last executing test programs: 3m7.444627114s ago: executing program 1 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050020020000200200002400010020a10700000000000003e7000000000000000000000000000022000000000000243c4db562b07ea300090080841e00000f0000000000000000ffffffffffffffff000000000000000000000c0010e407", 0x9c) 3m7.174068673s ago: executing program 1 (id=850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000340)) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20040004) 3m7.073653816s ago: executing program 1 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000008b0a000100aaaaaaaaaaaa0000140012800b00010065727370616e000004000280cb4adc57c0d915"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x0, 0x9, 0x3, 0x6, 0x2, 0x1}, &(0x7f0000000180)={0x0, 0x2252, 0x2, 0xfffffffffffffffe, 0x3, 0x3, 0x4, 0xf92}, &(0x7f00000001c0)={0x100, 0x0, 0x15614053, 0x4, 0x9, 0x4, 0x10001, 0x2}, &(0x7f0000000080)={0x77359400}, &(0x7f0000000540)={&(0x7f00000004c0)={[0x5545]}, 0x8}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="14010000260001000000000004000000020100800c000100020000000000000014000c01"], 0x114}], 0x1}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x65dfdb01, {0x0, 0x0, 0x0, r8, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000000}, 0x4041080) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000600), 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, &(0x7f0000000ac0)) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000640)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) socket(0x2d, 0x2, 0x0) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000680)=0xe, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r12, @ANYBLOB="010029bd7000fbdbdf257600000008000300", @ANYRES32=r13, @ANYBLOB="0c009900070000002c0000000c00580023000000000000000c0058002c000000000000000c0058003d000000000000000c00580051000000000000000c00580021000000000000000c00580018000000000000000c00580024000000000000000c00580077000000000000000c00580033000000000000000c0058001600000000000000576666c49e3d311dce0ffe76d2f2d848b70042da4676b19d3fedaa632f6b7b50253d5c0c10319bab25b0dac331d5530ec5b9ed95398111d0f8070a840a121a330f7b16d09f1b7277a98d95f2d9afad5743b15e2af2ff118cd1"], 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x4c850) 3m6.978771557s ago: executing program 1 (id=855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3m6.917509698s ago: executing program 1 (id=856): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000080)={0x5, 0x10, 0x5, @empty, 'bridge0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="0500"], 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4094}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5f, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x452, 0xf5, 0x4, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x34000844}, 0x20084090) 3m6.815712852s ago: executing program 1 (id=858): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14}}, 0xc000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4010) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920800024000000001080004400000000008000140000000140800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000500)=ANY=[], 0x18) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='io.stat\x00', 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000001140)={0xa, 0x4e22, 0x4db, @private1, 0x800004}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="fc00bc", 0x3}], 0x1}}], 0x1, 0x4c041) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000880)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000008c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="f274869d736c4f4aa9ca1b4fd5f6dbec3ed15d64a0c3a648815d63dd20e0811138ec79b4f35ae415280bf652ba285b0dfe5b0028c5a936133daca8d3fd38169acd2e152e25655e21978cfe1451e54ba859c201d86817d78cf852c527d4ec2acee5aace87fe146e08ff9ffab417a9851547133d625d36fc59109eefed25d3074afa8e5574801d3d238daceb2f9028a8e81958153e2b6ba19d536712362f344e744d3a0e22e2d0a0ad", 0xa8}, {&(0x7f0000000a80)="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", 0x652}], 0x2}}], 0x2, 0x80) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000240)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000700)={@private=0xa010101, @multicast1}, 0x8) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r12, 0x6a, 0x3, 0x4000, 0x4) getsockopt$inet6_buf(r11, 0x29, 0x30, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRESOCT=r2, @ANYRESOCT=r2], 0x4c}}, 0x0) 2m51.768810201s ago: executing program 32 (id=858): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14}}, 0xc000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4010) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920800024000000001080004400000000008000140000000140800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000500)=ANY=[], 0x18) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='io.stat\x00', 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000001140)={0xa, 0x4e22, 0x4db, @private1, 0x800004}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="fc00bc", 0x3}], 0x1}}], 0x1, 0x4c041) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000880)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000008c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="f274869d736c4f4aa9ca1b4fd5f6dbec3ed15d64a0c3a648815d63dd20e0811138ec79b4f35ae415280bf652ba285b0dfe5b0028c5a936133daca8d3fd38169acd2e152e25655e21978cfe1451e54ba859c201d86817d78cf852c527d4ec2acee5aace87fe146e08ff9ffab417a9851547133d625d36fc59109eefed25d3074afa8e5574801d3d238daceb2f9028a8e81958153e2b6ba19d536712362f344e744d3a0e22e2d0a0ad", 0xa8}, {&(0x7f0000000a80)="a984e08286383b0809856806f037c30690a15c623bebfb300eda8c3e4dc47429408a71c86cf15d6d3a5ae5ce9fb635d4c01acf74a3122e0224898fdfbe34b5a29179ddd3426d0af728084ffc16ad11de3be98527fe1b6577dd149519e9fa3e0fa5c69ed3d3b9b29944136df5c425e14af5128b530f4870a127164baaf7f0928c032dc1d0b27369af6c11ff268f8cb6102d5254a959b62d2a3d5463f392cc56c48e93b5e2e4d3eb4c30bb6e0f303f995376d3f36a873e2c0fa510f9a69a89aaa3a74a38b4c2192004de38e6cedca71d0609cb76bf3db9f28c40e04121b807933a6f4147a17ce1c0d59d515ea938388440e874f95d00d70fdd8673016d895db50440e087774c8dd85f966a64cebd78bb40c5d494d87edaf90969c649f7f0553c24b05fb0ce058927cf1d7f81508c293e7bc4975dbe5cc3122220777c660d8356a750c4599ef79583fb1a5e113ca58ad30ceddfea1aa465c0b7237293d58f3f23ab84f2cb384361d62a9fa8c3930af395dacc956e5a4a060068d62f4561c9c03d2a9399b9d05e15f0436d746dc015c32c616f247731ad3a7525f1603f868c7b4d897c21c4f09496714f6663dbebf97483ffc6523b5dd5585a88c09d0bb9b8fb5ae9286dafe0a8589b91af68b64227f8ed88c387cb4aedae92d4f8381dfbf7e89d6fc0312684bd99ba1b51ea16545f65b06637a757e26eaaf6effb02b07f40c4379991cebfa2b7c2d9e7459e4a8d65dc23dcd82d0a555cf65c605eabd96ccd5d736f576f59aa2091175b67a0c3a3078e45294a8466fac894de9b4f3bbda5dd39146e0bec3f46d8b4d8504e8b1919b974958dd68413ceeb31a4a5ddebfebf06a7f67c90cd617152df6dc93d8b78840c5346b44ce15407243e92e4052be610577f1dd6643e5ddb4ba7743ac2bcfde517ff95fd44630e5de28d1715cdfd532cf5cb65bdda4cf8ba9fb8319d2d415c56349d5a89730249c30cf90e4e63fc7dc5e5388328c564260f1688f29e9b2d92cfde994550fcb3c1be2819fac2a8fb13ae33ba84f0b585587ebd575dffe6f85fac88adf8cac215db803aebc4f86fb4dda921b6293ffaec8a3cb559f727ab6911e0beda18ad6c853847e1e3d27ef83f44e5170f7fca2610e2cc6e7dfb3a984479b513eb637c3bce2e9764121d583ca9c27caa9ac9b46a9125e3db89697becade4f5dd6279fde2054a401ee7925fc34ff8a2776f79d66e5efc605bc4903a1041b9bc37c2e7bc5025a6df4b4be9d790868269d94878f713fcaf5a904b0daf64867c733a96fbe26dc2fdba9e5eca94b23f220b696ea6e5c29e0105f265883273df39f8b6c9d7539dc5679c1f5f6f5510c016ec965849df7b3e3b8c25e224adf6279087b87b124fbe34bf711617f0c8cee18e5c901cc4d9eab68420d3195c683715bc2971601bf4152cb706b8337c4e5f257feb28d53775ec87066f16ac3a2a5b4ba0d71da5b5ef92364a5f940fe2b7c4b623cadb19c3411b1b65e1a07c7481e7ae816cdd04974351f25bcf7a0152f473b540709db15b24ae6252ec301e2d6f4352fd21e15b01015bc273938ed278657d9c2c24ba14fb0bcba2a80102f7cfd7fe0edc5e7f9a4b510478b35857b725eee5e9ae8719aa313f2baacfc67163a75077532a8af81e71c27b7af778ee6ee65dea212c59ac4e0406cead09d56f77ae191fcb58dc7ffefb7d6ad66ded37960b651d719e409fad456821fe36b97c8c29ade08944223fdc0c95c0d0455fcbb7c729d9dd38e707d651778e1b0f0a188a52b384cbc6a65b251a093cf81366adeb2e2a658a42b1f4d71ef5400ee656beead1a990bc7bb389825faa77364a126924fb9e27d810860fa0ce7a54b94560e786ae7ee556850264216abff4dcda8dfa9a3f1c7dfb5cb52662f54dc8aa701826d70139edd362c81e967b1d3a8ae28dd7f4169c2420fc1fd70a9bfbede6fe29ed85f923ce8f7debfed2c2679003ea89e5d476c71642f3f46dfe647262e64522d653f2be335f9ec1727d266d0d5a4133d88ebce3f939d0d525c1d2dc53a15dd30158e9d30bce170abb264be70c19ed27bd01d67268186ecf4bf8d56adb6636c8b2c8d11ba6d72dd5028769968dc7dd82056563b93463f21e6bb7d32091702ad5aad9662bb05550727e02b8bf3a8bd6ad68e31e04f2a7d63015020bdca73dfe06cc351ea1099f83f97acc2bbbbba8ab06b62d3fe16aa6a8110bd261dae8b2c370f58dd2f2c5b760c90121f08cae132a5c78d84f7c5f74b3161e28fa547579fcaea6570276323924ce1541560b7980", 0x652}], 0x2}}], 0x2, 0x80) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000240)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000700)={@private=0xa010101, @multicast1}, 0x8) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r12 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r12, 0x6a, 0x3, 0x4000, 0x4) getsockopt$inet6_buf(r11, 0x29, 0x30, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRESOCT=r2, @ANYRESOCT=r2], 0x4c}}, 0x0) 2m39.871583964s ago: executing program 4 (id=1157): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x3a, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000bc0)={&(0x7f0000000140), 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x42c, 0x3f4, 0x1, 0x70bd2b, 0x25dfdbfb, {0x6, 0x0, 0x18, [0x4, 0xc4a, 0x1, 0x200, 0x1, 0x5, 0x2, 0x4963, 0xd, 0x3, 0x10, 0x8, 0x42b004a5, 0x3, 0x5, 0x3ff, 0x187f, 0x8, 0x8, 0xc, 0xfffffffa, 0x8, 0xf, 0x68b, 0x7, 0x0, 0xf6, 0x200, 0x100, 0x2, 0x2fe9, 0xfffffffa, 0x4, 0x2, 0x1ff, 0xa, 0xa0000000, 0x401, 0xf30, 0x4, 0x100, 0x6, 0xa, 0x7, 0x8000, 0x6, 0xf7, 0x3, 0x0, 0x8, 0x2, 0x4, 0x9, 0x58, 0x80000000, 0x3, 0x1, 0x0, 0x5, 0x8, 0xe132e98d, 0x8, 0x101, 0x6], [0x8, 0xd, 0x81, 0x0, 0x3ff, 0x9, 0x2, 0x6, 0x3, 0x9, 0x5, 0xffffffff, 0x9, 0x7, 0xacfd, 0x1, 0x3, 0xffff, 0x2, 0x6, 0x7ff, 0x9, 0x1, 0x94eb, 0x6, 0x3170, 0xfffffff7, 0x6, 0xa, 0x6, 0x6, 0xfffffffc, 0x80, 0xefe2, 0x5, 0x7e07, 0x8, 0x4, 0x636, 0x5, 0xe, 0x2, 0x1, 0x3de, 0x400, 0xd5, 0x7, 0x1, 0x4, 0x2252, 0x9f, 0x1, 0x800, 0xf6fb, 0x6, 0x401, 0x5, 0x5d, 0x3ca, 0x8001, 0x80000000, 0x89, 0x52, 0x2], [0x10001, 0x3, 0x2, 0x3, 0x2, 0xc7a, 0x0, 0x81ab, 0x6918, 0xfff, 0x9, 0x1000, 0x3, 0x1, 0x81, 0xc408974a, 0x1, 0x8, 0x3, 0x5, 0x3ff9de5a, 0x5, 0x0, 0x5, 0x5, 0xbe5, 0x7, 0x8001, 0x5, 0xf8ba, 0x8, 0x4, 0x4, 0x7, 0x7, 0x9, 0xe, 0xfffffffb, 0x2, 0x5, 0x81, 0x8000, 0x7f, 0x0, 0x897, 0x2, 0x0, 0x0, 0x4, 0x20, 0x838, 0x10, 0xe1, 0x6, 0xfffffffe, 0x5, 0x5, 0x401, 0xffffffd3, 0x7, 0x9, 0xe, 0x52], [0x100, 0x9, 0x4, 0x4, 0x9, 0x7ff, 0x4, 0xc211, 0x4, 0x6, 0x2e94, 0x3, 0x1, 0x6, 0x3ff, 0x0, 0x6db, 0x33, 0x8, 0x5, 0x5, 0x5, 0x0, 0x9, 0xfffffff8, 0x3, 0x0, 0x7f, 0x6, 0x0, 0x7, 0xc, 0x9, 0x5, 0x101, 0x100, 0x7, 0x9, 0x40, 0x1, 0xc1d0, 0x81, 0x7f, 0x5, 0x2, 0x5, 0xc6, 0x3, 0x1c976296, 0x0, 0x0, 0x6, 0x5, 0x4, 0xfff, 0x6, 0x7, 0xffffffff, 0xd96, 0xd52c, 0xc790, 0x7, 0x8, 0x80b], 0xa, ['\x00', '\x00', '\x00', 'mqprio\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r1, 0x0, 0x0, 0x4001800, &(0x7f0000000700)={0x2, 0x1234, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x1, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x20000000) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}) 2m39.719612468s ago: executing program 4 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050020020000200200002400010020a1070000000000000000000000000802000000000000000022000000000000243c4db562b07ea300090080841e00000f0000000000000000ffffffffffffffff000000000000000000000c0010e407", 0x9c) 2m39.69936786s ago: executing program 4 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff000000cad3fe06071fcf6086544f0071102800000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x24, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x96, 0x4}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) (async) ioctl$sock_ifreq(r2, 0x8918, &(0x7f0000000140)={'veth0_to_team\x00', @ifru_addrs=@xdp={0x2c, 0x4, r3, 0x16}}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.493368607s ago: executing program 4 (id=1163): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00100004000000040000000400001300000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b70200000a000000bfa3000000000000b704000023000000850000003f0000009500040000000000ddfa1886c71cefa7c14f5d090ebc6bb97fe788b1624b8974bfba066446c26872219af66d06000000ddf3662c6dddd0044cb3b603ab4878"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001800)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.441031127s ago: executing program 4 (id=1165): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89e1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x0, 0x250, 0x2e8, 0x380, 0x418, 0x1b8, 0x250, 0x2e8, 0x380, 0x418, 0x6, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x510) syz_emit_ethernet(0x2e, &(0x7f0000000940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a71000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2020000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/mnt\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x1}, 0x90) 2m39.165622714s ago: executing program 4 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000300080002000200000004000300", 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffdffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000004400000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000018500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m1.317865739s ago: executing program 33 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000300080002000200000004000300", 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffdffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000004400000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000018500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.604669703s ago: executing program 3 (id=2216): syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="013d99", 0x3}], 0x1}}], 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x4d, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8}, 0x0, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffd00, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x48) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x0, 0x7, 0xd, 0x9}], 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001380)='./cgroup/cgroup.procs\x00', &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r4, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001440)=[0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0], 0x0, 0x11, &(0x7f00000014c0)=[{}], 0x8, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x59, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 24.028516727s ago: executing program 3 (id=2226): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x9bd}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'caif0\x00'}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000340)='\x00', 0x218241, &(0x7f0000000380)={@_ha_fsid={[0xffff7fef, 0x800]}, {0x9, 0xed3, 0x10, 0x100}}, 0x83, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000500)=0x3}, {[0x5, 0x2a1c5e4a, 0x400, 0xffffff1e]}, 0x2a040000, 0xb6, &(0x7f0000000540)=""/182}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000240)={'ip_vti0\x00', 0x100}) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000b1480bdf34ec9f32336a3ddf041b8d727c188342008fead6391fa9b2cd604dc4121d813ba8f6020f8ca9dc180b038d029dfb9280210105ea0024e37aa7c236bdb8a8c54bbf5e178135409c180d2cced38b32e23cbd3c20884b52c7ec013dfd67a22657e8b89a55cce9eeb8d21a97dd608a90330af1"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 23.609472864s ago: executing program 3 (id=2231): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x2, 0x4, 0x20, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x0, 0x5}}) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000940)=0x3, 0x4) bind$bt_hci(r2, &(0x7f0000000980)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000a00)='espintcp', 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000a40)=0x1, 0x4) connect$inet(r4, &(0x7f0000000a80)={0x2, 0x4e20, @dev}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}, 0x1, 0x0, 0x0, 0x40894}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000000b80), 0x8000000000001ac, 0x2140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000140)=@file={0x1, '.\x00'}, 0x6e) 23.355723475s ago: executing program 3 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x69, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}}, {0x22, 0xff, 0x0, @empty}}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000480)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000004c0)={0x11, 0xd, r4, 0x1, 0x7, 0x6, @local}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000046000000000000000000529c2d9457d793f7e142a2da0ceef5ce701cc9f01c1b529b5eed18d63325cbdf1f0b3e4f5066f0bba394d1a408b4d8126863d2d0bc62af5dc01ab0d866e4bf1ac059238170a9b9040000002f2e4372079604890f419b013e99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x3b, 'perf_event'}, {0x2d, 'perf_event'}]}, 0x18) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000380)={0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r6, 0x20, 0x1, 0xe, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0xc, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r13, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000cc0)={0x3, 0x0}, 0x8) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x6, 0xc, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r15, 0x2000000, 0xe, 0x0, &(0x7f0000001040)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x7, 0x2e, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x85}, [@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7c7eb07f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x3, 0x2, 0x0, 0x8, 0x1}]}, &(0x7f0000000b80)='GPL\x00', 0xd, 0x29, &(0x7f0000000bc0)=""/41, 0x41000, 0x0, '\x00', r4, @fallback=0x31, r13, 0x8, &(0x7f0000000c40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0x5, 0x8a5}, 0x10, r14, r15, 0x1, &(0x7f0000001080)=[r9, r5, r9], &(0x7f00000010c0)=[{0x1, 0x5, 0x2, 0x7}], 0x10, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.211267102s ago: executing program 3 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETNSID={0x1c, 0x5a, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 23.004859128s ago: executing program 3 (id=2238): r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$inet(0x2, 0x2, 0x0) pselect6(0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000300)={0x8}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "55c926d748e9219f0595ad24890a6a15b2d52368edf173313fe245fb5ed9af9e", "fc3ebcf63a94a908599549df41158f149c5e1ce4e2082ab95ca423907d3ef289", "11c948cbc903529e681aca17173ac072b9b50f709829a5ec17155fe68a6829dd", "fede46b54094378d3bbcaaebcd42971817a4c31e9ec87f80b16012641e0dce25", "37ad975abe70c433906fdf7d67be68e374ec371af7752d9fb41a35fb9f55f0b5", "93479de76a07e7caf29fc22b", 0x7, 0x404, 0x7f, 0x5d46, 0x6}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xdc, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d151080040007"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) close(r3) 22.884455559s ago: executing program 0 (id=2240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket(0x15, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="50030000", @ANYRES16=r2, @ANYBLOB="000428bd7000ffdbdf2518000000f40005800700010069620000080001007564700054000280080001000c00000008000400de0000000800020000080000080001001800000008000200ff0000000800020000010000080001000200000008000400070000000800010011000000080001002000000014000280080001002000000008000100190000002400028008000300050000000800040000ffffff08000200020000000800030001000000080001006574680007000100696200003c000280080001000800000008000400040000000800010009000000080003000900000008000200ffffffff080003000200000008000300080000000800010075647000100004800900010073797a30000000009c000680040005004b000300fd56fcadb4149ef799491e52c58ca36d2d1edbbe82e50e7a9e52bc2cefbe656f8ecc8d543f9c8b1ad54f1d14b6ae5920a18392339244f105c96f9ddc24e6cda87f56d44e645149004800040067636d286165732900000000000000000000000000000000000000000000000020000000ee6d7b624ef80fd2c2c8bf5a8797b8b333367f1f52b5cee3ba9d5c34ba4104e4200105803c000280080004000100008008000300ff0f00000800010009000000080001000600000008000300f7ffffff080003000000000008000300eb0000001c00028008000200519100000800040004000000080002000400000007000100696200000c000280080004000600000004000280080001007564700044000280080003000000000008000300040000000800010009000000080004000200000008000300060000000800020006000000080003001c0c000008000200fcffffff14000280080004008e55000008000100060000004c000280080004000100000008000400b20000000800040000000000080001001f000000080002003000000008000400810000000800010017000000080002000300000008000300fbffffff44000280080001000700000008000200010000000400040008000100010000000400040008000200070000000800020000100000080002000900000008000100050000001c0003800800030008000000080003000700000008000300000000001c0006800400050014000300b15b527867e793dfefb6d53576c7ae2489358d926f81f53c72f0da4184a19b3007d1594acd36df2bbb993289e9f819"], 0x350}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000c1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x7, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c01000013000101000000000000000006000000000000000000000000000000640101020002000000000000000000000100000d040000090a00000000000000", @ANYBLOB="6c88dc615292e1c8b84bd940ab8088e21a7badc9b47d93de2860695c91c05111e1eda6a109ae4dbc547c690885a944280d509b0a87b4aaa82d1f5025e8655217b2037877a3365cad44711915e1526bd8278d382d10a6736d19c1a77c6de4fd0d27a3c103e3dd9a1622e4d75168a27abfbcf2faaa5714696adc083b030ca7a8d5d9f2f22ffc3bce20c2ccad3c3373bf166da8c04be86de218a0b3799c43326c3afc207c799f782742f4", @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000003000000000084000500ffffffff000000000000000000000000000004d22b0000000a00000000000000000000000000000000000000000000000301010005000000020000000100008000000000000000000000ffff00000000000004d5320000000a000000640101010000"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@delqdisc={0x54, 0x25, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff1}, {0xc, 0x5}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xb91}}}, @TCA_RATE={0x6, 0x5, {0xac, 0x81}}, @TCA_RATE={0x6, 0x5, {0x54, 0x71}}]}, 0x54}}, 0x4000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 22.663566059s ago: executing program 0 (id=2242): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x9f8, 0x0, 0xb, 0x148, 0x0, 0x148, 0x960, 0x230, 0x242, 0x960, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x880, 0x8a0, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x200, 0x2}, {0x6, 0x3}, {0x2, 0x1}, {0x9de}, {0x0, 0x1}, {0x0, 0x2}, {0x8, 0x1}, {0x3, 0x2}, {0x2, 0x1}, {0xfffffff1, 0x3}, {0x4, 0x3}], [{0x4}, {0x9, 0xffffff9b}, {0x8}, {0x8, 0x6}, {0xffff, 0x7bf9}, {0x8, 0x101}, {0x8000, 0x1}, {0x2, 0x3}, {0x400000, 0x401}, {0x5, 0xf}, {0x7, 0x4}], 0x6, 0x2}, {[{0x3, 0x2}, {0xb9c}, {0x3, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x8954, 0x3}, {0x4}, {0x8}, {0x2, 0x3}, {0x8, 0xab5a42f7f6b5a56c}, {0xfffffff7, 0x1}], [{0x9, 0x2}, {0x0, 0x1}, {0x8451, 0x2}, {0x94a, 0x2}, {0x97, 0x7}, {0x3, 0x3}, {0x7b3, 0x7ff}, {0x9bae1c6e, 0xfffffeff}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x6}], 0x3, 0x8}, {[{0x3, 0x1}, {0x8, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xe, 0x3}, {0x1b4caf9d, 0x1}, {0xd4b, 0x1}, {0x7fff}, {0xa04, 0x1}, {0x9, 0x3}, {0x6, 0x2}], [{0x100, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x3, 0xd4}, {0x1, 0xf1c5}, {0x8, 0x6}, {0x1, 0x6}, {0x4, 0x5}, {0xfffffff8, 0xffff8000}, {0xe, 0x5}, {0x0, 0x4}], 0x9, 0x4}, {[{}, {0x2}, {0x8, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x9, 0x1}, {0x3, 0x2}, {0x8}, {0x2, 0x1}, {0x4, 0x3}], [{0x2, 0x7}, {0x9, 0xfff}, {0x0, 0x7f}, {0x7f8, 0x1}, {0x7f, 0x1}, {0x5, 0x1}, {0x6, 0x2}, {0x3ff, 0x2}, {0x4, 0x2}, {0x3b0, 0x4800}, {0x8, 0x6}], 0x8, 0x6}, {[{0x9}, {0x5, 0x5f0be302ef1773e0}, {0x0, 0x3}, {0x7, 0x2}, {0xfff}, {0x3, 0x3}, {0x358d, 0x1}, {}, {0x5, 0x1}, {0x9, 0x3}, {0x8, 0x2}], [{0x29, 0x2}, {0x2, 0x7f}, {0x0, 0x8a4}, {0x98, 0x2}, {0x303e46e8, 0x4}, {0x8, 0x1}, {0x0, 0x76ed}, {0x4e24f7e6, 0x679}, {0x40, 0x8}, {0xffffffff, 0xd}, {0x3}], 0x0, 0x1}, {[{0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x401, 0x1}, {0xd}, {0xd0ac, 0x1}, {0x1000, 0x3}, {0x93, 0x1}, {0x4}, {0x4, 0x1}, {0x6, 0x2}], [{0x0, 0x7}, {0x0, 0x9}, {0xac, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x9}, {0x7ff, 0x101}, {0xffffff01, 0x9}, {0x6, 0x2}, {0x88a, 0x272}, {0x2, 0x1}], 0x2, 0x6}, {[{0x5}, {0x401, 0x3}, {0x5, 0x1}, {0x80000001, 0x2}, {0x5, 0x2}, {0xab9}, {0x10, 0x2}, {0x6, 0x2}, {0x2, 0x1}, {0xffff, 0x2}, {0x3, 0x3}], [{0x8, 0x2}, {0x100, 0x4}, {0x31b, 0x4}, {0xffff, 0x8}, {0x7a, 0x98a}, {0x2, 0x4}, {0xb, 0xaf4f}, {0x926e}, {0x4a}, {0x3, 0x5}, {0x3, 0xb}], 0x4, 0x5}, {[{0x800, 0x2}, {0x7, 0x3}, {0x1d80000, 0x2}, {0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x8}, {0xff}, {0x6, 0x2}, {0x9}, {0xfffffffe, 0x3}], [{0x2}, {0x9, 0x101}, {0x7, 0x1}, {0xffffff5e, 0x3}, {0xb, 0x1ff}, {0x40, 0x3}, {0x10000, 0x1ff}, {0xdc, 0x80}, {0x4, 0x6}, {0x5, 0x2}, {0x5, 0x3}], 0x2, 0x3}, {[{0x1, 0x3}, {0x3, 0x2}, {0x8}, {0x401}, {0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x2afa, 0x3}, {0x0, 0x1}, {0x0, 0x1}], [{0x3, 0xde}, {0xa2, 0x4}, {0x51ae, 0xcad}, {0x0, 0x200}, {0x1, 0x1000}, {0x40, 0x7}, {0x7fff, 0x7f}, {0x1, 0x10}, {0x4, 0x2}, {0xf}, {0x3, 0x6}], 0x5, 0x5}, {[{0x3, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x40000010, 0x1}, {0x1}, {0x2, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x163f}, {0x9}], [{0x8001, 0xfff}, {0x4, 0x6}, {0x0, 0xb9}, {0x0, 0x6}, {0x95ecce8c, 0xcb6}, {0x0, 0x2}, {0xf60, 0x4}, {0x4, 0xffff}, {0x9, 0x2}, {0x1, 0x7}, {0x4, 0x7}], 0x7, 0x1}, {[{0x7d0f, 0x3}, {0x8, 0x3}, {0x2}, {0xff}, {0x1ed7, 0x2}, {0x8000, 0x1}, {0x4, 0x2}, {0x81, 0x3}, {0x5ab, 0x1}, {0x8000}, {0x8, 0x1}], [{0x1, 0x89}, {0x8, 0x8}, {0x1}, {0xab, 0xfffffff3}, {0x2, 0x1ee}, {0x81, 0x1}, {0x1, 0x14}, {0x1, 0x7}, {0x9, 0x7}, {0x0, 0x8}, {0x80, 0x209}], 0x6, 0x2}], 0x5}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xa]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa58) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r3, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000000300), 0x492492492492627, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002abd7000fedbdf2500000080000000000000000014000d0020fa8a52e1c031e593fb43385671f6081dadc2482d8e0c1b6c09826c740deeb8b64f3b2d9f30bde8e15e1ef07fe7c8102c28116316666be8dcbaa65881ef05979b893fdd83c810f5c68475bc0247fa017f2689273563b4f6febdc629a82bca6c356984fabade64e55c795abd1eab1f07303c00"/158], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) 22.328597215s ago: executing program 0 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000250001012abd7000fcdbdf251e000000040067003dd2e0c370a3c2cb4bf59c4cd6f2ff22990114658fdec2fa8405d2ee18ec6d88c489dcc6dcf1555b96160399feec0146482b28c5a84542d74c9643c0ea5147b89fdb329b1b9bd25e6350d772b3a15240007c495cc050eef51440e31dbce5428ac4a5be734aab9c1f76bcc1cec4bace5a6b15e807719b5897358595fb1f3f315cbde369c80ef737903b76b28a8563726ede090158571da9edcc86d186f0c3bc9cd4b60bb8109bcafd150a59568c66536d0cb8d5b68511e7f7ea9899c3ec42e4677a362830ce2717856dc28fb65769278931ed49d5525caddf6ab8e8f7f4d1d7893c4bf7fe325c061e40e972ce6933d5924dc6ace6104f2cfd206440e52912aefef0ac0e4e20aa11"], 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008804}, 0x4048880) 22.271608599s ago: executing program 0 (id=2247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000010852000000200030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x5, r2}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r2, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x3ff, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f00000009c0), &(0x7f0000000a00)=r6}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000002c0)={r8, &(0x7f0000001100)="80fc2bf4e2e96a43be449cbb95ebb5836913ddce2168f809ab1610bb783a925bfa833e438edef340ba55cda2c577a52e5dcdb82a0664e3b416c0153148ba9e04db8acc39a8e731dcbd8127c81cf7b47b25c19e6d094d40bef1352ee15602758a7c2951018b1383a77107a7dd35fafb4b826d546d142dca26dd4eb6cd116d2f77360486a41019aa3842adb8c4c0fbd655c0857745ef331da032751ea9b938ff01fd0486efb4ea05ef64487c6b8d4f98b5b181ce5fde94f87919783d11c75a62ddac06025465c1b962a2a817eaf424caf3978dbfd01b0d6b443fc87d5b4af164bc285d8f989df4a4052474d61381df00"/262, &(0x7f0000000200)=""/84}, 0xfe96) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xe, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e40)={r11, &(0x7f0000000e80)='G', 0x0}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0xdd, 0x0, 0x1, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@o_path={&(0x7f0000000f40)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_ext={0x1c, 0x29, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x3, 0x3, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r3}, @ldst={0x0, 0x3, 0x1, 0xa, 0xa, 0x4, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x2, 0xc7, &(0x7f0000000640)=""/199, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x1, 0x8001, 0xff8}, 0x10, 0x2549a, 0xffffffffffffffff, 0x2, &(0x7f0000000fc0)=[r4, 0xffffffffffffffff, r5, r7, r9, r11, r12, r13], &(0x7f0000001000)=[{0x3, 0x3, 0x4, 0x9}, {0x0, 0x1, 0xb, 0xb}], 0x10, 0x4}, 0x94) 22.166950326s ago: executing program 0 (id=2248): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1ff, 0xd, 0x1, 0x5, 0x1, 0x156, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x300}, 0x1, 0x0, 0x0, 0x8015}, 0x0) 21.953116931s ago: executing program 0 (id=2250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000940)={'pimreg0\x00', 0x7c2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000009c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000007c0)={{[0x81, 0x7, 0x9, 0x7]}, 0x0, 0x1, 0x81, 0x0, &(0x7f0000000700)=[{{@_ha_fsid={[0x5, 0xffffff7f]}, {0x3, 0x4, 0x2, 0x10001}}, 0x3, 0x0, '\xff\xff'}, {{@align=0xc, {0x8, 0x3, 0xc6, 0xfffffffffffffffb}}, 0x6, 0x0, 'ingress\x00'}, {{@_ha_fsid={[0x4, 0x10]}, {0x4, 0x1, 0xfff, 0x9}}, 0x7, 0x0, 'ingress\x00'}, {{@_ha_fsid={[0x8, 0xfffffff8]}, {0x4, 0x8, 0x480, 0x4}}, 0x7ff, 0x0, 'ingress\x00'}]}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}, [{0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000006c0)) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff000000000000000a00000000000000000800"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0015000000000037000000"], 0x180}}, 0x0) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000006060102000000000000000007000006050001000700000005000100070000000900030073797a32000000000900020073797ab1bd1eb100"], 0x3c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "aac2d69ca455dbab", "47d93ed09fe874bb9a965258df3c5d5b", "1148559c", "88dd7fb0780e3550"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 7.055000358s ago: executing program 34 (id=2238): r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$inet(0x2, 0x2, 0x0) pselect6(0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000300)={0x8}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "55c926d748e9219f0595ad24890a6a15b2d52368edf173313fe245fb5ed9af9e", "fc3ebcf63a94a908599549df41158f149c5e1ce4e2082ab95ca423907d3ef289", "11c948cbc903529e681aca17173ac072b9b50f709829a5ec17155fe68a6829dd", "fede46b54094378d3bbcaaebcd42971817a4c31e9ec87f80b16012641e0dce25", "37ad975abe70c433906fdf7d67be68e374ec371af7752d9fb41a35fb9f55f0b5", "93479de76a07e7caf29fc22b", 0x7, 0x404, 0x7f, 0x5d46, 0x6}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xdc, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d151080040007"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) close(r3) 5.958097495s ago: executing program 35 (id=2250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000940)={'pimreg0\x00', 0x7c2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000009c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000007c0)={{[0x81, 0x7, 0x9, 0x7]}, 0x0, 0x1, 0x81, 0x0, &(0x7f0000000700)=[{{@_ha_fsid={[0x5, 0xffffff7f]}, {0x3, 0x4, 0x2, 0x10001}}, 0x3, 0x0, '\xff\xff'}, {{@align=0xc, {0x8, 0x3, 0xc6, 0xfffffffffffffffb}}, 0x6, 0x0, 'ingress\x00'}, {{@_ha_fsid={[0x4, 0x10]}, {0x4, 0x1, 0xfff, 0x9}}, 0x7, 0x0, 'ingress\x00'}, {{@_ha_fsid={[0x8, 0xfffffff8]}, {0x4, 0x8, 0x480, 0x4}}, 0x7ff, 0x0, 'ingress\x00'}]}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}, [{0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000006c0)) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff000000000000000a00000000000000000800"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0015000000000037000000"], 0x180}}, 0x0) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000006060102000000000000000007000006050001000700000005000100070000000900030073797a32000000000900020073797ab1bd1eb100"], 0x3c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "aac2d69ca455dbab", "47d93ed09fe874bb9a965258df3c5d5b", "1148559c", "88dd7fb0780e3550"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 5.177909682s ago: executing program 5 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9ce56}, [@IFLA_EVENT={0x8, 0x2c, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 4.876752794s ago: executing program 5 (id=2423): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x0, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) write$cgroup_pid(r3, &(0x7f0000000380), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x80, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000008c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000100)=0x90) socket$inet_sctp(0x2, 0x1, 0x84) 4.250044763s ago: executing program 6 (id=2429): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x10000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.09886279s ago: executing program 2 (id=2430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) socket(0x28, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2f, 0x1, @loopback, @multicast2}, "04df1b25e662a64f"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.968823825s ago: executing program 2 (id=2431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 3.96746666s ago: executing program 6 (id=2432): write(0xffffffffffffffff, &(0x7f00000000c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x38}}, 0x0) 3.918438096s ago: executing program 2 (id=2433): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x3a2, 0x4) (async) shutdown(r0, 0x1) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x800}, 0x1c, 0x0}}], 0x1, 0x4004800) (async) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x0) 3.846580486s ago: executing program 5 (id=2434): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}}) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_newnexthop={0x18, 0x68, 0x401, 0x70bd25}, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 3.764701569s ago: executing program 6 (id=2435): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000400000000000000015ffffff85200000e147030095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 3.734229772s ago: executing program 2 (id=2436): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000009c0), 0x40000000000009f, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000400)="2d000000010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44095}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000500)={0x6}, 0x10) write(r4, &(0x7f0000000580)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0xc, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r10, 0x64e89, 0x16ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x9}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c000}, 0x200088c2) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) 3.701534207s ago: executing program 6 (id=2437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="2e00000010008188040f80ec59acbc0413a1f848330000005e140602000000000e000a000f00000002800000121fd2", 0x2f}], 0x1}, 0x40044) unshare(0x46000480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x2}, 0x6) write(0xffffffffffffffff, &(0x7f0000000480)="45000000040006000000", 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x89, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$MRT_PIM(r2, 0x0, 0xd0, &(0x7f0000000400)=0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES64=r2, @ANYRESDEC=r4, @ANYRES8=r2, @ANYBLOB="ea7556f2bda132fe710ba2c4395a0cb07a98686a78b4589906299540ecf5c951b515f267bf6a4617c1c9689ae64a50aee3270ca162b6b5e92546fdb818dcfc77ca649f4905b7f739466a22289b747cd7ff8bead89812a374d76feae0c2a07a63ed722a36e95dfbac954e5c4957"], 0x7c}}, 0x4000000) setsockopt(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000500)='westwood', 0x8) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000580)="7335ea", 0x3, 0x15, 0x0, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r5, &(0x7f0000000400), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000880)={r6, &(0x7f0000000780)='veno', 0x2, &(0x7f00000007c0)={@_ha_fsid={[0x7afe, 0x3]}, {0x3, 0x8001, 0x8, 0x4}}, 0x8, &(0x7f0000000800), &(0x7f0000000840)=0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.604511995s ago: executing program 5 (id=2438): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x19, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) (async) r0 = socket(0x28, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000800)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000840)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000000880), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x0, 0xd, 0x5c}, 0x2c) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000feffffff0200000008000300", @ANYRES32=r4, @ANYBLOB="08209eb92a970026001b1700f60700279ce9a4f49cecb2e363d3b2da09ba9f3851003949d9466faa05d1d61f2137aabc9e6c0138f498102682c15ef3b3cd23"], 0x2c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000be8", @ANYRES16=r5, @ANYBLOB="200029bd7000fcdbdf250800000054000680060005004e24000014000400fc00000000000000000000000000000008000300ac14142a050002000600000014000400fe8000000000000000000000000000bb060001000a000000060005004e24000008000400080000000400018008000400010000000800020000000000080004007f000000"], 0x8c}}, 0x4094) (async) connect$vsock_stream(r0, &(0x7f00000000c0), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) (async) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001980)={'batadv0\x00', 0x0}) sendmmsg(r0, &(0x7f0000004080)=[{{&(0x7f0000000940)=@xdp={0x2c, 0x0, r7, 0x16}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000009c0)="5f7225b453fea97d0b9ccf0114fbf8352b6d1bf734d848f4cfd14013f458b8cc9ba501ace4df4a5b238a0d46290b46da2b6424fefcedade2c06124d56ef2bc196f5c2c9e59a3006441f89d623e005d1714707fc2247c183fe82231db63001f9144709194a142a81c89f995f807aaa8f50900bf28216e09fff4cc374d27e2388080cb67047f9a08fcf8f15ec3a96678b2cc248559536ada9021", 0x99}, {&(0x7f0000000a80)="8e165a672c07d4fd66b12a0205d98b4f1ff589874e374fc7c190c82b316efef0b0c9b0ee16867b99acd249eeb06f94a569ed4be834e240dc91add86aaee6ce86ce64cce6e551f0536a698b875964e5b69638264a016987b020a30ee103658a936719c0a6f93a5928dd881d8a2d108d19ea420b7e986d22342bb5a058612dc8e404ab7a60c7721e1091edda8f7bc88e16bf1c7f189d21358f8dae0aba7959e13399c7d16c80271b3e6ea96221719e34a98ea304ddb72887c3614f42321c5858be2acc9d47bb090d6b7508e0ecf1c32beb7a9c51a0ca", 0xd5}, {&(0x7f0000000b80)="034b47796d847df751594bc2f641f5583947f1ca5de87f05712665c39b2a95c2f450db3e9707d12c5ecff9969d0af02b16d62d0e28348cfa2d18092b5ad370316fa9b18929e4f33a2ba47ab4c28c71e3ffc10261e82eb797555b160ae384235f8ed3369bc7f5c366d308ea5394870525d7b694cafc7e7ff8107207c171a8b53dcedc5db0ef11f2bf732efe8210a2e38b9e4ece3832b5d28436733857b19f7c150d301798502bddfc83072b895e2919e95d5d7354abe5ddff19f965491cb7d6f67ba381ef084730753c5d249eea92f22e6bd82bc6670f70c5", 0xd8}, {&(0x7f0000000c80)="010e0b948070e52d90e88aa06029a73c634fdcdddbc20acd4dcfeb5a6cb92201c8b5d7014244bdfcb0bd32d620433369ed46cb3a2eb84da76b047acba603983376271a40f146e62ab12c82bdeef72d3fd420c7c9ef66f4b51c373469102cbce70e071dcc15a82e151631590feffb4daa4e9bec67117317c63b83", 0x7a}, {&(0x7f0000000d00)="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", 0xfb}, {&(0x7f0000000e00)="458a8c4dee74dce5c56b5cbb9133c000b62e5430968fc5aadaeeda43d31fdfad25ed05df5177c26b0d7df4d5d567355d52173cc7e258c26945f62fbec06fea3f0a802718963407397715c5a08308477db58cb62fb178da2b4369661d", 0x5c}], 0x6, &(0x7f0000000f00)=[{0xa0, 0x10b, 0x7, "c6fd1ef2e5bdcb4ba44fd52384e771c5dc622c00c59fba727c1d6ba650f2504ad91dbcb61aec46ad71f5ace5b7c9ebfde262a0b2ece3ff76d94a16fc3014b87e41a22026c0867e722793cebe85feea5b6e6703b70f145896e9587d7d9f8111ca6236b10d55bfa8c185f36161369901a9c6a008886f3034aa923de8d613bf33c3c995c838f027f0c156f3ce5f"}, {0xd0, 0x109, 0x9, "cffcacb6de92b87a1956cdff1b39d839af7c88bdf63a344016147db9042696ae8ba7bac687a6bdaa069b20d405f5ffa19d9b1d1a44b4723f8c5b7372aaf20c9b9f6d7fd323d5e9758f7eee2444d4f1c8fa2e05ced16732206e4bea2d8cdc06c7247999604fb366fa8fbe95722715f784aa3d4389bbfcc78f5ca5875dcd4d7e0c753819f00b8d9b9ec8ca558ea9e2b3d5f2c981e8f79f7096986c39d3fb1f40954d58626eacf99f1733901849dda0581d8982c5c0ac65db5e4de26698c0e8"}, {0xb8, 0x113, 0x5865, "2f25f2898103facf37c817ab8c522a68618c6243bd6f6ee89a876aa9dd147b405a36b462d40c8937bc5d127cf2a5cc570523d966cb7b648b1aa330cce4e413b0993b718d8e2e14e039a8cd8c61ac86eb4c93b2248245b94c09fd49af9bdef13fc124eb7b5df01490cb3b450003b537c8dda14560cee92d19253bb219cab79a1c997c679c8f334949d7c6edfeffd19c773f4cae4d0e84bb52bc464318e5d9a7a6bec09c077e"}, {0x108, 0x108, 0x336b, "a4aa974323db32be329dda995d323483dc5e8d74e0d2634f05e3bef9144e18ccf2e073f19a7f2ba7a90dad32da570467be4bd90e912024d3cb5b9df7361340cfb7e6856129b1f039ddeb14df858ba6a5f8f0fc15321b07179ce9e0f81fa6f4c4adfcfe20657688ba68f5666fe71f7c78a8f02f651acd525055a6bf771bf2471ab3d9ae56a034ed71cbfa3347ec7dc5aa58d9f20f334a9fa21a27534b1767a950c9247887925ed92ade57c4e237f9a2525be507391aae40974a59617ef9c831551f26f02dfd66defa79c3cc4aff01cdc8352224ddfb78800f8e9c17eda612903a37983bea28db8f410755ccd0b8b117865eca9741"}, {0xe0, 0x6, 0x9, "556f27ae39195571b4897eacf4529ece46e89140c7b288d74d714b8d104c444f3ed02249dd6098b5bcd9de83d1e33ee840e1c621e641c201b14b15f4f8dabeb65dcb8c37e53a5d44861f628af1101f4c0ac579f4290f1d26788095827271add20ab21b3009ec20c0b7a5df673e6ea1015acab7767ee61705e61f53d42f3a6a075f11c600529e11146c6a84e6bf0854bb4b64a4369e6e02050f4bbeae61cc08d5ab6a021d36ea926275c3a6b01bf97b3c5933d1cc1e48be5a7584b630812d44c35be510cb53efd3a118e9745f"}], 0x410}}, {{&(0x7f0000001340)=@pppoe={0x18, 0x0, {0x2, @empty, 'macvlan0\x00'}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000013c0)="245023db3493b186b0f79fa84cf473b0c787e1831dc966ac1c24d1a81ca2b4dbb81d4b633b08a483e34bafd6a021381ea354d0b7d0cc17c3c9e491b6b48d34e3bd2f4014a7b77b6de1d8c48a673c02272ce5c0b7db5f559326375fa3bbd8b02049228a978def4bdd39fe0844ca31ef9c9f997e52654ade05af313dbc96f4e023ca566640af6f11374cea50e4ab1d6f", 0x8f}, {&(0x7f0000001480)="e155e611a8a5e9be840fbc899e6152bdbace4daa2b67186542ac8f2d010609916f6e1d5ca00ee3be36e737c521ddf61c958a024b2a98c820f33fed36d38de657af7aa45afe3369059a7912ac86a93a9f7001072fd0ed84be4715de7a1da0684cc03c04d540306ebd25f26e9033d6f0941f4a316cd882505cd6cc455521667ca116cd330d86c0bafa9642c37448bfc72f31324d4142ed3f7afdfb8773679712b1bf9ebf", 0xa3}, {&(0x7f0000001540)="9e928b4621f983b6176c8526d7f7bc45c130c38c2f77597ee2bffd094ac9db58695958d3180453f0ce3e76faef739a40bb02c7a0ab10a581d8fa3910f558868c8fc6ee8f9ef79583486beeed7a1483f85a20e6c63b42e833c2999c4fd2ef37c4c02438c130392ebc601fe2b1782fee083e9f7b5dee405b829f3bfd9b956e906d2a19178ec28425dcc4c0ef3afa5441da6c2845554ac1b631fd43265a04f67439b5ee9974d570a9443ab9626296d564ea5329bd40597aebf54a3cf93ab97daeb6058aa46668b2a9570a70abd2020427de418329907654503c2bacdf84ef", 0xdd}, {&(0x7f0000001640)}], 0x4, &(0x7f00000016c0)=[{0xe0, 0x10b, 0x8, "514371531c705ae8748f413a0488640419608aac99f082b2b8f494dbd60da4ae8a7400b03faa75ba80ce258f47e9185003a7e52e1ca91e794e077ecf059a319dfb508c4f0802a5c88bb41b78b0c293c45520b7648dabe3435fec5d9e245e751999dc6ad73e9d8fb1d71538d71923bfba92d84cdcecd69b536f26a66303ad43064e5c189d84afa0fe32615ba221d7bd10cec215409e4336369e61a4a42ad28b8be04cca6b335ee1c0b221c47543135485d959f00caae5db492be581876383d5ca162ec12405d34491458d79e81c0f48"}, {0x108, 0x1, 0x7, "db3eb2040a46e5e5e5c61c4836349369b9b3e87adfc92fa2130b9d776a615697324758c037e1cf1900d367789559585e819c451fccf1dbcd84ac77ed9683076f1dcae0ab069094d407e448f3aecefccf585de09c13117aeebae2bdd6321805ed57bebaaf921b852985f74105e9ef739ab58320e5d3ce3e23bc0a86e64bc519104b7c4aa9e20fd506435f3261883257abf6ff0f5dc21d9529767afc6384be88348d2da45c40fab677d7997ca0780612adee0865600cf70ce2a6c572f657c7a551232f9a181cc630ab0e7e17073fee46db1f399fde3bc8e4126ddb905ac2fdd955356a3064318d6908d2b411f370201e325ea81a24b256c4"}, {0xb0, 0xff, 0x10000, "cbcd87776247b9ec243627b925797a7ab0a09fb5765210df34d6f9b9b9457d73d8b4da1e717d8033e2cdb5230cc92f8a7e1b3cd84452b6c201ed6aca02a3bc56a78162c63fb7d8d5342deffdf3646706dae6bf0d428b0c6eec591781a62763cd8c6f1516a1cdfc65e767a86d562a836a9a33818390700b4eae2875e2298825d56d65a21f82951026f7403339a9518581d30de6293690eff822"}], 0x298}}, {{&(0x7f00000019c0)=@ll={0x11, 0x10, r8, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a40)="0e0092a9f35d6ef5ce749b1f53596d9be05cabe01c5163720cc2eb834e3339be5dfd535461c07c451a2de973d4ee8d0c835324eb204155afa0e78ec49044d8c1abc867b9a5211b787294fdc536df1ba30f7088de563a778757305a6cc61ac91ea54d3b2b800240bd433d1697acda7dbbc1862c39b378628a2a19bd16e0098e51920e54e652070577bb95467faf577b8bd865f0f5a0418d60b10eadf7e7d931166b1021cba4f308a755a521ec803a5a0fddad559eb82aad6a74d048bd3f", 0xbd}], 0x1, &(0x7f0000001b40)=[{0x98, 0x1, 0x51, "d364c6ce44a15e416fa42f0cfdbd7a47a2567332318763a1ba311ad8e3a7f1e00a43aa1f6fe82f7c5f62ece7feecc0de2d971415cc07aafaba84569e0c9f15318c0a9d4ca2e1cfd1cdb067f5dc193ab5309ed6b744c26c81e65fb095d494f4432e4532481c201be97dd83b79a89fec71a8621b3269c44edb62f8dad14f18eea172"}, {0x1010, 0x103, 0x1, "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"}, {0x1010, 0xff, 0x3, "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"}], 0x20b8}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c00)="81867318554137a48d1a09a811a92e1efa35f407151519ddef0d50ab8e5dc1b30b20f359e302c61fbdaef3178b3379701e3170639258c3b40d53f24ed070db859a2fb2067c7b70cedf9549cc5ec14328f2de442311a2e3f1ac82d7df128003ce69f860f82e47620f0e183a1dfedfcfcff0559024872c9fc54f2d317296b4f48ccfbb832fc602a3551606eb3bada7aeb7201b2f79caad0ac00e97f80a15856084d3578f46be69db7500290ba81b9a8284f1c486", 0xb3}, {&(0x7f0000003cc0)="4d6aeb9f960e360beeaf5111d00ed17bf0c364799d0b5e63aee4617dca9fa6e027982e3ee613f9519cad6d0aa774ab6ebd4ce4fb294f2364f52c4183df9f04b8c7c5a0d4ea3178a3c18c61df21b39096cbb3d3c2deb1d32268a31142d72d28f2b4af37f2f9bfec0e04408a7418040f0027c1d9558d73be4fcae7832e509a460c8a5d48bd58f1325b3675a43064051d17dda07383058d3db925dadd5546b289d629fdb23ab624a70e8e1378dce2da8c1c1d731c51b93bf6c45a461acf8365f2778a66a5", 0xc3}, {&(0x7f0000003dc0)="ee8b08e85ff326dcbf5733674f31ee1df0776012f8e669262e36b3cd09f6b49df770c158051d7a0b6f74857d58996d5c78a89d6fa03d2a785fa8dfbb9b45209029d3e964f4437dc556b3b00d3a6beb981d79b10a7657f0df129ec0d6c659ebeb15f90979f337159713eec1eeb4f7c9baa50b70d2aa748f32f14fbbfd855ec99b9088b3c1c84915c21ab17e101b6f479b081c93d963da8d9f5c4e23daa05b4b80ce5ff59d839f69b4234210a50149b850437c2b0109598ed4932dc0eba7def86d18b7123ce1712743307d4def4c4d0b58718d1fcff5", 0xd5}, {&(0x7f0000003ec0)="2ab2ae0e1f229d965e6a6ca761516d9bf3c17ab718bbe2c8ced62c89496ce4f8f0a6f90c806dfd4798b87765670d296667b99647149821430968fb2719cf57b834820c41bb4280bf8ecbfcfa41abece5a29f04936252c3125f3b98b33649408bae536631ff2f7980dc7b770767013559c0c2b7edd4d6621f6ff9a2dab9856804", 0x80}], 0x4, &(0x7f0000003f80)=[{0xd8, 0x84, 0x3, "f986b6e1b5f4d6ddb2949992c4b02a9522b0e0451dafd085ad02de40068f432a3aba4d9bcdc4bb269107e435120da4854e1b4d86681b6ab0b27d7da7f6cce5eb33e85e1b4c1287533e67aae37d44571b4e3e10944bdb3ee4e85db2a2e029990cb0cd3a425179a5e7d12d1bd20ee453c0c0112cfcf743eec3367e83fc331a81af17664517f66581d0fed371b8c60e7ee9387f958ea870b2a9117acfd6d216b6fe6170f4f81867d3620de0bb97639ffb94b7a76f72f216df056d8a539f3fdda0577ed474d01223"}], 0xd8}}], 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000740)={{r1, &(0x7f00000004c0)='nat\x00', 0x400401, &(0x7f0000000580)={@align=0x200, {0x40, 0x100, 0x8000, 0xa}}, 0xc04, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x3}, {[0x7f, 0x5, 0x100, 0x4]}, 0x101, 0xf9, &(0x7f0000000640)=""/249}) bind$tipc(r9, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x2}}, 0x10) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.559887404s ago: executing program 2 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005de"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) (async) recvmsg(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x2000) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x34, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$netlink(0x10, 0x3, 0x1) (async) bind$inet6(r6, &(0x7f0000000980)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x4c, &(0x7f00000009c0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0xce0, 0x4) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x12, &(0x7f0000000800)=0xfffffffe, 0x15) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000002f0009002abd70000000000004000000260011802ef9e05e"], 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 526.918122ms ago: executing program 5 (id=2440): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x3}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100ffffffff0000000001000000040007800c00080000000100000000000c000200fc7f000000000000"], 0x30}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)=@ethtool_cmd={0x34, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) 426.668634ms ago: executing program 6 (id=2441): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x2b}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) 366.346257ms ago: executing program 2 (id=2442): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, 0x0}, 0x4000840) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000a40)=""/220, 0x51, 0xdc, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000740)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x1}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1a, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r7, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000500)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000380)={r2, 0x400, 0x9, "1d5643207c0438c6790b902eb61e01ec49bcbc1f7ffd074b8398df548af0099e1c8f173bcc9fc69025a9dead0e6f26dbfbb8dcbed99ba9e639ba5067abf2ddd9f09c690f74564da8d82889068c7b3b3aa68418023869b2efcf8f90b4c6ed03a6daa94a737e2a027443f8071d603d27b213156b42c6733edec66673ee9f0971c16e8a37ff45c05229a5e25ceedcca42bc7d84c29e0f8289ca97d85ae87cf46fcc1019f0421ba76815cebd58ac48422310efd3fe75fbd949b088b40e931171ae6b648e1b4621b69befcf9f837242db0ed143b2f888be1d3d5b6d5eb58e4862b37054d3278ce0d6ebb9a7d28359a0d1d6"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0xe99f, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r10, &(0x7f0000000280)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) write(r10, &(0x7f0000000240)="89", 0xffe3) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @remote, 0x15}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 148.80977ms ago: executing program 5 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x2300, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000130005000000000000000000000000000000000000000000010000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="30000000110005000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@gettfilter={0x54, 0x2e, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0x2}, {0xa, 0xf}, {0xf, 0x7}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xc7}, {0x8, 0xb, 0x2f}, {0x8, 0xb, 0x3fff8000}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040810}, 0x45) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xfff1, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x6a}}]}, 0x2c}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd45, 0x0, 0x0, 0x0, 0x2}, 0x94) 0s ago: executing program 6 (id=2444): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000c80)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000580)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000fc0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="ee9c2aa3b0b30bcd4f2cd2214f82dde60c219f4007084eb2dc66e66eaba3a409a552277cacfb51419160b9fa3945c6d6c2c9be955cf55869103962553bcd1caf64aeee89ffa89ed97e64cc90928945bff794314a58053bc5641bcf09bf0b75870272edfa30c02a0bff531f1c7f4bf68a407040864cb1b74a081dd3f73b8e38d92a0f8ad7bced884bd041b827b14f5cd7077e713fedeeeda8db039ab3ae7314fd9561efbd1b2f63e18100f12a61d3efe1ab181da797d1bbaea65d47c8068a11cd0580bf6a727505ce", @ANYRES64=r2], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_ext={0x1c, 0x2, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f0000000440)='GPL\x00', 0x7, 0x20, &(0x7f0000000480)=""/32, 0x41100, 0x48, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x10, 0x7, 0x2}, 0x10, 0x634c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001640)=[{0x5, 0x1, 0xa, 0xc}, {0x4, 0x5, 0x0, 0xb}], 0x10, 0x7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="38000000680001000300000000000080000000000000010000000200010000000600000014000600fe000000000000000000001782f19177f755f097055772868babca2acca387d49cfd8bf742a654e6d5e57e1108ec239700"/98], 0x38}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) kernel console output (not intermixed with test programs): ckets. [ 170.279211][ T9353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.280825][ T9352] Cannot find set identified by id 65534 to match [ 170.423312][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.998'. [ 170.650612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.657047][ T9366] pimreg: entered allmulticast mode [ 170.868322][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 171.000646][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.000870][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.001075][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.001275][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.001472][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.001690][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.001919][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.003825][ T9383] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 171.136667][ T9382] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 171.718665][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 171.931800][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 171.931835][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1014'. [ 171.987022][ T9421] bridge2: entered promiscuous mode [ 171.987047][ T9421] bridge2: entered allmulticast mode [ 172.363584][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.393922][ T9445] bridge_slave_0 (unregistering): left allmulticast mode [ 172.393951][ T9445] bridge_slave_0 (unregistering): left promiscuous mode [ 172.394042][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.429543][ T9450] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 172.513807][ T9455] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 172.552144][ T9446] block nbd296: server does not support multiple connections per device. [ 172.554201][ T9450] bond4: option downdelay: invalid value (18446744073709551615) [ 172.554226][ T9450] bond4: option downdelay: allowed values 0 - 2147483647 [ 172.559478][ T9450] bond4 (unregistering): Released all slaves [ 172.599520][ T9446] block nbd296: shutting down sockets [ 172.782082][ T9456] bond4: option downdelay: invalid value (18446744073709551615) [ 172.782108][ T9456] bond4: option downdelay: allowed values 0 - 2147483647 [ 172.808004][ T9456] bond4 (unregistering): Released all slaves [ 173.087375][ T9480] siw: device registration error -23 [ 173.088528][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 173.088866][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 173.278162][ T9493] net_ratelimit: 60 callbacks suppressed [ 173.278187][ T9493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.306182][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 173.459980][ T5623] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 173.524009][ T9516] xt_REDIRECT: bad MAP_IPS. [ 173.525076][ T9516] netlink: NAT attribute has 8 unknown bytes [ 173.525110][ T9516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.051666][ T9542] xfrm1: entered promiscuous mode [ 174.051690][ T9542] xfrm1: entered allmulticast mode [ 174.097120][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 174.165761][ T9552] validate_nla: 58 callbacks suppressed [ 174.165785][ T9552] netlink: 'syz.0.1044': attribute type 32 has an invalid length. [ 174.211414][ T9552] bond4: Setting coupled_control to off (0) [ 174.227504][ T9552] xt_hashlimit: size too large, truncated to 1048576 [ 174.268245][ T9551] syzkaller0: entered promiscuous mode [ 174.268270][ T9551] syzkaller0: entered allmulticast mode [ 174.303632][ T9551] 0: reclassify loop, rule prio 0, protocol 700 [ 174.308663][ T9559] 0: reclassify loop, rule prio 0, protocol 700 [ 174.514745][ T9564] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.533241][ T9569] __nla_validate_parse: 9 callbacks suppressed [ 174.533264][ T9569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1049'. [ 174.533284][ T9569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1049'. [ 174.688412][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 174.688457][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 174.724607][ T9581] x_tables: duplicate underflow at hook 2 [ 174.726139][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 174.765392][ T9579] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1052'. [ 174.765438][ T9579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1052'. [ 174.796042][ T9579] netlink: NAT attribute has 8 unknown bytes [ 174.796079][ T9579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.808248][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 174.939754][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 175.088244][ T9606] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1060'. [ 175.752873][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.757249][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.757957][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.759822][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.792452][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.249808][ T9656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.296440][ T9656] bond0: (slave bond4): Enslaving as an active interface with an up link [ 176.733539][ T9694] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 176.818494][ T9694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.846624][ T9687] syzkaller0: entered promiscuous mode [ 176.846651][ T9687] syzkaller0: entered allmulticast mode [ 177.000509][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.000559][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.000649][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.000688][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.325224][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.325410][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.325692][ T9640] bridge_slave_0: entered allmulticast mode [ 177.327720][ T9640] bridge_slave_0: entered promiscuous mode [ 177.357675][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.357919][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.358341][ T9640] bridge_slave_1: entered allmulticast mode [ 177.360292][ T9640] bridge_slave_1: entered promiscuous mode [ 177.431735][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.437336][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.494377][ T9640] team0: Port device team_slave_0 added [ 177.497521][ T9640] team0: Port device team_slave_1 added [ 177.547598][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.547617][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.547642][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.550074][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.550089][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.550116][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.700874][ T9640] hsr_slave_0: entered promiscuous mode [ 177.702050][ T9640] hsr_slave_1: entered promiscuous mode [ 177.703062][ T9640] debugfs: 'hsr0' already exists in 'hsr' [ 177.703082][ T9640] Cannot create hsr debugfs directory [ 177.850543][ T52] Bluetooth: hci5: command tx timeout [ 179.444920][ T9680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.502580][ T9640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.569159][ T9640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.582423][ T9640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.619124][ T9640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.626369][ T9640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.662430][ T9640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.663387][ T9640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.685929][ T9640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.931555][ T52] Bluetooth: hci5: command tx timeout [ 179.997882][ T9780] __nla_validate_parse: 4 callbacks suppressed [ 179.997903][ T9780] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1092'. [ 180.073786][ T9786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1092'. [ 180.157191][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.245911][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.246670][ T9790] xt_addrtype: ipv6 does not support BROADCAST matching [ 180.299595][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.299716][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.363064][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.363198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.556019][ T9800] bond6: option fail_over_mac: invalid value (16) [ 180.557344][ T9800] bond6 (unregistering): Released all slaves [ 180.636735][ T9809] netlink: 'syz.0.1099': attribute type 4 has an invalid length. [ 181.076640][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 181.076677][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1106'. [ 181.109292][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 181.109327][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1106'. [ 181.151647][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.161529][ T1004] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.163569][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.163686][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.548461][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.618993][ T9858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1112'. [ 181.753245][ T9865] Bluetooth: ISO socket layer initialized [ 181.755502][ T52] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 181.870956][ T9870] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 181.993443][ T9877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.996837][ T9877] bond5: (slave bond6): making interface the new active one [ 181.997334][ T9877] bond5: (slave bond6): Enslaving as an active interface with an up link [ 182.028220][ T9870] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 182.028246][ T52] Bluetooth: hci5: command tx timeout [ 182.040242][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'. [ 182.076398][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 182.079122][ T52] block nbd1: Receive control failed (result -32) [ 182.391174][ T9640] veth0_vlan: entered promiscuous mode [ 182.415551][ T9640] veth1_vlan: entered promiscuous mode [ 182.467032][ T9640] veth0_macvtap: entered promiscuous mode [ 182.510701][ T9640] veth1_macvtap: entered promiscuous mode [ 182.537885][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.559583][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.652375][ T1004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.652428][ T1004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.652468][ T1004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.652507][ T1004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.712784][ T9900] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1125'. [ 182.824587][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.824610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.908412][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.908435][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.146130][ T9920] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 183.158826][ T9908] erspan0: entered promiscuous mode [ 183.328911][ T52] Bluetooth: hci5: connection err: -111 [ 183.560787][ T7480] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xdc [ 184.092668][ T5623] Bluetooth: hci5: command tx timeout [ 186.399189][ T9932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.608081][ T9969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.823831][ T9982] __nla_validate_parse: 3 callbacks suppressed [ 186.823854][ T9982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1145'. [ 186.875783][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1147'. [ 186.923846][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 186.923877][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 187.041107][ T9991] ip_tables: iptables: counters copy to user failed while replacing table [ 187.151994][ T9996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.156442][ T9998] tipc: New replicast peer: 172.20.20.187 [ 187.181036][ T9998] tipc: Enabled bearer , priority 10 [ 187.229548][ T9996] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1151'. [ 187.232011][T10002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1154'. [ 187.285541][ T9996] ip_tables: iptables: counters copy to user failed while replacing table [ 187.290648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.400315][T10013] ip_tables: iptables: counters copy to user failed while replacing table [ 187.475104][T10015] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1159'. [ 187.535295][T10019] sctp: [Deprecated]: syz.0.1158 (pid 10019) Use of int in max_burst socket option deprecated. [ 187.535295][T10019] Use struct sctp_assoc_value instead [ 187.586088][T10023] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 187.587170][T10022] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.840857][T10037] ip_tables: iptables: counters copy to user failed while replacing table [ 188.082976][T10042] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 188.226776][T10053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1171'. [ 188.377757][T10060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1174'. [ 188.437861][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 188.603134][T10073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.681270][ T3386] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.683419][ T1004] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.683463][ T1004] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.683499][ T1004] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.995388][T10090] bond1: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 189.019659][T10090] bond1 (unregistering): Released all slaves [ 189.065981][ T1004] nci: nci_rsp_packet: unsupported rsp opcode 0xf05 [ 189.177471][T10106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.646955][T10123] netlink: 'syz.5.1195': attribute type 1 has an invalid length. [ 189.646973][T10123] netlink: 'syz.5.1195': attribute type 4 has an invalid length. [ 189.647535][T10123] netlink: 'syz.5.1195': attribute type 1 has an invalid length. [ 189.647553][T10123] netlink: 'syz.5.1195': attribute type 4 has an invalid length. [ 190.281544][T10148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.956231][T10093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.957001][T10119] netlink: 'syz.2.1193': attribute type 12 has an invalid length. [ 192.252974][T10157] __nla_validate_parse: 8 callbacks suppressed [ 192.252994][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 192.253017][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 192.257799][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 192.257829][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 192.518696][T10174] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 192.629221][T10181] netlink: 'syz.2.1211': attribute type 21 has an invalid length. [ 192.629249][T10181] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.824945][T10190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1216'. [ 192.920324][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 192.958717][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 193.033301][T10199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.077567][T10204] macvlan4: entered promiscuous mode [ 193.077592][T10204] macvlan4: entered allmulticast mode [ 193.078053][T10204] bond3: entered allmulticast mode [ 193.079938][T10204] bond3: entered promiscuous mode [ 193.108112][T10204] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 193.142020][T10204] team0: Port device macvlan4 added [ 193.673591][T10229] bridge_slave_0: entered promiscuous mode [ 194.020948][T10219] infiniband syz2: set down [ 194.020973][T10219] infiniband syz2: added ipvlan0 [ 194.119897][T10219] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 194.119939][T10219] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 194.119983][T10219] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 194.282270][T10219] RDS/IB: syz2: added [ 194.282921][T10219] smc: adding ib device syz2 with port count 1 [ 194.283046][T10219] smc: ib device syz2 port 1 has no pnetid [ 194.336719][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336781][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.442007][T10257] ip_tables: iptables: counters copy to user failed while replacing table [ 194.455011][T10257] ip_tables: iptables: counters copy to user failed while replacing table [ 195.034432][T10273] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1252'. [ 195.034470][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 195.168602][T10275] ip_tables: iptables: counters copy to user failed while replacing table [ 195.747643][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 195.747841][T10283] IPv6: Can't replace route, no match found [ 196.908908][T10332] ip_tables: iptables: counters copy to user failed while replacing table [ 197.323979][T10351] __nla_validate_parse: 5 callbacks suppressed [ 197.324003][T10351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1285'. [ 197.673819][T10371] syzkaller0: entered promiscuous mode [ 197.673837][T10371] syzkaller0: entered allmulticast mode [ 197.678420][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1290'. [ 198.014011][ T31] audit: type=1804 audit(1791941326.963:2): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1295" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=186 res=1 errno=0 [ 198.014069][ T31] audit: type=1800 audit(1791941326.973:3): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1295" name="cgroup.controllers" dev="tmpfs" ino=186 res=0 errno=0 [ 198.086317][ T31] audit: type=1800 audit(1791941327.043:4): pid=10390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1295" name="cgroup.controllers" dev="tmpfs" ino=186 res=0 errno=0 [ 198.159017][T10392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1296'. [ 198.261449][ T1440] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.261487][ T1440] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.261934][T10356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.413520][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.417083][T10400] bridge_slave_0: left promiscuous mode [ 198.456727][T10400] macvlan0: left promiscuous mode [ 198.470285][T10400] veth1_macvtap: entered promiscuous mode [ 198.477034][T10400] macsec0: left promiscuous mode [ 198.538604][T10400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.585703][T10400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.601848][T10400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.610117][T10400] bridge2: left promiscuous mode [ 198.636321][T10400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.673322][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 198.692604][ T12] bond1: (slave veth3): making interface the new active one [ 198.758611][ T12] bond1: active interface up! [ 198.968122][T10416] Cannot find set identified by id 4 to match [ 199.146631][T10421] syzkaller1: entered promiscuous mode [ 199.146655][T10421] syzkaller1: entered allmulticast mode [ 199.149210][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 199.172105][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 199.365844][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 199.431726][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1311'. [ 199.431758][T10440] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1311'. [ 199.460187][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.534934][T10440] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1311'. [ 199.660199][T10449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1314'. [ 199.899854][T10463] 8021q: VLANs not supported on gre0 [ 202.892550][T10463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.772653][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.772857][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 211.773729][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 211.782080][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 219.290738][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.968928][T10533] __nla_validate_parse: 1 callbacks suppressed [ 225.968951][T10533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1327'. [ 225.971773][T10533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1327'. [ 226.057027][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1326'. [ 226.127944][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.147372][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.149027][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.168542][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.171936][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.719953][T10569] ip_tables: iptables: counters copy to user failed while replacing table [ 226.845358][ T4935] Bluetooth: hci4: unexpected cc 0x2060 length: 8 > 7 [ 226.845408][ T4935] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 227.005082][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 227.271874][T10596] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.343135][T10603] netlink: 356 bytes leftover after parsing attributes in process `syz.5.1346'. [ 227.343160][T10603] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.545686][T10607] bond5: option fail_over_mac: invalid value (16) [ 227.558514][T10607] bond5 (unregistering): Released all slaves [ 227.672061][T10617] x_tables: duplicate underflow at hook 2 [ 227.909862][T10638] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 228.024440][T10638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.025054][T10635] netlink: 'syz.3.1354': attribute type 12 has an invalid length. [ 228.077634][T10641] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 228.222483][T10650] syzkaller1: entered promiscuous mode [ 228.222507][T10650] syzkaller1: entered allmulticast mode [ 228.251219][ T4935] Bluetooth: hci6: command tx timeout [ 228.324706][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.349760][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.360262][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.373538][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.373777][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.374008][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.374292][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.374510][T10653] netlink: 'syz.0.1358': attribute type 62 has an invalid length. [ 228.468726][T10661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.870891][T10629] IPVS: starting estimator thread 0... [ 228.975661][T10681] IPVS: using max 24 ests per chain, 57600 per kthread [ 229.127861][T10538] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.128050][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.128214][T10538] bridge_slave_0: entered allmulticast mode [ 229.130164][T10538] bridge_slave_0: entered promiscuous mode [ 229.138961][T10538] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.139158][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.139320][T10538] bridge_slave_1: entered allmulticast mode [ 229.146370][T10538] bridge_slave_1: entered promiscuous mode [ 229.230107][T10538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.265780][T10538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.281417][T10693] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.378026][T10538] team0: Port device team_slave_0 added [ 229.392872][T10538] team0: Port device team_slave_1 added [ 229.562018][T10538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.562037][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.562072][T10538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.569617][T10538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.569635][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.569662][T10538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.674795][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 229.674819][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 229.797523][T10716] tipc: Enabling of bearer rejected, failed to enable media [ 229.897156][T10538] hsr_slave_0: entered promiscuous mode [ 229.898316][T10538] hsr_slave_1: entered promiscuous mode [ 229.899117][T10538] debugfs: 'hsr0' already exists in 'hsr' [ 229.899137][T10538] Cannot create hsr debugfs directory [ 230.081789][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.081812][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.081825][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.081838][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.131873][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.131898][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.131911][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.131924][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.132330][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.132346][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.132358][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.132370][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.132583][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.132597][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.132609][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.132621][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.132839][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.132853][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.132865][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.132877][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.133093][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.133108][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.133120][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.133132][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.133451][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.133466][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.133478][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.133491][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.133773][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.133787][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.133799][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.133811][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134024][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134039][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134051][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134063][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134270][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134284][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134296][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134308][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134635][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134651][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134663][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134677][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134894][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134908][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.134921][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.134934][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.135149][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.135164][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.135177][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.135189][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.135389][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.135403][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.135416][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.135428][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.135776][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.135791][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.135803][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.135816][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136028][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136042][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136055][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136067][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136276][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136289][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136301][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136314][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136516][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136530][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136542][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136554][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136888][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136905][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.136918][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.136931][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.137154][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.137169][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.137182][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.137194][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.137402][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.137417][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.137429][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.137441][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.137953][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.138104][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.138120][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.138132][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.138355][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.138370][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.138383][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.138396][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.138624][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.138640][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.138651][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.138664][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139012][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139026][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139039][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139052][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139272][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139287][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139300][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139312][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139553][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139568][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139581][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139594][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139799][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139813][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.139827][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.139839][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.140301][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.140316][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.140326][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.167974][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.168223][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.168240][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.168252][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.168264][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.168475][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.168490][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.168510][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.168522][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.294607][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.294662][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.294696][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.294728][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.341942][ T4935] Bluetooth: hci6: command tx timeout [ 230.413824][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.413969][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.414003][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.414046][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.414678][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.414785][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.414826][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.414859][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.415099][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.415114][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.422030][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.422076][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.448914][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.448976][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.449008][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.449045][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.449732][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.449777][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.449808][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.498484][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.499369][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.499411][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.499443][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.499481][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.500058][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.500093][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.500124][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.500156][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.682660][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.682722][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.682755][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.682787][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.687578][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.687633][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.687667][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.687699][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.710196][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.710252][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.710291][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.710323][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.711194][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.711236][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.711267][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.711298][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.729343][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.729466][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 230.729480][T10740] Bluetooth: hci0: unsupported parameter 5135 [ 230.729513][T10740] Bluetooth: hci0: unsupported parameter 8192 [ 231.459992][ T4935] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 231.723411][T10771] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 231.829643][T10538] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.866420][T10538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.868305][T10538] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.899448][T10538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.909119][T10538] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.932584][T10538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.938983][T10538] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 231.990577][T10538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.088432][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'. [ 232.252795][T10802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1385'. [ 232.353350][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.398690][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.412684][ T4935] Bluetooth: hci6: command tx timeout [ 232.466601][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.466694][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.490167][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 232.605921][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.606032][T10629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.830306][T10823] ip_tables: iptables: counters copy to user failed while replacing table [ 233.430224][T10841] bridge0: entered promiscuous mode [ 233.430298][T10841] bridge0: entered allmulticast mode [ 233.581920][T10836] syzkaller0: entered promiscuous mode [ 233.581949][T10836] syzkaller0: entered allmulticast mode [ 233.797950][T10859] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1396'. [ 234.492793][ T4935] Bluetooth: hci6: command tx timeout [ 235.589823][T10859] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 235.817769][T10870] ip_tables: iptables: counters copy to user failed while replacing table [ 235.890582][T10873] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.1400'. [ 236.049058][T10871] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.190228][T10538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.422458][T10893] validate_nla: 58 callbacks suppressed [ 236.422483][T10893] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 236.539544][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 236.562938][T10899] veth5: entered allmulticast mode [ 236.579248][T10899] bond3: (slave veth5): Enslaving as an active interface with a down link [ 236.628482][T10899] bond3: (slave veth0_to_bond): making interface the new active one [ 236.629389][T10899] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 236.774879][T10893] syzkaller1: entered promiscuous mode [ 236.774902][T10893] syzkaller1: entered allmulticast mode [ 237.110193][T10538] veth0_vlan: entered promiscuous mode [ 237.140870][T10925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1414'. [ 237.141779][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 237.141812][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 237.145133][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 237.145901][T10538] veth1_vlan: entered promiscuous mode [ 237.233279][T10538] veth0_macvtap: entered promiscuous mode [ 237.256952][T10538] veth1_macvtap: entered promiscuous mode [ 237.299481][T10538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.371294][T10538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.427628][T10627] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.427679][T10627] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.427716][T10627] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.427753][T10627] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.695509][T10951] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.728304][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 237.728340][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'. [ 237.876990][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.877015][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.044756][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.044780][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.183736][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 238.183774][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 238.220058][T10981] dummy0: entered promiscuous mode [ 238.256436][T10985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.259604][T10982] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.308370][T10991] xt_bpf: check failed: parse error [ 238.321923][T10981] dummy0: left promiscuous mode [ 238.457627][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 238.690019][T11010] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 238.811142][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'. [ 238.853969][T11022] netlink: 'syz.3.1440': attribute type 7 has an invalid length. [ 238.929180][T11022] ipvlan3: entered allmulticast mode [ 238.929205][T11022] virt_wifi0: entered allmulticast mode [ 238.948900][T11022] batman_adv: batadv0: Adding interface: ipvlan3 [ 238.948919][T11022] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.948953][T11022] batman_adv: batadv0: Interface activated: ipvlan3 [ 239.146330][T11040] tipc: Enabling of bearer rejected, failed to enable media [ 240.471700][T11090] syzkaller1: entered promiscuous mode [ 240.471726][T11090] syzkaller1: entered allmulticast mode [ 240.838485][T11119] syzkaller0: entered promiscuous mode [ 240.838509][T11119] syzkaller0: entered allmulticast mode [ 240.860012][T11119] tipc: Enabled bearer , priority 0 [ 240.925747][T11123] lo: entered promiscuous mode [ 240.952624][T11123] netlink: 'syz.5.1470': attribute type 2 has an invalid length. [ 240.952650][T11123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.563248][T11111] tipc: Resetting bearer [ 241.597931][T11143] netlink: 'syz.0.1477': attribute type 8 has an invalid length. [ 241.654068][T11111] tipc: Disabling bearer [ 241.705214][T11144] batman_adv: batadv0: Adding interface: syzkaller0 [ 241.705235][T11144] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.705268][T11144] batman_adv: batadv0: Interface activated: syzkaller0 [ 241.707427][T11145] netlink: 'syz.3.1478': attribute type 13 has an invalid length. [ 241.763688][ T7481] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.764392][ T7481] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.766179][ T32] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.766228][ T32] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.766654][T11145] netlink: 'syz.3.1478': attribute type 13 has an invalid length. [ 241.858904][T11138] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 241.966260][T11138] batman_adv: batadv0: Removing interface: syzkaller0 [ 242.121809][T11161] ip_tables: iptables: counters copy to user failed while replacing table [ 242.457258][T11183] __nla_validate_parse: 13 callbacks suppressed [ 242.457281][T11183] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1486'. [ 242.532145][T11183] siw: device registration error -23 [ 242.556163][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'. [ 242.556487][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'. [ 242.888504][T11160] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 242.973127][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1490'. [ 242.973164][T11207] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 243.193627][T11216] netlink: 'syz.3.1494': attribute type 2 has an invalid length. [ 243.321307][T11185] netlink: 'syz.5.1488': attribute type 4 has an invalid length. [ 243.427813][T11229] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.506508][T11234] netlink: 636 bytes leftover after parsing attributes in process `syz.6.1498'. [ 243.506762][T11234] netlink: 'syz.6.1498': attribute type 22 has an invalid length. [ 243.506780][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1498'. [ 243.547019][T11234] netlink: 'syz.6.1498': attribute type 22 has an invalid length. [ 243.547043][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1498'. [ 243.571045][T10625] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.575477][T10629] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.575535][T10629] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.575573][T10629] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.739999][T11241] veth0: left allmulticast mode [ 243.740028][T11241] veth0: left promiscuous mode [ 243.740285][T11241] bridge0: port 1(veth0) entered disabled state [ 243.799554][T11241] batman_adv: batadv0: Adding interface: veth0 [ 243.799574][T11241] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.887038][T11241] batman_adv: batadv0: Interface activated: veth0 [ 243.978468][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1500'. [ 244.049207][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 244.115695][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1499'. [ 244.342222][T11265] xt_ecn: cannot match TCP bits for non-tcp packets [ 245.810296][T11336] veth0_to_hsr: entered promiscuous mode [ 245.823516][T11336] macsec1: entered promiscuous mode [ 245.838355][T11336] veth0_to_hsr: left promiscuous mode [ 246.006891][T11345] ip_tables: iptables: counters copy to user failed while replacing table [ 246.203545][T11352] bond3: (slave veth0_to_bond): Releasing active interface [ 246.232132][T11352] bond0: (slave bond_slave_0): Releasing backup interface [ 246.258656][T11352] bond0: (slave bond_slave_1): Releasing backup interface [ 246.303866][T11352] team0: Port device team_slave_0 removed [ 246.339991][T11352] team0: Port device team_slave_1 removed [ 246.348557][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.348583][T11352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.371886][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.371912][T11352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.378744][T11352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 246.442180][T11353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 246.541059][ T25] syz1: Port: 1 Link DOWN [ 246.558717][T11372] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 3, id = 0 [ 246.688729][T11386] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 246.688755][T11386] nbd: error processing sock list [ 246.984093][T11398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.065298][T11402] syzkaller0: entered promiscuous mode [ 247.065322][T11402] syzkaller0: entered allmulticast mode [ 247.826036][T11440] __nla_validate_parse: 10 callbacks suppressed [ 247.826061][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1555'. [ 255.773477][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773542][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.732596][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1568'. [ 269.788281][T11508] netlink: 'syz.2.1569': attribute type 2 has an invalid length. [ 269.966597][T11519] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1573'. [ 269.968291][T11519] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1573'. [ 270.135401][T11523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 270.175578][T11527] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1575'. [ 270.254093][T11531] ip_tables: iptables: counters copy to user failed while replacing table [ 270.305540][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 270.728248][T11568] ip_tables: iptables: counters copy to user failed while replacing table [ 270.818988][T11574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'. [ 270.872451][T11578] netlink: 'syz.0.1590': attribute type 2 has an invalid length. [ 270.946591][T11582] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1591'. [ 273.470094][T11549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.593906][T11584] ip_tables: iptables: counters copy to user failed while replacing table [ 273.661616][T11586] ip_tables: iptables: counters copy to user failed while replacing table [ 273.684673][T11588] netlink: 'syz.5.1594': attribute type 11 has an invalid length. [ 273.684697][T11588] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1594'. [ 273.723249][T11590] netlink: 'syz.5.1594': attribute type 11 has an invalid length. [ 273.723276][T11590] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1594'. [ 273.937211][ T13] IPVS: starting estimator thread 0... [ 274.020701][T11615] IPVS: using max 25 ests per chain, 60000 per kthread [ 274.214150][T11619] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 274.214261][T11619] syzkaller1: Refused to change device type [ 274.307033][T11613] bond7: entered promiscuous mode [ 274.424485][T11637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.440668][T11632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.476748][ T7483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.476772][ T7483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.506272][T11641] FAULT_INJECTION: forcing a failure. [ 274.506272][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 274.506333][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.6.1604 Not tainted syzkaller #0 PREEMPT(full) [ 274.506358][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.506379][T11641] Call Trace: [ 274.506388][T11641] [ 274.506398][T11641] dump_stack_lvl+0xe8/0x150 [ 274.506437][T11641] should_fail_ex+0x410/0x560 [ 274.506476][T11641] should_failslab+0xa8/0x100 [ 274.506507][T11641] ? dst_alloc+0x105/0x170 [ 274.506536][T11641] kmem_cache_alloc_noprof+0xa1/0x600 [ 274.506568][T11641] ? __pfx_find_exception+0x10/0x10 [ 274.506595][T11641] ? dst_alloc+0x105/0x170 [ 274.506622][T11641] ? fib_lookup+0x76/0x440 [ 274.506654][T11641] dst_alloc+0x105/0x170 [ 274.506688][T11641] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 274.506722][T11641] ? ip_route_output_key_hash_rcu+0x1381/0x2720 [ 274.506763][T11641] ? ip_route_output_key_hash+0xd8/0x2a0 [ 274.506798][T11641] ip_route_output_key_hash+0x18d/0x2a0 [ 274.506834][T11641] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 274.506872][T11641] ? lock_acquire+0x115/0x350 [ 274.506910][T11641] ip_route_output_flow+0x2a/0x150 [ 274.506938][T11641] ? security_sk_classify_flow+0x6d/0x150 [ 274.506968][T11641] ping_v4_sendmsg+0x10a2/0x1870 [ 274.507017][T11641] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 274.507092][T11641] ? inet_sendmsg+0x10d/0x320 [ 274.507125][T11641] ? lockdep_hardirqs_on+0x7b/0x110 [ 274.507149][T11641] ? inet_sendmsg+0x10d/0x320 [ 274.507181][T11641] ? inet_sendmsg+0x298/0x320 [ 274.507218][T11641] ? __pfx_inet_sendmsg+0x10/0x10 [ 274.507247][T11641] sock_sendmsg_nosec+0x10e/0x180 [ 274.507279][T11641] ____sys_sendmsg+0x54e/0x850 [ 274.507310][T11641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.507343][T11641] ? import_iovec+0x73/0xa0 [ 274.507381][T11641] ___sys_sendmsg+0x2a5/0x360 [ 274.507404][T11641] ? __lock_acquire+0x747/0x2de0 [ 274.507434][T11641] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.507500][T11641] ? __fget_files+0x2a/0x420 [ 274.507520][T11641] ? __fget_files+0x3a2/0x420 [ 274.507553][T11641] __x64_sys_sendmsg+0x1b1/0x290 [ 274.507588][T11641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.507638][T11641] do_syscall_64+0x166/0x520 [ 274.507662][T11641] ? trace_irq_disable+0x3b/0x140 [ 274.507687][T11641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.507710][T11641] ? clear_bhb_loop+0x70/0xc0 [ 274.507738][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.507760][T11641] RIP: 0033:0x7fe53cb9e2d9 [ 274.507788][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.507808][T11641] RSP: 002b:00007fe53d9be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.507838][T11641] RAX: ffffffffffffffda RBX: 00007fe53ce25fa0 RCX: 00007fe53cb9e2d9 [ 274.507854][T11641] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 274.507869][T11641] RBP: 00007fe53d9be090 R08: 0000000000000000 R09: 0000000000000000 [ 274.507883][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.507896][T11641] R13: 00007fe53ce26038 R14: 00007fe53ce25fa0 R15: 00007ffd3783ffe8 [ 274.507933][T11641] [ 274.939063][T11648] openvswitch: netlink: Port 196609 exceeds max allowable 65535 [ 275.307457][T11674] __nla_validate_parse: 3 callbacks suppressed [ 275.307482][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 275.316936][T11675] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1614'. [ 275.336985][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 275.560236][T11686] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 275.595307][T11687] veth1_macvtap: left promiscuous mode [ 276.005307][T11704] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 276.163870][T11704] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 276.190197][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1626'. [ 276.462209][T11721] ip6erspan0: entered allmulticast mode [ 276.872869][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1636'. [ 276.949176][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1637'. [ 277.028893][T11751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'. [ 277.054382][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1637'. [ 277.085354][T11760] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 277.258965][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 277.643835][ T5279] veth1_macvtap: entered promiscuous mode [ 278.109266][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1649'. [ 278.288883][T11818] veth1_macvtap: mtu less than device minimum [ 279.301552][T11865] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 279.589450][T11883] openvswitch: netlink: Key type 52 is out of range max 32 [ 279.684088][T11888] Bluetooth: MGMT ver 1.23 [ 279.684575][T11888] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 280.147091][T11906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.688989][T11943] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 280.689014][T11943] __nla_validate_parse: 13 callbacks suppressed [ 280.689027][T11943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1678'. [ 280.689046][T11943] NCSI netlink: No device for ifindex 0 [ 280.798497][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 280.884371][T11953] ip_tables: iptables: counters copy to user failed while replacing table [ 281.111517][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1686'. [ 281.146235][T11968] ip6gre2: entered promiscuous mode [ 281.146261][T11968] ip6gre2: entered allmulticast mode [ 281.195165][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1686'. [ 281.613389][T11989] ip_tables: iptables: counters copy to user failed while replacing table [ 281.616675][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 281.673229][T11983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1690'. [ 281.897867][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 281.929587][T12006] ipvlan2: entered allmulticast mode [ 281.929625][T12006] batadv_slave_1: entered allmulticast mode [ 281.945937][T12006] batman_adv: batadv0: Adding interface: ipvlan2 [ 281.945956][T12006] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.945985][T12006] batman_adv: batadv0: Interface activated: ipvlan2 [ 282.086133][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 282.634067][T12043] ip_tables: iptables: counters copy to user failed while replacing table [ 282.748035][T12046] FAULT_INJECTION: forcing a failure. [ 282.748035][T12046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 282.748071][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.0.1708 Not tainted syzkaller #0 PREEMPT(full) [ 282.748095][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 282.748108][T12046] Call Trace: [ 282.748116][T12046] [ 282.748126][T12046] dump_stack_lvl+0xe8/0x150 [ 282.748163][T12046] should_fail_ex+0x410/0x560 [ 282.748200][T12046] _copy_from_user+0x2d/0xb0 [ 282.748237][T12046] ___sys_sendmsg+0x1c6/0x360 [ 282.748261][T12046] ? __lock_acquire+0x747/0x2de0 [ 282.748291][T12046] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.748355][T12046] ? __fget_files+0x2a/0x420 [ 282.748375][T12046] ? __fget_files+0x3a2/0x420 [ 282.748407][T12046] __x64_sys_sendmsg+0x1b1/0x290 [ 282.748438][T12046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.748485][T12046] do_syscall_64+0x166/0x520 [ 282.748509][T12046] ? trace_irq_disable+0x3b/0x140 [ 282.748534][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.748556][T12046] ? clear_bhb_loop+0x70/0xc0 [ 282.748584][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.748607][T12046] RIP: 0033:0x7f7a9259e2d9 [ 282.748628][T12046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.748647][T12046] RSP: 002b:00007f7a93465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.748671][T12046] RAX: ffffffffffffffda RBX: 00007f7a92825fa0 RCX: 00007f7a9259e2d9 [ 282.748687][T12046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 282.748702][T12046] RBP: 00007f7a93465090 R08: 0000000000000000 R09: 0000000000000000 [ 282.748724][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.748737][T12046] R13: 00007f7a92826038 R14: 00007f7a92825fa0 R15: 00007ffebfce95f8 [ 282.748772][T12046] [ 282.980371][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 283.074492][T12052] x_tables: duplicate entry at hook 4 [ 283.096795][T12055] vlan1: entered promiscuous mode [ 283.097007][T12055] vlan1: entered allmulticast mode [ 283.152409][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 283.269452][ T4935] block nbd2: Receive control failed (result -107) [ 283.876871][T12103] ip_tables: iptables: counters copy to user failed while replacing table [ 284.594179][T12145] ip_tables: iptables: counters copy to user failed while replacing table [ 284.882159][T12155] netlink: 'syz.2.1731': attribute type 4 has an invalid length. [ 285.244429][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.260196][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.260927][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.261465][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.289883][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.294512][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.316285][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.329317][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.383362][T12182] ip_tables: iptables: counters copy to user failed while replacing table [ 285.783636][T12172] validate_nla: 53 callbacks suppressed [ 285.783659][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.808576][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.809233][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.811000][T12172] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 285.970276][T12193] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 286.097194][T12207] __nla_validate_parse: 8 callbacks suppressed [ 286.097219][T12207] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1750'. [ 286.097239][T12207] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1750'. [ 286.097256][T12207] netlink: 'syz.6.1750': attribute type 6 has an invalid length. [ 286.099595][T12207] netlink: 'syz.6.1750': attribute type 5 has an invalid length. [ 286.099618][T12207] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1750'. [ 286.426072][T12218] ip_tables: iptables: counters copy to user failed while replacing table [ 286.490545][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.572398][T12224] IPv6: Can't replace route, no match found [ 286.643226][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1756'. [ 287.063052][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1763'. [ 287.521563][T12262] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.1768'. [ 287.521675][T12262] 0XD: renamed from gretap0 (while UP) [ 287.533040][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1769'. [ 287.558153][T12260] ip_tables: iptables: counters copy to user failed while replacing table [ 287.569910][T12262] 0XD: entered allmulticast mode [ 287.705674][T12267] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1770'. [ 287.798987][T12271] netlink: 'syz.6.1771': attribute type 1 has an invalid length. [ 287.868867][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1773'. [ 287.906035][T12271] bond2: entered promiscuous mode [ 287.909006][T12271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.988410][T12271] ipvlan2: entered allmulticast mode [ 287.988435][T12271] bond2: entered allmulticast mode [ 287.989200][T12271] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.989225][T12271] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 287.989241][T12271] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 288.042336][T12271] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 288.155890][T12289] batadv_slave_0: entered promiscuous mode [ 288.235504][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 288.315319][T12286] batadv_slave_0: left promiscuous mode [ 288.407059][T12308] ip_tables: iptables: counters copy to user failed while replacing table [ 288.933994][T12337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.127003][T12343] ip_tables: iptables: counters copy to user failed while replacing table [ 289.329793][T12355] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 289.353286][T12354] 8021q: VLANs not supported on sit0 [ 289.554211][T12375] netlink: 'syz.5.1803': attribute type 3 has an invalid length. [ 289.574526][T12377] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 289.672000][T12377] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 290.349755][T12406] ip_tables: iptables: counters copy to user failed while replacing table [ 290.442901][T12412] netlink: 'syz.6.1813': attribute type 1 has an invalid length. [ 290.541727][T12412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.748059][T12434] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.497164][T12427] __nla_validate_parse: 40 callbacks suppressed [ 291.497189][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1814'. [ 291.573718][T12479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1825'. [ 291.668060][T12480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.716189][T12479] bridge0: port 1(syz_tun) entered blocking state [ 291.716316][T12479] bridge0: port 1(syz_tun) entered disabled state [ 291.716502][T12479] syz_tun: entered allmulticast mode [ 291.744462][T12479] syz_tun: entered promiscuous mode [ 291.745289][T12479] bridge0: port 1(syz_tun) entered blocking state [ 291.745436][T12479] bridge0: port 1(syz_tun) entered listening state [ 291.808047][T12479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1825'. [ 291.829710][T12485] ip_tables: iptables: counters copy to user failed while replacing table [ 291.944792][T12492] sctp: [Deprecated]: syz.6.1828 (pid 12492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.944792][T12492] Use struct sctp_sack_info instead [ 291.947458][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 292.052582][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 292.167247][T12501] netlink: 'syz.5.1830': attribute type 33 has an invalid length. [ 292.414227][T12520] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1836'. [ 292.414259][T12520] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1836'. [ 292.649704][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1841'. [ 292.764451][T12538] ip_tables: iptables: counters copy to user failed while replacing table [ 292.764875][T12538] ip_tables: iptables: counters copy to user failed while replacing table [ 292.765183][T12538] ip_tables: iptables: counters copy to user failed while replacing table [ 292.765487][T12538] ip_tables: iptables: counters copy to user failed while replacing table [ 293.127514][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1849'. [ 293.190071][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1850'. [ 293.269052][T12572] netlink: 'syz.0.1852': attribute type 12 has an invalid length. [ 293.269078][T12572] netlink: 'syz.0.1852': attribute type 11 has an invalid length. [ 293.810289][T12603] netlink: 'syz.5.1864': attribute type 1 has an invalid length. [ 293.868252][T12609] x_tables: duplicate underflow at hook 1 [ 294.418322][T12638] tipc: Invalid UDP bearer configuration [ 294.424226][T12638] tipc: Enabling of bearer rejected, failed to enable media [ 294.444719][T12638] syzkaller0: left promiscuous mode [ 294.444745][T12638] syzkaller0: left allmulticast mode [ 294.476626][T12641] sctp: [Deprecated]: syz.5.1877 (pid 12641) Use of int in max_burst socket option deprecated. [ 294.476626][T12641] Use struct sctp_assoc_value instead [ 294.570526][T12643] netlink: 'syz.3.1879': attribute type 9 has an invalid length. [ 295.034314][T12674] 0: renamed from hsr0 (while UP) [ 295.054825][T12674] 0: entered allmulticast mode [ 295.054879][T12674] hsr_slave_0: entered allmulticast mode [ 295.054898][T12674] hsr_slave_1: entered allmulticast mode [ 295.055571][T12674] net_ratelimit: 61 callbacks suppressed [ 295.055588][T12674] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 295.158240][T12676] 1: renamed from c0 (while UP) [ 295.185536][T12676] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 295.659271][T12699] netlink: 'syz.2.1896': attribute type 15 has an invalid length. [ 295.943852][T12713] netlink: 'syz.5.1902': attribute type 32 has an invalid length. [ 296.009963][T12713] bond1: Setting coupled_control to off (0) [ 296.204414][T12735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.286124][T12739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.378221][T12742] netlink: 'syz.0.1913': attribute type 83 has an invalid length. [ 296.504165][T12750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.504185][T12750] IPv6: NLM_F_CREATE should be set when creating new route [ 296.504228][T12750] IPv6: NLM_F_CREATE should be set when creating new route [ 296.504254][T12750] IPv6: NLM_F_CREATE should be set when creating new route [ 296.572347][T12752] __nla_validate_parse: 86 callbacks suppressed [ 296.572369][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 296.576552][T12754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1915'. [ 296.668028][T12759] only policy match revision 0 supported [ 296.668043][T12759] unable to load match [ 296.693913][T12757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.773882][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1920'. [ 296.775922][T12757] netlink: 'syz.6.1917': attribute type 1 has an invalid length. [ 296.905122][T12769] bond4: (slave gretap0): making interface the new active one [ 296.907771][T12769] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 297.029366][T12775] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1923'. [ 297.093128][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1925'. [ 297.198078][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 297.238536][T12787] netlink: 'syz.2.1928': attribute type 97 has an invalid length. [ 297.238565][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 297.238600][T12787] netlink: 'syz.2.1928': attribute type 97 has an invalid length. [ 297.238616][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 297.316931][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 297.411961][T12796] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1929'. [ 298.085525][T12828] syzkaller0: entered promiscuous mode [ 298.085549][T12828] syzkaller0: entered allmulticast mode [ 298.255491][T12829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.372416][T12849] batadv_slave_0: entered promiscuous mode [ 298.413147][T12848] batadv_slave_0: left promiscuous mode [ 298.575386][T12853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.605141][T12853] bond5: entered promiscuous mode [ 298.605167][T12853] bond5: entered allmulticast mode [ 298.631622][T12859] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.774729][T12865] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 298.826600][T12871] netlink: 'syz.3.1953': attribute type 2 has an invalid length. [ 298.826626][T12871] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 298.942875][ T31] audit: type=1804 audit(1791941427.903:5): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1955" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=804 res=1 errno=0 [ 298.943201][ T31] audit: type=1800 audit(1791941427.903:6): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1955" name="cgroup.controllers" dev="tmpfs" ino=804 res=0 errno=0 [ 299.101065][T12878] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.414519][T12891] veth1_to_bond: entered allmulticast mode [ 299.445349][T12887] veth1_to_bond: left allmulticast mode [ 299.648728][T12918] netlink: 'syz.5.1966': attribute type 21 has an invalid length. [ 299.866349][T12935] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 299.953967][T12939] FAULT_INJECTION: forcing a failure. [ 299.953967][T12939] name failslab, interval 1, probability 0, space 0, times 0 [ 299.954006][T12939] CPU: 0 UID: 0 PID: 12939 Comm: syz.5.1970 Not tainted syzkaller #0 PREEMPT(full) [ 299.954030][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 299.954052][T12939] Call Trace: [ 299.954060][T12939] [ 299.954069][T12939] dump_stack_lvl+0xe8/0x150 [ 299.954107][T12939] should_fail_ex+0x410/0x560 [ 299.954145][T12939] should_failslab+0xa8/0x100 [ 299.954179][T12939] __kmalloc_noprof+0xfe/0x720 [ 299.954204][T12939] ? nft_pernet+0x23/0x240 [ 299.954229][T12939] ? nf_tables_newrule+0x1524/0x28a0 [ 299.954251][T12939] ? nf_tables_newrule+0x1524/0x28a0 [ 299.954283][T12939] nf_tables_newrule+0x1524/0x28a0 [ 299.954324][T12939] ? __pfx_nf_tables_newrule+0x10/0x10 [ 299.954346][T12939] ? lock_acquire+0x115/0x350 [ 299.954372][T12939] ? nfnl_pernet+0x23/0x240 [ 299.954409][T12939] ? __nla_parse+0x40/0x60 [ 299.954447][T12939] nfnetlink_rcv+0x1288/0x28c0 [ 299.954469][T12939] ? __dev_queue_xmit+0x29b/0x3920 [ 299.954531][T12939] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 299.954573][T12939] ? ref_tracker_free+0x689/0x830 [ 299.954639][T12939] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.954661][T12939] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 299.954707][T12939] netlink_unicast+0x7bd/0x940 [ 299.954743][T12939] netlink_sendmsg+0x813/0xb40 [ 299.954783][T12939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.954819][T12939] ? apparmor_socket_sendmsg+0x98/0x360 [ 299.954852][T12939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.954878][T12939] sock_sendmsg_nosec+0x13a/0x180 [ 299.954912][T12939] ____sys_sendmsg+0x54e/0x850 [ 299.954942][T12939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.954977][T12939] ? import_iovec+0x73/0xa0 [ 299.955015][T12939] ___sys_sendmsg+0x2a5/0x360 [ 299.955046][T12939] ? __lock_acquire+0x747/0x2de0 [ 299.955077][T12939] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.955137][T12939] ? __fget_files+0x2a/0x420 [ 299.955158][T12939] ? __fget_files+0x3a2/0x420 [ 299.955190][T12939] __x64_sys_sendmsg+0x1b1/0x290 [ 299.955217][T12939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.955265][T12939] do_syscall_64+0x166/0x520 [ 299.955290][T12939] ? trace_irq_disable+0x3b/0x140 [ 299.955314][T12939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.955337][T12939] ? clear_bhb_loop+0x70/0xc0 [ 299.955363][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.955385][T12939] RIP: 0033:0x7f8d8a99e2d9 [ 299.955407][T12939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.955426][T12939] RSP: 002b:00007f8d8b861028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.955450][T12939] RAX: ffffffffffffffda RBX: 00007f8d8ac25fa0 RCX: 00007f8d8a99e2d9 [ 299.955467][T12939] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 299.955482][T12939] RBP: 00007f8d8b861090 R08: 0000000000000000 R09: 0000000000000000 [ 299.955496][T12939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.955510][T12939] R13: 00007f8d8ac26038 R14: 00007f8d8ac25fa0 R15: 00007ffc230fe928 [ 299.955546][T12939] [ 300.539603][T12957] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZIh~"GQ- [ 301.237838][T12992] FAULT_INJECTION: forcing a failure. [ 301.237838][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 301.237876][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.2.1983 Not tainted syzkaller #0 PREEMPT(full) [ 301.237902][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 301.237916][T12992] Call Trace: [ 301.237925][T12992] [ 301.237935][T12992] dump_stack_lvl+0xe8/0x150 [ 301.237974][T12992] should_fail_ex+0x410/0x560 [ 301.238012][T12992] should_failslab+0xa8/0x100 [ 301.238052][T12992] __kmalloc_cache_noprof+0xa3/0x600 [ 301.238080][T12992] ? __pfx_nft_rhash_init+0x10/0x10 [ 301.238110][T12992] ? __nft_trans_set_add+0x5e/0x710 [ 301.238137][T12992] ? __nft_trans_set_add+0x5e/0x710 [ 301.238165][T12992] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 301.238202][T12992] __nft_trans_set_add+0x5e/0x710 [ 301.238229][T12992] ? nf_tables_newset+0x13b5/0x2570 [ 301.238260][T12992] nf_tables_newset+0x1d87/0x2570 [ 301.238299][T12992] ? __pfx_nf_tables_newset+0x10/0x10 [ 301.238331][T12992] ? lock_acquire+0x115/0x350 [ 301.238372][T12992] ? __nla_parse+0x40/0x60 [ 301.238412][T12992] nfnetlink_rcv+0x1288/0x28c0 [ 301.238475][T12992] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 301.238520][T12992] ? ref_tracker_free+0x689/0x830 [ 301.238581][T12992] ? skb_clone+0x246/0x3a0 [ 301.238611][T12992] ? __netlink_deliver_tap+0x811/0x860 [ 301.238649][T12992] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.238677][T12992] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.238711][T12992] netlink_unicast+0x7bd/0x940 [ 301.238757][T12992] netlink_sendmsg+0x813/0xb40 [ 301.238797][T12992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.238836][T12992] ? apparmor_socket_sendmsg+0x98/0x360 [ 301.238871][T12992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.238898][T12992] sock_sendmsg_nosec+0x13a/0x180 [ 301.238931][T12992] ____sys_sendmsg+0x54e/0x850 [ 301.238961][T12992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.238994][T12992] ? import_iovec+0x73/0xa0 [ 301.239033][T12992] ___sys_sendmsg+0x2a5/0x360 [ 301.239056][T12992] ? __lock_acquire+0x747/0x2de0 [ 301.239085][T12992] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.239148][T12992] ? __fget_files+0x2a/0x420 [ 301.239169][T12992] ? __fget_files+0x3a2/0x420 [ 301.239201][T12992] __x64_sys_sendmsg+0x1b1/0x290 [ 301.239230][T12992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.239279][T12992] do_syscall_64+0x166/0x520 [ 301.239305][T12992] ? trace_irq_disable+0x3b/0x140 [ 301.239331][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.239354][T12992] ? clear_bhb_loop+0x70/0xc0 [ 301.239382][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.239405][T12992] RIP: 0033:0x7f6efe59e2d9 [ 301.239425][T12992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.239445][T12992] RSP: 002b:00007f6efc7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.239470][T12992] RAX: ffffffffffffffda RBX: 00007f6efe825fa0 RCX: 00007f6efe59e2d9 [ 301.239487][T12992] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 301.239501][T12992] RBP: 00007f6efc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.239515][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.239529][T12992] R13: 00007f6efe826038 R14: 00007f6efe825fa0 R15: 00007ffde6b96998 [ 301.239566][T12992] [ 301.706528][T12995] __nla_validate_parse: 23 callbacks suppressed [ 301.706551][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 302.172341][T13024] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 302.175195][T13026] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 302.435858][T13029] bond9: (slave geneve2): making interface the new active one [ 302.446782][T13029] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 302.467521][ T3386] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 302.467596][T11503] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 302.467636][T11503] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 302.524208][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1994'. [ 302.749450][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 302.749491][T13042] netlink: 'syz.0.1995': attribute type 5 has an invalid length. [ 302.749506][T13042] netlink: 'syz.0.1995': attribute type 13 has an invalid length. [ 302.749521][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 302.764098][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 302.764203][T13042] netlink: 'syz.0.1995': attribute type 5 has an invalid length. [ 302.764245][T13042] netlink: 'syz.0.1995': attribute type 13 has an invalid length. [ 302.764278][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 302.984272][T13061] bond0: (slave bond_slave_1): Releasing backup interface [ 303.014798][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1999'. [ 303.015039][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1999'. [ 303.119465][T13067] netlink: 'syz.3.2001': attribute type 2 has an invalid length. [ 303.177071][T13049] lo: entered promiscuous mode [ 303.177269][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.177564][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.177819][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.178088][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.178310][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.178571][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.236049][T13054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.307240][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.307530][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.307759][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.308090][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.638275][T13082] xt_hashlimit: size too large, truncated to 1048576 [ 303.931101][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 304.052231][T13114] netlink: 'syz.2.2011': attribute type 21 has an invalid length. [ 304.052258][T13114] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2011'. [ 304.052351][T13114] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2011'. [ 304.094270][T13113] netlink: 'syz.3.2012': attribute type 12 has an invalid length. [ 304.107852][T13108] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 304.133894][T13113] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 304.611593][T13139] bond0: Error: Cannot enslave bond to itself. [ 304.611782][T13137] x_tables: unsorted underflow at hook 1 [ 304.774376][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.775924][T13146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.777728][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.777852][T13146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.598149][T13203] Bluetooth: MGMT ver 1.23 [ 306.473564][T13253] tipc: Started in network mode [ 306.473599][T13253] tipc: Node identity 2e3817ecea13, cluster identity 4711 [ 306.473893][T13253] tipc: Enabled bearer , priority 11 [ 306.671081][T13265] IPVS: Unknown mcast interface: nr0 [ 306.887691][T13274] netlink: 'syz.6.2058': attribute type 1 has an invalid length. [ 306.887717][T13274] netlink: 'syz.6.2058': attribute type 2 has an invalid length. [ 306.975771][ C1] bridge0: port 1(syz_tun) entered learning state [ 307.324474][T13299] __nla_validate_parse: 10 callbacks suppressed [ 307.324497][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2066'. [ 307.481475][ T5745] tipc: Node number set to 3291158508 [ 307.626930][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2068'. [ 307.627072][T13310] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 307.630116][T13310] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2068'. [ 307.701028][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 307.742455][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2069'. [ 308.102081][T13337] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2074'. [ 308.126745][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 308.126772][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 310.509196][T13305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.685082][T13364] IPVS: length: 193 != 24 [ 310.685118][T13364] IPVS: length: 193 != 24 [ 310.685143][T13364] IPVS: length: 193 != 24 [ 310.685166][T13364] IPVS: length: 193 != 24 [ 310.685190][T13364] IPVS: length: 193 != 24 [ 310.685213][T13364] IPVS: length: 193 != 24 [ 310.685237][T13364] IPVS: length: 193 != 24 [ 310.685260][T13364] IPVS: length: 193 != 24 [ 310.685283][T13364] IPVS: length: 193 != 24 [ 310.685306][T13364] IPVS: length: 193 != 24 [ 310.685329][T13364] IPVS: length: 193 != 24 [ 310.685352][T13364] IPVS: length: 193 != 24 [ 310.685376][T13364] IPVS: length: 193 != 24 [ 310.685398][T13364] IPVS: length: 193 != 24 [ 310.685421][T13364] IPVS: length: 193 != 24 [ 310.685444][T13364] IPVS: length: 193 != 24 [ 310.685465][T13364] IPVS: length: 193 != 24 [ 310.685486][T13364] IPVS: length: 193 != 24 [ 310.685506][T13364] IPVS: length: 193 != 24 [ 310.685526][T13364] IPVS: length: 193 != 24 [ 310.685546][T13364] IPVS: length: 193 != 24 [ 310.685568][T13364] IPVS: length: 193 != 24 [ 310.685592][T13364] IPVS: length: 193 != 24 [ 310.685615][T13364] IPVS: length: 193 != 24 [ 310.685638][T13364] IPVS: length: 193 != 24 [ 310.685661][T13364] IPVS: length: 193 != 24 [ 310.685683][T13364] IPVS: length: 193 != 24 [ 310.685680][T13362] syzkaller1: entered promiscuous mode [ 310.685700][T13362] syzkaller1: entered allmulticast mode [ 310.685706][T13364] IPVS: length: 193 != 24 [ 310.685730][T13364] IPVS: length: 193 != 24 [ 310.685752][T13364] IPVS: length: 193 != 24 [ 310.685776][T13364] IPVS: length: 193 != 24 [ 310.700107][T13364] IPVS: length: 193 != 24 [ 310.700200][T13364] IPVS: length: 193 != 24 [ 310.700266][T13364] IPVS: length: 193 != 24 [ 310.701027][T13364] IPVS: length: 193 != 24 [ 310.701053][T13364] IPVS: length: 193 != 24 [ 310.701074][T13364] IPVS: length: 193 != 24 [ 310.701097][T13364] IPVS: length: 193 != 24 [ 310.701120][T13364] IPVS: length: 193 != 24 [ 310.701142][T13364] IPVS: length: 193 != 24 [ 310.701164][T13364] IPVS: length: 193 != 24 [ 310.701187][T13364] IPVS: length: 193 != 24 [ 310.701210][T13364] IPVS: length: 193 != 24 [ 310.701233][T13364] IPVS: length: 193 != 24 [ 310.701256][T13364] IPVS: length: 193 != 24 [ 310.701279][T13364] IPVS: length: 193 != 24 [ 310.701302][T13364] IPVS: length: 193 != 24 [ 310.701325][T13364] IPVS: length: 193 != 24 [ 310.701348][T13364] IPVS: length: 193 != 24 [ 310.701371][T13364] IPVS: length: 193 != 24 [ 310.701394][T13364] IPVS: length: 193 != 24 [ 310.701416][T13364] IPVS: length: 193 != 24 [ 310.701437][T13364] IPVS: length: 193 != 24 [ 310.701460][T13364] IPVS: length: 193 != 24 [ 310.701483][T13364] IPVS: length: 193 != 24 [ 310.701506][T13364] IPVS: length: 193 != 24 [ 310.701529][T13364] IPVS: length: 193 != 24 [ 310.701552][T13364] IPVS: length: 193 != 24 [ 310.701575][T13364] IPVS: length: 193 != 24 [ 310.701626][T13364] IPVS: length: 193 != 24 [ 310.701649][T13364] IPVS: length: 193 != 24 [ 310.701672][T13364] IPVS: length: 193 != 24 [ 310.701695][T13364] IPVS: length: 193 != 24 [ 310.701718][T13364] IPVS: length: 193 != 24 [ 310.701741][T13364] IPVS: length: 193 != 24 [ 311.169457][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 311.397039][T13392] netlink: 'syz.5.2092': attribute type 11 has an invalid length. [ 311.397063][T13392] netlink: 'syz.5.2092': attribute type 4 has an invalid length. [ 311.397078][T13392] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2092'. [ 311.430108][T13392] netlink: 'syz.5.2092': attribute type 3 has an invalid length. [ 311.430127][T13392] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2092'. [ 311.565703][T13399] netlink: 'syz.5.2096': attribute type 13 has an invalid length. [ 311.569659][T13399] Bluetooth: hci0: unsupported parameter 5135 [ 311.569683][T13399] Bluetooth: hci0: unsupported parameter 8192 [ 311.569698][T13399] Bluetooth: hci0: unsupported parameter 5135 [ 311.569712][T13399] Bluetooth: hci0: unsupported parameter 8192 [ 311.655598][T13401] gretap0: entered promiscuous mode [ 311.890532][T13412] Bluetooth: MGMT ver 1.23 [ 311.895947][T13411] xt_l2tp: invalid flags combination: 8 [ 312.346577][T13433] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.366197][T13435] C: renamed from lo [ 312.385607][T13435] net_ratelimit: 62 callbacks suppressed [ 312.385629][T13435] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 312.588810][T13455] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 312.590251][T13455] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 312.607391][T13450] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 312.658064][T13453] xt_addrtype: ipv6 does not support BROADCAST matching [ 312.705306][T13453] batman_adv: batadv0: Adding interface: gretap1 [ 312.705327][T13453] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.705358][T13453] batman_adv: batadv0: Interface activated: gretap1 [ 312.953496][T13464] can: request_module (can-proto-0) failed. [ 312.989525][T13468] bond7: Unable to set up delay as MII monitoring is disabled [ 313.004821][T13468] bond7 (unregistering): Released all slaves [ 313.516487][T13492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.677761][T13499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.871772][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.871867][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.871944][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.872031][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.872102][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.872171][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.872239][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.872307][T13506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 313.997408][T13512] xt_hashlimit: overflow, try lower: 3/0 [ 314.376723][T13527] __nla_validate_parse: 3 callbacks suppressed [ 314.376747][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2131'. [ 314.670517][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.670542][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.716504][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 314.818516][T13540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.924728][T13554] x_tables: ip_tables: osf match: only valid for protocol 6 [ 314.938732][T13552] netlink: 'syz.0.2140': attribute type 21 has an invalid length. [ 314.938806][T13552] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2140'. [ 314.941912][T13552] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2140'. [ 315.011019][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2141'. [ 315.075107][T13557] netlink: 'syz.0.2140': attribute type 21 has an invalid length. [ 315.075135][T13557] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2140'. [ 315.075184][T13557] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2140'. [ 316.020822][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 316.550109][T13624] l2tp_ppp: sess 2/0: no socket in recv [ 317.219531][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219627][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.523647][T13671] l2tp_ppp: sess 2/0: no socket in recv [ 317.647404][T13673] netlink: 'syz.0.2175': attribute type 12 has an invalid length. [ 317.730267][T13673] bond10: option primary_reselect: invalid value (255) [ 317.753100][T13673] bond10 (unregistering): Released all slaves [ 317.753965][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 317.808419][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 317.977209][T13700] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 317.995300][T13700] geneve2: entered promiscuous mode [ 317.995326][T13700] geneve2: entered allmulticast mode [ 318.062874][T13703] netlink: 'syz.0.2183': attribute type 15 has an invalid length. [ 318.497078][T13727] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 318.497110][T13727] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 319.118205][T13752] tc_dump_action: action bad kind [ 319.189463][T13738] trusted_key: syz.6.2194 sent an empty control message without MSG_MORE. [ 319.291344][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 319.525981][T13772] hsr0: entered allmulticast mode [ 319.526007][T13772] hsr_slave_0: entered allmulticast mode [ 319.526027][T13772] hsr_slave_1: entered allmulticast mode [ 319.689264][T13788] __nla_validate_parse: 41 callbacks suppressed [ 319.689289][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 319.709462][T13780] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 319.885585][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 320.313287][ T4935] Bluetooth: hci5: ACL packet too small [ 320.968478][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 320.968637][T13803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.034004][T13803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.216107][T13809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2211'. [ 321.216144][T13809] net_ratelimit: 27 callbacks suppressed [ 321.216159][T13809] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 321.442197][T11504] tipc: Subscription rejected, illegal request [ 322.332688][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 322.332716][ C1] bridge0: topology change detected, propagating [ 322.496389][T13773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.755830][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 322.785006][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2219'. [ 322.841400][T13836] 8021q: VLANs not supported on ip_vti0 [ 322.884291][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2221'. [ 322.895267][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2221'. [ 322.913073][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2221'. [ 322.923932][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2221'. [ 323.059181][T13847] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 323.068638][T13842] pim6reg1: entered promiscuous mode [ 323.068664][T13842] pim6reg1: entered allmulticast mode [ 323.198127][T13855] netlink: 'syz.3.2226': attribute type 7 has an invalid length. [ 323.198150][T13855] netlink: 'syz.3.2226': attribute type 8 has an invalid length. [ 323.403241][T13868] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.431311][T13868] xt_hashlimit: size too large, truncated to 1048576 [ 323.889425][T13883] netlink: 'syz.3.2232': attribute type 29 has an invalid length. [ 324.178505][T13893] Cannot find set identified by id 0 to match [ 324.337040][T13902] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 324.482925][T13903] netlink: 'syz.5.2239': attribute type 8 has an invalid length. [ 324.595941][T13910] xt_l2tp: v2 doesn't support IP mode [ 324.846930][T13919] __nla_validate_parse: 72 callbacks suppressed [ 324.846955][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2244'. [ 325.080186][T13938] netlink: Unknown NAT attribute (type=511, max=9) [ 325.080231][T13938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.105218][T13939] netlink: Unknown NAT attribute (type=511, max=9) [ 325.105258][T13939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.308391][T13943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2251'. [ 325.328207][T13943] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2251'. [ 325.416431][T13950] Set syz0 is full, maxelem 2 reached [ 325.560155][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 325.585517][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 326.286423][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2258'. [ 326.286471][T13973] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2258'. [ 326.922909][T13979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.108721][T13982] xt_CONNSECMARK: invalid mode: 0 [ 327.133390][T13990] xt_nfacct: accounting object `syz0F±5M' does not exist [ 327.213834][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2264'. [ 327.363936][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2265'. [ 327.573627][T14008] netlink: 'syz.5.2268': attribute type 1 has an invalid length. [ 327.573651][T14008] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2268'. [ 328.095840][T14040] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.555811][T14107] tipc: Enabling of bearer rejected, failed to enable media [ 330.264933][T14135] veth0_to_bond: entered allmulticast mode [ 330.363756][T14138] SET target dimension over the limit! [ 330.390180][T14140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.608740][T14152] syzkaller0: entered promiscuous mode [ 330.608767][T14152] syzkaller0: entered allmulticast mode [ 330.950059][T14163] __nla_validate_parse: 3 callbacks suppressed [ 330.950081][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 330.992522][T14162] geneve3: entered allmulticast mode [ 331.016359][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.018758][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.019049][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.019238][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.019431][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.019614][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.035147][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.067992][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.097882][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 331.492826][ T30] syz2: Port: 1 Link ACTIVE [ 331.577418][T14179] openvswitch: netlink: IPv4 tunnel dst address is zero [ 331.830234][T14195] IPVS: set_ctl: invalid protocol: 5 172.20.20.170:20000 [ 331.841571][T14196] bridge5: entered promiscuous mode [ 331.842254][T14196] bridge5: entered allmulticast mode [ 332.733017][T14258] ksmbd: Unknown IPC event: 1, ignore. [ 333.058686][T14269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.203763][T14318] netlink: 'syz.6.2349': attribute type 2 has an invalid length. [ 334.345323][T14327] netlink: 'syz.5.2352': attribute type 8 has an invalid length. [ 334.374241][T14327] syzkaller0: entered promiscuous mode [ 334.374266][T14327] syzkaller0: entered allmulticast mode [ 334.733545][T14339] sctp: [Deprecated]: syz.5.2356 (pid 14339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.733545][T14339] Use struct sctp_sack_info instead [ 334.790085][T14340] netlink: 'syz.5.2356': attribute type 10 has an invalid length. [ 334.854139][T14340] team0: Port device dummy0 added [ 334.896508][T14341] team0: Port device dummy0 removed [ 335.617175][T14361] netlink: 'syz.6.2363': attribute type 1 has an invalid length. [ 335.816241][T14377] syz_tun: entered allmulticast mode [ 335.828784][T14378] Cannot find add_set index 2 as target [ 335.947201][T14389] netlink: 'syz.6.2370': attribute type 11 has an invalid length. [ 335.988902][T14376] syz_tun: left allmulticast mode [ 336.069414][T14393] __nla_validate_parse: 41 callbacks suppressed [ 336.069442][T14393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2371'. [ 336.136452][T14397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2373'. [ 336.243247][T14399] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2374'. [ 336.337440][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2375'. [ 336.417150][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2375'. [ 336.628234][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2381'. [ 336.675348][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2381'. [ 336.714818][T14432] veth1_macvtap: left promiscuous mode [ 336.714850][T14432] macsec0: entered promiscuous mode [ 336.714866][T14432] macsec0: entered allmulticast mode [ 336.774756][T14435] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2384'. [ 336.796462][T14432] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 336.915873][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 336.994450][T14448] batman_adv: batadv0: Adding interface: syzkaller0 [ 336.994471][T14448] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.994506][T14448] batman_adv: batadv0: Interface activated: syzkaller0 [ 337.188761][T14453] sctp: [Deprecated]: syz.2.2391 (pid 14453) Use of int in maxseg socket option. [ 337.188761][T14453] Use struct sctp_assoc_value instead [ 337.334203][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 337.609116][T14446] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 337.641410][T14446] batman_adv: batadv0: Removing interface: syzkaller0 [ 337.800208][T14468] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 337.874419][T14468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.875459][T14468] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 337.913213][T14469] bond6: (slave gretap2): making interface the new active one [ 337.914246][T14469] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 337.915882][T14468] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 337.963708][T14468] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 337.965889][T14468] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 338.062954][T14481] Bluetooth: hci0: unsupported parameter 5135 [ 338.062979][T14481] Bluetooth: hci0: unsupported parameter 8192 [ 338.062994][T14481] Bluetooth: hci0: unsupported parameter 5135 [ 338.063008][T14481] Bluetooth: hci0: unsupported parameter 8192 [ 338.179274][T14488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 338.195489][T14486] netlink: zone id is out of range [ 338.195506][T14486] netlink: zone id is out of range [ 338.195516][T14486] netlink: zone id is out of range [ 338.195523][T14486] netlink: zone id is out of range [ 338.195532][T14486] netlink: zone id is out of range [ 338.195541][T14486] netlink: zone id is out of range [ 338.195554][T14486] netlink: zone id is out of range [ 338.195562][T14486] netlink: zone id is out of range [ 338.195570][T14486] netlink: zone id is out of range [ 338.195579][T14486] netlink: zone id is out of range [ 338.276853][T14486] bond2 (unregistering): Released all slaves [ 340.249057][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.259610][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.268983][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.282361][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.283057][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.970204][T14530] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.972580][T14530] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.972985][T14530] bridge_slave_0: entered allmulticast mode [ 340.979682][T14530] bridge_slave_0: entered promiscuous mode [ 340.989995][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.993433][T14530] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.995080][T14530] bridge_slave_1: entered allmulticast mode [ 341.004823][T14530] bridge_slave_1: entered promiscuous mode [ 341.047978][T14530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.060845][T14530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.092469][T14530] team0: Port device team_slave_0 added [ 341.094817][T14530] team0: Port device team_slave_1 added [ 341.126985][T14530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.127005][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.127039][T14530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.128616][T14530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.128630][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.128661][T14530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.291120][T14530] hsr_slave_0: entered promiscuous mode [ 341.292375][T14530] hsr_slave_1: entered promiscuous mode [ 341.293149][T14530] debugfs: 'hsr0' already exists in 'hsr' [ 341.293169][T14530] Cannot create hsr debugfs directory [ 341.413140][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 341.416312][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 341.420273][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 341.439675][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 341.455190][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 341.608679][T14511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.818583][T14530] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 341.845359][T14530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.848416][T14530] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 341.905656][T14530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.958811][T14530] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 341.977741][T14530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.987620][T14530] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 342.017912][T14563] __nla_validate_parse: 7 callbacks suppressed [ 342.017934][T14563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2419'. [ 342.021929][T14530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.204194][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 342.204768][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 342.237942][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2421'. [ 342.241695][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2421'. [ 342.330954][ T4935] Bluetooth: hci7: command tx timeout [ 342.335694][T14530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.431682][T14530] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.506338][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.506451][T10626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.544401][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.544510][T10630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.959635][T14598] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2428'. [ 343.047923][T14601] validate_nla: 30 callbacks suppressed [ 343.047952][T14601] netlink: 'syz.6.2429': attribute type 5 has an invalid length. [ 343.245200][T14607] netlink: 'syz.2.2431': attribute type 2 has an invalid length. [ 343.497281][T14623] netlink: 'syz.6.2437': attribute type 10 has an invalid length. [ 343.531221][ T4935] Bluetooth: hci8: command tx timeout [ 343.559553][T14621] tunl0: entered promiscuous mode [ 343.580721][T14621] gre0: entered promiscuous mode [ 343.696799][T14621] gretap0: entered promiscuous mode [ 343.861726][T14621] erspan0: entered promiscuous mode [ 343.891793][T14621] ip_vti0: entered promiscuous mode [ 343.916849][T14621] ip6_vti0: entered promiscuous mode [ 343.938874][T14621] sit0: entered promiscuous mode [ 343.973740][T14621] ip6tnl0: entered promiscuous mode [ 344.021460][T14621] ip6gre0: entered promiscuous mode [ 344.052801][T14621] syz_tun: entered promiscuous mode [ 344.069129][T14621] ip6gretap0: entered promiscuous mode [ 344.084248][T14621] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.086086][T14621] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.087655][T14621] bridge0: entered promiscuous mode [ 344.124959][T14621] vcan0: entered promiscuous mode [ 344.184522][T14621] bond0: entered promiscuous mode [ 344.184542][T14621] bond_slave_0: entered promiscuous mode [ 344.206034][T14621] team0: entered promiscuous mode [ 344.206052][T14621] team_slave_0: entered promiscuous mode [ 344.206207][T14621] team_slave_1: entered promiscuous mode [ 344.246673][T14621] nlmon0: entered promiscuous mode [ 344.267976][T14621] batadv0: entered promiscuous mode [ 344.299665][T14621] veth0: entered promiscuous mode [ 344.326715][T14621] veth1: entered promiscuous mode [ 344.361930][T14621] wg0: entered promiscuous mode [ 344.385455][T14621] wg1: entered promiscuous mode [ 344.404675][T14621] wg2: entered promiscuous mode [ 344.410591][ T4935] Bluetooth: hci7: command tx timeout [ 344.428825][T14621] veth0_to_bridge: entered promiscuous mode [ 344.465049][T14621] veth1_to_bridge: entered promiscuous mode [ 344.526624][T14621] veth0_to_bond: entered promiscuous mode [ 344.537784][T14621] veth1_to_bond: entered promiscuous mode [ 344.549262][T14621] bond_slave_1: entered promiscuous mode [ 344.549674][T14621] veth0_to_team: entered promiscuous mode [ 344.612098][T14621] veth1_to_team: entered promiscuous mode [ 344.634563][T14621] veth0_to_batadv: entered promiscuous mode [ 344.678004][T14621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.678072][T14621] batadv_slave_0: entered promiscuous mode [ 344.693936][T14621] veth1_to_batadv: entered promiscuous mode [ 344.706655][T14621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.706715][T14621] batadv_slave_1: entered promiscuous mode [ 344.731275][T14621] xfrm0: entered promiscuous mode [ 344.737291][T14621] veth0_to_hsr: entered promiscuous mode [ 344.830990][T14621] veth1_to_hsr: entered promiscuous mode [ 344.851337][T14621] hsr0: entered promiscuous mode [ 344.857906][T14621] veth1_virt_wifi: entered promiscuous mode [ 344.887292][T14621] veth0_virt_wifi: entered promiscuous mode [ 344.914181][T14621] virt_wifi0: entered promiscuous mode [ 344.939322][T14621] vlan0: entered promiscuous mode [ 344.949255][T14621] vlan1: entered promiscuous mode [ 344.977410][T14621] macvlan0: entered promiscuous mode [ 345.092881][T14621] macvlan1: entered promiscuous mode [ 345.099375][T14621] ipvlan0: entered promiscuous mode [ 345.113673][T14621] ipvlan1: entered promiscuous mode [ 345.137322][T14621] macvtap0: entered promiscuous mode [ 345.152963][T14621] macsec0: entered promiscuous mode [ 345.254870][T14621] geneve0: entered promiscuous mode [ 345.268043][T14621] geneve1: entered promiscuous mode [ 345.276453][T14621] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 345.288263][T14621] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 345.303019][T14621] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 345.322194][T14621] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 345.348708][T14621] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 345.377420][T14621] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 345.392363][T14621] ifb2: entered promiscuous mode [ 345.392574][T14621] ip6erspan0: entered promiscuous mode [ 345.393167][T14621] bridge1: entered promiscuous mode [ 345.428683][T14621] bond0.4: entered promiscuous mode [ 345.437581][T14621] syztnl1: entered promiscuous mode [ 345.437752][T14621] syztnl0: entered promiscuous mode [ 345.438276][T14621] bridge2: entered promiscuous mode [ 345.452956][T14621] mac80211_hwsim hwsim32 wlan2: entered promiscuous mode [ 345.453155][T14621] ipip0: entered promiscuous mode [ 345.453322][T14621] bond1: entered promiscuous mode [ 345.453561][T14621] gtp0: entered promiscuous mode [ 345.455707][T14621] ip6tnl1: entered promiscuous mode [ 345.494890][T14621] bridge3: entered promiscuous mode [ 345.503668][T14621] geneve3: entered promiscuous mode [ 345.509580][T14621] bridge4: entered promiscuous mode [ 345.540920][T10630] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.540972][T10630] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.541003][T10630] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.541034][T10630] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.613223][ T4935] Bluetooth: hci8: command tx timeout [ 345.843604][T14632] syz2: Port: 1 Link DOWN [ 345.893464][T14662] netlink: 'syz.2.2439': attribute type 12 has an invalid length. [ 345.976295][T14530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.146083][T14662] netlink: 'syz.2.2439': attribute type 12 has an invalid length. [ 346.445930][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.446948][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.447086][T14548] bridge_slave_0: entered allmulticast mode [ 346.448711][T14548] bridge_slave_0: entered promiscuous mode [ 346.491265][ T4935] Bluetooth: hci7: command tx timeout [ 346.493620][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.493726][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.493837][T14548] bridge_slave_1: entered allmulticast mode [ 346.495841][T14548] bridge_slave_1: entered promiscuous mode [ 346.590695][T14548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.608495][T14662] netlink: 'syz.2.2439': attribute type 12 has an invalid length. [ 346.634057][T14548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.755626][T14548] team0: Port device team_slave_0 added [ 346.783278][T14548] team0: Port device team_slave_1 added [ 346.870451][T14548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.870471][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.870499][T14548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.874974][T14530] veth0_vlan: entered promiscuous mode [ 346.901184][T14548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.901237][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.901314][T14548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.024246][T14681] netlink: 'syz.6.2441': attribute type 2 has an invalid length. [ 347.100643][T14530] veth1_vlan: entered promiscuous mode [ 347.154926][T14548] hsr_slave_0: entered promiscuous mode [ 347.156062][T14548] hsr_slave_1: entered promiscuous mode [ 347.156860][T14548] debugfs: 'hsr0' already exists in 'hsr' [ 347.156881][T14548] Cannot create hsr debugfs directory [ 347.216114][T14691] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2444'. [ 347.257746][T14691] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2444'. [ 347.278134][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2443'. [ 347.292144][ T33] INFO: task syz.4.1169:10048 blocked for more than 143 seconds. [ 347.292164][ T33] Not tainted syzkaller #0 [ 347.292172][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.292180][ T33] task:syz.4.1169 state:D stack:27552 pid:10048 tgid:10046 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 347.292232][ T33] Call Trace: [ 347.292238][ T33] [ 347.292249][ T33] __schedule+0x17db/0x58f0 [ 347.292292][ T33] ? __pfx___schedule+0x10/0x10 [ 347.292316][ T33] ? schedule+0x90/0x2b0 [ 347.292335][ T33] schedule+0x164/0x2b0 [ 347.292352][ T33] schedule_preempt_disabled+0x13/0x30 [ 347.292368][ T33] __mutex_lock+0x7c1/0x1550 [ 347.292405][ T33] ? __mutex_lock+0x5d4/0x1550 [ 347.292426][ T33] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 347.292452][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 347.292481][ T33] ? rcu_is_watching+0x16/0xb0 [ 347.292506][ T33] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 347.292529][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 347.292551][ T33] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 347.292578][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 347.292604][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 347.292636][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 347.292667][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.292702][ T33] ? bpf_lsm_capable+0x9/0x20 [ 347.292720][ T33] ? security_capable+0x7e/0x2c0 [ 347.292748][ T33] genl_rcv_msg+0x614/0x7a0 [ 347.292778][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.292802][ T33] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 347.292837][ T33] netlink_rcv_skb+0x226/0x4a0 [ 347.292857][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.292883][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.292915][ T33] ? down_read+0x2be/0x330 [ 347.292938][ T33] genl_rcv+0x28/0x40 [ 347.293004][ T33] netlink_unicast+0x7bd/0x940 [ 347.293050][ T33] netlink_sendmsg+0x813/0xb40 [ 347.293093][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.293121][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 347.293144][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.293163][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 347.293187][ T33] sock_write_iter+0x2de/0x3e0 [ 347.293209][ T33] ? __pfx_sock_write_iter+0x10/0x10 [ 347.293235][ T33] ? bpf_lsm_file_permission+0x9/0x20 [ 347.293250][ T33] ? security_file_permission+0x75/0x260 [ 347.293276][ T33] vfs_write+0x612/0xba0 [ 347.293300][ T33] ? __pfx_vfs_write+0x10/0x10 [ 347.293325][ T33] ? __fget_files+0x2a/0x420 [ 347.293347][ T33] ksys_write+0x150/0x270 [ 347.293366][ T33] ? __pfx_ksys_write+0x10/0x10 [ 347.293392][ T33] do_syscall_64+0x166/0x520 [ 347.293410][ T33] ? trace_irq_disable+0x3b/0x140 [ 347.293427][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.293443][ T33] ? clear_bhb_loop+0x70/0xc0 [ 347.293463][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.293479][ T33] RIP: 0033:0x7ff74419e2d9 [ 347.293494][ T33] RSP: 002b:00007ff7423f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.293511][ T33] RAX: ffffffffffffffda RBX: 00007ff744425fa0 RCX: 00007ff74419e2d9 [ 347.293523][ T33] RDX: 000000000000002c RSI: 0000200000000000 RDI: 0000000000000004 [ 347.293533][ T33] RBP: 00007ff744235888 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.293543][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.293552][ T33] R13: 00007ff744426038 R14: 00007ff744425fa0 R15: 00007ffc763f77d8 [ 347.293578][ T33] [ 347.293642][ T33] [ 347.293642][ T33] Showing all locks held in the system: [ 347.293652][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 347.293664][ T33] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 347.293726][ T33] locks held by getty/5374: 2, on CPU#0: [ 347.293737][ T33] #0: ffff888036eeb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 347.293778][ T33] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 347.293833][ T33] locks held by syz.1.858/8827: 2, on CPU#1: [ 347.293844][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.293888][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 347.293935][ T33] locks held by syz.4.1169/10048: 2, on CPU#1: [ 347.293947][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.293990][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 347.294043][ T33] locks held by kworker/u8:26/11504: 3, on CPU#1: [ 347.294054][ T33] #0: ffff888032f9e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 347.294099][ T33] #1: ffffc9001becfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 347.294143][ T33] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 347.294191][ T33] locks held by syz.3.2238/13897: 2, on CPU#0: [ 347.294202][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.294245][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 347.294290][ T33] locks held by syz.0.2250/13941: 2, on CPU#1: [ 347.294301][ T33] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 347.294345][ T33] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 347.294390][ T33] locks held by syz-executor/14530: 1, on CPU#0: [ 347.294401][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 347.294442][ T33] locks held by syz-executor/14548: 3, last CPU#1: [ 347.294453][ T33] #0: ffffffff90a94508 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 347.294496][ T33] #1: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 347.294541][ T33] #2: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 347.294583][ T33] locks held by syz.2.2442/14680: 1, on CPU#1: [ 347.294594][ T33] #0: ffffffff8fd62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 347.294639][ T33] locks held by syz.5.2443/14688: 1, last CPU#1: [ 347.294650][ T33] #0: ffffffff8fd62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 347.294694][ T33] locks held by syz.5.2443/14689: 2, on CPU#1: [ 347.294706][ T33] #0: ffffffff909bc7a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 347.294747][ T33] #1: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 347.294793][ T33] locks held by syz.6.2444/14691: 1, on CPU#1: [ 347.294804][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 347.294850][ T33] [ 347.294854][ T33] ============================================= [ 347.294854][ T33] [ 347.294867][ T33] NMI backtrace for cpu 1 [ 347.294878][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 347.294895][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 347.294905][ T33] Call Trace: [ 347.294911][ T33] [ 347.294918][ T33] dump_stack_lvl+0xe8/0x150 [ 347.294943][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 347.294968][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 347.294996][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 347.295022][ T33] sys_info+0x135/0x170 [ 347.295047][ T33] watchdog+0xfd7/0x1030 [ 347.295071][ T33] ? watchdog+0x1c7/0x1030 [ 347.295094][ T33] kthread+0x38b/0x480 [ 347.295111][ T33] ? __pfx_watchdog+0x10/0x10 [ 347.295126][ T33] ? __pfx_kthread+0x10/0x10 [ 347.295143][ T33] ret_from_fork+0x514/0xb70 [ 347.295162][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 347.295177][ T33] ? __switch_to+0xc89/0x1420 [ 347.295202][ T33] ? __pfx_kthread+0x10/0x10 [ 347.295219][ T33] ret_from_fork_asm+0x1a/0x30 [ 347.295247][ T33] [ 347.295253][ T33] Sending NMI from CPU 1 to CPUs 0: [ 347.295292][ C0] NMI backtrace for cpu 0 [ 347.295306][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 347.295327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 347.295338][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 347.295361][ C0] Code: 3b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 347.295378][ C0] RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242 [ 347.295395][ C0] RAX: 00000000001755d3 RBX: ffffffff819bebe0 RCX: 8000000000000001 [ 347.295409][ C0] RDX: 0000000000000001 RSI: ffffffff8e46919a RDI: ffffffff8c6dd880 [ 347.295422][ C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 [ 347.295436][ C0] R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 [ 347.295449][ C0] R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 [ 347.295464][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 347.295480][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.295493][ C0] CR2: 0000200000001000 CR3: 0000000060784000 CR4: 00000000003526f0 [ 347.295511][ C0] Call Trace: [ 347.295517][ C0] [ 347.295524][ C0] default_idle+0x9/0x20 [ 347.295556][ C0] default_idle_call+0x72/0xb0 [ 347.295579][ C0] do_idle+0x2e0/0x540 [ 347.295600][ C0] ? __pfx_do_idle+0x10/0x10 [ 347.295625][ C0] cpu_startup_entry+0x43/0x60 [ 347.295644][ C0] rest_init+0x378/0x3a0 [ 347.295669][ C0] ? __pfx_rest_init+0x10/0x10 [ 347.295698][ C0] ? __pfx_kernel_init+0x10/0x10 [ 347.295724][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 347.295746][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 347.295773][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 347.295802][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 347.295830][ C0] start_kernel+0x392/0x3e0 [ 347.295856][ C0] x86_64_start_reservations+0x24/0x30 [ 347.295877][ C0] x86_64_start_kernel+0x137/0x1b0 [ 347.295895][ C0] common_startup_64+0x13e/0x157 [ 347.295929][ C0] [ 347.296297][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 348.272389][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 348.281525][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.291614][ T33] Call Trace: [ 348.294925][ T33] [ 348.297880][ T33] vpanic+0x56d/0xa60 [ 348.301931][ T33] ? __pfx_vpanic+0x10/0x10 [ 348.306478][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 348.312148][ T33] panic+0xc5/0xd0 [ 348.315919][ T33] ? __pfx_panic+0x10/0x10 [ 348.320404][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 348.325484][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 348.331677][ T33] watchdog+0x1030/0x1030 [ 348.336049][ T33] ? watchdog+0x1c7/0x1030 [ 348.340502][ T33] kthread+0x38b/0x480 [ 348.344610][ T33] ? __pfx_watchdog+0x10/0x10 [ 348.349307][ T33] ? __pfx_kthread+0x10/0x10 [ 348.353924][ T33] ret_from_fork+0x514/0xb70 [ 348.358546][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 348.363681][ T33] ? __switch_to+0xc89/0x1420 [ 348.368408][ T33] ? __pfx_kthread+0x10/0x10 [ 348.373225][ T33] ret_from_fork_asm+0x1a/0x30 [ 348.378035][ T33] [ 348.381259][ T33] Kernel Offset: disabled [ 348.385617][ T33] Rebooting in 86400 seconds..