede2aafe930fda211c8eefaca48a8aee1f8f12f4ad8ffac6cc734ab205851cc556d19d0e8d0aabce942ad1f1381d0e53d48a030ec85dd4f86190a0b4a226a0caeaf269f3b79b70af67a7388841bcd8ffc3af0ec1a84cb4832abf8c376eaf1d001ef2dad2bfab4986210ed73c360b5679cf0d1481360f", 0xef}], 0x1, &(0x7f00000007c0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x55, 0x1, 0x4, [{@empty, 0x3}, {@local, 0x10001}, {@multicast2, 0x5}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x9}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x900}}], 0xc8}, 0x800) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000038000000000001907864010100ac1414aa0b009078032c0000450000000089000000000000ac1414aaa835a23da43974ff"], 0x0) connect(r3, &(0x7f0000000040)=@ethernet={0x183, @random="53a7501ff021"}, 0x80) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x22, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x9, 0xa, 0x1, 0xfffffffffffffffc, 0x10}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x2d, &(0x7f00000002c0)=""/45, 0x40f00, 0x77, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xf, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r8, r9], &(0x7f00000004c0)=[{0x3, 0x4, 0x2, 0x2}], 0x10, 0x5}, 0x94) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 816.898065ms ago: executing program 5 (id=7148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) sendmsg$nl_route(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) (async) sendmsg$nl_route(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) (async) 731.382922ms ago: executing program 6 (id=7150): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000ac0)={&(0x7f0000000700), 0x6e, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/161, 0xa1}, {&(0x7f00000008c0)=""/2, 0x2}, {&(0x7f0000000900)=""/30, 0x1e}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000bc0)=""/218, 0xda}, {&(0x7f0000000980)=""/59, 0x3b}], 0x8}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x2c, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0xd}, {0x10}, {0x0, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7961, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x29, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x0, 0x6, 0x7, 0x1, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xae}, @jmp={0x5, 0x0, 0x8, 0x2, 0x7, 0x2, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f0000001580)=""/4096, 0x41100, 0x24, '\x00', 0x0, @fallback=0xb, r15, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xd, 0x9, 0x3}, 0x10, r16, r9, 0x3, 0x0, &(0x7f0000000240)=[{0x2, 0x3, 0x5, 0xa}, {0x4, 0x5, 0xe, 0x3}, {0x5, 0x5, 0xe, 0x1}], 0x10, 0x6}, 0x94) 725.786745ms ago: executing program 4 (id=7151): r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfff7fffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffdaf0}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x7ffffffe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0xc0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100e70300000800034000000001140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100e70300000800034000000001140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 721.464605ms ago: executing program 5 (id=7152): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00020000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00080062726a64676500000c0002020400000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) (async) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca25c11}, 0x4008840) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0x100000001, 0x9, 0x1}) (async, rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) 662.254278ms ago: executing program 2 (id=7153): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100)=')*\\^%+,!/^\x00', 0xffe6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0], 0x1c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="0102000b00000000fe8000fcffffffffffffff0000000036de0716299729bd89e1e2c3694abff286d6c9600fbb050d2252bb47f4c94834769c0c2d06c3c391af3f"], 0x18) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x42) 592.397862ms ago: executing program 5 (id=7154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000014001695100001800c000300f4c8000077000000579b418f49ea755380f5630bf38b7f5b5f6918c7fd1f445c3261"], 0x48}}, 0x24040800) 567.361355ms ago: executing program 4 (id=7155): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cef1597f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86b61500bdd7e6e133a9870ec9c0bb77c90702910cc39a0f3a419f12ba636b5837a5ecb110c89fb8d14da2d04175b18a14b2618d05fb58e9a832a4993472e5d068fe44e92676e484662a656d93a0f368c0cfc70c68459b61f194aac3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000e80)={&(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)={0x2, "22af"}, 0x3) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x12, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 565.847624ms ago: executing program 5 (id=7156): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r3, &(0x7f0000000100)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000840)={'nat\x00', 0x0, 0x4, 0xd5, [0xd, 0x5, 0x2, 0x3, 0x5, 0xffff], 0xa, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740)=""/213}, &(0x7f00000008c0)=0x78) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000000000000290000000800000000000079000000006de03b513b6b008ddca02c9d67feb71c9e62d7dfba80a0cf53c6c230b90111589df57b6848ff42dc4758954a2f6102cac17aadba1355b474d336e8b39148759ebfd9305b13510c180ef3d12a2c5cb22105bdcc0e58500b4fb751efe3ebc318546a30"], 0x18}, 0x40080) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1339, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x20, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r8}, @generic={0xb6, 0x2, 0x2, 0x0, 0x9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffff801}, @alu={0x4, 0x0, 0x8, 0xa, 0x8, 0x4c, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x2, 0x2, 0x0, r3}, @generic={0xff, 0x1, 0x7, 0x0, 0x73a6}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x81, '\x00', r10, 0x0, r1, 0x8, &(0x7f0000000140)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x8, 0x1, 0xfffffff1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x4, 0x5, 0x7, 0x7}, {0x5, 0x2, 0x9, 0xa}, {0x5, 0x2, 0x6, 0xa}], 0x10, 0x59d5}, 0x94) 487.564809ms ago: executing program 5 (id=7157): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = accept4$netrom(r1, &(0x7f0000000040)={{0x3, @rose}, [@bcast, @rose, @netrom, @null, @null, @netrom, @netrom, @default]}, &(0x7f00000000c0)=0x48, 0x0) sendto(r2, 0x0, 0x0, 0xc880, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x1, 0x4, 0x1}}, 0x80) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 460.365572ms ago: executing program 4 (id=7158): unshare(0x22020400) unshare(0x54000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 368.383047ms ago: executing program 2 (id=7159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_DELSETELEM={0x304, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2cc, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff0000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, @NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "70df68cd80c74af18152b53a3d95860dc0e4d8f8e35361ae8faa7f2fbc1929f1d2c2cc8c35c220f8a5890dd798792fa94b2e21995f41564eb92716d6654d33935ed7f709af52671ca7e8d95f0bd5e5f0f4f96421ef704b8b87042da211ffefe56b3d11d5c249f58f584f123043f9734b1513a30f798419404c75c123c0a1ef9b2fdc0a1acd621e8905579065a7ac023a5433edf76b3b4949f2ea6210725fe7f6c55db77be39d1d346c170d489322334c847d03668b9ce77775b80a65a1362862aaef646fd6407f676c905277877134"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x6, 0x3, "b0b1"}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14}}, 0x32c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88847b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000017c0)=[{{&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000001500)=""/143, 0x8f}], 0x3, &(0x7f0000000240)=""/97, 0x61}, 0x9}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001640)=""/148, 0x94}], 0x1, &(0x7f0000001700)=""/129, 0x81}, 0x3}], 0x2, 0x10042, &(0x7f0000000400)={r4, r5+10000000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20080000}, 0x40010) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) 367.255228ms ago: executing program 5 (id=7160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="c17d5c7c4ea79fb6967d4151693cf627c16ebf8a758d5f36cdc55d5d0487a0652643f2aaef27fd4454ab5bd3d007c8976d9ce9bf98e732fcace22bc57afbe13e652917eff38ada88c5a151f84c31e3c84664380151f5877ced0344d0da36c857ab6dac1e00b44891821c42d8b6cbe96a68fb668c8440e30358b0298decedeaf6decd6ea7f83edd4a35945f00325188d62dc57888c6412d022269e2c152d6c4f0c57c332e11ec930de3e1d48e6a07e3b209dde199beaebd681a00037ce004287972eefe4bd5b7cb27780c49da12ef272ee5403d0ad5e056aa651d19faff008dff71e37330dae2636676d1921e7e96a7f681d97064dbfd4437e6764e69a9fc36859f697a51261c1d2ed38037f5f59e03290605c697e49cc41a1e3f6527089324bf56e46e3181dd0acda32855643d309e6515"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0xc8d0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40010000) 366.371022ms ago: executing program 4 (id=7161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) 347.615241ms ago: executing program 2 (id=7162): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}]}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000007200020025bd7000ffdbdf250700000021fb73ebda8a619f1c778a738847769778ae3e228e493f77b8dedb11c97e7c67af85f4bd6dba", @ANYRES32=r10, @ANYBLOB="0800010001000000080001000000000008000100000000000800010001000000080001000100000008000100010000000800010000000000"], 0x50}}, 0x24008814) write(r2, &(0x7f00000001c0)="ce62216be24321fe544c694204e7b5d4b0eee86c160af5cac721fb56f1493f1bf0b98b1049f95457a432e878c9476fca190eda4138028643af70f6ed33fbdfbc19b591ea6b36dc152b285d792620bb45834d0ea646e5b7aba51955f3d44bb41f8913447af1ffd993c07ec7198044605dbc53f2d075fe83c259cf1aff3ead42ce4a9f81bcd95e", 0x86) 273.11252ms ago: executing program 4 (id=7163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x2c}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r7}, 0x94) 58.091925ms ago: executing program 4 (id=7164): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x89e0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)="81a76f7088e9ba47d58590082109aa0d76acc4d7856e0c355009eab8ca2c1180cd2e54b19208733c8e25b4a9c092f47c5a8d8e2ff0b6374d3a9e07a2e9045828b73c69ac9aaa6f0b70222c107c108a11d5740210451e421a2be10251cb675a6f8743784a15f0511f8df38807a7afa9387682899578238088f0616a494c5aadf68b3375fa01f9d2599cffa78803511ea6dbeb79b1de6d817cdb634bdda87c88db703a0938910272395e7b5b66b9be26e3e6af9e6742f89d609250e94482e9c20fee79f79d0477bc3e989e88e37e2d82eb5a6091c483749e6fe93797f7f4fdbe9b605f5378594aaa452ce2ad30f0b17d74653c10cccf", 0xf5}, {&(0x7f0000000280)="48a3050a644afe3b390fbe80818feac9b222e09a1ac9774c1ac22482b9463a4d151428b0431987671af846c369f741b7a3902bb1db262e4e61565e90c2c3c3355fac0904286e151b14ed725154d56f420ded8f1521172e6c0bcabaeea768bf12609af1513e0da25fe4b6dbf9d6d1eda0d2faf701d547a1c1a39e28f368", 0x7d}, {&(0x7f0000000300)="ecf0ab1a65ec827e3b0617116c957166850bf5ef5d40e61fd5b117b6f15bbe768d75e759eefc3f20b5ed93284043f405213f8314f6bb63bf6b31bc0cdf49508bea7ebfb3a4", 0x45}, {&(0x7f0000000380)="e9d1e8266a58e8456adedaae632536b44ee51798b7faf8441c672ebc865d248eb1f9226dfeffbb0dfe490da08f9fa96569bfba6f5699d81e76848588a6322aaf426e78a0d2a0cf8888cefaf7ded836e9bb901797051b04e0deb63d96dabe6c1499aa361f9f26a0fb303c8ee426688acfdbfbf6747a5e84ec512ee258c258956eb74e5207f2829e8265ec38dd3c2902dca668bb3e73a1cf0b1d209ce080860cb0137b3a", 0xa3}, {&(0x7f0000000500)="a166a8e9fee49c481900575d8acb2edaac6a08cabc92d6eddf5106385ae77874838fbd889cdb263fa676dc51097417c2eb7fc52581e6bdbc5d4c7642ad15df624db5acdf3e9ac856737438b7245affddece008d1ac748dd9cbfe0ab793aaea8135a44f98fee372b1d3a6f26d10fc6f1588132272a7f8d71403380a09dadd9266d64e8413ce8ee5eeaf23452d65112b983d3b1129806734e9fb681cca08b429ac973e7c4414ebb2ec6b44a6012d9c978e01b8227d167fb70ab6d3e0c59841e416c46369ad353d29b748a0575b60144c2032"}, {&(0x7f0000000700)="9cee969f9e2bf739fbd257369cfcb39c6e323be9eb11c930a34ce11884b58051b61b41f806a6fdc2459ec1da11c43e6c08b279b2c20c7500052dec015c61761cb0d143e3e0c2c7f5b4de6db7e185f7817af954bba67e7717abe3ebdb6de5ecb3d25fc12247deca7f693bd76cdba54744092a03ac12681221e78f49577b9167aaccc486baee1a966067fa2ac99a064323"}, {&(0x7f0000000800)="6a8144f566ecf08de4d18a00684cc1fff0b14f60b0b727fbf4475928f03160cc718cce423f228b475a7967cf80e5575156d93d086ae67f813f45031115e2b1b5bc8ba436873538aaf91ea8e47d5a61a70549e12b778979c7"}, {&(0x7f0000000600)="496a388a9a8ad2a720857161dedca7885843a98d5eb6cc07bfd039"}], 0x4, &(0x7f0000001080)=[{0xc0, 0x108, 0x7fffffff, "8d6068e3063da9bcb3c12ee7c86ff0f850bbfbdcfa586aa1996bad5969dc0bca3508c8a4e2ac048daddff3b5699e5c3e5eb26061662f98b9856469790e1595b7fed947835e20e624914e7b512bea02e47bd2fc3168de7e738567624dc8ee257267604aeae1d8a7d4282608111cc2e7c3e018928a539544c4ef310da504007a2aaa01da807c96714a27b61d187b199f73f74c71c9d23799d2ea3e47cc15115fe1d6ba98700161d97212"}, {0x20, 0x111, 0x0, "c25a9d7f669abcc35da9c6752a6eb9"}, {0x100, 0x109, 0x7, "2e2e734fbf25a3b1ceff5ed30a40ccfbaac81b227bb6ffe6256bf69d273a643cec64e93ccd5e6a812dfebab7aaf8d3277338fdf38911afc5a8c1a0e62be2503512516cf658aa9aaacdd56e8fe85c352ac54e88127fbf115a0474a5c1dac2747dca7e1b89de38e6f09993a2cff722217568162c061b1f74c6ca890bc4710cd8f2cb70b1d4ab3424301bdd2566961d12cf892bd7e490c57655ce2a8eeb53e5cb03f43d84d4f5bb5166e39dc48566ef30f174ff79d2735100e00a2c1dde2e4dc5b9ee0e53ea45cf869dd5f55e1e7281d7e64b5b7fd795c254bdb559858ecebf70fee24708401280b56b40b3"}, {0x18, 0x10e, 0x18000, "077704ad232019e7"}, {0xfffffffffffffe47, 0x84, 0x8, "d44068c3228b496da9e89ecae8984419355388050534ef0f6a2368edc34a3e88b51f63d5755e2320cd03fcee58d23f49386b949575160d6cd2a9589d1a2a0ddf0137a5c64eb6b12c3008c6e655dd96ecd8b02d31e77ecbed7817567b941d4177463d51e2eadd9e1ae585bc8f2bae4304103674235604d235f0a3590367cbb30cb76d9b65ad8b26e39b59d11ab7b272ceecce9f54"}, {0xa0, 0x118, 0xaa5, "1ee1f668963b44bcc1d7cd29464d78d76756f4917db73bd08d8d2fd2b2d933da80989a909087573c625a71ece79a6ea3ef6cc16644da6f9d6bdacac72d7c08fea0d3313bc0e8dc96ad957149a8522bf3595d4068d92987bed93df9eb91de70699e4b3bf3df31c61ee867856a9972ee35e6bcdefcf786dc9ea5e9e0a1351094bbcfddec1f92cfd11a454f"}, {0xd8, 0x101, 0x6, "9c44775d8386d3fc1e0cb1b26fbeb0d22857f21fdd82974162ecdbafb540a735ba87ab52a0e05ba458850bf88e64ec37833771b47976b59439d131940467e23dda791d4f198b7ecec18aed96307103caed1e1b292b456dee97e31517915ccd5754c748fdc03935084f29c4525c3fa35b5e87b18389515150ed6592d2e422559c2a70fdb8398b55e9b324855ec801ea976174d95d45f6a35cd8cdf9a8a14b22a5540194302f2ecb23c092cf92d30a4ae7cddaf7826df505a2acbd427f536ffebf2614cda89aa2d3"}], 0x418}}, {{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0x1, 0x4}, 0x80, &(0x7f0000000e00)}}], 0x2, 0x24000005) socket(0x2a, 0x2, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}, @TCA_U32_LINK={0x8, 0x3, 0x2000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0b96a7a05d90eb5}, 0xc004) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000babd4917fe8531d114cebeb9d49977ca0a3418b16ac7139181fcd288c270ea8ee524b81a7013acc6d504b9314d87a2ddd9020b9eabcb9aeda9ce6a6a2ff5d07110a501154cbc535c75e6d1874b2a028f1a9148bb731ad2c8f071cbacc99cf791c4f5d9fb58208c14bf1e79ddee42078d736a521e33f05d88375e7bab43c6c6fce4ae3163a618e3fcef2fdf5434d513", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r7}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r7}, 0x18) setsockopt$ax25_int(r6, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4) (async) setsockopt$ax25_int(r6, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4) syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="8ba98766577d", @void, {@llc={0x4, {@llc={0x42, 0x42, "bf", "80"}}}}}, 0x0) (async) syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="8ba98766577d", @void, {@llc={0x4, {@llc={0x42, 0x42, "bf", "80"}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f00)={0x66, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={r9, r4, 0x25, 0xb, @val=@tracing={r10, 0xeac}}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 56.352245ms ago: executing program 2 (id=7165): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r1, 0x0) ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10030000", @ANYRES16=r3, @ANYBLOB="070027bd70000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400010004000500c002038002010500de77bd532d5870b491dc308cec15bf946d0293979111fadab90ec22f102af992e11fae41e70213f744bcf4d813b76a1e77707f4fc3e3b2e2b6e351d20367ed7249984ee54e10ee00a6d69f86abb4af7567310c4bd6c5750fe02e9b4126fb5da0c852767d86d52784b9e2813daf153c272ceda4b8814d17d1e7b544dab3385284b1ed51c8fd2f537c0360ec3207679e31c8cd57b42fa6ae441c44e384c60a2e5c3a3bc59d4723c23f10f9b06b362357eda13f677f83fef91bb20fb4223048de678964c4b515ec50f609e7c445c2255a4c0cab0ca00f44850387a66568087c1bf59a142e0b14eddb3dac552962b8e81d3951d4dbcca55e99024fb349310be30000e3000400c674a3d932375a655a6e08c5d51a5f3bb6e82c3956c2c948cc38e5f5840cf4c97450370770fcfef8439c4022c555cdc7837cfaaa7ce04a96995a100355ade8387f11bab5c2843eb887f6f6efb230a3ff0621305e02524e2d15f120fbe5ef65dd7d2823e2667c5996ba8f78043a95f5d7bb78d87579c82272060e59d605515b47b24e5f130edf7cf41d9fbca8b3ff87e3fa540c4e8504af7aeb8a77a6308758537d86851d7208786bcca33bc2aabf8f6e8b4b9efc437ec117c8eca32ec4e8545815c2b0e8dce6ccb27e0318e81f5bc8c08e7e34fa4ce4ba0312af2b74d8797e0054000500a8ae44fcc08205528057d433cb92d5730350762c2cdfef926cc22b7dfd762b6b56f4e5814000965311be885ea0b0e932422f34b2a6d19c5be29ed1965407f763c4a0d5d3e70f4cbc4794a3acde8cf2097d000400d5ba87964e176ee047e424715205ed6d06d65d0ad35abea46f339811282b91f4d5677084d15776d6c13b33df3b43d4868efd7986f7ee7702dcf029ab69c1b4225923e9d6ddd9ce6f1c326da13529712dd14684a01f2a653015f760b2805b0b11054002e4d6f4e854b225258a5b2f9a00ded83cd22e18f295660000000800090006000000050002000700000005000600"], 0x310}, 0x1, 0x0, 0x0, 0x4000045}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 0s ago: executing program 2 (id=7166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.993935][ T3889] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 469.023238][ T3889] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 469.043421][ T3889] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.160465][T25235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5214'. [ 469.188339][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'. [ 469.342714][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 469.394275][T25255] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.547346][T25263] vlan2: entered promiscuous mode [ 469.552470][T25263] geneve1: entered promiscuous mode [ 469.558499][T25263] vlan2: entered allmulticast mode [ 469.563669][T25263] geneve1: entered allmulticast mode [ 469.576109][T25086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 469.590160][T25086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.607623][T25086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.631538][T25086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.762622][T25086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.792806][T25086] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.820031][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.827182][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.849927][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.857127][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.121254][T25086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.278028][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5230'. [ 470.344168][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5232'. [ 470.442967][T25312] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5234'. [ 470.518570][ T5846] Bluetooth: hci6: command tx timeout [ 470.680064][T25321] syzkaller0: entered promiscuous mode [ 470.704872][T25321] syzkaller0: entered allmulticast mode [ 470.778368][T25332] validate_nla: 1 callbacks suppressed [ 470.778385][T25332] netlink: 'syz.0.5241': attribute type 10 has an invalid length. [ 470.786687][T25086] veth0_vlan: entered promiscuous mode [ 470.807494][T25332] team0: Device ipvlan1 failed to register rx_handler [ 470.815880][T25332] tipc: Resetting bearer [ 470.883434][T25340] xt_hashlimit: max too large, truncated to 1048576 [ 470.930943][T25086] veth1_vlan: entered promiscuous mode [ 471.281254][T25086] veth0_macvtap: entered promiscuous mode [ 471.298558][T25086] veth1_macvtap: entered promiscuous mode [ 471.323176][T25086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.345759][T25086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.394284][T25350] bond0: Unable to set up delay as MII monitoring is disabled [ 471.403379][T25350] bond0 (unregistering): Released all slaves [ 471.454281][ T6097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.473303][ T6097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.491600][ T6097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.511962][ T6097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.681249][T25357] syzkaller0: entered promiscuous mode [ 471.686993][T25357] syzkaller0: entered allmulticast mode [ 471.698898][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.715007][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.599180][ T5846] Bluetooth: hci6: command tx timeout [ 473.160670][T25363] tipc: Enabled bearer , priority 2 [ 473.225759][T25373] team0 (unregistering): Port device team_slave_0 removed [ 473.262893][T25373] team0 (unregistering): Port device team_slave_1 removed [ 473.282439][T25374] __nla_validate_parse: 4 callbacks suppressed [ 473.282454][T25374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5251'. [ 473.301279][T13670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.310260][T13670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.401643][T25386] bond_slave_0: Caught tx_queue_len zero misconfig [ 473.466667][T25386] pim6reg1: entered promiscuous mode [ 473.471993][T25386] pim6reg1: entered allmulticast mode [ 473.530082][T25395] netlink: 'syz.0.5257': attribute type 10 has an invalid length. [ 473.549598][T25395] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5257'. [ 473.648058][T25411] sctp: [Deprecated]: syz.2.5260 (pid 25411) Use of int in max_burst socket option deprecated. [ 473.648058][T25411] Use struct sctp_assoc_value instead [ 473.742988][T25415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5261'. [ 473.757046][T25415] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5261'. [ 473.966488][T25433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.047173][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5267'. [ 474.056602][T25434] openvswitch: netlink: Missing key (keys=40, expected=80) [ 474.223394][T25447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5272'. [ 474.237506][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5271'. [ 474.267183][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5271'. [ 474.280750][T25449] syzkaller0: entered promiscuous mode [ 474.286517][T25449] syzkaller0: entered allmulticast mode [ 474.292346][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5271'. [ 474.308492][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5271'. [ 474.367568][T25451] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 474.380680][T25451] bond0 (unregistering): Released all slaves [ 474.396765][T25455] netlink: 'syz.2.5274': attribute type 1 has an invalid length. [ 474.448778][T25457] netlink: 'syz.5.5273': attribute type 1 has an invalid length. [ 474.462170][T25457] netlink: 'syz.5.5273': attribute type 2 has an invalid length. [ 474.473324][T25455] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 474.675942][ T5846] Bluetooth: hci6: command tx timeout [ 474.754261][T25480] netlink: 'syz.6.5282': attribute type 1 has an invalid length. [ 474.763304][T25480] netlink: 'syz.6.5282': attribute type 2 has an invalid length. [ 474.826250][T25477] delete_channel: no stack [ 474.886326][ T5918] IPVS: starting estimator thread 0... [ 474.984894][T25493] IPVS: using max 33 ests per chain, 79200 per kthread [ 475.110344][T25516] bridge_slave_0: default FDB implementation only supports local addresses [ 475.951220][T25533] IPv6: Can't replace route, no match found [ 475.986611][T25548] netem: unknown loss type 8 [ 476.012041][T25548] netem: change failed [ 476.052660][T25553] netlink: 'syz.6.5300': attribute type 10 has an invalid length. [ 476.226202][T25562] SET target dimension over the limit! [ 476.311773][T25573] netlink: 'syz.5.5305': attribute type 1 has an invalid length. [ 476.460424][T25581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.470235][T25581] bond0: (slave bond2): making interface the new active one [ 476.478299][T25581] bond0: (slave bond2): Enslaving as an active interface with an up link [ 476.497990][T25573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.756408][ T5846] Bluetooth: hci6: command tx timeout [ 476.819162][T25608] netlink: 'syz.0.5314': attribute type 1 has an invalid length. [ 476.838920][T25609] tipc: Enabling of bearer rejected, media not registered [ 476.886487][T25608] bond9: entered promiscuous mode [ 476.891976][T25608] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.924543][T25609] bond9: (slave bridge11): making interface the new active one [ 476.932961][T25609] bridge11: entered promiscuous mode [ 476.941247][T25609] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 476.969031][T25614] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.176420][T25619] syzkaller1: entered promiscuous mode [ 477.182088][T25619] syzkaller1: entered allmulticast mode [ 477.278605][T25614] wlan0 speed is unknown, defaulting to 1000 [ 477.408434][T25633] sctp: [Deprecated]: syz.4.5319 (pid 25633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.408434][T25633] Use struct sctp_sack_info instead [ 477.444950][T25634] sctp: [Deprecated]: syz.4.5319 (pid 25634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.444950][T25634] Use struct sctp_sack_info instead [ 477.578184][T25642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.035316][T25660] tipc: Invalid UDP bearer configuration [ 478.035369][T25660] tipc: Enabling of bearer rejected, failed to enable media [ 478.113563][T25654] syzkaller0: entered promiscuous mode [ 478.125869][T25654] syzkaller0: entered allmulticast mode [ 478.209266][T25656] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 478.410845][T25684] __nla_validate_parse: 81 callbacks suppressed [ 478.410863][T25684] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5332'. [ 478.427602][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5332'. [ 478.529927][T25690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5334'. [ 478.543888][T25690] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5334'. [ 479.008167][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. [ 479.269898][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5347'. [ 480.039171][T25784] sctp: [Deprecated]: syz.6.5360 (pid 25784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.039171][T25784] Use struct sctp_sack_info instead [ 480.070762][T25784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5360'. [ 480.504683][T25816] netlink: 'syz.4.5371': attribute type 1 has an invalid length. [ 480.513694][T25816] netlink: 'syz.4.5371': attribute type 3 has an invalid length. [ 480.522178][T25816] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5371'. [ 480.691161][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 480.864232][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'. [ 480.889901][T25845] netlink: ct family unspecified [ 480.900089][T25848] xt_hashlimit: max too large, truncated to 1048576 [ 480.939490][T25847] xt_hashlimit: max too large, truncated to 1048576 [ 481.070099][T25860] netlink: 'syz.2.5384': attribute type 10 has an invalid length. [ 481.159659][T25867] netlink: 'syz.5.5388': attribute type 1 has an invalid length. [ 481.168313][T25867] netlink: 'syz.5.5388': attribute type 2 has an invalid length. [ 481.272546][T25869] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 481.385532][T25877] dvmrp0: entered allmulticast mode [ 481.425485][T25873] bond1: (slave ip6gretap1): making interface the new active one [ 481.447990][T25873] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 481.465018][T25873] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 481.482441][T25873] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 481.949143][T25918] netlink: 'syz.4.5400': attribute type 1 has an invalid length. [ 482.001335][T25924] Cannot find del_set index 4 as target [ 482.120126][T25918] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 482.172318][T25918] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 482.215700][T25918] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 483.154527][T25984] netlink: 'syz.2.5414': attribute type 1 has an invalid length. [ 483.248583][T25992] netlink: 'syz.6.5418': attribute type 11 has an invalid length. [ 483.471617][T26008] sctp: [Deprecated]: syz.0.5423 (pid 26008) Use of int in max_burst socket option. [ 483.471617][T26008] Use struct sctp_assoc_value instead [ 483.546181][T26015] __nla_validate_parse: 14 callbacks suppressed [ 483.546199][T26015] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5425'. [ 483.572219][T26013] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 483.622179][T26015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5425'. [ 483.728543][T26029] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5428'. [ 483.840036][T26038] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5429'. [ 484.259787][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5438'. [ 484.326046][T26096] netlink: 'syz.2.5438': attribute type 1 has an invalid length. [ 484.346415][T26091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5437'. [ 484.491071][T26125] IPv6: sit2: Disabled Multicast RS [ 484.498348][T26125] sit2: entered allmulticast mode [ 484.538813][T26129] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 484.577072][T26129] netlink: 'syz.6.5440': attribute type 2 has an invalid length. [ 484.616636][T26129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.137621][T26184] netlink: 'syz.4.5449': attribute type 1 has an invalid length. [ 485.145539][T26184] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5449'. [ 485.154637][T26186] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 485.157101][T26184] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5449'. [ 485.188968][T26184] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5449'. [ 485.462659][T26216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5454'. [ 485.723264][T26239] openvswitch: netlink: Unknown nsh attribute 0 [ 485.874605][T26246] netlink: 'syz.4.5459': attribute type 16 has an invalid length. [ 486.098627][T26262] netlink: 'syz.2.5464': attribute type 10 has an invalid length. [ 486.141080][T26262] syz_tun: entered allmulticast mode [ 486.152599][T26265] netlink: 'syz.2.5464': attribute type 10 has an invalid length. [ 486.168481][T26262] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 486.222150][T26271] netlink: 'syz.4.5466': attribute type 2 has an invalid length. [ 486.233606][T26271] netlink: 'syz.4.5466': attribute type 11 has an invalid length. [ 486.365390][T26265] bond0: (slave syz_tun): Releasing backup interface [ 486.394576][T26265] syz_tun: left allmulticast mode [ 486.438116][T26265] bond2: (slave veth0_to_bond): Releasing active interface [ 486.472319][T26265] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 486.650272][ T30] audit: type=1107 audit(1769047935.537:7): pid=26291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 487.002141][T26311] ipt_REJECT: ECHOREPLY no longer supported. [ 487.383555][T26332] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 487.491756][T26346] geneve1: mtu less than device minimum [ 487.554910][T26351] openvswitch: netlink: EtherType 0 is less than min 600 [ 487.571109][T26355] openvswitch: netlink: EtherType 0 is less than min 600 [ 487.609902][T26358] netlink: 'syz.0.5492': attribute type 5 has an invalid length. [ 487.622407][T26358] geneve5: entered promiscuous mode [ 487.627942][T26358] geneve5: entered allmulticast mode [ 487.637297][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 487.647254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 487.657594][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 487.704124][T26364] bond10: entered allmulticast mode [ 487.710177][T26364] 8021q: adding VLAN 0 to HW filter on device bond10 [ 488.010889][T26375] netlink: 'syz.2.5497': attribute type 2 has an invalid length. [ 488.118119][ T30] audit: type=1107 audit(1769047937.007:8): pid=26374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='þ¨†ú¤Y¹ŸÂ-ºp ØÙ¦¥¨‚ŒŸdä’"ˆÜ;îÿþrHéôrmtº„ÖAhmDU]Ilc¯Ôc,_x}—ðvÓ—iûi’Ú1y’YYWûY‰>Û±}PÍWâÞ´ãL¢îû::Òñg,cG¢{D}WFÔ¢ùü­.Jñ´»*«ÿ1þñ¢ïýÇ÷»Vf¨;ŒÇºwZüŗÔW' [ 488.271545][T26380] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 488.366877][T26388] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 488.406492][T26388] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 488.412968][T26392] netlink: 'syz.2.5502': attribute type 10 has an invalid length. [ 488.463263][T26392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.566302][T26392] syzkaller1: entered promiscuous mode [ 488.586877][T26392] syzkaller1: entered allmulticast mode [ 488.655936][T26410] delete_channel: no stack [ 488.826235][T26423] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 488.835728][T19503] IPVS: ip_vs_send_async error -101 [ 488.947975][T26426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.971613][T26431] __nla_validate_parse: 15 callbacks suppressed [ 488.971631][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5510'. [ 489.012733][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5511'. [ 489.037452][T26431] netlink: 'syz.4.5510': attribute type 1 has an invalid length. [ 489.307366][T26458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5514'. [ 489.441692][T26462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.483567][T26465] syzkaller1: entered promiscuous mode [ 489.494990][T26465] syzkaller1: entered allmulticast mode [ 489.638148][T26471] can: request_module (can-proto-0) failed. [ 490.259262][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5528'. [ 490.290601][T26510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.531244][T26531] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5532'. [ 490.546784][T26529] syzkaller1: entered promiscuous mode [ 490.573433][T26529] syzkaller1: entered allmulticast mode [ 490.700159][T26541] netlink: 'syz.2.5535': attribute type 11 has an invalid length. [ 490.815717][T26541] nbd1: detected capacity change from 0 to 127 [ 490.851877][T26552] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5538'. [ 491.455771][ T5846] block nbd1: Receive control failed (result -104) [ 491.547214][T26591] dvmrp0: entered allmulticast mode [ 491.820239][T26615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5554'. [ 491.835238][T26605] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5551'. [ 491.863266][T26605] openvswitch: netlink: Flow key attr not present in new flow. [ 492.060839][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5558'. [ 492.071215][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5558'. [ 492.099351][T26633] syzkaller1: entered promiscuous mode [ 492.139337][T26633] syzkaller1: entered allmulticast mode [ 492.525805][T26654] bond11: entered promiscuous mode [ 492.531399][T26654] bond11: entered allmulticast mode [ 492.555241][T26654] 8021q: adding VLAN 0 to HW filter on device bond11 [ 492.767561][T26673] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 492.792871][T26671] geneve1: entered promiscuous mode [ 492.809051][T26671] geneve1: entered allmulticast mode [ 493.241138][T26700] openvswitch: netlink: Duplicate or invalid key (type 0). [ 493.264965][T26700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.401106][T26706] x_tables: duplicate underflow at hook 1 [ 493.684535][T26714] syzkaller0: entered promiscuous mode [ 493.690581][T26714] syzkaller0: entered allmulticast mode [ 494.040071][T26741] __nla_validate_parse: 3 callbacks suppressed [ 494.040090][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5585'. [ 494.196904][ T5151] Bluetooth: hci6: command 0x0405 tx timeout [ 495.417099][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5587'. [ 495.454208][T26754] netlink: 'syz.0.5588': attribute type 13 has an invalid length. [ 495.476975][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5587'. [ 495.487972][T26753] netlink: 14688 bytes leftover after parsing attributes in process `syz.5.5587'. [ 495.525447][T26761] openvswitch: netlink: IPv4 tunnel dst address is zero [ 495.532724][T26754] veth0_macvtap: left promiscuous mode [ 495.548663][T26754] macvtap0: entered allmulticast mode [ 495.613969][T26754] macvtap0: refused to change device tx_queue_len [ 495.622423][ T5151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 495.637316][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5587'. [ 495.651371][ T5151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 495.659812][ T5151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 495.668906][ T5151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 495.677444][ T5151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 495.810528][T26763] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.065209][T26786] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5595'. [ 496.305014][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 4 seconds [ 496.317664][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 4 seconds [ 496.329443][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 4 seconds [ 496.340588][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 4 seconds [ 496.385131][T26804] netlink: 'syz.2.5599': attribute type 21 has an invalid length. [ 496.401230][T26804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5599'. [ 496.480276][T26763] wlan0 speed is unknown, defaulting to 1000 [ 496.777873][T26827] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5605'. [ 496.911689][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5607'. [ 496.924211][T26831] netlink: 'syz.0.5606': attribute type 4 has an invalid length. [ 496.957043][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5607'. [ 497.016811][T13670] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.040823][T13670] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.051939][T26848] netlink: 'syz.0.5610': attribute type 21 has an invalid length. [ 497.099891][T26841] veth1_to_team: entered promiscuous mode [ 497.105792][T26841] veth1_to_team: entered allmulticast mode [ 497.113402][T13670] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.138535][T26841] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 497.165303][T26763] chnl_net:caif_netlink_parms(): no params data found [ 497.265248][T13670] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.513200][T26864] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.617123][T26763] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.632114][T26763] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.649781][T26763] bridge_slave_0: entered allmulticast mode [ 497.676850][T26763] bridge_slave_0: entered promiscuous mode [ 497.690013][T26763] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.717229][T26763] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.724464][T26763] bridge_slave_1: entered allmulticast mode [ 497.726954][ T5846] Bluetooth: hci7: command tx timeout [ 497.792897][T26763] bridge_slave_1: entered promiscuous mode [ 498.032027][T26763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.076339][T26763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.239731][T26763] team0: Port device team_slave_0 added [ 498.271133][T26763] team0: Port device team_slave_1 added [ 498.368665][T26864] wlan0 speed is unknown, defaulting to 1000 [ 498.405560][T26763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.412523][T26763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.463634][T26763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.509383][T26763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.517084][T26763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.543665][T26763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.739812][T26763] hsr_slave_0: entered promiscuous mode [ 498.771530][T26923] netlink: 'syz.2.5625': attribute type 1 has an invalid length. [ 498.776959][T26763] hsr_slave_1: entered promiscuous mode [ 498.793447][T26763] debugfs: 'hsr0' already exists in 'hsr' [ 498.800700][T26763] Cannot create hsr debugfs directory [ 499.321104][T26935] xt_recent: Unsupported userspace flags (000000b1) [ 499.329048][T26939] __nla_validate_parse: 9 callbacks suppressed [ 499.329063][T26939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5632'. [ 499.398556][T26935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.408007][T26944] netlink: 'syz.5.5633': attribute type 10 has an invalid length. [ 499.795087][ T5846] Bluetooth: hci7: command tx timeout [ 499.829259][T26970] tipc: Enabled bearer , priority 0 [ 499.847023][T26970] syzkaller0: entered promiscuous mode [ 499.852500][T26970] syzkaller0: entered allmulticast mode [ 499.890142][T26763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.908649][T26763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.933799][T26970] tipc: Resetting bearer [ 499.972065][T26970] tipc: Disabling bearer [ 499.984940][T26763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.000224][T26763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.101322][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5647'. [ 500.111881][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5647'. [ 500.143285][T26989] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5647'. [ 500.153597][T26989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5647'. [ 500.213571][T26996] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.5649'. [ 500.236465][T26763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.264515][T26998] netlink: 'syz.2.5650': attribute type 1 has an invalid length. [ 500.275568][T26998] netlink: 'syz.2.5650': attribute type 4 has an invalid length. [ 500.283469][T26998] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.5650'. [ 500.302859][T26763] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.317761][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.325004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.359426][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.366604][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.742527][T26763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.798289][T27032] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.5659'. [ 500.807955][T27032] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.5659'. [ 500.829916][T27035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5658'. [ 500.929663][T27041] netlink: 'syz.5.5660': attribute type 1 has an invalid length. [ 501.217100][T27058] netlink: 'syz.6.5665': attribute type 17 has an invalid length. [ 501.242138][T27058] gretap0: entered promiscuous mode [ 501.275337][T27058] gretap0: left promiscuous mode [ 501.351931][T26763] veth0_vlan: entered promiscuous mode [ 501.390790][T26763] veth1_vlan: entered promiscuous mode [ 501.527553][T26763] veth0_macvtap: entered promiscuous mode [ 501.548847][T26763] veth1_macvtap: entered promiscuous mode [ 501.600009][T26763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.633953][T26763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.678297][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.697526][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.716767][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.750195][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.879082][ T5846] Bluetooth: hci7: command tx timeout [ 501.998786][T27108] netlink: 'syz.0.5676': attribute type 16 has an invalid length. [ 502.042863][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 8 seconds [ 502.054135][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 8 seconds [ 502.066147][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 8 seconds [ 502.077969][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 8 seconds [ 502.106492][T27117] syzkaller0: entered promiscuous mode [ 502.137600][T27117] syzkaller0: entered allmulticast mode [ 502.218714][T27124] netlink: 'syz.5.5682': attribute type 1 has an invalid length. [ 502.291935][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.304245][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.322411][T27131] dummy0: Caught tx_queue_len zero misconfig [ 502.359474][T27128] bond0: entered promiscuous mode [ 502.365342][T27128] bond_slave_0: entered promiscuous mode [ 502.371333][T27128] bond_slave_1: entered promiscuous mode [ 502.378543][T27133] netlink: 'syz.2.5685': attribute type 1 has an invalid length. [ 502.386615][T27128] bond0: left promiscuous mode [ 502.391478][T27128] bond_slave_0: left promiscuous mode [ 502.397855][T27128] bond_slave_1: left promiscuous mode [ 502.436484][T27131] netlink: 'syz.5.5684': attribute type 83 has an invalid length. [ 502.447140][T13670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.462968][T13670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.101408][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.116078][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.124567][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.134191][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.143510][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.185789][T27163] ip6_vti0 speed is unknown, defaulting to 1000 [ 503.303939][T27166] : entered promiscuous mode [ 503.491006][T27171] vxcan2: entered allmulticast mode [ 503.682973][T27163] wlan0 speed is unknown, defaulting to 1000 [ 503.957588][ T5846] Bluetooth: hci7: command tx timeout [ 504.068133][T27163] chnl_net:caif_netlink_parms(): no params data found [ 504.498943][T27163] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.517352][T27163] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.525420][T27163] bridge_slave_0: entered allmulticast mode [ 504.533283][T27163] bridge_slave_0: entered promiscuous mode [ 504.542738][T27163] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.550423][T27163] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.558546][T27163] bridge_slave_1: entered allmulticast mode [ 504.584197][T27163] bridge_slave_1: entered promiscuous mode [ 504.648809][T27163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.688830][T27219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.689482][T27163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.872547][T27163] team0: Port device team_slave_0 added [ 504.893353][T27163] team0: Port device team_slave_1 added [ 504.980246][T27163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.990437][T27163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.019592][T27163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.054180][T27163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.071596][T27163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.086057][T27239] __nla_validate_parse: 20 callbacks suppressed [ 505.086071][T27239] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.5712'. [ 505.112488][T27163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.137399][T27240] sock: sock_set_timeout: `syz.5.5710' (pid 27240) tries to set negative timeout [ 505.175457][T27239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5712'. [ 505.195713][T27239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5712'. [ 505.241213][ T5846] Bluetooth: hci5: command tx timeout [ 505.268377][T27163] hsr_slave_0: entered promiscuous mode [ 505.283941][T27163] hsr_slave_1: entered promiscuous mode [ 505.296005][T27163] debugfs: 'hsr0' already exists in 'hsr' [ 505.301816][T27163] Cannot create hsr debugfs directory [ 505.406544][T27253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.571090][T27262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5719'. [ 505.689603][T27163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.702093][T27163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.732215][T27270] syzkaller0: entered promiscuous mode [ 505.738029][T27270] syzkaller0: entered allmulticast mode [ 505.759947][T27268] syzkaller0: entered promiscuous mode [ 505.765588][T27268] syzkaller0: entered allmulticast mode [ 505.843873][T27163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.860382][T27163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.997527][T27163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.018481][T27163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.180460][T27163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.215276][T27163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.244622][T27288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'. [ 506.252969][T27295] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5728'. [ 506.275544][T27288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.336565][T27288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.359731][T27297] netlink: 'syz.4.5726': attribute type 1 has an invalid length. [ 506.373360][T27297] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5726'. [ 506.383570][T27297] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5726'. [ 506.403062][T27297] netlink: 'syz.4.5726': attribute type 1 has an invalid length. [ 506.418524][T27297] netlink: 'syz.4.5726': attribute type 8 has an invalid length. [ 506.426706][T27297] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5726'. [ 506.711791][T27305] netlink: 'syz.5.5732': attribute type 10 has an invalid length. [ 506.713622][T27163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 506.750324][T27163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 506.778509][T27163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 506.791128][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5734'. [ 506.847276][T27307] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 506.857240][T27163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 506.978315][T27330] sctp: [Deprecated]: syz.5.5737 (pid 27330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.978315][T27330] Use struct sctp_sack_info instead [ 507.053936][T27336] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 507.126235][T27339] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 507.146945][T27339] bond12 (unregistering): Released all slaves [ 507.315404][ T5846] Bluetooth: hci5: command tx timeout [ 507.348203][T27358] syzkaller0: entered promiscuous mode [ 507.353698][T27358] syzkaller0: entered allmulticast mode [ 507.630631][T27163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.756024][T27163] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.781688][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.788914][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.811755][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 12 seconds [ 507.824655][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 12 seconds [ 507.836714][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 12 seconds [ 507.850042][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 12 seconds [ 507.882048][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.889221][ T6138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.973311][T27388] bond12: option min_links: invalid value (18446744073709551614) [ 507.981426][T27388] bond12: option min_links: allowed values 0 - 2147483647 [ 507.990897][T27388] bond12 (unregistering): Released all slaves [ 508.504662][T27410] veth0: entered promiscuous mode [ 508.575246][T27410] team0: No ports can be present during mode change [ 508.892820][T27422] netlink: 'syz.4.5757': attribute type 15 has an invalid length. [ 508.993665][T13670] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 509.102211][T13670] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 509.119764][T13670] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 509.153128][T13670] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 509.220176][T27163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.294840][T27445] xt_bpf: check failed: parse error [ 509.364599][T27163] veth0_vlan: entered promiscuous mode [ 509.376639][T27448] netlink: 'syz.6.5764': attribute type 1 has an invalid length. [ 509.394969][ T5846] Bluetooth: hci5: command tx timeout [ 509.407289][T27450] x_tables: unsorted entry at hook 2 [ 509.459035][T27163] veth1_vlan: entered promiscuous mode [ 509.563432][T27163] veth0_macvtap: entered promiscuous mode [ 509.604968][T27163] veth1_macvtap: entered promiscuous mode [ 509.647559][T27163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.675161][T27163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.706709][ T6097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.777775][ T6097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.899091][ T6097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.927069][ T6097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.102867][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.120524][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.143933][T27497] C: renamed from lo (while UP) [ 510.152695][T27497] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 510.235130][T13671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.242981][T13671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.408152][T27518] __nla_validate_parse: 3 callbacks suppressed [ 510.408171][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5778'. [ 510.450614][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5778'. [ 510.480610][T27521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5780'. [ 510.522110][ T1016] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.533066][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5778'. [ 510.548685][ T1016] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.559129][T27519] xt_CT: No such helper "pptp" [ 510.575293][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5778'. [ 510.595822][ T1016] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.604027][ T1016] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.794351][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5785'. [ 510.858310][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5787'. [ 510.889382][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5787'. [ 510.912948][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5787'. [ 510.932839][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5787'. [ 510.989293][T27557] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 511.000544][T27555] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 511.038969][T27557] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 511.064970][T27558] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 511.125890][T27558] netlink: 'syz.2.5790': attribute type 3 has an invalid length. [ 511.169483][T27569] ip6tnl2: entered promiscuous mode [ 511.476274][ T5846] Bluetooth: hci5: command tx timeout [ 511.528310][T27596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.622267][T27606] netlink: 'syz.4.5810': attribute type 9 has an invalid length. [ 511.690353][T27607] netlink: 'syz.5.5809': attribute type 33 has an invalid length. [ 512.209507][T13671] dvmrp6 (unregistering): left allmulticast mode [ 512.242530][T13671] bond1 (unregistering): (slave geneve2): Releasing active interface [ 512.562598][T13671] bond0 (unregistering): (slave 32): Releasing backup interface [ 512.573911][T13671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.587190][T13671] bond0 (unregistering): Released all slaves [ 512.596720][T27635] netlink: 'syz.4.5815': attribute type 4 has an invalid length. [ 512.601066][T13671] bond1 (unregistering): Released all slaves [ 512.728448][T13671] bond2 (unregistering): Released all slaves [ 512.742777][T13671] bond3 (unregistering): Released all slaves [ 512.755472][T13671] bond4 (unregistering): Released all slaves [ 512.769407][T13671] bond5 (unregistering): Released all slaves [ 512.791259][T27611] macsec2: entered promiscuous mode [ 512.796811][T27611] macsec2: entered allmulticast mode [ 512.802580][T27611] bond12: (slave macsec2): Error -34 calling dev_set_mtu [ 512.958312][T13671] tipc: Left network mode [ 513.079506][T27657] netlink: 'syz.5.5822': attribute type 5 has an invalid length. [ 513.130980][T27662] openvswitch: netlink: Actions may not be safe on all matching packets [ 513.220867][T27665] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 513.229287][T27663] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 513.299514][T27666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 513.306820][T27666] IPv6: NLM_F_CREATE should be set when creating new route [ 513.314035][T27666] IPv6: NLM_F_CREATE should be set when creating new route [ 513.566634][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 16 seconds [ 513.578514][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 16 seconds [ 513.590706][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 16 seconds [ 513.602014][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 16 seconds [ 513.761913][ T5846] Bluetooth: hci6: link tx timeout [ 513.768622][ T5846] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 514.025819][T13671] hsr_slave_0: left promiscuous mode [ 514.044389][T13671] hsr_slave_1: left promiscuous mode [ 514.162747][T13671] pimreg3 (unregistering): left allmulticast mode [ 514.653734][T27739] netlink: 'syz.4.5843': attribute type 1 has an invalid length. [ 514.691290][T27741] xt_hashlimit: overflow, try lower: 3/0 [ 515.461251][T27739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.655695][T27764] __nla_validate_parse: 46 callbacks suppressed [ 515.655715][T27764] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5851'. [ 515.708684][T27764] gretap0: entered promiscuous mode [ 515.735850][T27771] bridge0: port 1(veth0_to_bridge) entered blocking state [ 515.760529][T27771] bridge0: port 1(veth0_to_bridge) entered disabled state [ 515.771579][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 515.795401][ T5846] Bluetooth: hci6: command 0x0405 tx timeout [ 515.797996][T27771] veth0_to_bridge: entered allmulticast mode [ 515.808971][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5851'. [ 515.850585][T27771] veth0_to_bridge: entered promiscuous mode [ 516.012130][T13671] IPVS: stop unused estimator thread 0... [ 516.431983][T27821] netlink: 'syz.5.5862': attribute type 2 has an invalid length. [ 516.468257][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5862'. [ 516.501539][T27821] netlink: 'syz.5.5862': attribute type 25 has an invalid length. [ 516.526036][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5862'. [ 516.562457][T27831] netlink: 'syz.6.5864': attribute type 1 has an invalid length. [ 516.642309][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5864'. [ 516.718282][T27837] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5865'. [ 516.730384][T27831] bond4: entered promiscuous mode [ 516.744843][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5864'. [ 516.801022][T27831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.868091][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.885020][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.893146][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.902914][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.911992][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.079849][T27843] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.209437][T27853] openvswitch: netlink: Flow key attr not present in new flow. [ 517.288971][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5872'. [ 517.312833][T27863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 517.741472][T27882] netlink: 'syz.6.5878': attribute type 1 has an invalid length. [ 517.749341][T27882] netlink: 216 bytes leftover after parsing attributes in process `syz.6.5878'. [ 517.782488][ T3474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.816095][ T3474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 517.889660][T27882] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.926181][T27843] wlan0 speed is unknown, defaulting to 1000 [ 518.005016][T27897] netlink: 'syz.5.5882': attribute type 10 has an invalid length. [ 518.014680][ T3474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.054151][ T3474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 518.139835][T27880] syzkaller0: entered promiscuous mode [ 518.145780][T27880] syzkaller0: entered allmulticast mode [ 518.996264][ T5151] Bluetooth: hci2: command tx timeout [ 519.315942][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 20 seconds [ 519.327098][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 20 seconds [ 519.339103][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 20 seconds [ 519.350742][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 20 seconds [ 519.984201][T27948] netlink: 'syz.6.5887': attribute type 10 has an invalid length. [ 519.987567][ T3474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.003062][ T3474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 520.210446][T27960] netlink: 'syz.5.5889': attribute type 1 has an invalid length. [ 520.255651][ T3474] netdevsim netdevsim0 netdevsim0 (unregistering): tearing down IPsec offload with 1 SAs left [ 520.425709][T27943] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.701265][T27980] syzkaller1: entered promiscuous mode [ 520.736185][T27980] syzkaller1: entered allmulticast mode [ 520.817340][T27843] chnl_net:caif_netlink_parms(): no params data found [ 520.876110][T27943] wlan0 speed is unknown, defaulting to 1000 [ 521.058948][T28004] __nla_validate_parse: 2 callbacks suppressed [ 521.058961][T28004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5898'. [ 521.078777][ T5151] Bluetooth: hci2: command tx timeout [ 521.101121][T28004] nbd: must specify a size in bytes for the device [ 521.344996][T28017] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.5903'. [ 521.392225][T27843] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.434591][T27843] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.446018][T27843] bridge_slave_0: entered allmulticast mode [ 521.477137][T27843] bridge_slave_0: entered promiscuous mode [ 521.611580][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5908'. [ 521.620856][T28035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5908'. [ 521.622354][T28026] bond1: entered allmulticast mode [ 521.638064][T28026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.647628][T27843] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.655251][T27843] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.662540][T27843] bridge_slave_1: entered allmulticast mode [ 521.671425][T27843] bridge_slave_1: entered promiscuous mode [ 521.812715][T27843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.820153][T28040] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5911'. [ 521.828872][T27843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.890269][T28046] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 521.919825][T27843] team0: Port device team_slave_0 added [ 521.937088][T27843] team0: Port device team_slave_1 added [ 521.994651][T27843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.014209][T27843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.061648][T28060] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5916'. [ 522.070915][T27843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.098600][T28055] bond0: entered promiscuous mode [ 522.102122][T28062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5918'. [ 522.103715][T28055] bond_slave_0: entered promiscuous mode [ 522.120403][T28055] bond_slave_1: entered promiscuous mode [ 522.135898][T28057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.184047][T27843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.201545][T28068] SET target dimension over the limit! [ 522.202604][T27843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.207970][T28068] netlink: 'syz.4.5919': attribute type 1 has an invalid length. [ 522.235273][T27843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.490662][T27843] hsr_slave_0: entered promiscuous mode [ 522.497641][T27843] hsr_slave_1: entered promiscuous mode [ 522.504100][T27843] debugfs: 'hsr0' already exists in 'hsr' [ 522.535704][T27843] Cannot create hsr debugfs directory [ 522.546423][T28082] wlan1: mtu less than device minimum [ 522.748970][T28090] syzkaller0: entered promiscuous mode [ 522.754470][T28090] syzkaller0: entered allmulticast mode [ 522.835906][T28090] netlink: 'syz.5.5926': attribute type 58 has an invalid length. [ 522.847659][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5926'. [ 522.929976][T28107] netlink: 'syz.4.5931': attribute type 4 has an invalid length. [ 523.036736][T28112] netlink: 'syz.2.5932': attribute type 1 has an invalid length. [ 523.062253][T28112] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5932'. [ 523.160098][ T5846] Bluetooth: hci2: command tx timeout [ 523.177731][T28122] x_tables: duplicate entry at hook 3 [ 523.186734][T28122] netlink: 788 bytes leftover after parsing attributes in process `syz.5.5934'. [ 523.286021][T28130] netlink: 'syz.6.5936': attribute type 8 has an invalid length. [ 523.749764][T28176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 523.899256][T28184] netlink: 'syz.4.5951': attribute type 5 has an invalid length. [ 523.965049][T28184] geneve2: entered promiscuous mode [ 523.971269][T28184] geneve2: entered allmulticast mode [ 524.007045][ T1016] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 524.019245][ T1016] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 524.083810][ T1016] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 524.104689][T28201] netlink: 'syz.5.5957': attribute type 33 has an invalid length. [ 524.168543][ T1016] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 524.198543][T28203] bridge_slave_0: left allmulticast mode [ 524.207439][T28206] netlink: 'syz.5.5959': attribute type 1 has an invalid length. [ 524.215309][T28203] bridge_slave_0: left promiscuous mode [ 524.215526][T28203] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.232174][T28203] bridge_slave_1: left allmulticast mode [ 524.239962][T28203] bridge_slave_1: left promiscuous mode [ 524.247398][T28203] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.293537][T28203] bond0: (slave bond_slave_0): Releasing backup interface [ 524.303051][T28203] bond_slave_0: left promiscuous mode [ 524.317249][T28203] bond0: (slave bond_slave_1): Releasing backup interface [ 524.327093][T28203] bond_slave_1: left promiscuous mode [ 524.342916][T28203] team0: Port device team_slave_0 removed [ 524.352334][T28203] team0: Port device team_slave_1 removed [ 524.360361][T28203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.368363][T28203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.378196][T28203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.387904][T28203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.393120][T28215] netlink: 'syz.6.5961': attribute type 4 has an invalid length. [ 524.406045][T28203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.459204][T28206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.512788][T28206] dvmrp0: left allmulticast mode [ 524.699176][T28231] netlink: 'syz.2.5967': attribute type 1 has an invalid length. [ 525.094928][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 24 seconds [ 525.105952][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 24 seconds [ 525.117008][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 24 seconds [ 525.128161][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 24 seconds [ 525.176725][T28260] netlink: 'syz.5.5977': attribute type 1 has an invalid length. [ 525.246882][ T5846] Bluetooth: hci2: command tx timeout [ 525.312533][T28272] bond4: Removing last arp target with arp_interval on [ 525.416697][T28280] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 525.739832][T28304] Bluetooth: MGMT ver 1.23 [ 525.744321][T28304] Bluetooth: hci1: too big key_count value 32778 [ 525.838109][T28304] block nbd2: server does not support multiple connections per device. [ 525.848829][T28304] block nbd2: shutting down sockets [ 525.962331][T28314] erspan0: entered promiscuous mode [ 525.972839][T28314] erspan0: entered allmulticast mode [ 526.153642][T28331] __nla_validate_parse: 21 callbacks suppressed [ 526.153659][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5998'. [ 526.668336][T28342] xt_l2tp: missing protocol rule (udp|l2tpip) [ 526.704249][T28344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6002'. [ 526.769127][T28345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6002'. [ 527.029988][T28350] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6004'. [ 527.042282][T28350] sctp: [Deprecated]: syz.5.6004 (pid 28350) Use of int in max_burst socket option. [ 527.042282][T28350] Use struct sctp_assoc_value instead [ 527.094003][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6006'. [ 527.113641][T28354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6006'. [ 527.138405][T28354] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1125 [ 527.170796][T28358] syzkaller0: entered promiscuous mode [ 527.180102][T28358] syzkaller0: entered allmulticast mode [ 527.219797][T28361] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6008'. [ 527.686442][T28392] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6017'. [ 527.989224][T28413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6024'. [ 528.093961][T28419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6026'. [ 528.200390][T28426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.228163][T28426] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 528.246891][T28426] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 528.259999][T28426] team0: Failed to send options change via netlink (err -105) [ 528.270133][T28426] team0: Port device batadv1 added [ 528.729854][T28460] validate_nla: 6 callbacks suppressed [ 528.729871][T28460] netlink: 'syz.4.6039': attribute type 1 has an invalid length. [ 529.520741][T28503] netlink: 'syz.6.6053': attribute type 10 has an invalid length. [ 529.534367][T28503] team0: Device ipvlan1 failed to register rx_handler [ 529.738008][T28518] ip_vti0: entered promiscuous mode [ 529.816614][T28520] syzkaller0: entered promiscuous mode [ 529.822334][T28520] syzkaller0: entered allmulticast mode [ 530.097829][T28528] syzkaller0: entered promiscuous mode [ 530.103451][T28528] syzkaller0: entered allmulticast mode [ 530.293561][T28535] "syz.6.6062" (28535) uses obsolete ecb(arc4) skcipher [ 530.573662][T28545] openvswitch: netlink: Missing key (keys=40, expected=100) [ 530.838832][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 28 seconds [ 530.849810][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 28 seconds [ 530.861766][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 28 seconds [ 530.873087][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 28 seconds [ 531.643321][T28553] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 531.793409][T28558] syz.5.6067: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 531.821908][T28566] __nla_validate_parse: 7 callbacks suppressed [ 531.821922][T28566] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6070'. [ 531.828173][T28558] CPU: 0 UID: 0 PID: 28558 Comm: syz.5.6067 Not tainted syzkaller #0 PREEMPT(full) [ 531.828197][T28558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 531.828209][T28558] Call Trace: [ 531.828216][T28558] [ 531.828224][T28558] dump_stack_lvl+0xe8/0x150 [ 531.828254][T28558] warn_alloc+0x249/0x340 [ 531.828275][T28558] ? stack_trace_save+0xa9/0x100 [ 531.828304][T28558] ? __pfx_warn_alloc+0x10/0x10 [ 531.828330][T28558] ? kasan_save_track+0x4f/0x80 [ 531.828347][T28558] ? kasan_save_track+0x3e/0x80 [ 531.828363][T28558] ? __kasan_kmalloc+0x93/0xb0 [ 531.828380][T28558] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 531.828404][T28558] ? xskq_create+0x56/0x170 [ 531.828425][T28558] ? xsk_setsockopt+0x54c/0x990 [ 531.828443][T28558] ? do_sock_setsockopt+0x17c/0x1b0 [ 531.828467][T28558] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 531.828492][T28558] ? do_syscall_64+0xe2/0xf80 [ 531.828518][T28558] __vmalloc_node_range_noprof+0x132/0x1730 [ 531.828568][T28558] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.828591][T28558] ? __kasan_kmalloc+0x93/0xb0 [ 531.828616][T28558] vmalloc_user_noprof+0xad/0xe0 [ 531.828633][T28558] ? xskq_create+0xbf/0x170 [ 531.828654][T28558] xskq_create+0xbf/0x170 [ 531.828676][T28558] xsk_init_queue+0xad/0x110 [ 531.828699][T28558] xsk_setsockopt+0x54c/0x990 [ 531.828721][T28558] ? __pfx_xsk_setsockopt+0x10/0x10 [ 531.828742][T28558] ? __pfx_aa_sk_perm+0x10/0x10 [ 531.828769][T28558] ? aa_sock_opt_perm+0xff/0x1a0 [ 531.828796][T28558] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 531.828813][T28558] ? __pfx_xsk_setsockopt+0x10/0x10 [ 531.828834][T28558] do_sock_setsockopt+0x17c/0x1b0 [ 531.828864][T28558] __x64_sys_setsockopt+0x13d/0x1b0 [ 531.828895][T28558] do_syscall_64+0xe2/0xf80 [ 531.828919][T28558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.828937][T28558] ? trace_irq_disable+0x37/0x100 [ 531.828960][T28558] ? clear_bhb_loop+0x60/0xb0 [ 531.828981][T28558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.828999][T28558] RIP: 0033:0x7f9f99d9acb9 [ 531.829016][T28558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.829032][T28558] RSP: 002b:00007f9f9ab72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 531.829050][T28558] RAX: ffffffffffffffda RBX: 00007f9f9a015fa0 RCX: 00007f9f99d9acb9 [ 531.829064][T28558] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 531.829076][T28558] RBP: 00007f9f99e08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 531.829088][T28558] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.829099][T28558] R13: 00007f9f9a016038 R14: 00007f9f9a015fa0 R15: 00007fff08f0fcc8 [ 531.829130][T28558] [ 531.829146][T28558] Mem-Info: [ 531.847814][T28566] netlink: 'syz.2.6070': attribute type 2 has an invalid length. [ 531.869496][T28558] active_anon:6895 inactive_anon:0 isolated_anon:0 [ 531.869496][T28558] active_file:3148 inactive_file:40379 isolated_file:0 [ 531.869496][T28558] unevictable:768 dirty:104 writeback:0 [ 531.869496][T28558] slab_reclaimable:13823 slab_unreclaimable:133346 [ 531.869496][T28558] mapped:39749 shmem:1374 pagetables:1320 [ 531.869496][T28558] sec_pagetables:0 bounce:0 [ 531.869496][T28558] kernel_misc_reclaimable:0 [ 531.869496][T28558] free:1252631 free_pcp:16144 free_cma:0 [ 531.949689][T28566] netlink: 'syz.2.6070': attribute type 1 has an invalid length. [ 531.962504][T28558] Node 0 active_anon:27680kB inactive_anon:0kB active_file:12592kB inactive_file:161316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158996kB dirty:416kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16372kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.244974][T28558] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.284656][T28558] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.337663][T28558] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 532.356047][T28558] Node 0 DMA32 free:1108916kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27680kB inactive_anon:0kB active_file:12592kB inactive_file:161316kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2555804kB mlocked:0kB bounce:0kB free_pcp:46380kB local_pcp:20460kB free_cma:0kB [ 532.390912][T28558] lowmem_reserve[]: 0 0 1 1 1 [ 532.396317][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6077'. [ 532.396607][T28558] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.420277][T28588] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6077'. [ 532.448989][T28558] lowmem_reserve[]: 0 0 0 0 0 [ 532.454278][T28558] Node 1 Normal free:3886248kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17576kB local_pcp:14024kB free_cma:0kB [ 532.490464][T28558] lowmem_reserve[]: 0 0 0 0 0 [ 532.496035][T28558] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.509275][T28558] Node 0 DMA32: 7643*4kB (UME) 6239*8kB (UME) 2141*16kB (UM) 140*32kB (M) 22*64kB (UM) 9*128kB (UME) 156*256kB (UM) 186*512kB (UE) 118*1024kB (U) 47*2048kB (UM) 155*4096kB (UM) = 1108916kB [ 532.530979][T28558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 532.545798][T28558] Node 1 Normal: 194*4kB (UE) 54*8kB (UME) 31*16kB (UME) 116*32kB (UME) 32*64kB (UME) 5*128kB (UM) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3886248kB [ 532.589908][T28558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.602490][T28558] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 532.644119][T28558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.665782][T28558] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 532.680542][T28558] 44897 total pagecache pages [ 532.686175][T28558] 0 pages in swap cache [ 532.690342][T28558] Free swap = 124996kB [ 532.695459][T28558] Total swap = 124996kB [ 532.700680][T28558] 2097051 pages RAM [ 532.704679][T28558] 0 pages HighMem/MovableOnly [ 532.720180][T28558] 426138 pages reserved [ 532.724345][T28558] 0 pages cma reserved [ 532.793182][T28604] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 532.811369][T28604] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 532.823605][T28604] mac80211_hwsim hwsim52 syzkaller0: Caught tx_queue_len zero misconfig [ 532.833241][T28604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.009625][T28620] netlink: 'syz.5.6088': attribute type 11 has an invalid length. [ 533.022923][T28620] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6088'. [ 533.325102][T28632] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 533.346073][T28639] IPv6: sit2: Disabled Multicast RS [ 533.352635][T28639] sit2: entered allmulticast mode [ 533.443703][T28648] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 533.460494][T28648] netlink: 'syz.6.6094': attribute type 1 has an invalid length. [ 533.460691][T28643] nftables ruleset with unbound set [ 533.469777][T28648] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6094'. [ 533.618560][T28658] netlink: 'syz.6.6096': attribute type 4 has an invalid length. [ 533.774203][T28671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6101'. [ 534.032780][T28688] netlink: 'syz.5.6107': attribute type 24 has an invalid length. [ 534.183367][T28691] syzkaller0: entered promiscuous mode [ 534.203482][T28691] syzkaller0: entered allmulticast mode [ 534.235925][T28698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6110'. [ 534.256678][T28698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6110'. [ 535.984427][T28715] syzkaller1: entered promiscuous mode [ 536.045207][T28733] sctp: [Deprecated]: syz.6.6118 (pid 28733) Use of int in maxseg socket option. [ 536.045207][T28733] Use struct sctp_assoc_value instead [ 536.067804][T28733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6118'. [ 536.440414][T28756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.456025][T28748] syzkaller0: entered promiscuous mode [ 536.473129][T28748] syzkaller0: entered allmulticast mode [ 536.597572][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 32 seconds [ 536.610017][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 32 seconds [ 536.622803][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 32 seconds [ 536.636612][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 32 seconds [ 536.736728][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6133'. [ 537.182038][T28805] veth1_to_bond: entered allmulticast mode [ 537.203088][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6142'. [ 537.234060][T28810] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6144'. [ 537.269237][T28805] bond0: (slave bond_slave_1): Releasing backup interface [ 537.314661][T28805] veth1_to_bond (unregistering): left allmulticast mode [ 537.354548][T28808] veth3: entered allmulticast mode [ 537.451615][T28826] netlink: 'syz.4.6148': attribute type 30 has an invalid length. [ 537.558748][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6152'. [ 537.656923][T28835] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 537.692533][T28845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6153'. [ 537.854191][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6157'. [ 537.864588][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6157'. [ 537.888193][T28854] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 538.028238][T28864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6162'. [ 538.123342][T28864] macsec2: entered promiscuous mode [ 538.135333][T28864] macsec2: entered allmulticast mode [ 538.146835][T28864] bond3: (slave macsec2): Error -34 calling dev_set_mtu [ 538.206038][T28876] netlink: 'syz.5.6167': attribute type 16 has an invalid length. [ 538.213995][T28876] netlink: 'syz.5.6167': attribute type 17 has an invalid length. [ 538.259584][T28876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.290883][T28876] wg1: left promiscuous mode [ 538.301464][T28876] wg1: left allmulticast mode [ 538.357910][T28876] veth1_to_team: left promiscuous mode [ 538.363472][T28876] veth1_to_team: left allmulticast mode [ 538.382985][T28876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.398436][T28876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.439210][T28876] veth1_macvtap: left promiscuous mode [ 538.467723][T28876] veth0_macvtap: left promiscuous mode [ 538.475189][T28876] veth0_macvtap: entered promiscuous mode [ 538.482305][T28876] veth1_macvtap: entered promiscuous mode [ 538.493119][T28876] geneve1: left promiscuous mode [ 538.500415][T28876] geneve1: left allmulticast mode [ 538.524320][T28894] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6171'. [ 538.543048][T28876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.563210][T28876] geneve2: left promiscuous mode [ 538.571606][T28876] geneve2: left allmulticast mode [ 538.578872][T28876] netdevsim netdevsim5 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 538.590888][T28876] netdevsim netdevsim5 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 538.602869][T28876] netdevsim netdevsim5 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 538.618445][T28876] netdevsim netdevsim5 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 538.638901][T28876] vlan2: left allmulticast mode [ 538.643976][T28876] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 538.652014][T28876] vlan3: left allmulticast mode [ 538.657649][T28876] hsr0: left allmulticast mode [ 538.662551][T28876] hsr_slave_0: left allmulticast mode [ 538.668129][T28876] hsr_slave_1: left allmulticast mode [ 538.676935][T28876] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 538.683522][T28902] netlink: 'syz.2.6172': attribute type 2 has an invalid length. [ 538.710593][T28900] netlink: 'syz.2.6172': attribute type 6 has an invalid length. [ 538.751515][ T61] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 538.762001][ T61] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 538.771313][T28893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6169'. [ 538.794004][ T61] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 538.805816][T28904] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6173'. [ 538.821771][ T61] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 538.924688][T28904] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.371761][T28904] wlan0 speed is unknown, defaulting to 1000 [ 539.712736][T28974] netlink: 'syz.4.6192': attribute type 1 has an invalid length. [ 539.751955][T28974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.774368][T28974] bond4: (slave ip6erspan0): making interface the new active one [ 539.783824][T28974] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 539.865538][T28987] netlink: 'syz.2.6194': attribute type 1 has an invalid length. [ 539.965279][T28992] vlan1: entered promiscuous mode [ 539.980543][T28992] bridge0: entered promiscuous mode [ 540.111062][T28998] macvtap1: entered promiscuous mode [ 540.125971][T28998] vlan0: entered promiscuous mode [ 540.137977][T28998] macvtap1: entered allmulticast mode [ 540.150772][T28998] vlan0: entered allmulticast mode [ 540.164249][T28998] veth0_vlan: entered allmulticast mode [ 540.672781][T29042] syzkaller0: entered promiscuous mode [ 540.682518][T29042] syzkaller0: entered allmulticast mode [ 541.023501][T29062] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 541.137289][T29062] bond5 (unregistering): Released all slaves [ 541.525825][T29088] syzkaller0: entered promiscuous mode [ 541.533509][T29088] syzkaller0: entered allmulticast mode [ 541.669451][T29097] netlink: 'syz.5.6226': attribute type 1 has an invalid length. [ 541.691315][T29097] netlink: 'syz.5.6226': attribute type 3 has an invalid length. [ 541.719525][T29097] NCSI netlink: No device for ifindex 813332851 [ 541.764146][T29104] netlink: 'syz.4.6229': attribute type 1 has an invalid length. [ 541.811772][T29110] netlink: 'syz.2.6230': attribute type 9 has an invalid length. [ 541.863855][T29111] 8021q: adding VLAN 0 to HW filter on device bond6 [ 541.878261][T29111] bond5: (slave bond6): making interface the new active one [ 541.889114][T29111] bond5: (slave bond6): Enslaving as an active interface with an up link [ 541.926541][T29104] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 541.941577][T29104] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 541.972959][T29109] syzkaller0: entered promiscuous mode [ 541.979474][T29109] syzkaller0: entered allmulticast mode [ 542.046744][T29119] syzkaller0: entered promiscuous mode [ 542.068790][T29119] syzkaller0: entered allmulticast mode [ 542.163769][T29127] macvtap2: entered promiscuous mode [ 542.169819][T29127] macvtap2: entered allmulticast mode [ 542.176185][T29127] veth1_vlan: entered allmulticast mode [ 542.228064][T29132] macvtap3: entered promiscuous mode [ 542.233525][T29132] macvtap3: entered allmulticast mode [ 542.365550][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 36 seconds [ 542.376532][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 36 seconds [ 542.387578][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 36 seconds [ 542.399355][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 36 seconds [ 542.641125][T29161] __nla_validate_parse: 9 callbacks suppressed [ 542.641143][T29161] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6245'. [ 542.657873][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6244'. [ 542.719168][T29165] netlink: 404 bytes leftover after parsing attributes in process `syz.6.6247'. [ 542.775788][T29168] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 542.782652][T29168] syzkaller1: linktype set to 823 [ 542.840835][T29176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6251'. [ 542.880733][T29169] syzkaller0: entered promiscuous mode [ 542.909024][T29169] syzkaller0: entered allmulticast mode [ 543.268923][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6258'. [ 543.660316][T29215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6257'. [ 545.133049][T29202] ipvlan0: entered allmulticast mode [ 545.145918][T29202] batadv_slave_1: entered allmulticast mode [ 545.159450][T29202] batman_adv: batadv0: Adding interface: ipvlan0 [ 545.189673][T29202] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.253007][T29202] batman_adv: batadv0: Interface activated: ipvlan0 [ 545.682486][T29242] netlink: 'syz.4.6266': attribute type 1 has an invalid length. [ 545.705845][T29242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6266'. [ 545.828026][T29256] : entered promiscuous mode [ 545.877375][T29250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6268'. [ 545.943038][T29261] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 546.002005][T29261] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6272'. [ 546.161023][T29276] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6276'. [ 546.435823][T29292] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.539083][T29301] wg1: entered promiscuous mode [ 546.547348][T29301] wg1: entered allmulticast mode [ 546.803861][T29320] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 546.942661][T29332] netlink: 'syz.6.6289': attribute type 21 has an invalid length. [ 546.968162][T29332] netlink: 'syz.6.6289': attribute type 2 has an invalid length. [ 547.180095][T29346] bridge_slave_0: entered promiscuous mode [ 547.186642][T29346] bridge_slave_0: left promiscuous mode [ 547.254516][T29346] IPVS: persistence engine module ip_vs_pe_À not found [ 547.656313][T29377] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 547.668188][T29377] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 547.683453][T29377] gretap3: entered promiscuous mode [ 547.689537][T29377] gretap3: entered allmulticast mode [ 547.883024][T29399] __nla_validate_parse: 13 callbacks suppressed [ 547.883042][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6310'. [ 547.943650][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6310'. [ 548.095966][T29417] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6316'. [ 548.119371][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 40 seconds [ 548.131021][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 40 seconds [ 548.145426][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 40 seconds [ 548.157134][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 40 seconds [ 548.165281][T29421] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6316'. [ 548.267985][T29433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6318'. [ 548.646478][T29455] netlink: 'syz.6.6327': attribute type 1 has an invalid length. [ 548.671514][T29455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.698335][T29459] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 549.124709][T29488] netlink: 548 bytes leftover after parsing attributes in process `syz.5.6339'. [ 549.324492][T29506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6343'. [ 549.340946][T29507] netlink: 'syz.6.6342': attribute type 5 has an invalid length. [ 549.496060][T29518] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6348'. [ 549.555371][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6347'. [ 549.587812][T29526] x_tables: duplicate underflow at hook 1 [ 549.719571][T29530] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 549.755562][T29530] bond6 (unregistering): Released all slaves [ 549.899299][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6357'. [ 549.925370][T29547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 549.938669][T29547] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.961394][T29547] gretap1: entered promiscuous mode [ 549.981246][T29547] gretap1: entered allmulticast mode [ 550.196153][T19503] IPVS: ip_vs_send_async error -101 [ 550.275971][T29571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.459751][T29592] netlink: 'syz.4.6367': attribute type 27 has an invalid length. [ 550.558475][T29599] syzkaller0: entered promiscuous mode [ 550.564075][T29599] syzkaller0: entered allmulticast mode [ 550.607542][T29599] tipc: Started in network mode [ 550.613546][T29599] tipc: Node identity 027db813879b, cluster identity 4711 [ 550.621993][T29599] tipc: Enabled bearer , priority 0 [ 550.637379][T29598] tipc: Resetting bearer [ 550.678539][T29598] tipc: Disabling bearer [ 550.691949][T29608] netlink: 'syz.5.6372': attribute type 5 has an invalid length. [ 550.883446][T29619] netlink: 'syz.5.6375': attribute type 17 has an invalid length. [ 551.027263][T29632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.079084][T29632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.267973][T29643] bond7: entered promiscuous mode [ 551.273741][T29643] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.948785][T29687] team_slave_0: entered promiscuous mode [ 551.954830][T29687] team_slave_1: entered promiscuous mode [ 551.960605][T29687] batadv1: entered promiscuous mode [ 551.972218][T29687] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 551.980282][T29687] team0: Device macvtap1 is already an upper device of the team interface [ 551.990679][T29687] team_slave_0: left promiscuous mode [ 551.996131][T29687] team_slave_1: left promiscuous mode [ 552.001641][T29687] batadv1: left promiscuous mode [ 552.233918][T29704] xfrm1: entered promiscuous mode [ 552.253149][T29704] xfrm1: entered allmulticast mode [ 552.382649][T29714] team0: No ports can be present during mode change [ 552.502523][T29728] geneve3: entered promiscuous mode [ 552.804195][T29748] bridge: RTM_NEWNEIGH with invalid ether address [ 552.829451][T29748] bridge: RTM_NEWNEIGH with invalid ether address [ 553.115753][T29767] netlink: 'syz.4.6418': attribute type 1 has an invalid length. [ 553.236713][ T5151] Bluetooth: hci2: command 0x0405 tx timeout [ 553.573061][T29786] netlink: 'syz.5.6425': attribute type 10 has an invalid length. [ 553.882151][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 44 seconds [ 553.898202][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 44 seconds [ 553.911278][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 44 seconds [ 553.922471][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 44 seconds [ 554.180629][T29815] __nla_validate_parse: 18 callbacks suppressed [ 554.180648][T29815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6434'. [ 554.222399][T29818] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6435'. [ 554.226791][T29815] syzkaller0: entered promiscuous mode [ 554.231527][T29818] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6435'. [ 554.248529][T29815] syzkaller0: entered allmulticast mode [ 554.271121][T29815] TC_ACT_REPEAT abuse ? [ 554.327267][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6437'. [ 554.436852][T29830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6440'. [ 554.469622][T29830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6440'. [ 554.527809][T29835] netlink: 'syz.4.6442': attribute type 4 has an invalid length. [ 554.537077][T29835] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6442'. [ 554.555940][T29835] `: renamed from bond0 (while UP) [ 554.812079][T29853] netlink: 'syz.4.6448': attribute type 10 has an invalid length. [ 554.908338][T29857] delete_channel: no stack [ 554.946402][T29860] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6451'. [ 555.018476][T29860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6451'. [ 555.027870][T29860] openvswitch: netlink: Flow key attr not present in new flow. [ 555.282056][T29873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6454'. [ 555.524213][T29890] dvmrp0: entered allmulticast mode [ 555.875704][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.448505][T29945] xfrm1: entered allmulticast mode [ 556.791868][T29980] xt_hashlimit: size too large, truncated to 1048576 [ 556.914979][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 556.915695][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.069575][T30000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.079816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.128607][T30004] openvswitch: netlink: Flow key attr not present in new flow. [ 557.403891][T30019] bridge_slave_0 (unregistering): left allmulticast mode [ 557.411281][T30019] bridge_slave_0 (unregistering): left promiscuous mode [ 557.420112][T30019] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.594165][T30028] bridge0: entered allmulticast mode [ 557.725588][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.734277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.883147][T10323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.905874][T30047] netlink: 'syz.4.6500': attribute type 12 has an invalid length. [ 557.913707][T30047] netlink: 'syz.4.6500': attribute type 29 has an invalid length. [ 558.090916][T30054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.179751][T30070] nbd: nbd64 already in use [ 558.350409][T30077] netlink: 'syz.5.6507': attribute type 1 has an invalid length. [ 558.399833][T30079] netlink: 'syz.2.6506': attribute type 1 has an invalid length. [ 558.521882][T30089] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 558.534227][T30089] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 558.621237][T30077] gretap4: entered promiscuous mode [ 558.668361][T30077] bond6: (slave gretap4): making interface the new active one [ 558.708714][T30077] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 558.753535][T30096] macvlan0: entered promiscuous mode [ 558.777545][T30096] macvlan0: entered allmulticast mode [ 558.800466][T30096] bond6: entered promiscuous mode [ 558.812099][T30096] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 558.823120][T30096] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 558.838444][T30096] bond6: left promiscuous mode [ 559.060566][T30122] netlink: 'syz.4.6517': attribute type 8 has an invalid length. [ 559.116743][T30124] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 559.138772][T30127] netlink: 'syz.2.6520': attribute type 5 has an invalid length. [ 559.232041][T30132] netlink: 'syz.5.6522': attribute type 1 has an invalid length. [ 559.243175][T30132] __nla_validate_parse: 92 callbacks suppressed [ 559.243197][T30132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6522'. [ 559.331088][T30141] tipc: Started in network mode [ 559.344934][T30141] tipc: Node identity 080211000001, cluster identity 4711 [ 559.352420][T30141] tipc: Enabled bearer , priority 0 [ 559.377633][T30141] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 559.420256][T30143] dvmrp6: entered allmulticast mode [ 559.424285][T30148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6527'. [ 559.440526][T30141] tipc: Resetting bearer [ 559.447974][T30141] delete_channel: no stack [ 559.458863][T30146] pimreg: entered allmulticast mode [ 559.473912][T30148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 559.483182][T30148] tc_dump_action: action bad kind [ 559.493614][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6527'. [ 559.624008][T30160] net_ratelimit: 4 callbacks suppressed [ 559.624027][T30160] openvswitch: netlink: IPv4 tun info is not correct [ 559.653982][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 48 seconds [ 559.660128][T30166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6533'. [ 559.664822][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 48 seconds [ 559.679069][T30160] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6532'. [ 559.684402][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 48 seconds [ 559.704990][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 48 seconds [ 559.729801][T30166] netlink: 'syz.2.6533': attribute type 3 has an invalid length. [ 559.769481][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6533'. [ 559.801920][T30169] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6532'. [ 560.035258][ T7209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.089080][T30183] delete_channel: no stack [ 560.102743][T30193] netlink: zone id is out of range [ 560.124100][T30193] netlink: zone id is out of range [ 560.131028][T30193] netlink: zone id is out of range [ 560.136652][T30193] netlink: zone id is out of range [ 560.154977][T30193] netlink: zone id is out of range [ 560.167887][T30193] netlink: zone id is out of range [ 560.179586][T30193] netlink: zone id is out of range [ 560.187768][T30193] netlink: zone id is out of range [ 560.378163][T30207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6542'. [ 560.400624][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'. [ 560.540459][T10323] tipc: Node number set to 134418688 [ 560.814548][T30210] infiniband : set down [ 560.821990][T30210] infiniband : added ipvlan0 [ 560.888437][T30210] RDS/IB: : added [ 560.892290][T30210] smc: adding ib device  with port count 1 [ 560.901128][T30210] smc: ib device  port 1 has no pnetid [ 561.216817][T30245] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 561.688778][T30269] tipc: Started in network mode [ 561.693680][T30269] tipc: Node identity ac14140f, cluster identity 4711 [ 561.702870][T30269] tipc: New replicast peer: 255.255.255.255 [ 561.711545][T30269] tipc: Enabled bearer , priority 10 [ 561.731097][T30269] netlink: 'syz.2.6563': attribute type 1 has an invalid length. [ 561.745953][T30269] netlink: 'syz.2.6563': attribute type 2 has an invalid length. [ 562.093993][T30291] "syz.5.6569" (30291) uses obsolete ecb(arc4) skcipher [ 562.624432][T30321] bond6: Unable to set down delay as MII monitoring is disabled [ 562.656250][T30321] bond6 (unregistering): Released all slaves [ 562.824850][ T7210] tipc: Node number set to 2886997007 [ 563.090093][T30349] bond7: Removing last arp target with arp_interval on [ 563.098860][T30352] sch_fq: defrate 4 ignored. [ 563.319597][T30364] validate_nla: 3 callbacks suppressed [ 563.319614][T30364] netlink: 'syz.2.6586': attribute type 2 has an invalid length. [ 564.359088][T30406] __nla_validate_parse: 9 callbacks suppressed [ 564.359107][T30406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6601'. [ 564.647449][T30428] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 564.738209][T30435] Cannot find add_set index 65532 as target [ 564.761556][T30437] Cannot find set identified by id 3 to match [ 564.934048][T30446] netlink: 'syz.2.6615': attribute type 11 has an invalid length. [ 565.141268][T30455] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.405023][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 52 seconds [ 565.415782][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 52 seconds [ 565.426771][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 52 seconds [ 565.437750][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 52 seconds [ 565.497350][T30455] wlan0 speed is unknown, defaulting to 1000 [ 565.832566][T30484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6627'. [ 566.221561][T13670] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6d [ 566.484549][T30536] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 566.641839][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6642'. [ 566.652049][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6642'. [ 567.045227][T30552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6644'. [ 567.129995][T30552] bond4: Invalid ad_actor_system MAC address. [ 567.137053][T30552] bond4: option ad_actor_system: invalid value (1) [ 567.145919][T30552] bond4 (unregistering): Released all slaves [ 567.239793][T30561] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6647'. [ 567.695027][T30586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6652'. [ 568.189589][T30593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'. [ 569.810952][T30612] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6658'. [ 569.838894][T30612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6658'. [ 569.851316][T30615] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6660'. [ 570.000212][T30627] syzkaller1: entered promiscuous mode [ 570.007909][T30627] syzkaller1: entered allmulticast mode [ 570.048740][T30625] Cannot find add_set index 65532 as target [ 570.089367][T30623] policy can only be matched on NF_INET_PRE_ROUTING [ 570.089388][T30623] unable to load match [ 570.622272][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6667'. [ 570.788370][T30644] hsr_slave_1 (unregistering): left promiscuous mode [ 570.844184][T30657] netlink: 'syz.5.6670': attribute type 1 has an invalid length. [ 570.944666][T30658] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.007717][T30662] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 571.046619][T30666] netlink: 'syz.4.6672': attribute type 4 has an invalid length. [ 571.065645][T30662] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 571.168519][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 56 seconds [ 571.179945][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 56 seconds [ 571.191894][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 56 seconds [ 571.203016][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 56 seconds [ 571.301210][T30658] wlan0 speed is unknown, defaulting to 1000 [ 571.491141][T30683] netlink: 'syz.6.6675': attribute type 19 has an invalid length. [ 571.563596][T30687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6676'. [ 571.722383][T30691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6678'. [ 571.747717][T30691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6678'. [ 571.766311][T30691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.873115][T30704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6680'. [ 571.903880][T30691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.098677][T30702] veth3: entered allmulticast mode [ 572.229937][T30715] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6684'. [ 572.416357][T30727] netlink: 'syz.5.6687': attribute type 1 has an invalid length. [ 572.444628][T30727] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6687'. [ 572.721215][T30744] team0: Port device team_slave_0 removed [ 573.133841][T30755] bond7: entered promiscuous mode [ 573.145281][T30755] bond7: entered allmulticast mode [ 573.152133][T30755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.465668][T30775] xt_l2tp: missing protocol rule (udp|l2tpip) [ 573.614134][T30788] netlink: 'syz.6.6707': attribute type 1 has an invalid length. [ 573.693588][T30791] netlink: 'syz.5.6708': attribute type 11 has an invalid length. [ 573.701803][T30791] netlink: 'syz.5.6708': attribute type 11 has an invalid length. [ 573.822798][T30788] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 573.838563][T30788] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 574.034949][T30810] bond4: Unable to set down delay as MII monitoring is disabled [ 574.047153][T30810] bond4 (unregistering): Released all slaves [ 574.253300][T30823] bond0: entered promiscuous mode [ 574.261697][T30823] bond_slave_0: entered promiscuous mode [ 574.276361][T30823] batadv0: entered promiscuous mode [ 574.283385][T30823] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 574.294450][T30823] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 574.305542][T30825] net_ratelimit: 48 callbacks suppressed [ 574.305557][T30825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.306240][T30823] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 574.430582][T30832] nbd: must specify a size in bytes for the device [ 574.626183][T30848] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 574.701415][T30852] syzkaller0: entered promiscuous mode [ 574.718267][T30852] syzkaller0: entered allmulticast mode [ 574.981480][T30866] netlink: 'syz.6.6734': attribute type 1 has an invalid length. [ 575.117460][T30874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.694167][T30891] netlink: 'syz.6.6742': attribute type 6 has an invalid length. [ 575.864516][T30903] __nla_validate_parse: 37 callbacks suppressed [ 575.864535][T30903] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.6746'. [ 575.935640][T30907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6747'. [ 576.125603][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6749'. [ 576.137637][T30916] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6749'. [ 576.200823][T30916] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 576.210046][T30916] 0ªî{X¹¦: entered allmulticast mode [ 576.220623][T30916] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 576.361230][T30919] syzkaller0: entered promiscuous mode [ 576.366882][T30919] syzkaller0: entered allmulticast mode [ 576.373863][T30921] tc_dump_action: action bad kind [ 576.915090][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 60 seconds [ 576.916072][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.925997][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 60 seconds [ 576.944397][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 60 seconds [ 576.945997][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.955514][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 60 seconds [ 576.978050][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.998548][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 577.010444][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.174533][T30957] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.253919][T30964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6758'. [ 578.340047][T30967] syzkaller0: entered promiscuous mode [ 578.358003][T30967] syzkaller0: entered allmulticast mode [ 578.388990][T30967] 0: reclassify loop, rule prio 0, protocol 800 [ 578.490091][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6763'. [ 578.538953][T30974] netlink: 'syz.4.6763': attribute type 10 has an invalid length. [ 578.707757][T30974] team0: Device veth1_macvtap failed to register rx_handler [ 578.760388][T30957] wlan0 speed is unknown, defaulting to 1000 [ 578.894574][T31004] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6767'. [ 579.033565][T31012] syzkaller0: entered promiscuous mode [ 579.039439][T31012] syzkaller0: entered allmulticast mode [ 579.085013][ T5151] Bluetooth: hci3: command tx timeout [ 579.293584][T31021] delete_channel: no stack [ 579.409751][T30957] chnl_net:caif_netlink_parms(): no params data found [ 579.507754][T31033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6774'. [ 579.697125][T30957] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.704346][T30957] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.712154][T30957] bridge_slave_0: entered allmulticast mode [ 579.721684][T30957] bridge_slave_0: entered promiscuous mode [ 579.732111][T30957] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.740125][T30957] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.747668][T30957] bridge_slave_1: entered allmulticast mode [ 579.755676][T30957] bridge_slave_1: entered promiscuous mode [ 579.756539][T31045] openvswitch: netlink: Message has 1 unknown bytes. [ 579.795295][T30957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.808014][T30957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.817480][T31045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.867740][T31050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6780'. [ 579.895847][T31047] sctp: [Deprecated]: syz.2.6778 (pid 31047) Use of int in max_burst socket option deprecated. [ 579.895847][T31047] Use struct sctp_assoc_value instead [ 579.920194][T30957] team0: Port device team_slave_0 added [ 579.947957][T30957] team0: Port device team_slave_1 added [ 579.952399][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6781'. [ 579.966976][T31056] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 580.071671][T30957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.092743][T30957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.153924][T30957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.180289][T31069] netlink: 'syz.4.6783': attribute type 4 has an invalid length. [ 580.195905][T30957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.221787][T30957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.282639][T30957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.424137][T30957] hsr_slave_0: entered promiscuous mode [ 580.443417][T30957] hsr_slave_1: entered promiscuous mode [ 580.455766][T30957] debugfs: 'hsr0' already exists in 'hsr' [ 580.471702][T30957] Cannot create hsr debugfs directory [ 580.562251][T31089] ip_vti0: entered promiscuous mode [ 580.804464][T31106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.826062][T31108] netlink: 'syz.2.6796': attribute type 10 has an invalid length. [ 580.852829][T31108] syz_tun: entered promiscuous mode [ 580.858731][T31108] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 581.026166][T31112] __nla_validate_parse: 4 callbacks suppressed [ 581.026179][T31112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6798'. [ 581.149749][ T5200] udevd[5200]: worker [25259] /devices/virtual/block/nbd1 is taking a long time [ 581.155108][ T5151] Bluetooth: hci3: command 0x041b tx timeout [ 581.355455][T31117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6799'. [ 581.383736][T31120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6800'. [ 581.402668][T31120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6800'. [ 581.412114][T31121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6800'. [ 581.492426][T31129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6802'. [ 581.544205][T31128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6803'. [ 581.783275][T31147] netlink: 'syz.4.6809': attribute type 1 has an invalid length. [ 581.822586][T31147] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6809'. [ 581.900957][T31154] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6810'. [ 581.920058][T31154] tipc: Enabling of bearer rejected, failed to enable media [ 582.089508][T31170] netlink: 'syz.4.6815': attribute type 1 has an invalid length. [ 582.140288][T31159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6812'. [ 582.221722][T31170] 8021q: adding VLAN 0 to HW filter on device bond8 [ 582.242796][T31181] mac80211_hwsim hwsim45 ÿ: renamed from wlan1 [ 582.506484][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.527669][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.660471][T31214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.680782][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 64 seconds [ 582.692218][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 64 seconds [ 582.703211][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 64 seconds [ 582.717207][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 64 seconds [ 582.842138][T31226] netlink: 'syz.6.6831': attribute type 2 has an invalid length. [ 583.156301][T31246] bond9: option resend_igmp: invalid value (32767) [ 583.164563][T31246] bond9: option resend_igmp: allowed values 0 - 255 [ 583.182540][T31246] bond9 (unregistering): Released all slaves [ 583.201784][T31250] netlink: 'syz.4.6838': attribute type 14 has an invalid length. [ 583.210206][T31250] netlink: 'syz.4.6838': attribute type 14 has an invalid length. [ 583.245257][ T5151] Bluetooth: hci3: command 0x041b tx timeout [ 583.347818][T31254] netlink: 'syz.4.6840': attribute type 11 has an invalid length. [ 583.663084][T31283] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 583.688406][T31283] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 584.167882][T31317] netlink: 'syz.2.6857': attribute type 9 has an invalid length. [ 584.195117][T31317] netlink: 'syz.2.6857': attribute type 11 has an invalid length. [ 584.202952][T31317] netlink: 'syz.2.6857': attribute type 12 has an invalid length. [ 585.049979][ T5151] block nbd2: Receive control failed (result -107) [ 585.320457][ T5151] Bluetooth: hci3: command 0x041b tx timeout [ 585.342701][T31368] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 585.345321][T31366] netlink: 'syz.6.6874': attribute type 23 has an invalid length. [ 585.373856][T31372] netlink: 'syz.4.6875': attribute type 16 has an invalid length. [ 585.489275][T31385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.717389][T31403] openvswitch: netlink: Key type 48 is out of range max 32 [ 586.034495][T31433] Bluetooth: MGMT ver 1.23 [ 586.179467][T31444] netlink: 'syz.6.6896': attribute type 4 has an invalid length. [ 586.264113][T31451] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 586.301061][T31453] __nla_validate_parse: 27 callbacks suppressed [ 586.301080][T31453] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6900'. [ 586.401094][T31456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.479104][T31463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6903'. [ 586.678545][T31484] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6912'. [ 586.693931][T31484] openvswitch: netlink: Flow key attr not present in new flow. [ 586.751138][T31488] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 586.764052][T31490] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 586.775875][T31489] x_tables: duplicate underflow at hook 3 [ 586.798467][T31494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6914'. [ 586.960174][T31506] netlink: 'syz.4.6918': attribute type 1 has an invalid length. [ 586.972625][T31501] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 587.103441][T31514] netlink: 'syz.6.6921': attribute type 21 has an invalid length. [ 587.111813][T31514] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6921'. [ 587.119731][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6922'. [ 587.136618][T31516] openvswitch: netlink: IP tunnel dst address not specified [ 587.272374][T31523] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6925'. [ 587.286584][T31523] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6925'. [ 587.296375][T31523] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6925'. [ 587.398841][ T5151] Bluetooth: hci3: command 0x041b tx timeout [ 587.678827][T31542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6930'. [ 587.947586][T31552] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.366657][T31578] netlink: 'syz.6.6943': attribute type 11 has an invalid length. [ 588.460450][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 68 seconds [ 588.472059][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 68 seconds [ 588.483817][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 68 seconds [ 588.494885][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 68 seconds [ 588.581752][T31588] netlink: 'syz.2.6945': attribute type 12 has an invalid length. [ 588.873288][T31604] x_tables: unsorted underflow at hook 4 [ 589.373909][T31632] sctp: [Deprecated]: syz.5.6962 (pid 31632) Use of int in maxseg socket option. [ 589.373909][T31632] Use struct sctp_assoc_value instead [ 589.396487][T31632] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 589.475093][ T5151] Bluetooth: hci3: command 0x041b tx timeout [ 589.636838][T31640] netlink: 'syz.5.6964': attribute type 21 has an invalid length. [ 589.645143][T31640] netlink: 'syz.5.6964': attribute type 22 has an invalid length. [ 589.653261][T31640] netlink: 'syz.5.6964': attribute type 23 has an invalid length. [ 589.661994][T31640] netlink: 'syz.5.6964': attribute type 25 has an invalid length. [ 591.113120][T31656] geneve3: entered promiscuous mode [ 591.134819][T31656] geneve3: entered allmulticast mode [ 591.215334][T31662] netlink: 'syz.5.6969': attribute type 21 has an invalid length. [ 591.228807][T31660] nbd: couldn't find a device at index 0 [ 591.270069][T31665] netlink: 'syz.4.6970': attribute type 2 has an invalid length. [ 591.388577][T31676] __nla_validate_parse: 9 callbacks suppressed [ 591.388595][T31676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6974'. [ 591.392868][T31677] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 591.414550][T31673] x_tables: duplicate underflow at hook 1 [ 591.523077][T31684] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6977'. [ 591.533950][T31686] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6978'. [ 591.577330][T31682] sctp: [Deprecated]: syz.4.6976 (pid 31682) Use of int in max_burst socket option. [ 591.577330][T31682] Use struct sctp_assoc_value instead [ 591.658995][T31688] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6976'. [ 591.702993][T31694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.859219][T31703] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6983'. [ 591.986095][T31703] netlink: 284 bytes leftover after parsing attributes in process `syz.6.6983'. [ 592.077145][T31720] bond9: option miimon: invalid value (18446744073709551585) [ 592.106724][T31720] bond9: option miimon: allowed values 0 - 2147483647 [ 592.132277][T31720] bond9 (unregistering): Released all slaves [ 592.295604][T31735] openvswitch: netlink: IP tunnel dst address not specified [ 592.323690][T31738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6987'. [ 592.367844][ T748] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 592.396924][T31741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6990'. [ 592.433734][T31729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.472489][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6992'. [ 592.616510][T31751] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 592.752904][T31767] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6999'. [ 592.795433][T31769] bridge_slave_0: left allmulticast mode [ 592.801101][T31769] bridge_slave_0: left promiscuous mode [ 592.807913][T31769] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.823465][T31769] bridge_slave_1: left allmulticast mode [ 592.837757][T31769] bridge_slave_1: left promiscuous mode [ 592.843958][T31769] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.858747][T31769] `: (slave bond_slave_0): Releasing backup interface [ 592.873586][T31769] `: (slave bond_slave_1): Releasing backup interface [ 592.897240][T31769] team0: Port device team_slave_0 removed [ 592.933813][T31769] team0: Port device team_slave_1 removed [ 592.941941][T31769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.062929][T31785] netlink: 'syz.4.7003': attribute type 1 has an invalid length. [ 593.103816][T31785] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 593.577705][T31824] netlink: 'syz.4.7014': attribute type 1 has an invalid length. [ 593.651423][T31829] netlink: 'syz.2.7015': attribute type 1 has an invalid length. [ 593.702242][T31833] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 593.756596][T31829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.792805][T31835] bond4: (slave gretap1): making interface the new active one [ 593.805163][T31835] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 594.137859][T31859] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.215300][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 72 seconds [ 594.226252][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 72 seconds [ 594.237327][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 72 seconds [ 594.248375][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 72 seconds [ 594.301273][T31859] wlan0 speed is unknown, defaulting to 1000 [ 594.738732][T31877] ip6_vti0 speed is unknown, defaulting to 1000 [ 595.194893][T31877] wlan0 speed is unknown, defaulting to 1000 [ 595.633247][T31924] pim6reg1: entered promiscuous mode [ 595.638791][T31924] pim6reg1: entered allmulticast mode [ 595.898369][T31930] syzkaller0: entered promiscuous mode [ 595.914804][T31930] syzkaller0: entered allmulticast mode [ 596.392623][T31954] netlink: 'syz.6.7055': attribute type 29 has an invalid length. [ 596.440114][T31956] __nla_validate_parse: 16 callbacks suppressed [ 596.440133][T31956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7056'. [ 596.448513][T31958] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 596.868244][T31983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7065'. [ 596.884048][T31977] team0: Device gtp0 is up. Set it down before adding it as a team port [ 596.927104][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7065'. [ 596.936753][T31978] syzkaller1: entered promiscuous mode [ 596.942335][T31978] syzkaller1: entered allmulticast mode [ 597.069442][T31983] syzkaller1: entered promiscuous mode [ 597.078839][T31983] syzkaller1: entered allmulticast mode [ 597.118292][T31998] netlink: 'syz.2.7067': attribute type 2 has an invalid length. [ 597.229294][T32004] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.7070'. [ 597.253523][T32006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7069'. [ 597.254870][T32004] openvswitch: netlink: Missing key (keys=40, expected=100) [ 597.348566][T32008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7072'. [ 598.295859][T32042] netlink: 'syz.2.7081': attribute type 10 has an invalid length. [ 598.315758][T32044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7083'. [ 598.354138][T32047] netlink: 'syz.2.7081': attribute type 10 has an invalid length. [ 598.442502][T32054] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7085'. [ 598.558032][T32062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7088'. [ 598.763098][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7089'. [ 598.796830][T32072] netlink: 'syz.6.7089': attribute type 13 has an invalid length. [ 599.067113][T32093] veth1_macvtap: left promiscuous mode [ 599.362150][T32113] syzkaller0: entered promiscuous mode [ 599.369876][T32113] syzkaller0: entered allmulticast mode [ 599.587908][T32122] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 599.957173][ T11] block nbd1: Possible stuck request ffff8880252a8000: control (read@0,1024B). Runtime 76 seconds [ 599.979746][ T11] block nbd1: Possible stuck request ffff8880252a8200: control (read@1024,1024B). Runtime 76 seconds [ 599.990973][ T11] block nbd1: Possible stuck request ffff8880252a8400: control (read@2048,1024B). Runtime 76 seconds [ 599.995995][T32141] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 600.002090][ T11] block nbd1: Possible stuck request ffff8880252a8600: control (read@3072,1024B). Runtime 76 seconds [ 600.030002][T32141] bond12 (unregistering): Released all slaves [ 600.391214][T32169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.483182][ T3889] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.497038][ T3889] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.555142][ T3889] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.575163][T28949] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.719784][T32188] : entered promiscuous mode [ 601.028108][T32214] can: request_module (can-proto-4) failed. [ 601.877356][T32284] __nla_validate_parse: 13 callbacks suppressed [ 601.877375][T32284] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7150'. [ 601.911924][T32284] netlink: 'syz.6.7150': attribute type 7 has an invalid length. [ 601.937970][T32284] netlink: 'syz.6.7150': attribute type 8 has an invalid length. [ 601.952105][T32284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7150'. [ 602.163312][T32306] syzkaller1: entered allmulticast mode [ 602.181109][T32308] netlink: 'syz.2.7162': attribute type 39 has an invalid length. [ 602.251689][T32311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7163'. [ 602.431620][T32316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7164'. [ 602.470408][T32316] bond10 (unregistering): Released all slaves [ 602.522753][T32322] netlink: 'syz.2.7166': attribute type 2 has an invalid length. [ 602.526463][ T31] INFO: task syz.1.4891:24064 blocked for more than 143 seconds. [ 602.538795][ T31] Not tainted syzkaller #0 [ 602.543822][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 602.554026][ T31] task:syz.1.4891 state:D stack:27008 pid:24064 tgid:24061 ppid:17561 task_flags:0x400140 flags:0x00080002 [ 602.569106][ T31] Call Trace: [ 602.572421][ T31] [ 602.576364][ T31] __schedule+0x14ef/0x4fb0 [ 602.581025][ T31] ? __pfx___schedule+0x10/0x10 [ 602.586077][ T31] ? schedule+0x90/0x360 [ 602.590341][ T31] schedule+0x164/0x360 [ 602.594487][ T31] schedule_preempt_disabled+0x13/0x30 [ 602.600361][ T31] __mutex_lock+0x7fe/0x1300 [ 602.605226][ T31] ? __mutex_lock+0x5ac/0x1300 [ 602.610648][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 602.616588][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 602.621696][ T31] ? __nlmsg_put+0xef/0x1b0 [ 602.626574][ T31] ? genlmsg_put+0x137/0x2e0 [ 602.631175][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 602.636974][ T31] ? kmem_cache_free+0x195/0x610 [ 602.641921][ T31] ? nlmon_xmit+0xb0/0x100 [ 602.646770][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 602.652874][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 602.658487][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 602.664054][ T31] ? __asan_memcpy+0x40/0x70 [ 602.668761][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.677813][ T31] genl_rcv_msg+0x61c/0x7a0 [ 602.682341][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.687600][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 602.693660][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 602.699376][ T31] netlink_rcv_skb+0x232/0x4b0 [ 602.704131][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.709415][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.715616][ T31] ? genl_rcv+0x19/0x40 [ 602.719808][ T31] ? down_read+0x272/0x2e0 [ 602.724222][ T31] ? genl_rcv+0xd/0x40 [ 602.728398][ T31] genl_rcv+0x28/0x40 [ 602.732556][ T31] netlink_unicast+0x80f/0x9b0 [ 602.737522][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 602.742801][ T31] ? __alloc_skb+0x193/0x390 [ 602.747567][ T31] ? netlink_sendmsg+0x650/0xb40 [ 602.752624][ T31] ? skb_put+0x11b/0x210 [ 602.757444][ T31] netlink_sendmsg+0x813/0xb40 [ 602.762203][ T31] ? rcu_is_watching+0x15/0xb0 [ 602.767253][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.772546][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 602.777815][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.783094][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.788660][ T31] __sock_sendmsg+0x21c/0x270 [ 602.793371][ T31] ____sys_sendmsg+0x4d7/0x810 [ 602.799047][ T31] ? __might_fault+0xaf/0x130 [ 602.803954][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.809400][ T31] ? import_iovec+0x73/0xa0 [ 602.814499][ T31] ___sys_sendmsg+0x2a5/0x360 [ 602.819769][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 602.824942][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.830158][ T31] ? futex_wake+0x4ac/0x580 [ 602.834660][ T31] ? __fget_files+0x2a/0x420 [ 602.839784][ T31] ? __fget_files+0x3a0/0x420 [ 602.844466][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 602.849538][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.855138][ T31] ? rcu_is_watching+0x15/0xb0 [ 602.859903][ T31] do_syscall_64+0xe2/0xf80 [ 602.864416][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.870549][ T31] ? trace_irq_disable+0x37/0x100 [ 602.875700][ T31] ? clear_bhb_loop+0x60/0xb0 [ 602.880383][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.886387][ T31] RIP: 0033:0x7f5370b9acb9 [ 602.890802][ T31] RSP: 002b:00007f5371986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.899409][ T31] RAX: ffffffffffffffda RBX: 00007f5370e15fa0 RCX: 00007f5370b9acb9 [ 602.907697][ T31] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000004 [ 602.915881][ T31] RBP: 00007f5370c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 602.924475][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.932724][ T31] R13: 00007f5370e16038 R14: 00007f5370e15fa0 R15: 00007ffe0dd80798 [ 602.940859][ T31] [ 602.943994][ T31] [ 602.943994][ T31] Showing all locks held in the system: [ 602.952131][ T31] 1 lock held by khungtaskd/31: [ 602.964933][ T31] #0: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 602.991422][ T31] 6 locks held by kworker/u8:10/3474: [ 603.001073][ T31] #0: ffff88801b29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 603.012065][ T31] #1: ffffc9000c55fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 603.023110][ T31] #2: ffffffff8f799d50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 603.032546][ T31] #3: ffff8880552df0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 603.043611][ T31] #4: ffff888034773250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 603.054530][ T31] #5: ffffffff8e360b00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 603.064617][ T31] 2 locks held by getty/5583: [ 603.069355][ T31] #0: ffff88814d83b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 603.080610][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 603.091031][ T31] 2 locks held by syz.3.3976/20688: [ 603.096473][ T31] #0: ffffffff8f8166f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 603.104642][ T31] #1: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 603.115163][ T31] 2 locks held by syz.1.4891/24064: [ 603.120355][ T31] #0: ffffffff8f8166f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 603.129259][ T31] #1: ffffffff8e678968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 603.139511][ T31] 1 lock held by udevd/25259: [ 603.144186][ T31] #0: ffff888024c44358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 603.153661][ T31] 5 locks held by syz-executor/27843: [ 603.159168][ T31] #0: ffff88803381a420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 603.168337][ T31] #1: ffff888029476888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 603.178175][ T31] #2: ffff88802732dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 603.189336][ T31] #3: ffffffff8f020668 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 603.199725][ T31] #4: ffff8880552df0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x8f0 [ 603.208657][ T31] 4 locks held by syz-executor/30957: [ 603.214031][ T31] #0: ffff88803381a420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 603.223065][ T31] #1: ffff888055943c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 603.233311][ T31] #2: ffff88802732dd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 603.243570][ T31] #3: ffffffff8f020668 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 603.254154][ T31] 2 locks held by syz.2.7166/32321: [ 603.259571][ T31] #0: ffff88809f493008 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 603.269800][ T31] #1: ffffffff8e360c38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 603.280827][ T31] [ 603.283179][ T31] ============================================= [ 603.283179][ T31] [ 603.292286][ T31] NMI backtrace for cpu 0 [ 603.292302][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 603.292322][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 603.292333][ T31] Call Trace: [ 603.292341][ T31] [ 603.292349][ T31] dump_stack_lvl+0xe8/0x150 [ 603.292375][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 603.292394][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 603.292417][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 603.292440][ T31] sys_info+0x135/0x170 [ 603.292457][ T31] watchdog+0xf90/0xfe0 [ 603.292486][ T31] ? watchdog+0x209/0xfe0 [ 603.292515][ T31] kthread+0x726/0x8b0 [ 603.292540][ T31] ? __pfx_watchdog+0x10/0x10 [ 603.292562][ T31] ? __pfx_kthread+0x10/0x10 [ 603.292586][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.292606][ T31] ? __pfx_kthread+0x10/0x10 [ 603.292628][ T31] ret_from_fork+0x51b/0xa40 [ 603.292652][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 603.292670][ T31] ? __switch_to+0xc82/0x1410 [ 603.292701][ T31] ? __pfx_kthread+0x10/0x10 [ 603.292725][ T31] ret_from_fork_asm+0x1a/0x30 [ 603.292766][ T31] [ 603.292773][ T31] Sending NMI from CPU 0 to CPUs 1: [ 603.414307][ C1] NMI backtrace for cpu 1 [ 603.414324][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 603.414343][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 603.414354][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 603.414381][ C1] Code: e8 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 47 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 603.414396][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 603.414411][ C1] RAX: 000000000019990b RBX: ffffffff8198335d RCX: 0000000080000001 [ 603.414424][ C1] RDX: 0000000000000001 RSI: ffffffff8dad3341 RDI: ffffffff8be73880 [ 603.414436][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 603.414449][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fced770 [ 603.414462][ C1] R13: 1ffff110039d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 603.414474][ C1] FS: 0000000000000000(0000) GS:ffff888125a2a000(0000) knlGS:0000000000000000 [ 603.414488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.414500][ C1] CR2: 00007fe9ebfe3358 CR3: 0000000076394000 CR4: 00000000003526f0 [ 603.414520][ C1] Call Trace: [ 603.414526][ C1] [ 603.414533][ C1] default_idle+0x9/0x20 [ 603.414548][ C1] default_idle_call+0x72/0xb0 [ 603.414565][ C1] do_idle+0x1bd/0x500 [ 603.414587][ C1] ? __pfx_do_idle+0x10/0x10 [ 603.414608][ C1] ? do_idle+0xa/0x500 [ 603.414627][ C1] cpu_startup_entry+0x43/0x60 [ 603.414646][ C1] start_secondary+0x101/0x110 [ 603.414662][ C1] common_startup_64+0x13e/0x147 [ 603.414696][ C1] [ 603.415471][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 603.415487][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 603.415508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 603.415520][ T31] Call Trace: [ 603.415528][ T31] [ 603.415537][ T31] vpanic+0x1e0/0x670 [ 603.415565][ T31] panic+0xc5/0xd0 [ 603.415587][ T31] ? __pfx_panic+0x10/0x10 [ 603.415610][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 603.415635][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 603.415661][ T31] watchdog+0xfda/0xfe0 [ 603.415690][ T31] ? watchdog+0x209/0xfe0 [ 603.415721][ T31] kthread+0x726/0x8b0 [ 603.415748][ T31] ? __pfx_watchdog+0x10/0x10 [ 603.415771][ T31] ? __pfx_kthread+0x10/0x10 [ 603.415798][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.415820][ T31] ? __pfx_kthread+0x10/0x10 [ 603.415844][ T31] ret_from_fork+0x51b/0xa40 [ 603.415866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 603.415885][ T31] ? __switch_to+0xc82/0x1410 [ 603.415914][ T31] ? __pfx_kthread+0x10/0x10 [ 603.415938][ T31] ret_from_fork_asm+0x1a/0x30 [ 603.415978][ T31] [ 603.691451][ T31] Kernel Offset: disabled [ 603.695752][ T31] Rebooting in 86400 seconds..