last executing test programs: 2m29.706774995s ago: executing program 1 (id=529): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @local}}}, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r0, @in6={{0xa, 0x4e20, 0x3e, @mcast2, 0x6}}, [0x3, 0x5, 0x8001, 0x8, 0x9, 0xff, 0x5989, 0x2, 0x3, 0x8, 0x7ff, 0xd, 0x3, 0x9, 0x46000000]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f0000000300)={r4, 0x2}, &(0x7f0000000340)=0x8) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0xe, 0x80000) accept4$bt_l2cap(r5, 0x0, &(0x7f0000000400), 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000440), &(0x7f0000000480)=0x30) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000004c0)=0xbd, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000500)={r4, 0x3, 0x3, 0x8}, &(0x7f0000000540)=0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000006c0)={@remote, @loopback, @loopback, 0x2, 0xd, 0x7, 0x100, 0x109, 0x80100000, r6}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000740)={0x6c0236fa}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f00000007c0)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000800)={r2, @in6={{0xa, 0x4e22, 0x1, @remote, 0xa}}, 0x4e21}, &(0x7f00000008c0)=0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x80400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000940)={'tunl0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000980)={r0, 0x1}, &(0x7f00000009c0)=0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) sendmsg$SOCK_DESTROY(r8, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x300, 0x15, 0x200, 0x70bd2a, 0x25dfdbfe, {0x11, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "aa7aa231610f05f4b9f664cc6109ac226b9f4d4cabf4ccdf0488d8165660932b07de65adddc37b8cc0cbc61dc8539af8c14a3e109fb69f0a48ea7aa81b34cc9cf0322e2c3c4b9cc571c4"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "d847cc6e0209a89b0dfd0556afb566c5e26c74cdb9c3f174126f69a23a6f7d3088cff16fc82ef90474b41033bbf357c34f1df8b117a33cbdf9e7421538b3abd953a72673d05201bd83653c430babf042cb9c433d982d419df998527f118b4e26ed9554c75cbfd1a69777d1b847f2886d3fb531fa510294215e777f0c2e2e9c093961ff6a8a39b0245be9dfa1735d5f895b"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "d842f1c2e96bd32464e5d95068607d4a963b373d5b6d72649a41b490b880290538dedb59630899b064a2600a1d0076429a74309b90232d6e156819ab047067d2ffe0c16e0a341b8d084561349c121332773924e29533fe42c27cf7f260c0f2cc49414795dfb4726d6df28d0b5d99e92394410af827e4524062790ee619d5b47caba298c45c6530bb898ffce451020fd851bc5ce386b328015f020fd3f9fd29fa7d1d236e1979f9624610ee4412d6e887c1797c9eac860d5e0160b1df8bf446b07d6dc05c"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "8cf626f574169213a75ee9093811e09c1d3bd5dd95c12648deb49e82d7b5cbc12d5eebc7282b253f72b479e702dab6044cd6dc4bb84f10137d0c0819ce693a271609c56eeff458c98dc0f5207cca6a191af416628c475e05a2a1d17ec0325959c4002a1654d7894e83ed76898803fba7f777618b52cd815c627550ce6a7b60bf6a0387bcc5012a1828ff67680a6ec000cb09f53bc02b"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "5b1f00401c06b2b380e46f2d36706e1f4abc17e894be6d6c9fdddc8ba6d659309174ab02c75a920ea29480347baf1bbdf95cc368f4aac1147e9c981d827aabda4e21c3a9412072b09c33426898cb8a4e459553793f1a815d73adf98569f8f2c0f39f36482c1fe2959de1be7b73160cf53b5dc5bf0a59afe9e6e829027c499958866999af8d8d0403d69936db59127091da9b05e9b9de768f04e5"}]}, 0x300}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x79}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xf0e, 0x4b}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040050}, 0x20000000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000f80)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xd, &(0x7f0000000fc0)=@raw=[@call={0x85, 0x0, 0x0, 0xb6}, @jmp={0x5, 0x0, 0x4, 0x7, 0x5, 0xfffffffffffffff8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @ldst={0x2, 0x3, 0x2, 0x2, 0x7, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x48}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x0, 0x0, 0x4, 0x7, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}], &(0x7f0000001040)='syzkaller\x00', 0x6, 0x77, &(0x7f0000001080)=""/119, 0x41100, 0x50, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000001100)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x3, 0x9, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[r8, r8, r8, r8, r8, r8, r8, r8], 0x0, 0x10, 0x6}, 0x94) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0d4}, 0x40004) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x9, 0x0, r8, 0x9, '\x00', 0x0, r8, 0x2, 0x5, 0x3}, 0x50) 2m29.520674675s ago: executing program 1 (id=535): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket(0x8, 0x6, 0x9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 2m29.317962286s ago: executing program 1 (id=539): r0 = socket$kcm(0x10, 0x2, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180400000000000000000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xe2, &(0x7f00000003c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000012006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2m28.959258261s ago: executing program 1 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYBLOB="ce3b8d7fd68dd5860a8966a9a4d3a29f523cd7c40560efb71ba110606eece33342cc0ef347447dd612e1124e31ac5a84fb635e8021723c74dd03dd1b7c5cdd1942a3891575c2ddfc32828164bab8347cdb74f99f03cae4dc6e4d68c64589f12fed6faaab8084a1558d4d770e76cfb38a235cb0f4510a1d236a4a4a563e37ddd1fcc2e29ee01dacd292", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x130}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x8, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000001280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000d80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000d40)={&(0x7f00000015c0)=ANY=[@ANYBLOB="4d058d00", @ANYRES16=r3, @ANYBLOB="000327bd7000fddbdf253b00000000000300", @ANYRES32=r4, @ANYBLOB="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"], 0x52c}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8000daef6d13603636e7f8339262f5072b0600d0574332", @ANYRES16=r9, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d00000000000000a60200fe0004000000000009000000037206030303030303080026006c09000008000c006400000008000d0000000000"], 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x3c, r13, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0500000008000000040000000800000001000000", @ANYRES32, @ANYBLOB="000b6e91f6648b4284e863d65c91f42f00000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r16}, 0x50) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r17}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r15}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r18, 0x0, 0xe, 0x0, &(0x7f0000001140)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x0, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400d1}, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xa1}]}]}, 0x30}}, 0x0) 2m28.65886255s ago: executing program 1 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}]}]}]}, 0x30}}, 0x4000890) 2m28.358761058s ago: executing program 1 (id=547): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000400)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000200)) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0x6, 0x3, 0x100000000000000, 0x100000000000000, 0x0, 0x0, 0x98d0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffbffffffffffe, 0x9, 0x0, 0x0, 0x100000007fffffff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34004c5f27939348f0168e8fb54c00000606050040fcffffffffea6aeef11e63477efd", @ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRES8], 0x34}}, 0x44000) 2m13.241234188s ago: executing program 32 (id=547): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000400)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000200)) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0x6, 0x3, 0x100000000000000, 0x100000000000000, 0x0, 0x0, 0x98d0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffbffffffffffe, 0x9, 0x0, 0x0, 0x100000007fffffff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34004c5f27939348f0168e8fb54c00000606050040fcffffffffea6aeef11e63477efd", @ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRES8], 0x34}}, 0x44000) 1m37.73241751s ago: executing program 5 (id=1143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="c2681edd448718000000000000008bd1db5cb31c52041d427300000000000000004648d92faa63c41ee6d49e30b2829b3a537a96750533e10b8d98e89d4e15b8222e2e3ba8c3e43bface8290bcd2493943b78666cb8818bfefbb8ef53c05deeffc88f81dac863f32e2ad0b7c319fcc6042c0c5f141d03f058eea6a21a44a17c1b781474c1670"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m37.537543706s ago: executing program 5 (id=1147): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x51, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r2, &(0x7f0000000180), 0x4000000000001f2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={0x2, 0x5, 0x5, 0x3, 0x7, 0x2, 0x40, 0x5, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x2, 0x2ed8, 0x3, 0x4, 0x3}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r5, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}}}, &(0x7f0000000400)=0x84) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m37.11550659s ago: executing program 5 (id=1152): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r1, &(0x7f0000000240)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r1) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xa, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xe, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xc, &(0x7f00000017c0)=ANY=[], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000018c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) 1m36.132774394s ago: executing program 5 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000016c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1234"}]}]}}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x124}}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x2, 0x6, 0xffffffff, r5}, 0x10) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @empty, @random="5ec57dc8b5aa", @remote}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001600)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1, 0x1}, 0x2c, 0x3, 0x0, 0x0, "66490090c6f50613fd70be2d80118e680c7b9089e22ff0043716cefbccec4e34c2006511ae0de55d7925289adfad0ccd4ca1d0c8e57be7be7e418b0b31bd44ee"}}}}, &(0x7f0000001680)={0x1, 0x3, [0xd75, 0x12b, 0x8b7, 0xbdf]}) ioctl$SIOCX25GCAUSEDIAG(r8, 0x89e6, &(0x7f00000015c0)={0x2, 0xfb}) sendmsg$NFT_BATCH(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f00000002c0)={{}, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m35.819798238s ago: executing program 5 (id=1167): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r0, 0x8004b708, 0x0) 1m35.590866767s ago: executing program 5 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a0104000000f7b35fecadeb53680a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000006c000000060a010400000000000000001800000a0900010073797a30000000004000048020000180070001006374000014000280080001400000000108000240000000001c0001800a00010071756575650000000c96c429b2c97e044a0000000900020073797a3000000000140000001100010000000000000000000200000a"], 0xf4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x850) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000080)={'vlan0\x00', @random="010000201000"}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x536f}, 0x1c, 0x0}}], 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 1m25.53885179s ago: executing program 2 (id=1231): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x400000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000200)="eba64edb586b083bad2fe4ef2cb340ea18e51c0cdcffd1e0861e69e3f8ad394e77aa99e872152242d2feebf9044f9bc398e0c62c7a1336c3bef67d008ff99a490100ff99968f530cc6c0bfcc0b5e91631ed9220c120f88bd39879b93ff3850b795d7aa9ca52fac7baf5ae93b957f5c9e9b93e7f19ec016331e7d6534e7d1babee599d33391feaa40dadb4de665dfa1c5464951a9835ed335cbe05d0da0348d6fcde1baec8ff06a62a4404f015af3254181d006f6f8d8a8bdcaef857a805031939b4b837743de26359995eb706585e7341dfc989dcc16128db6975f4695409ac9a1a920e2d349", 0x0}, 0x20) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x17, 0xffff}, {0xd, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) 1m24.76775342s ago: executing program 2 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002a00000008005800000000000e0001002e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) 1m24.386964196s ago: executing program 2 (id=1236): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) syz_emit_ethernet(0x2cd, &(0x7f0000000c80)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="20fac6a0d72488cd053b6fc0228045db8e4c0fc64fc30406cd414fdb53cd247a6340b06d73f6afdafc5951740f4f4f07bf54dbce756e4eaa"], 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2006, 0x4) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000100)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c800000", @ANYRES16=0x0, @ANYBLOB="0100000000000100000012000000080007000100000008000900000000000800070026ffffff"], 0x2c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00800016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r8, @ANYRES8=r2], &(0x7f0000000a00)='GPL\x00', 0x4000001, 0xde, &(0x7f0000000a40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)=ANY=[@ANYBLOB='..']) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000c00)='ns/ipc\x00') openat$cgroup(r10, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000003c0)=r11) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000400)=r11) socket$inet(0x2, 0x5, 0x8000) 1m23.5032094s ago: executing program 2 (id=1240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@gettaction={0x3c, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000015c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000013c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001400)={'syzkaller0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="18c3cdc55e8a53c1f25ada5500c9bef72f00000000000000ecffff78110000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) (rerun: 32) 1m20.397604417s ago: executing program 33 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a0104000000f7b35fecadeb53680a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000006c000000060a010400000000000000001800000a0900010073797a30000000004000048020000180070001006374000014000280080001400000000108000240000000001c0001800a00010071756575650000000c96c429b2c97e044a0000000900020073797a3000000000140000001100010000000000000000000200000a"], 0xf4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x850) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000080)={'vlan0\x00', @random="010000201000"}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x536f}, 0x1c, 0x0}}], 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 1m20.378018334s ago: executing program 2 (id=1247): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000540)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000480), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "336a3c59cec032da", "ae0a0a37bacb76b3b4fa6e04b8b5a15c343a529f53a1ad50e9f799c2f3906062", "6703af03", "e2e71e22ea5d8b5e"}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) socketpair(0xa, 0x80003, 0x7b, &(0x7f0000000680)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 1m20.165315429s ago: executing program 2 (id=1251): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000200)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240)={r3}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x5, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x3, 0x6}], 0x10, 0x3ff}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000600)=""/185, 0x32, 0xb9, 0x1}, 0x1f) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000005c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000980)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000009c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000c40)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x0, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 1m5.084527315s ago: executing program 34 (id=1251): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000200)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240)={r3}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x5, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x1, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x3, 0x6}], 0x10, 0x3ff}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000600)=""/185, 0x32, 0xb9, 0x1}, 0x1f) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000005c0)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000980)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000009c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000c40)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x0, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 2.992630771s ago: executing program 0 (id=2142): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x18, &(0x7f0000000380)=""/24, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000029000000af05880000000000"], 0x10}}], 0x1, 0x4000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="34000000070001020304050601", 0xd) 2.991196771s ago: executing program 0 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x38}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000640), 0x49) sendmsg$kcm(r2, &(0x7f0000000680)={&(0x7f0000000a40)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="270502001600140005000000000000000600070088a800a88800f90ecf7b704fb64a52390000", 0x26}], 0x1}, 0x4000801) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000140)={r3, &(0x7f0000000180)='\xa5%^-\\/(]--\x00', 0x8080, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x9]}, {0xad72, 0x3d1, 0x80000, 0x8f}}, 0x9, 0x0, 0x0}) (async) close(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0x10, 0x10, &(0x7f00000009c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000a00)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffc}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x2, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f00000004c0)='GPL\x00'}, 0x94) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, 0x0, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000280)={{r7, 0x0, 0x200000, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) recvmmsg(r9, &(0x7f0000000b00), 0x0, 0x192a2568ac3ada45, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, r1, 0xffffd000) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r10, &(0x7f00000006c0), &(0x7f0000000ac0)=0x60) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000003ff000061101400000000009500635f0000e236"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) 2.923060051s ago: executing program 6 (id=2145): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001780)={{r0, &(0x7f0000000040)='^\x00', 0x802, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x4]}, {0x9, 0xfff}}, 0x4d, &(0x7f0000000100), &(0x7f0000000140)=0x1}, 0x5, &(0x7f00000016c0)=[{0x1, 0x5, &(0x7f0000000180)='.!&\x00', &(0x7f00000002c0)="ce2a0597af397e1d8aa683bc47fe9a9cb9bd1b318678f8514e14992d8b7a959abcc357e5e8c3e5c71f9e622cabe83b6d2896bb0d4ae1cab969cbb3bcf0bba4c85a147508fe7e3bd249b3febaced127a04f9f014fc7ccd1f03d78ccc1d5d96ec8900aadb6349908196a8da8a1fca9e8a8315b94f0bd63723f0b98c07924065e6fffeab41ec6ad9b7e011d27eb1b47614fad232276dd937c83ca52ce6e3e", 0x9d, 0x34}, {0x2, 0xc0, &(0x7f0000000380)='batadv0\x00', &(0x7f0000001ec0)="f3d20bc1c0dc39423e14ebdec9506f061b80b77ea656c711f50363aac989c98265118eb25151ce947b2f045e5b217f6868ad7000e3b39ffe038e369ef00f6791f6b7f1dd9339357a5a45fada8f9809cd32a972c469dfaee0dbe04635cab912e0731944c21fef9701538da9a5c0c29744263525cabb387f766e88a416716a04dad7497dcd3f2ccf292f2c1ba494982e4fdd15c22e37c2326229aa4833770ea47f53ff767ecf29ec325ef66d8b9c6f6e8de663e6a2bcb28cf33b4a71b264c9588d482f0ea6bff4dbfe6be31d64dcc27306fa92fcb756b9675a6fd3fb563bfd81f514b016a435f445c3b08c211912931dce8c52de4b386f55e3d7747789a7d3e2c882f3227eaab6f434b10b003f89ed1bd111f0ccd3f699bcc859f9658e325c38833e5516e1157732f6e69e279b7bf94a6e6d45eae93310f34880887041671398e03001f8fcdad4986c8f324915227b20740b2f697dd824a21535c43f0bc2d391194cecbef392626fe791ef4909663b90dae11d3f7e3f1c732c9574f6b49d31db68004ded1bd3f9835121c0c27033423d628268d92e8baf483ef434fd61f03e253536f68fca6a3c7fa67b80fc1983da7b1c10db1de8c1c2a178abab3d5984e56e74b930e487f9fe006a2b4f3c9f3a7e861cd948", 0x1d2, 0x30}, {0x3, 0x1, &(0x7f0000000400)='bridge0\x00', &(0x7f0000000440)="ad55f1ee8b96724bc8f9c170d03083", 0xf, 0x28}, {0x3, 0x41d, &(0x7f0000000480)='nbd\x00', &(0x7f0000000580)="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", 0x1000}, {0x3, 0x4, &(0x7f0000001580)='nbd\x00', &(0x7f00000015c0)="780f1a69a19f1e1249376f4dfe84b392585c505d490a502a38d4e28b527aa2e224b13e6ba58929d8508f7377ab87ea77a38a87547399bd7d852e06604e2cf964b164f978a9d7aa69f5a879d743f53106721433554d3577e2e0293b7fc043db40632ea477226a5e06d51ada5877d1a43a530d6179bf560c4ac431d4fdb0e3370df3df473182bf6984e8e19d4f103caf531df529763fae80dd3179a3dc9924a8b849410c3ec7306271ee7b3a0b467457782eafd79b4c6e044445341f1d912b44d241a4beb04e104faa9e1685e943d424a20d453ca7a1284a1576afc8c3db19b52e1b9394e0c50ace2ac0c0", 0xea}]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'batadv0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001d00)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x4, 0x0, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8000, 0x7800, 0x7, 0x2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x3, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet(0x2, 0x80003, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r4, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r4, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001800)={0x1c, r8, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000100cf83508c63a800b2000000000000004a", @ANYRES32=0x0, @ANYRES8=r9, @ANYRES32=r9, @ANYBLOB="0a0001"], 0x48}}, 0x0) 2.873268519s ago: executing program 4 (id=2146): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000103010000000000000000000a0000000c000200000000010000000134000a00ff007e0000080040fe8000000000000000000000000000aafe800000000000"], 0x54}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r1], 0xb0}, 0x4008cd0) 2.782858616s ago: executing program 0 (id=2147): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x10000040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000500)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000580)="cd", 0x1, 0x8010, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000600)=ANY=[], 0x9) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket(0x11, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101402, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r5, &(0x7f0000000940), &(0x7f0000000980)=@udp6=r6, 0x3}, 0x20) (async) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000780)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) (async) sendmmsg(r8, &(0x7f00000007c0)=[{{&(0x7f0000000800)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x10}}], 0x1, 0x4044c50) (async) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x17, r7, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x400c010) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) write(r3, &(0x7f0000000300)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f00000004c0), 0x6) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4081}, 0x80) 2.777595615s ago: executing program 6 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000100)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @dev, 0x0}, &(0x7f00000001c0)=0xc) connect$packet(r1, &(0x7f0000000200)={0x11, 0xc, r3, 0x1, 0x6}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newsa={0x160, 0x10, 0x1, 0x4, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x3503, 0xa, 0x1, 0x0, 0xcd}, [@sa_dir={0x5, 0x21, 0x1}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2b, 0x0, 0xb}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x160}}, 0x0) 2.731338484s ago: executing program 4 (id=2150): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000440)=0xa, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000003008d4d99ca201bf5b491e8ab8c342c1bc0000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.671290267s ago: executing program 6 (id=2151): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f0000000600)='^{\x00', 0x4840, &(0x7f0000000640)={@align=0x4, {0x4, 0x10, 0xfffffe9d, 0x4}}, 0x5, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="b4100000000000006111380000000000b7080000000000007b8af8ff0000020000000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000c00000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xcf, &(0x7f00000002c0)=""/207, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2061, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'vcan0\x00', 0xffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=@newtaction={0x94, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x80, 0x1, [@m_csum={0x7c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x31, 0x6, "c184ed7884fd553fc14fb29515a72b7078a6fcf617fc1781f6f41a9e02771a92a8d4048247af86a2b169d5f85a"}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f, 0x30]}}, 0x0, 0x29}, 0x20) getsockopt$inet_opts(r9, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000140)=0x10) r10 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000c40)={0x0, 0x24, "ce7f0917a67457b8c0200b85911d17cf5a0c79dae2ce973c826946af88d1d96e38b13725"}, &(0x7f0000000c80)=0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000cc0)={r11, 0x1}, &(0x7f0000000d00)=0x8) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000e80)=@deltaction={0x178, 0x31, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1903}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffbff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2a1d}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6a0}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3f}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x222f}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x178}}, 0x20000801) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8ca}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000d40)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r14, @ANYBLOB="00000000000000002c001a000600000002000000200005801c000180080001000100000008000200", @ANYBLOB="c3d85588a8e3493233b70a6e5c385c6a3d6a0d2ac649757b6361604a8eaa187e85449ccedb0c382ac016fdcfa7c697aaef14d35973f01d6a5d25b651327e712860361c7791d1ac4ac08a4ff889215d4846bbfa9811e5fc2a616e6be2d3becdc62f785315e7b1452d5cbf5d1dbbd8604bfe5a976058f93d2e940501ab47431ac0e702e7f84a1f07d13cd93c81bf19e3f58e6b71100f4da6d165e0a595ac7d6a39dddf5724886119cddfda5c79c5fa2e913f1247", @ANYBLOB="080003"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x7a, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) 2.634440991s ago: executing program 6 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) 2.49514456s ago: executing program 6 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000240)=0x7fff, 0x4) 2.441917702s ago: executing program 4 (id=2156): r0 = socket(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000b40)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x401, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in6=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}}}, @sadb_x_sec_ctx={0x1, 0x18, 0x6, 0x4}]}, 0xa8}}, 0x0) write(r0, &(0x7f0000000040)="1400000052050000d28d3a28d9fdfd53db9727a2f21e62e08efda7f1e81111caca97c1a8b6b49f514687d2b99d7a478055bd8cbe329446fd64f8fe1d09603b4d6364f6fc0a1d71d3778015c139f2c7db4b7d65678a7cfafa741f6d8a6ac6fa0d90985925b9abd5df4becf8f3ba6ad042b25af1fdc36a3912d185a4e2b2af867c43e795482a65b9fe21a1c2e0aa25d6178d79e82b6926e30ad2904af7c6ac1644297db4c037bcb28e678eb8c83531e76ea8740ae48d9a7e6515791aa4ed2bca4cd3592fbcd6d4df9378732abd4c1359942e47b20000000000000000000000000089f9db8926ad5b376d2174a447416214fadd6cee8817b4288b0f8c300b835db21f321629a6151d04e475b6a4296c540badfd6f7a869d1217c12ebf8a1d66a1512fe5de0c1c4da2e46f2ef07f756eaf5f53ebc0c8de2b204fce7e92da012756f189181ebb3632b43ab7a8d76e01bd5d11a903febbf021349295cf5a264fb0c4bdd177310f4359c0e70c6d404f0b13", 0x16e) (async) write(r0, &(0x7f0000000040)="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", 0x16e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0) (async) recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000a00)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000800)=0x6, 0x4) pipe(&(0x7f0000000840)) (async) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0xf) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x8002, 0xa0, &(0x7f0000000400)=""/160, 0x41100, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0xfffffffe, 0x8, 0x5b, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r7, r8], &(0x7f0000000940)=[{0x3, 0x2, 0xc, 0x9}, {0x0, 0x4, 0xa}, {0x0, 0x4, 0x40008, 0x2}], 0x10, 0xfff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x8002, 0xa0, &(0x7f0000000400)=""/160, 0x41100, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0xfffffffe, 0x8, 0x5b, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r7, r8], &(0x7f0000000940)=[{0x3, 0x2, 0xc, 0x9}, {0x0, 0x4, 0xa}, {0x0, 0x4, 0x40008, 0x2}], 0x10, 0xfff}, 0x94) 2.349860503s ago: executing program 6 (id=2157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x20, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0xb, 0x5, 0x3, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x73}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0xbe9}, @jmp={0x5, 0x0, 0xb, 0xa, 0x4, 0xfffffffffffffff0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x100, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001180)=[0x1, 0xffffffffffffffff], &(0x7f00000011c0)=[{0x5, 0x4, 0xe, 0x4}, {0x3, 0x3, 0xa, 0xb}, {0x1, 0x1, 0x0, 0x4}, {0x1, 0x4, 0x0, 0xa}], 0x10, 0x9}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000012c0)={0x3, 0x7, 0x1}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001540)={'sit0\x00', &(0x7f0000001500)={'gretap0\x00', 0x0, 0x7, 0x40, 0xfffff000, 0x1, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0xb, 0xa, [@multicast1, @local]}]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000015c0)={0x1, 0x0}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_lsm={0x1d, 0x8, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0x9, 0xb, 0x1, 0x4, 0x10}]}, &(0x7f00000013c0)='GPL\x00', 0x6, 0xd9, &(0x7f0000001400)=""/217, 0x41000, 0xe, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001580)={0x0, 0x8, 0xe8, 0x9}, 0x10, r3, 0x0, 0x3, 0x0, &(0x7f0000001600)=[{0x5, 0x2, 0xd, 0x6}, {0x3, 0x4, 0xa, 0xb}, {0x0, 0x2, 0x8, 0x3}], 0x10, 0xfffffffb}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000001840)={&(0x7f0000001700), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, r6, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x41}}}}, ["", "", "", ""]}, 0x28}}, 0x8c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000001980)={r4, &(0x7f0000001880)='GPL\x00', 0x101c80, &(0x7f00000018c0)={@align=0x1, {0xf, 0x3, 0x81}}, 0x1, &(0x7f0000001900), &(0x7f0000001940)=0x4}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe39}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe9f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000043}, 0x40) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000001ac0)={0x0, @empty, 0x4e24, 0x4, 'ovf\x00', 0x5, 0x1, 0x43}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000001d40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x174, r6, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ce7e1ced935f"}, @NL80211_ATTR_KEYS={0x140, 0x51, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "79471ebe80dec627252cdfa965"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "531049337b9ef7b4ba0ff0e3c3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, 'o'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f0350154f9"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d18b47885e51a9d11ac4e4863f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8c9d6273cd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "79f6846a5b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xd8}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x14, 0x4, "c816e78361391ab80f09456131f2308e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4040}, 0x48801) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@arena={0x21, 0x0, 0x0, 0x35, 0x400, r8, 0x9, '\x00', r2, r8, 0x5, 0x2}, 0x50) (async) r10 = accept4(r8, &(0x7f0000001e00)=@nfc_llcp, &(0x7f0000001e80)=0x80, 0x0) getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000001ec0), &(0x7f0000001f00)=0x8) getsockname$l2tp6(r10, &(0x7f0000001f40)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001f80)=0x20) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002000), r8) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000508}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x30, r12, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1d33}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24000801) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000002100)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000002bc0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b80)={&(0x7f00000021c0)={0x980, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_FRAME={0x437, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @random="4a9d9b485161", @broadcast, @random="f1b4e38033ad", {0x8, 0xfff}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="21c685c2c985ac50e50bb96f729ed26579eb27a7543430169c24f0239f0e29ef497ccfe69f547e9f36279b252f68a0c055816f4e1473cfbb3ed213ad6de1036df16cbde6350232741a0c6bcea934be6598fbab39f84b3d98c6484d2bd1502bac05a760829120de982067e427525f482f8945b73daa3f00275241fb2a416da4f6fcef0c1c2fef26bf18a5d5712f3748681f85bfd55a96f003b34e8b97ebe7662a610ed8e9d0c2c15303d14f2022b139b00ba7637dfd939cd096167c2e90769fcfabcfb2cfc70ab7fed84c89d73097400a5db2ff6909c30c5caf6e54dc62853433045104dfbc4a61f320e8b9e975ec01cbe9ccd5ec90f8641415d7be1a1f971ef6e67c16fbfc0ea2d1e986882cfe97deefdfe2c9be0e8da83405df317e4ccc85208dc50ba9311f84d3b4116826e29f47fe73157587f2476285b6f1381eb976172299c9f75e40f05513fc46670c3a42aea19add206521cd9915de870010cd0bc25af57053c42c014984d3f1fd3e1fcbe072c7b01dc1e6adfbff514f869a712ac1b1f35ec46886a65306689906ee38e548293081ebf4969301ecc8b55cd9a15808352de013047f71417443ad96ad3fd7174a571476bac1515565d1814a7cba289397a7009f3403da26eef228888d77bb7a13fc909d5f8b5708e90e82332e778561bf294eb25443a4e19416d9de72a9b6f5071f38109d4fe6458d3083b3e734ef840f5a0ccb6cfb35c728eb9a624ea44d4af92a2a5cb6c5008be3c25b47e665fcbaed8aa452c53d7c2150648c639fcd88771540cfd40fb1f9a3bc9087bf513b2c3ce247c47621019c67fbd1a8a51c9eec237e4666d8e544b73692a63d7cabbfd8d8d06720a0e9eace1d7f2197f673afa0703c451c18a7f85c18e6a8c4159c4c49bb2aee9696bc16654d3126ec74b60211eb173262acd9dc556192d87b4774cf3b523996ed6720f6c8071cf83483060e5fbda030d8190c50bc0907bc90d968fe6b831df2b79607daa0ea76cdb6a89cdb03581cdc5e3d49730401792fed53c9fb1bb2760209adcc4fb116208fe3f36266c0ee8144e9230ceb34a895e3a171ca590fe05716f822e05f113a495e7fa3d6996d9f90b6be8ac80098065e3f68c9f2c4441df5c9ddfa24c07cff632f4c33787ea506189f890d5b884ad8d1beb868c52501bc7c6645ae915a13edc4a54a70353d3df825af1cb1071a65b07cd28fc3c4b3bde209fb5d61d4f4e6881f182e697b439ec8b8b331deaf769302235e5315424035c0fe0151c649c67d30ccf711ebf73b94472e3f631e880378ea04225f0b2e2c1a3484e129c1edc931695ed83f8881b77edded16b65389ee90dee5a3f9445111d1b9b311839d460e9a41dcf9bacff833dedd4bcd0f797db5d69f3bc5535019c79db54c7aa1c6c4efc70a691236dc8baf4345e2f8edfd4360509edfd5ecbd95bb6ef51b6258eea37d2ca9eb42794eb0a1715a386b8cb2e432b577"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x4}, @broadcast, @from_mac=@device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x4bd, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @broadcast, @device_b, @initial, {0x1, 0x7}, @value=@ver_80211n={0x0, 0x78, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x80, 0x10, @random=0x2, @void, @void, [{0xdd, 0xba, "2b98e366afc2f3e3cbb74b01cdd56078436a39c054b762272477778ff3b6851f256b74bbacc87ba91a50987aebb90f05a5ffc30f9b55eb485a8f4f450db79f3e570b10007d9a6df4f1820dffd0292b96a32681eaa10e561c42ef08cce164cb8fe20207c6283a09532bb2b5e7ae277aa319515ae3e45aaaacc7017cdbd05f0ef40c686d971359f2ccf5790f26f47c653e5f8634667c1be14c1c258f4cef02948d841c2b44c27345d8615749e0a5ce9f6692a4a0b6e6da91f05c60"}, {0xdd, 0x6b, "33338c3793e9f6f1d9c6e16bec61a9198a5ec886a7ffc2901c6784225d711fd4d7574210b2e9fe9eea2fcb13c3520410bd4389454341ce04e126a2ac30f380ea2f7bd4a3d3e4fa97aed993747e162cdb6b607f660469a21f188818e48734b1467c66bb8b302ede0ac4eca0"}, {0xdd, 0x81, "26aba4be9f85d6e8464b6f8d2f67fc5a93d74d8d04ec2d1fdc3d04d02ee622480276ec6616d2592e6f5393ddad29b2810e509672f213d3f378fb8c0692b0891d4830ffedcf08cc072a253368366d5f379611701443d483af32236ddc612ba4ef939124e8fc85eb4e119158aa049daf2c20aa91c273d9a1632d204b14152bf9705c"}, {0xdd, 0xb1, "49632457f197138d0d7517a3c4816b928e2d9c0eb3ecc3664133a142ae48207794ddd573bfe2ae6f814f6008c301072ddcf53093423cdecc08f57c95ddab87bb89f887bfb4a69a482ef8170ae25a034be6b0cc3bc896f921d4e104497ae727b4f79e09e1ca5d1259d773d9ae7d7eb9bc60e946f3143f4a2b0432ee63e828297bdf5b2b4f76383c6a1062b270cfa13451fb811472ff7a28d89f2d1f098eeaeb736284b6799a3d53d3482c7375a5076c0891"}, {0xdd, 0xd8, "de324676a86574b44ee4b10eb55d4d9347305eb32b09281910ffb51f133a7c88b4f2a1dd828606da234f2175b94398924a880eb536f17be9fd4a3162400896ebcbabfe4d9c87aaaefc49d628659a5a8b043c7768570433c551c127f9614b6bea7f2ba167b9bf2aff51ebfc0fabe0877ff30d976f2d43b07d130d571583fc4a6d8718d57a64fa5e87fc3f66468d6329960f5e1d2be82d84c985df3f143fa623cc8128ec72aa8541f8afb0f969dd8b508222a328ea7d34985e6cad1bb4ec8a8700d2a423f3c4c3d483c707dd824308e8088331a6cf4d62a40d"}, {0xdd, 0xbe, "6b8b914429ed6067077dd4b4b6818de4bd963ec2e277e0a1cb84cf21a0f4bd66c0173668b0114916e648c6439f511068ec6f961958e0f6ba5f5b309926fbcb4b6c9ae68c2c9e0c1cfe1848a74ec4b5bd54a4e922c3d42480d0447fe199b270dd2562e76275d04f593d9b593a7d60e9b048349937053f5e88ab774f08b9ff93bbc93b398dd38791420918e0227cf651aff6012e539610b393d7d519f7c110c2003fe32e8fbaa260e9f99bd232430e37f6549a6f4a5cfee0c3da1813277e32"}, {0xdd, 0x9c, "202ec756b75b733356e29ee125ef5f897864fd156495b5f9e8c128057a1b4388977a9a036fe509691d1f7746a78d25af91c1fe47e28113a54325cb9884cf35ba77739b2b4462fdafc5caf782b9bf7b0a631350f9d087a995ff94df971184d8cb6e62798b78710276ac88199b871b725e5e2017330e23a3ed5a2274c01e0bcdc9d5b5892e972b22bf924994814f24462ac7c5350264da762d60cab876"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x9}, @device_a, @broadcast}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x980}, 0x1, 0x0, 0x0, 0x8c101}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000002dc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002c80)={0xc8, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xd, 0x4}, {0xa5, 0x2}, {0x3, 0x6}], "ef1f047e2dea5ffb"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x6}, {0x2, 0x1}, {0x40, 0x7}, {0x81, 0x3}, {0xe9, 0x4}, {0x5, 0x1}, {0x6, 0x1}], "5dd538dcab5a079e"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe, 0x2}, {0x9, 0x6}, {0x6, 0x5}, {0x80, 0x5}, {0x7f, 0x4}, {0x95, 0x2}, {0xa, 0x6}, {0x5, 0x4}, {0x9, 0x1}, {0x4, 0x7}, {0x6}, {0xc, 0x1}, {0x9}, {0x1, 0x4}, {0xf7, 0x4}, {0x7b, 0x7}], "777f89272980391f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd, 0x2}, {0x4, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0xfc, 0x2}, {0x6, 0x4}, {0x46, 0x2}, {0x6, 0x2}, {0x16, 0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x4}], "09ce971b095f788b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xaf, 0x6}, {0x5, 0x2}, {0x9, 0x3}, {0x8, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4f, 0x4}], "baa5066f6af508a2"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) (async) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000002e00)=0xf1dc, &(0x7f0000002e40)=0x4) sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000002f80)='erspan0\x00', 0x10) 1.930907795s ago: executing program 3 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4122, 0x101a}, {&(0x7f0000001600)=""/4084, 0xff4}], 0x2}, 0x900000}], 0x6, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000027c0)={0x6, 0x1d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002600)='syzkaller\x00', 0x5, 0x82, &(0x7f0000002640)=""/130, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002700)={0x0, 0x6, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002740)=[0x1], &(0x7f0000002780)=[{0x5, 0x1, 0xd, 0x1}], 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002880)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000028c0)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002ac0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0xfffffffe, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002b40)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000002b80)={&(0x7f0000002bc0)=@xdp={0x2c, 0x7, r7, 0x7}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002c80)="1a", 0x1}], 0x1}, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.827654998s ago: executing program 0 (id=2166): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x37dc}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) 1.670930455s ago: executing program 3 (id=2167): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x1c, 0x6a, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xa0) 1.670375274s ago: executing program 7 (id=2168): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.662859223s ago: executing program 3 (id=2169): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000100)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a000100000002002000000080000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000180640fc010000001000000000000000000000ff0200000000000000000000000000014e224e22", @ANYRES32=0x1000, @ANYRES32=0x41424344, @ANYBLOB="6010"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000340)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000f060104000000000000000007000004050001000700000006000b00ffff0000559d056bc9cdd93c82567751110b20cf31ec954768a7ec618221fc8bddcbe877b25f76ded335afe572bfbd42e6a125d6d687853655"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000f060104000000000000000007000004050001000700000006000b00ffff0000559d056bc9cdd93c82567751110b20cf31ec954768a7ec618221fc8bddcbe877b25f76ded335afe572bfbd42e6a125d6d687853655"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) write(r4, &(0x7f0000000140)="6000000041000901020000000000000001017df40ea433b1cfc8703fc5910d5a00002a0000002c00dd99a5fb7f8fea44010010000400001000000000000000000000060006bd080000001000df7401010101020202020000ffff1c0000000000", 0x60) (async) write(r4, &(0x7f0000000140)="6000000041000901020000000000000001017df40ea433b1cfc8703fc5910d5a00002a0000002c00dd99a5fb7f8fea44010010000400001000000000000000000000060006bd080000001000df7401010101020202020000ffff1c0000000000", 0x60) 1.506851573s ago: executing program 7 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000340)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000dc0)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000bc0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000c80)={r5, @in6={{0xa, 0x4e24, 0x6f, @mcast1, 0x1}}, [0x1, 0xfffffffffffffff7, 0x0, 0xffffffffffffffff, 0x32a3, 0x0, 0xc, 0x0, 0x1, 0xb, 0x1, 0x3, 0x800, 0x7fffffffffffffff, 0x9]}, &(0x7f0000000d80)=0x100) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000100)=""/205, &(0x7f0000000200)=0xcd) 1.368250035s ago: executing program 3 (id=2171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x1, 0x1, 0xbb, 0x8}}}}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000007c0)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@delchain={0x78, 0x65, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x10, 0xfff3}, {0x5, 0xfff3}}, [@f_tcindex={{0xc}, {0x48, 0x2, [@TCA_TCINDEX_ACT={0x44, 0x7, [@m_xt={0x40, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x15, 0x6, "5bd488c315fb7c2f3327c716fd7d863b47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48041}, 0x800) (async) sendmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[], 0x4640}, 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b701000000000000731af8ff0000000079a2f8ff00000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x3e8, &(0x7f0000000200)=""/1000, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000006c0)={r0, &(0x7f00000001c0)=')[\x00', 0x0, &(0x7f0000000600)={@_ha_fsid={[0x3713982a, 0x3]}, {0x2, 0x0, 0x95e9, 0x100000001}}, 0x5, &(0x7f0000000640), &(0x7f0000000680)}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000740)={0xb1f, 0x38, '\x00', 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet_tcp(0x2, 0x1, 0x0) 1.351240282s ago: executing program 7 (id=2172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, r2, 0x705, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004844) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f00000111db66021c"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00'}) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@canfd={{0x1, 0x0, 0x1}, 0x32, 0x1, 0x0, 0x0, "9254f18dacfb7a08740fae1b0e534a91cd851d43eda02624bf39959b57ae8e53157d7fb47bc3abb4d224d6691bfeb96c08d34526ecf3aa5b6b9dbcd82cc04c7a"}, 0x48}, 0x1, 0x0, 0x0, 0x4004084}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x80, 0x0, 0x9, 0x4, [0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB="b79d8d35b1c341c65bb58317c08dcd8d5f6ee82edcdf062034b67ceeb7edd21b5111caebaaab4712a1be2d229d2420bfdde7972ddcd064fe962db2a4f44f4ae732663bfd177f84ff2691fb754a8388fcde3666af191a33448a2d8a53b78052f6dacc9aad79471855fd9ae87a18486f2e72e19b23887ded"], 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB="b79d8d35b1c341c65bb58317c08dcd8d5f6ee82edcdf062034b67ceeb7edd21b5111caebaaab4712a1be2d229d2420bfdde7972ddcd064fe962db2a4f44f4ae732663bfd177f84ff2691fb754a8388fcde3666af191a33448a2d8a53b78052f6dacc9aad79471855fd9ae87a18486f2e72e19b23887ded"], 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="30000000130009cce10bcbd50700"/25, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r9, @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r11, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4c045) 1.236916643s ago: executing program 4 (id=2173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000180)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000002e308110000", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) 613.080892ms ago: executing program 7 (id=2174): syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[], 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x11}, @void, @mpls={[{}, {0x2e}, {0x3}, {0x5}, {0x3, 0x0, 0x1}, {}, {0x100}, {0x2, 0x0, 0x1}], @ipv4=@dccp={{0x12, 0x4, 0x3, 0x18, 0x100, 0x66, 0x0, 0x3, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@lsrr={0x83, 0x13, 0xf6, [@empty, @broadcast, @empty, @broadcast]}, @end, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}]}, @rr={0x7, 0x13, 0x44, [@remote, @multicast1, @rand_addr=0x64010101, @remote]}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x6, 0x2, "9a788b", 0x9, "a642a3"}, "9ad19119f3d57200fb5d63be3ac14101f2e75a5dfb820c7d78bde22c6ddc4389fa6687ee44d73d535e96b18e500d2d97253717946f90735c29d904c8f453844ab12523b89e915adf67ec720ba731497e9e6ab17fccbcc233f8bf2feac313e536acafd8b5414e86f98af365262f624bb3d0e896ceae6cdfb04dd09f34e38c2feaa295610cc8a4f59c99ab9ac3905ea01d51f307de5fe5e905d621087bc9658beb37fd2b78789cdfc1"}}}}, 0x124) 488.256642ms ago: executing program 7 (id=2175): unshare(0x4000400) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 364.227063ms ago: executing program 4 (id=2176): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x84, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000580)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000c00)=0xc000000, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x204a0010}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c40)={0x60, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x16}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x20000001}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x60}}, 0x800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x2, &(0x7f0000000b80)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000400), &(0x7f0000000440)=r9}, 0x20) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r12, 0xfffffffffffffffe, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, 0x0) ioctl$TUNSETOWNER(r11, 0x400454cc, r13) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000600)={{{@in=@broadcast, @in=@remote, 0x4e23, 0x8, 0x4e22, 0x7, 0x2, 0x30, 0x80, 0x2c, 0x0, r13}, {0x4, 0x1, 0x2cb, 0xffffffffffffff3d, 0x8, 0x3, 0xeb86, 0x8000000000000001}, {0x40, 0x9, 0x9, 0x8}, 0x6, 0x6e6bb8, 0x1, 0x0, 0x1, 0x2}, {{@in6=@private1, 0x4d5, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x3, 0x3, 0x39c, 0x4, 0xbad}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000500)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="400148c3"], 0x87) 299.133696ms ago: executing program 0 (id=2177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24080045) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000007c0), 0x10) 298.039555ms ago: executing program 3 (id=2178): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x2c91, 0x4) sendmsg$sock(r1, &(0x7f0000000380)={&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x4000040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000500)=0xffffffffffffffaa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={r4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x20006, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x1}, 0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000480)={r5, 0x4}, &(0x7f00000004c0)=0x8) sendto$inet6(r0, &(0x7f0000000000)='/', 0x1, 0x4008840, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x80000000}, 0x1c) 171.452399ms ago: executing program 7 (id=2179): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000a40)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000a80)=0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000ac0)=@assoc_value={0x0}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000b80)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000bc0)={r3, 0xffffffffffffffff, 0x800}, &(0x7f0000000c00)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x1, 0x12) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000900)={{r4, &(0x7f0000000100)='cgroup.procs\x00', 0x80500, &(0x7f0000000140)={@align=0xfffffffffffffffc, {0x29, 0x3, 0x80000000, 0x5}}, 0x7033, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x4}, 0x7, &(0x7f0000000800)=[{0x2, 0x7, &(0x7f0000000240)='^\\(\'%\x00', &(0x7f0000000280)="aff1034cd59ba991697b160c02e602f9cce800ec5c860de67888a8258f7db7ad847dad7d92ecb61abf1d55cee45f99a7ad13326a3deb19a23c880a49aa05dd575e8b269921c4620deb38f43fba9eea9cbd72e2f6fe83aeb7c7471bcfb978119a9f02e497df401b8bc73c85", 0x6b}, {0x3, 0xd108, &(0x7f0000000300)='\\#$&\x00', &(0x7f0000000380)="204ee2d05e06a96dfaefaa4e912b9a9e891ac79a0cd5d0f82a4b671ba2", 0x1d}, {0x1, 0x9, &(0x7f00000003c0)='./cgroup.net/syz1\x00', &(0x7f0000000400)="fe7b6137c1be3d5ef674284f19e170c36fcd88c02793337d4153304f024d2c52746bf7af4d9247bde35f5b4f815c6838d8a10362d3062ec83a9a85859820277231279f9a1f1509f67d8aeeeaa4770d6bcf370dfcbfc5bfdf25e5dc2606b089a88abd5ac941ed3dd50b7e9abf090880376f473dfbaadfca512fcdbb3e0632623e76cb9df845bc0ba066c18648888bfc2dfc7cd18ac792923de7e6a6674c4591b1b0a0c9b6a347b63bef7a692c4665a55a579784ddded9774e35", 0xb9, 0x2c}, {0x3, 0xca, &(0x7f00000004c0)='/{{\x00', &(0x7f0000000500)="94e1806c3bc26f90d62b15ad30d0326194c672779f177f85ea", 0x19}, {0x3, 0x6, &(0x7f0000000540)='ip6gre0\x00', &(0x7f0000000580), 0x0, 0x18}, {0x5, 0x7fff, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="d9ade1c6797b09e8fbf59bae3e4dc7cb15d0854894594cf431c66f0b6cc8bbbd377e73fd069239e0bb693313d44696f0964cec5f29f509c5175cda33946e0f2c366937d269d9b8e82851cfb3dfdcf601764232647a9588bd570913c661b112470ab07727cb0bf4a8ba10171eadbc85a7ff3ad5be5fcb97dfc3db7ba2cba996d8a9b321e03a42191ce0c3a62db934bb626918a3ebb241d01f2c026e562ffcba3f09bc0b5918b7d9581b3470", 0xab, 0x10}, {0x1, 0x6, &(0x7f00000006c0)='\'-Q\x00', &(0x7f0000000700)="64f7184d304e3f84113f1a631cca860eebe4789b1bb07c66601be0a996c6f853f15e6772c095ec09ec3b8e287041abc667c53da4732121dba12fcc19d39d8b150aa7a386840f62484b2397c4401ced633665aef96ba221fefb77638044912cfb82f371a27aa7910a496fe50977bdb0cef77dc9ecaa8f5874e89f5f2e83958a47d4d16835bb998c973f374682d2ab6b3d1c98eb915d37dc01fb3697e02ad8ea58f2aa8fc8cf1a0d9b38ab6f4c7647418e96d9939e889b5ac7b086bdde5a3dca6bf89ce35e", 0xc4, 0xa}]}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) write$cgroup_devices(r7, &(0x7f0000000980)={'a', ' *:* ', 'rm\x00'}, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x8994, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 96.333598ms ago: executing program 0 (id=2180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)={0x2, 0xffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xf1, "267107fe3c9847543ebc9e299e3db270f5a650831688f2ffd990b9d8e18e4654dbcc81cec78f6d2623efa5f6347f99e874fddc2bf34e12813deb7153821f0ea8a6bb544c0f6e4b95b2fcff08839f6fb2c29c70785dc2252fc41a7e978aad77097c16fe32da9ca38908842b0f3a9e85ed3ce040c6157622e9d83bced77347a759aab1d1985d853013cf2dad52b1df436c80e3da9e02d1ddbfdf5d0ff4c0a57059d0aa5cf24912690bb5356b9da50dba43ff66cddae01051ac9c412bf63332fe5f930cfc98c809734d7b93b572bdbe8d3301fcdd8e3d17201f11fc7529957625e5d60b32c9e57e25778cbcce446c5a2fdee1"}, &(0x7f00000001c0)=0xf9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071117b000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) 11.943526ms ago: executing program 3 (id=2181): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) 0s ago: executing program 4 (id=2182): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000340)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @local, r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fbdb63df253f0000001c00ffffffffffffff7f000008000000bb060000000000000000003f375d83adafde9cfc4951e1530af356b8ba1c4ccd3ed14596091aa7dcda569c7159b871b4347b01ee8c7d90c7"], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x4000001) kernel console output (not intermixed with test programs): after_hwframe+0x77/0x7f [ 113.513599][ T7362] ? clear_bhb_loop+0x70/0xc0 [ 113.513618][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.513633][ T7362] RIP: 0033:0x7fdf0a39e1d9 [ 113.513658][ T7362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.513670][ T7362] RSP: 002b:00007fdf0b343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 113.513691][ T7362] RAX: ffffffffffffffda RBX: 00007fdf0a625fa0 RCX: 00007fdf0a39e1d9 [ 113.513701][ T7362] RDX: 0000000002000002 RSI: 0000000000c00000 RDI: 0000200000000000 [ 113.513711][ T7362] RBP: 00007fdf0b343090 R08: ffffffffffffffff R09: 00000000aba00000 [ 113.513721][ T7362] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000002 [ 113.513730][ T7362] R13: 00007fdf0a626038 R14: 00007fdf0a625fa0 R15: 00007ffcc9b25f68 [ 113.513758][ T7362] [ 113.607384][ T7360] gretap0: entered promiscuous mode [ 113.630447][ T7360] 0ªî{X¹¦: renamed from gretap0 [ 113.652694][ T7360] 0ªî{X¹¦: left promiscuous mode [ 113.652714][ T7360] 0ªî{X¹¦: entered allmulticast mode [ 113.661491][ T7360] net_ratelimit: 62 callbacks suppressed [ 113.661508][ T7360] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 113.869912][ T564] IPVS: starting estimator thread 0... [ 113.957583][ T7376] IPVS: using max 41 ests per chain, 98400 per kthread [ 113.958327][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.958498][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.963202][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.963367][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.963856][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.963992][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.964127][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.964261][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 113.964391][ T7378] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 114.287959][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.447518][ T7368] warning: `syz.1.430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.326690][ T5627] Bluetooth: hci4: command 0x0405 tx timeout [ 118.002082][ T7456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.005895][ T7506] validate_nla: 25 callbacks suppressed [ 118.005912][ T7506] netlink: 'syz.3.457': attribute type 9 has an invalid length. [ 118.140827][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.413471][ T7531] __nla_validate_parse: 102 callbacks suppressed [ 118.413491][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 118.447512][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 118.467949][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 118.467970][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 118.609808][ T7537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.465'. [ 118.821492][ T5627] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 118.841587][ T7546] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 118.843823][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 118.844645][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 118.884384][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 118.884418][ T7550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.468'. [ 118.938975][ T7557] netlink: 'syz.2.468': attribute type 12 has an invalid length. [ 119.103796][ T7565] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 119.103974][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 119.108781][ T7532] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 119.234670][ T7565] bond2: entered promiscuous mode [ 119.237849][ T7565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.297797][ T7565] bond2: (slave bridge3): making interface the new active one [ 119.297822][ T7565] bridge3: entered promiscuous mode [ 119.299418][ T7565] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 119.322636][ T7580] netlink: 'syz.0.474': attribute type 2 has an invalid length. [ 119.505091][ T7588] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 119.643584][ T7600] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 119.919315][ T7617] gretap0: entered promiscuous mode [ 119.934776][ T7617] 0ªî{X¹¦: renamed from gretap0 [ 119.945740][ T7617] 0ªî{X¹¦: left promiscuous mode [ 119.945761][ T7617] 0ªî{X¹¦: entered allmulticast mode [ 119.955373][ T7617] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 120.035266][ T7617] syzkaller0: entered promiscuous mode [ 120.035298][ T7617] syzkaller0: entered allmulticast mode [ 120.310014][ T7639] syzkaller0: entered promiscuous mode [ 120.310037][ T7639] syzkaller0: entered allmulticast mode [ 120.366013][ T7643] 8021q: VLANs not supported on sit0 [ 120.612171][ T7664] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 120.613706][ T7664] batman_adv: batadv0: Adding interface: gretap0 [ 120.613721][ T7664] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.613747][ T7664] batman_adv: batadv0: Interface activated: gretap0 [ 120.683767][ T7416] IPVS: starting estimator thread 0... [ 120.767966][ T7671] IPVS: using max 35 ests per chain, 84000 per kthread [ 121.352627][ T7685] netlink: 'syz.1.506': attribute type 11 has an invalid length. [ 121.462387][ T7689] ieee802154 phy1 wpan1: encryption failed: -22 [ 121.511437][ T7693] ip_tables: iptables: counters copy to user failed while replacing table [ 121.625478][ T7697] bond2: entered promiscuous mode [ 121.625538][ T7697] bond2: entered allmulticast mode [ 121.625859][ T7697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.809348][ T7713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.920711][ T7727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.202968][ T7752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.202985][ T7752] IPv6: NLM_F_CREATE should be set when creating new route [ 122.254366][ T7752] openvswitch: netlink: Tunnel attr 12295 out of range max 16 [ 122.461924][ T7766] xt_CT: No such helper "snmp_trap" [ 122.839814][ T7808] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 122.975313][ T7817] bridge0: port 1(veth1_to_bridge) entered blocking state [ 122.976081][ T7817] bridge0: port 1(veth1_to_bridge) entered disabled state [ 122.992265][ T7817] veth1_to_bridge: entered allmulticast mode [ 123.025941][ T7817] veth1_to_bridge: entered promiscuous mode [ 123.166330][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.180291][ T7826] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 123.283271][ T7413] IPVS: starting estimator thread 0... [ 123.503912][ T7833] IPVS: using max 32 ests per chain, 76800 per kthread [ 123.562849][ T7816] infiniband syz0: set active [ 123.562870][ T7816] infiniband syz0: added veth0_vlan [ 123.655622][ T7816] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 123.655655][ T7816] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 123.655686][ T7816] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 123.750579][ T7848] __nla_validate_parse: 11 callbacks suppressed [ 123.750598][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 123.750710][ T7848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.795567][ T7848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.815930][ T7816] RDS/IB: syz0: added [ 123.817726][ T7816] smc: adding ib device syz0 with port count 1 [ 123.817841][ T7816] smc: ib device syz0 port 1 has no pnetid [ 124.007472][ T7861] netlink: 256 bytes leftover after parsing attributes in process `syz.0.551'. [ 124.045154][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.047229][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.114690][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.114807][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.115090][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.115204][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.385147][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 124.385223][ T7880] bridge_slave_1: left allmulticast mode [ 124.385243][ T7880] bridge_slave_1: left promiscuous mode [ 124.385516][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.421836][ T7880] bridge_slave_0: left allmulticast mode [ 124.421862][ T7880] bridge_slave_0: left promiscuous mode [ 124.424241][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.679950][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 124.774093][ T7891] syzkaller0: entered promiscuous mode [ 124.774118][ T7891] syzkaller0: entered allmulticast mode [ 126.440580][ T7920] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 126.445734][ T7921] veth1_macvtap: left promiscuous mode [ 126.469443][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'. [ 126.585281][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 127.343688][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 127.378761][ T7971] veth1_to_team: entered promiscuous mode [ 127.387642][ T7971] gretap0: entered promiscuous mode [ 127.388616][ T7971] hsr1: entered promiscuous mode [ 127.600739][ T7985] netlink: 'syz.0.581': attribute type 21 has an invalid length. [ 127.628706][ T7980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.580'. [ 128.077721][ T7998] netlink: NAT attribute has 1 unknown bytes [ 128.077758][ T7998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.136906][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 128.155351][ T5280] veth1_macvtap: entered promiscuous mode [ 128.247454][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 128.387014][ T8007] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 128.387380][ T8009] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 128.389205][ T8007] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 128.392573][ T8007] netlink: 'syz.3.587': attribute type 2 has an invalid length. [ 128.500210][ T8015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.501463][ T8015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.530443][ T8016] xt_hashlimit: size too large, truncated to 1048576 [ 128.804369][ T8036] __nla_validate_parse: 1 callbacks suppressed [ 128.804387][ T8036] netlink: 104 bytes leftover after parsing attributes in process `syz.4.591'. [ 129.003678][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.595'. [ 129.093322][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.596'. [ 129.268177][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 129.664483][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 129.698319][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 129.699083][ T8078] netlink: NAT attribute has 8 unknown bytes [ 129.699101][ T8078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.731110][ T8078] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 129.732351][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.739906][ T8078] x_tables: duplicate underflow at hook 3 [ 129.911732][ T8087] syzkaller0: entered promiscuous mode [ 129.911754][ T8087] syzkaller0: entered allmulticast mode [ 129.915188][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 129.934406][ T8089] netlink: 'syz.0.606': attribute type 32 has an invalid length. [ 129.934864][ T8089] netlink: 'syz.0.606': attribute type 32 has an invalid length. [ 129.935285][ T8089] netlink: 'syz.0.606': attribute type 32 has an invalid length. [ 129.935675][ T8089] netlink: 'syz.0.606': attribute type 32 has an invalid length. [ 129.942838][ T8089] netlink: 'syz.0.606': attribute type 32 has an invalid length. [ 129.943309][ T8089] netlink: 'syz.0.606': attribute type 32 has an invalid length. [ 130.482519][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.615'. [ 130.512946][ T8120] dummy0: entered promiscuous mode [ 130.984235][ T8145] syzkaller0: entered promiscuous mode [ 130.984258][ T8145] syzkaller0: entered allmulticast mode [ 131.005705][ T8145] tipc: Started in network mode [ 131.005735][ T8145] tipc: Node identity 8e05ee3fba26, cluster identity 4711 [ 131.006047][ T8145] tipc: Enabled bearer , priority 0 [ 131.031412][ T8145] tipc: Resetting bearer [ 131.034873][ T8144] tipc: Resetting bearer [ 131.060658][ T8144] tipc: Disabling bearer [ 131.150429][ T8159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.627'. [ 131.155515][ T8159] syzkaller1: entered promiscuous mode [ 131.155529][ T8159] syzkaller1: entered allmulticast mode [ 131.158558][ T8159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.454006][ T8172] block nbd0: not configured, cannot reconfigure [ 131.536991][ T8178] netlink: 52 bytes leftover after parsing attributes in process `syz.2.633'. [ 131.949052][ T8218] tipc: Invalid UDP bearer configuration [ 131.949161][ T8218] tipc: Enabling of bearer rejected, failed to enable media [ 132.056456][ T8220] netlink: Failed to add helper -22 [ 132.056580][ T8220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.770785][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.851226][ T8268] bond3: entered promiscuous mode [ 132.851249][ T8268] bond3: entered allmulticast mode [ 134.075249][ T8356] Cannot find add_set index 2 as target [ 134.138137][ T8361] validate_nla: 31 callbacks suppressed [ 134.138151][ T8361] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 134.138158][ T8361] netlink: 'syz.3.684': attribute type 8 has an invalid length. [ 134.138164][ T8361] __nla_validate_parse: 17 callbacks suppressed [ 134.138169][ T8361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.684'. [ 134.309927][ T8369] can: request_module (can-proto-0) failed. [ 134.310849][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 134.339034][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 134.408901][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.688'. [ 134.441163][ T8380] syzkaller0: entered promiscuous mode [ 134.441184][ T8380] syzkaller0: entered allmulticast mode [ 134.809181][ T8406] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 134.971708][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 135.136027][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 135.421018][ T8444] tipc: Enabling of bearer rejected, failed to enable media [ 135.520288][ T8448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.563888][ T8450] x_tables: duplicate underflow at hook 1 [ 135.609557][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 135.653968][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 135.655119][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 135.765598][ T8458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.439311][ T8509] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 136.572399][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.724'. [ 136.580306][ T8514] gretap1: entered promiscuous mode [ 136.580326][ T8514] gretap1: entered allmulticast mode [ 136.888542][ T8542] net_ratelimit: 4 callbacks suppressed [ 136.888559][ T8542] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 136.896497][ T8542] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 136.911166][ T8542] 0ªX¹¦Dö»: entered allmulticast mode [ 137.216037][ T8572] netlink: 'syz.3.734': attribute type 83 has an invalid length. [ 137.413910][ T8583] tipc: Resetting bearer [ 137.598715][ T8595] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 137.620300][ T8595] bond4: entered promiscuous mode [ 137.620581][ T8595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.640396][ T8595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.640590][ T8595] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 137.640601][ T8595] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 137.663783][ T8595] bond4: (slave wireguard1): making interface the new active one [ 137.663806][ T8595] wireguard1: entered promiscuous mode [ 137.673761][ T8595] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 138.365039][ T8590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.703705][ T8626] netlink: NAT attribute has 8 unknown bytes [ 138.703739][ T8626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.028333][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.030431][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.031651][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.061625][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.065823][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.138655][ T8649] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 139.139516][ T8645] vlan2: entered allmulticast mode [ 139.139533][ T8645] veth1_virt_wifi: entered allmulticast mode [ 139.162300][ T8653] __nla_validate_parse: 10 callbacks suppressed [ 139.162318][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 139.162340][ T8653] netlink: 52 bytes leftover after parsing attributes in process `syz.2.757'. [ 139.162353][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 139.189404][ T8653] vlan2: entered allmulticast mode [ 139.189424][ T8653] veth1_macvtap: entered allmulticast mode [ 139.388616][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 139.715997][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.765'. [ 139.716020][ T8688] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 139.834345][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 139.975145][ T8708] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 139.975165][ T8708] netlink: 224 bytes leftover after parsing attributes in process `syz.4.766'. [ 140.172488][ T8715] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.769'. [ 140.378652][ T8723] Cannot find del_set index 3 as target [ 140.844698][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 140.861269][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 140.901423][ T8748] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 140.931632][ T8753] netlink: 'syz.4.776': attribute type 28 has an invalid length. [ 140.931652][ T8753] netlink: 'syz.4.776': attribute type 3 has an invalid length. [ 141.029222][ T8748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.080364][ T8750] 8021q: VLANs not supported on wg2 [ 141.086404][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.166825][ T5627] Bluetooth: hci5: command tx timeout [ 141.946648][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.946844][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.947010][ T8644] bridge_slave_0: entered allmulticast mode [ 141.954072][ T8644] bridge_slave_0: entered promiscuous mode [ 141.994659][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.999082][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.999226][ T8644] bridge_slave_1: entered allmulticast mode [ 142.004236][ T8644] bridge_slave_1: entered promiscuous mode [ 142.131887][ T8644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.150051][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.295663][ T8644] team0: Port device team_slave_0 added [ 142.313138][ T8820] syzkaller0: entered promiscuous mode [ 142.313162][ T8820] syzkaller0: entered allmulticast mode [ 142.326483][ T7415] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.326528][ T7415] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.326559][ T7415] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.326591][ T7415] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.363118][ T8644] team0: Port device team_slave_1 added [ 142.493193][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.493210][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.493230][ T8644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.500904][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.500920][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.500941][ T8644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.818023][ T8644] hsr_slave_0: entered promiscuous mode [ 142.822359][ T8644] hsr_slave_1: entered promiscuous mode [ 142.826004][ T8644] debugfs: 'hsr0' already exists in 'hsr' [ 142.826026][ T8644] Cannot create hsr debugfs directory [ 142.945184][ T8836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.246345][ T5627] Bluetooth: hci5: command tx timeout [ 143.458821][ T8644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.469438][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.474248][ T8644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.490041][ T8853] IPv6: Can't replace route, no match found [ 143.496843][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.503106][ T8644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.523785][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.524794][ T8644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.549031][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.839326][ T8644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.885999][ T8644] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.916462][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.916615][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.984691][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.984793][ T7407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.027845][ T8894] raw_sendmsg: syz.0.808 forgot to set AF_INET. Fix it! [ 144.104701][ T8898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 144.105709][ T8898] batman_adv: batadv0: Adding interface: gretap2 [ 144.105723][ T8898] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.105748][ T8898] batman_adv: batadv0: Interface activated: gretap2 [ 144.217981][ T8644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.633120][ T8934] team0: Device vlan0 failed to register rx_handler [ 145.016738][ T8964] xt_recent: Unsupported userspace flags (000000b1) [ 145.082586][ T8969] __nla_validate_parse: 10 callbacks suppressed [ 145.082606][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.821'. [ 145.197405][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.199647][ T8977] netlink: 44 bytes leftover after parsing attributes in process `syz.0.821'. [ 145.326538][ T5627] Bluetooth: hci5: command tx timeout [ 145.596333][ T8644] veth0_vlan: entered promiscuous mode [ 145.604140][ T8644] veth1_vlan: entered promiscuous mode [ 145.643720][ T8644] veth0_macvtap: entered promiscuous mode [ 145.653234][ T8644] veth1_macvtap: entered promiscuous mode [ 145.673733][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.688485][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.709786][ T7414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.709826][ T7414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.747658][ T7413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.818946][ T7416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.818967][ T7416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.861267][ T7416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.861288][ T7416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.883416][ T7416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.929625][ T9000] netlink: NAT attribute has 4 unknown bytes [ 145.929656][ T9000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.062467][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 146.097122][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 146.190946][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 146.518301][ T9039] ip_tables: iptables: counters copy to user failed while replacing table [ 146.709352][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.749670][ T9057] netlink: 'syz.2.840': attribute type 32 has an invalid length. [ 146.749692][ T9057] netlink: 56 bytes leftover after parsing attributes in process `syz.2.840'. [ 146.750790][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 147.100539][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.100787][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.101014][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.101241][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.101477][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.101701][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.101936][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.146056][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.148261][ T9081] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 147.364514][ T9101] syzkaller1: entered promiscuous mode [ 147.364536][ T9101] syzkaller1: entered allmulticast mode [ 147.397541][ T9101] syzkaller1: left promiscuous mode [ 147.397562][ T9101] syzkaller1: left allmulticast mode [ 147.413130][ T5627] Bluetooth: hci5: command tx timeout [ 147.509934][ T9109] netlink: 244 bytes leftover after parsing attributes in process `syz.0.856'. [ 147.541103][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.858'. [ 147.806002][ T9131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.858447][ T9133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.863'. [ 148.044735][ T9151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.074909][ T9136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.119722][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.307886][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.308272][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.308641][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.308988][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.310964][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.311318][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.311700][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.312064][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.313949][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.419427][ T9164] bond1 (unregistering): Released all slaves [ 148.452611][ T9171] IPVS: Error connecting to the multicast addr [ 148.600984][ T7416] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.601064][ T7416] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.601113][ T7416] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.601142][ T7416] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.767904][ T9226] Driver unsupported XDP return value 0 on prog (id 221) dev N/A, expect packet loss! [ 149.818869][ T9234] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.992672][ T9234] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.139461][ T9234] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.157838][ T9256] __nla_validate_parse: 9 callbacks suppressed [ 150.157854][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 150.179496][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 150.187214][ T7413] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.187254][ T7413] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.187284][ T7413] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.187312][ T7413] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.265404][ T9262] netlink: 208 bytes leftover after parsing attributes in process `syz.2.891'. [ 150.290594][ T9234] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.328304][ T9265] netlink: 72 bytes leftover after parsing attributes in process `syz.0.894'. [ 150.526962][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 150.601595][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'. [ 150.644849][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'. [ 150.687120][ T7416] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.715747][ T7407] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.838627][ T7415] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.850524][ T7414] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.959918][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 150.959943][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 150.998684][ T9230] udevd[9230]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.018532][ T9230] udevd[9230]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.049861][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 151.287494][ T9314] syzkaller1: entered promiscuous mode [ 151.287517][ T9314] syzkaller1: entered allmulticast mode [ 151.620200][ T9332] xt_hashlimit: size too large, truncated to 1048576 [ 151.672468][ T9336] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 151.696290][ T9336] 0ªX¹¦Dö»: entered allmulticast mode [ 152.022133][ T7413] IPVS: starting estimator thread 0... [ 152.118806][ T9351] IPVS: using max 38 ests per chain, 91200 per kthread [ 152.120675][ T9355] bridge0: entered promiscuous mode [ 152.120710][ T9355] bridge0: entered allmulticast mode [ 152.277441][ T9368] validate_nla: 125 callbacks suppressed [ 152.277460][ T9368] netlink: 'syz.3.919': attribute type 28 has an invalid length. [ 152.277471][ T9368] netlink: 'syz.3.919': attribute type 3 has an invalid length. [ 153.190852][ T9435] netlink: 'syz.5.932': attribute type 1 has an invalid length. [ 153.271820][ T7416] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 153.303119][ T9436] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 153.305049][ T9436] bond2 (unregistering): Released all slaves [ 153.357230][ T9435] bridge1: entered promiscuous mode [ 153.365846][ T9435] bond1: (slave bridge1): making interface the new active one [ 153.371504][ T9435] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 153.860263][ T9465] net_ratelimit: 25 callbacks suppressed [ 153.860284][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.929566][ T9470] netlink: zone id is out of range [ 153.929580][ T9470] netlink: zone id is out of range [ 153.929586][ T9470] netlink: zone id is out of range [ 153.929593][ T9470] netlink: zone id is out of range [ 153.929599][ T9470] netlink: zone id is out of range [ 153.929605][ T9470] netlink: zone id is out of range [ 153.930436][ T9470] netlink: zone id is out of range [ 153.930448][ T9470] netlink: zone id is out of range [ 153.930455][ T9470] netlink: zone id is out of range [ 153.934798][ T9430] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 154.383372][ T9501] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 154.477353][ T9506] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 154.559252][ T9511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 155.107995][ T9552] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 155.167107][ T5627] Bluetooth: hci1: command tx timeout [ 155.244077][ T9553] syzkaller1: entered promiscuous mode [ 155.244099][ T9553] syzkaller1: entered allmulticast mode [ 155.249898][ T9558] tipc: Enabled bearer , priority 0 [ 155.329805][ T9558] syzkaller0: entered promiscuous mode [ 155.329976][ T9558] syzkaller0: entered allmulticast mode [ 155.330696][ T9558] tipc: Resetting bearer [ 155.415208][ T9558] syzkaller0: left promiscuous mode [ 155.415228][ T9558] syzkaller0: left allmulticast mode [ 155.415640][ T9558] tipc: Resetting bearer [ 155.585482][ T9573] __nla_validate_parse: 17 callbacks suppressed [ 155.585502][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.970'. [ 157.165498][ T7407] tipc: Resetting bearer [ 157.174893][ T5719] tipc: Node number set to 2348794512 [ 157.189460][ T9555] tipc: Resetting bearer [ 157.280659][ T9555] tipc: Disabling bearer [ 157.332239][ T9581] netlink: 72 bytes leftover after parsing attributes in process `syz.0.973'. [ 157.401791][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 157.480764][ T9596] netlink: 'syz.3.977': attribute type 4 has an invalid length. [ 157.514171][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 157.514191][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'. [ 157.572030][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 157.575348][ T9598] bridge0: port 1(dummy0) entered blocking state [ 157.576085][ T9598] bridge0: port 1(dummy0) entered disabled state [ 157.600434][ T9598] dummy0: entered allmulticast mode [ 157.602384][ T9598] dummy0: entered promiscuous mode [ 157.603914][ T9598] bridge0: port 1(dummy0) entered blocking state [ 157.604015][ T9598] bridge0: port 1(dummy0) entered forwarding state [ 157.677276][ T9622] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 157.775637][ T9622] bond6: entered promiscuous mode [ 157.776047][ T9622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.874224][ T9616] syzkaller1: entered promiscuous mode [ 157.874245][ T9616] syzkaller1: entered allmulticast mode [ 158.017798][ T9638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.984'. [ 158.245816][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 158.285302][ T9661] ipvlan2: entered allmulticast mode [ 158.285324][ T9661] virt_wifi0: entered allmulticast mode [ 158.302035][ T9661] batman_adv: batadv0: Adding interface: ipvlan2 [ 158.302051][ T9661] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.302075][ T9661] batman_adv: batadv0: Interface activated: ipvlan2 [ 158.876552][ T9700] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 158.931005][ T9700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.591897][ T9709] bond5: (slave veth11): Enslaving as an active interface with a down link [ 160.613215][ T9701] bond5: (slave veth13): Enslaving as an active interface with a down link [ 160.613311][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 160.614250][ T9700] veth0_virt_wifi: entered promiscuous mode [ 160.669246][ T9700] bond5: (slave veth0_virt_wifi): making interface the new active one [ 160.674061][ T9700] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 160.674366][ T9725] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 160.700736][ T9725] bond0: entered promiscuous mode [ 160.701074][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.732054][ T9730] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 160.820214][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.826833][ T9728] bond0: (slave xfrm0): The slave device specified does not support setting the MAC address [ 160.826852][ T9728] bond0: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 160.862121][ T9728] bond0: (slave xfrm0): making interface the new active one [ 160.862142][ T9728] xfrm0: entered promiscuous mode [ 160.863483][ T9728] bond0: (slave xfrm0): Enslaving as an active interface with an up link [ 160.953192][ T9730] bond4: entered promiscuous mode [ 160.962705][ T9730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.028644][ T9735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.029174][ T9735] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 161.029195][ T9735] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 161.057544][ T9735] bond4: (slave wireguard0): making interface the new active one [ 161.081985][ T9735] wireguard0: entered promiscuous mode [ 161.085362][ T9735] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 161.125700][ T9753] sctp: [Deprecated]: syz.5.1009 (pid 9753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.125700][ T9753] Use struct sctp_sack_info instead [ 161.173552][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 161.173585][ T9757] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1014'. [ 161.207324][ T9757] geneve2: entered promiscuous mode [ 161.207345][ T9757] geneve2: entered allmulticast mode [ 161.271594][ T9761] syz_tun: entered allmulticast mode [ 161.390043][ T9771] net_ratelimit: 499 callbacks suppressed [ 161.390061][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.390243][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.390426][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.390607][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.390789][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.390985][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.391203][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.391393][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.404303][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.404501][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.500650][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1018'. [ 161.786332][ T9805] syzkaller1: entered promiscuous mode [ 161.786356][ T9805] syzkaller1: entered allmulticast mode [ 161.858205][ T9810] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1027'. [ 162.300825][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 162.404674][ T9843] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 162.463050][ T9848] bond6: (slave veth0_to_bond): making interface the new active one [ 162.465985][ T9848] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.624822][ T9857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'. [ 162.934215][ T9871] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 162.956965][ T9871] bond4: entered promiscuous mode [ 162.957261][ T9871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.024312][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1043'. [ 163.031685][ T9882] bond4: entered allmulticast mode [ 163.281845][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1049'. [ 163.293100][ T9899] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 164.861240][ T9937] ipt_REJECT: TCP_RESET invalid for non-tcp [ 166.230262][ T9892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.625920][ T9965] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1070'. [ 166.773812][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 166.805208][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1071'. [ 166.840385][ T9978] bridge5: entered promiscuous mode [ 166.840407][ T9978] bridge5: entered allmulticast mode [ 166.846033][ T9978] team0: Port device bridge5 added [ 166.870717][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 166.870743][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 166.888962][ T9978] xt_hashlimit: overflow, try lower: 3/0 [ 166.982782][ T9993] net_ratelimit: 27 callbacks suppressed [ 166.982800][ T9993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.187974][T10003] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 167.236674][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.236736][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.246016][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.258103][ T9997] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 167.258162][ T9997] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 167.258195][ T9997] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 167.358617][ T9997] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.495918][ T9997] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 167.580031][T10016] C: entered promiscuous mode [ 167.693453][T10022] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 167.737864][T10015] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.814278][T10019] C: left promiscuous mode [ 167.829600][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.850303][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.870177][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.916082][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.929214][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.939531][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 167.957880][ T9997] wlan1 speed is unknown, defaulting to 1000 [ 168.273450][T10042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.462419][T10049] ip_tables: iptables: counters copy to user failed while replacing table [ 168.985402][T10063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.193116][T10071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.195411][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 169.211371][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.370757][T10080] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 169.420691][T10090] bond4: entered allmulticast mode [ 169.420718][T10090] wireguard1: entered allmulticast mode [ 170.105313][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 170.541356][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1111'. [ 170.776049][T10147] netlink: 'syz.2.1115': attribute type 16 has an invalid length. [ 170.776072][T10147] netlink: 'syz.2.1115': attribute type 3 has an invalid length. [ 170.776084][T10147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1115'. [ 171.023430][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 171.040237][T10155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.580701][T10183] syz.0.1126: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.580953][T10183] CPU: 1 UID: 0 PID: 10183 Comm: syz.0.1126 Not tainted syzkaller #0 PREEMPT(full) [ 171.580975][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.580986][T10183] Call Trace: [ 171.580994][T10183] [ 171.581003][T10183] dump_stack_lvl+0xe8/0x150 [ 171.581037][T10183] warn_alloc+0x24d/0x270 [ 171.581060][T10183] ? kasan_save_track+0x4f/0x80 [ 171.581082][T10183] ? kasan_save_track+0x3e/0x80 [ 171.581108][T10183] ? __pfx_warn_alloc+0x10/0x10 [ 171.581130][T10183] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 171.581149][T10183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.581188][T10183] __vmalloc_node_range_noprof+0x127/0x1540 [ 171.581238][T10183] ? rcu_is_watching+0x16/0xb0 [ 171.581270][T10183] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.581291][T10183] ? __kmalloc_cache_noprof+0x321/0x600 [ 171.581314][T10183] ? __kmalloc_cache_noprof+0x14d/0x600 [ 171.581336][T10183] ? xskq_create+0x56/0x220 [ 171.581359][T10183] xskq_create+0x148/0x220 [ 171.581378][T10183] ? xsk_init_queue+0x8a/0xe0 [ 171.581409][T10183] xsk_init_queue+0x8a/0xe0 [ 171.581440][T10183] xsk_setsockopt+0x52a/0x960 [ 171.581471][T10183] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.581498][T10183] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.581536][T10183] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 171.581562][T10183] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.581592][T10183] do_sock_setsockopt+0x17c/0x1b0 [ 171.581615][T10183] __x64_sys_setsockopt+0x13d/0x1b0 [ 171.581640][T10183] do_syscall_64+0x166/0x520 [ 171.581661][T10183] ? trace_irq_disable+0x3b/0x140 [ 171.581682][T10183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.581701][T10183] ? clear_bhb_loop+0x70/0xc0 [ 171.581723][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.581742][T10183] RIP: 0033:0x7fdf0a39e1d9 [ 171.581760][T10183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.581775][T10183] RSP: 002b:00007fdf0b343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.581794][T10183] RAX: ffffffffffffffda RBX: 00007fdf0a625fa0 RCX: 00007fdf0a39e1d9 [ 171.581808][T10183] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 171.581819][T10183] RBP: 00007fdf0a435888 R08: 0000000000000004 R09: 0000000000000000 [ 171.581830][T10183] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 171.581842][T10183] R13: 00007fdf0a626038 R14: 00007fdf0a625fa0 R15: 00007ffcc9b25f68 [ 171.581874][T10183] [ 171.582003][T10183] Mem-Info: [ 171.582014][T10183] active_anon:6125 inactive_anon:0 isolated_anon:0 [ 171.582014][T10183] active_file:0 inactive_file:42684 isolated_file:0 [ 171.582014][T10183] unevictable:0 dirty:32 writeback:0 [ 171.582014][T10183] slab_reclaimable:11322 slab_unreclaimable:105924 [ 171.582014][T10183] mapped:34293 shmem:525 pagetables:1387 [ 171.582014][T10183] sec_pagetables:0 bounce:0 [ 171.582014][T10183] kernel_misc_reclaimable:0 [ 171.582014][T10183] free:1263456 free_pcp:11590 free_cma:0 [ 171.582063][T10183] Node 0 active_anon:24500kB inactive_anon:0kB active_file:0kB inactive_file:170540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137172kB dirty:128kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14592kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 171.582137][T10183] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 171.582189][T10183] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.582250][T10183] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 171.582286][T10183] Node 0 DMA32 free:1094180kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24500kB inactive_anon:0kB active_file:0kB inactive_file:170540kB unevictable:0kB writepending:228kB zspages:0kB present:3129332kB managed:2527516kB mlocked:0kB bounce:0kB free_pcp:46360kB local_pcp:19868kB free_cma:0kB [ 171.582341][T10183] lowmem_reserve[]: 0 0 0 0 0 [ 171.582375][T10183] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.582426][T10183] lowmem_reserve[]: 0 0 0 0 0 [ 171.582458][T10183] Node 1 Normal free:3944284kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.582511][T10183] lowmem_reserve[]: 0 0 0 0 0 [ 171.582544][T10183] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.582659][T10183] Node 0 DMA32: 407*4kB (ME) 221*8kB (UME) 302*16kB (UME) 404*32kB (UME) 63*64kB (UM) 52*128kB (UME) 30*256kB (UM) 16*512kB (M) 0*1024kB 3*2048kB (ME) 254*4096kB (UM) = 1094244kB [ 171.582804][T10183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 171.582897][T10183] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 9*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944284kB [ 171.583140][T10183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.583156][T10183] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.583171][T10183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.583185][T10183] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.583200][T10183] 43205 total pagecache pages [ 171.583217][T10183] 0 pages in swap cache [ 171.583223][T10183] Free swap = 124996kB [ 171.583231][T10183] Total swap = 124996kB [ 171.583238][T10183] 2097051 pages RAM [ 171.583245][T10183] 0 pages HighMem/MovableOnly [ 171.583252][T10183] 433556 pages reserved [ 171.583259][T10183] 0 pages cma reserved [ 172.520244][T10187] batman_adv: batadv0: Adding interface: syzkaller0 [ 172.520263][T10187] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.520291][T10187] batman_adv: batadv0: Interface activated: syzkaller0 [ 172.594483][T10178] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 172.717539][T10178] batman_adv: batadv0: Removing interface: syzkaller0 [ 173.048490][T10221] xt_hashlimit: size too large, truncated to 1048576 [ 173.048717][T10223] xt_hashlimit: size too large, truncated to 1048576 [ 173.064287][T10198] bond5 (unregistering): Released all slaves [ 173.404691][T10226] dvmrp8: entered allmulticast mode [ 173.496988][T10231] xt_l2tp: invalid flags combination: 0 [ 174.125433][T10257] __nla_validate_parse: 6 callbacks suppressed [ 174.125455][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1142'. [ 174.125468][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1142'. [ 174.563261][T10279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1147'. [ 174.627056][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 174.634312][T10285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1147'. [ 174.634630][T10279] bridge2: entered promiscuous mode [ 174.634672][T10279] bridge2: entered allmulticast mode [ 174.644613][T10279] team0: Port device bridge2 added [ 174.681454][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1150'. [ 174.689413][T10279] bridge0: port 3(team0) entered blocking state [ 174.689756][T10279] bridge0: port 3(team0) entered disabled state [ 174.689996][T10279] team0: entered allmulticast mode [ 174.690012][T10279] team_slave_0: entered allmulticast mode [ 174.690057][T10279] team_slave_1: entered allmulticast mode [ 174.716452][T10279] team0: entered promiscuous mode [ 174.716472][T10279] team_slave_0: entered promiscuous mode [ 174.716655][T10279] team_slave_1: entered promiscuous mode [ 174.722131][T10279] bridge0: port 3(team0) entered blocking state [ 174.722378][T10279] bridge0: port 3(team0) entered forwarding state [ 175.125500][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.150590][T10303] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1154'. [ 175.197381][T10303] syzkaller1: entered promiscuous mode [ 175.197404][T10303] syzkaller1: entered allmulticast mode [ 175.210759][T10309] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.933686][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 176.019514][ T5627] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 176.021312][T10340] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1163'. [ 176.065769][T10342] batman_adv: batadv0: Adding interface: syz_tun [ 176.065787][T10342] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.065813][T10342] batman_adv: batadv0: Interface activated: syz_tun [ 176.076078][T10345] xt_ipcomp: unknown flags 1D [ 176.080577][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 176.823189][T10371] 8021q: VLANs not supported on bond0 [ 176.926337][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.449002][T10403] ip_tables: iptables: counters copy to user failed while replacing table [ 177.469553][T10406] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 177.609839][T10413] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 177.631925][T10407] bond5: (slave veth0_to_bond): making interface the new active one [ 177.635157][T10407] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 177.647220][T10410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.328140][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.328631][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.192901][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.239707][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.315530][T10413] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 180.556321][ T7416] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.556366][ T7416] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.556396][ T7416] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.951479][T10479] __nla_validate_parse: 4 callbacks suppressed [ 180.951498][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 181.385858][T10509] wg1: entered allmulticast mode [ 181.534226][T10515] block nbd0: not configured, cannot reconfigure [ 181.666036][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 181.728720][T10512] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 182.653002][T10527] netlink: 'syz.0.1207': attribute type 3 has an invalid length. [ 184.443158][T10543] netlink: 'syz.4.1210': attribute type 21 has an invalid length. [ 184.443179][T10543] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1210'. [ 184.529211][T10537] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 184.535517][T10537] bond6 (unregistering): Released all slaves [ 184.574004][T10543] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1210'. [ 184.653249][T10541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 184.837316][T10563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1216'. [ 185.150294][T10577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.822935][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 186.069895][T10609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.111245][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 186.180455][T10596] syz.0.1224 (10596) used greatest stack depth: 18088 bytes left [ 186.299680][T10619] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1227'. [ 186.315707][T10619] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1227'. [ 186.440156][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 186.776236][T10634] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1233'. [ 187.405632][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.405632][T10624] Use struct sctp_sack_info instead [ 187.405683][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.405683][T10624] Use struct sctp_sack_info instead [ 187.405722][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.405722][T10624] Use struct sctp_sack_info instead [ 187.405760][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.405760][T10624] Use struct sctp_sack_info instead [ 187.473211][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.473211][T10624] Use struct sctp_sack_info instead [ 187.473564][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.473564][T10624] Use struct sctp_sack_info instead [ 187.473914][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.473914][T10624] Use struct sctp_sack_info instead [ 187.474273][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.474273][T10624] Use struct sctp_sack_info instead [ 187.474616][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.474616][T10624] Use struct sctp_sack_info instead [ 187.474923][T10624] sctp: [Deprecated]: syz.0.1230 (pid 10624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.474923][T10624] Use struct sctp_sack_info instead [ 187.658961][T10651] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 187.799795][T10654] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 187.799818][T10654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 187.853345][T10651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.997524][T10653] bond6: (slave dummy0): making interface the new active one [ 188.022583][T10653] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 188.025981][T10654] dummy0: entered promiscuous mode [ 188.055839][T10654] bond6: (slave dummy0): Releasing active interface [ 188.298584][T10665] ip_tables: iptables: counters copy to user failed while replacing table [ 188.635781][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1240'. [ 188.650566][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1240'. [ 188.651131][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1240'. [ 188.655700][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1240'. [ 191.734465][T10715] __nla_validate_parse: 32 callbacks suppressed [ 191.734485][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 192.005594][T10732] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1251'. [ 192.072553][T10726] bond5 (unregistering): Released all slaves [ 192.188288][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.194166][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.203649][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.220285][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.223533][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.664144][T10758] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1256'. [ 192.869979][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 192.973692][T10779] syzkaller0: entered promiscuous mode [ 192.973714][T10779] syzkaller0: entered allmulticast mode [ 193.145199][T10788] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1267'. [ 193.220191][T10791] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 193.343321][T10800] x_tables: duplicate underflow at hook 1 [ 193.355534][T10800] syzkaller1: entered promiscuous mode [ 193.355556][T10800] syzkaller1: entered allmulticast mode [ 193.406571][T10739] wlan1 speed is unknown, defaulting to 1000 [ 193.432050][T10802] xt_l2tp: wrong L2TP version: 255 [ 193.532180][T10810] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 193.533158][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 194.072266][T10844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1277'. [ 194.080490][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.080693][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.080842][T10739] bridge_slave_0: entered allmulticast mode [ 194.082479][T10739] bridge_slave_0: entered promiscuous mode [ 194.085775][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.085929][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.086068][T10739] bridge_slave_1: entered allmulticast mode [ 194.088761][T10739] bridge_slave_1: entered promiscuous mode [ 194.129153][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.132489][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.195494][T10739] team0: Port device team_slave_0 added [ 194.209647][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.225098][T10739] team0: Port device team_slave_1 added [ 194.290848][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.290865][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.290887][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.292768][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.292781][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.292803][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.296766][ T5627] Bluetooth: hci6: command tx timeout [ 194.317202][T10856] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1281'. [ 194.444395][T10739] hsr_slave_0: entered promiscuous mode [ 194.445359][T10739] hsr_slave_1: entered promiscuous mode [ 194.446037][T10739] debugfs: 'hsr0' already exists in 'hsr' [ 194.446054][T10739] Cannot create hsr debugfs directory [ 194.549436][T10859] syzkaller1: entered promiscuous mode [ 194.549458][T10859] syzkaller1: entered allmulticast mode [ 194.631237][T10870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1285'. [ 194.918472][T10739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.924460][T10739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.927899][T10739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.955792][T10739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.964383][T10739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.976730][T10739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.977884][T10739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.981907][T10739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.115138][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.134077][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.141934][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.142031][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.150067][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.150191][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.265712][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 195.278458][T10896] sit0: entered promiscuous mode [ 195.282664][T10896] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 195.620682][T10913] bond7: Invalid ad_actor_system MAC address. [ 195.620705][T10913] bond7: option ad_actor_system: invalid value (1) [ 195.624794][T10913] bond7 (unregistering): Released all slaves [ 195.728451][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.902828][T10927] veth0: entered promiscuous mode [ 195.938517][T10925] veth0: left promiscuous mode [ 196.099620][T10739] veth0_vlan: entered promiscuous mode [ 196.114891][T10938] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 196.151743][T10938] bond7: option mode: invalid value (10) [ 196.158202][T10938] bond7 (unregistering): Released all slaves [ 196.214098][T10943] netlink: 'syz.0.1300': attribute type 10 has an invalid length. [ 196.216042][T10943] dummy0: entered promiscuous mode [ 196.254998][T10739] veth1_vlan: entered promiscuous mode [ 196.316133][T10739] veth0_macvtap: entered promiscuous mode [ 196.323095][T10739] veth1_macvtap: entered promiscuous mode [ 196.365269][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.366207][ T5627] Bluetooth: hci6: command tx timeout [ 196.390916][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.459701][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.497145][ T7415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.497187][ T7415] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.509965][ T7415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.588025][ T7415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.588046][ T7415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.660425][ T7407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.660445][ T7407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.800151][T10964] __nla_validate_parse: 5 callbacks suppressed [ 196.800170][T10964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 196.848406][T10964] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.850354][T10964] bond0: (slave bond7): Enslaving as an active interface with an up link [ 196.952507][T10975] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 197.025175][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1312'. [ 197.255735][T10994] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1317'. [ 197.362435][T10999] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 197.857035][T10996] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 198.215467][T11024] x_tables: duplicate entry at hook 2 [ 198.222089][T11025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.232104][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 198.232153][T11025] openvswitch: netlink: Missing key (keys=40, expected=100) [ 198.456180][ T5635] Bluetooth: hci6: command tx timeout [ 198.486743][ T5633] block nbd0: Receive control failed (result -32) [ 198.488684][ T5627] block nbd0: Receive control failed (result -32) [ 198.623029][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1334'. [ 198.695344][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 198.713838][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 198.730389][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1336'. [ 198.775862][T11065] netlink: 'syz.6.1336': attribute type 1 has an invalid length. [ 198.824906][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1340'. [ 198.877115][T11067] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1339'. [ 198.895516][T11068] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 199.000313][T11082] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 199.001587][T11081] Cannot find del_set index 0 as target [ 199.028407][T11082] bond5: entered promiscuous mode [ 199.028778][T11082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.050388][T11086] SET target dimension over the limit! [ 199.080335][T11086] bond0: entered promiscuous mode [ 199.080369][T11086] bond_slave_0: entered promiscuous mode [ 199.080559][T11086] bond_slave_1: entered promiscuous mode [ 199.080717][T11086] bond7: entered promiscuous mode [ 199.081151][T11086] bond0: entered allmulticast mode [ 199.081168][T11086] bond_slave_0: entered allmulticast mode [ 199.081183][T11086] bond_slave_1: entered allmulticast mode [ 199.081194][T11086] bond7: entered allmulticast mode [ 199.089471][T11086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.283079][T11099] netlink: 'syz.6.1345': attribute type 1 has an invalid length. [ 199.513060][T11113] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 199.535151][T11113] bond7: option mode: invalid value (48) [ 199.536536][T11113] bond7 (unregistering): Released all slaves [ 199.567788][T11117] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 199.604673][T11113] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 199.640772][T11113] bond7: option mode: invalid value (48) [ 199.641908][T11113] bond7 (unregistering): Released all slaves [ 199.703098][T11113] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 199.745438][T11113] bond7: option mode: invalid value (48) [ 199.752577][T11113] bond7 (unregistering): Released all slaves [ 199.799228][T11113] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 199.883474][T11113] bond7: option mode: invalid value (48) [ 199.887582][T11113] bond7 (unregistering): Released all slaves [ 199.931532][T11113] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 200.027013][T11113] bond7: option mode: invalid value (48) [ 200.028668][T11113] bond7 (unregistering): Released all slaves [ 200.097943][T11113] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 200.229738][T11113] bond7: option mode: invalid value (48) [ 200.232506][T11113] bond7 (unregistering): Released all slaves [ 200.352944][T11113] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 200.527301][ T4934] Bluetooth: hci6: command tx timeout [ 200.912947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.913774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.924177][ T7418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.930915][ T7418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.933906][ T7418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.977457][T11175] syzkaller0: left promiscuous mode [ 200.977478][T11175] syzkaller0: left allmulticast mode [ 201.276080][T11197] tipc: Started in network mode [ 201.281714][T11197] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 201.281782][T11197] tipc: Enabling of bearer rejected, failed to enable media [ 201.409644][ T4934] Bluetooth: hci2: command 0x0406 tx timeout [ 201.410118][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 201.410144][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 201.465566][T11207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.465585][T11207] IPv6: NLM_F_CREATE should be set when creating new route [ 201.675617][ T7413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.776333][ T56] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.776375][ T56] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.776404][ T56] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.209905][T11253] tipc: Trying to set illegal importance in message [ 202.210469][T11253] __nla_validate_parse: 48 callbacks suppressed [ 202.210483][T11253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1389'. [ 202.213169][T11253] netlink: 13183 bytes leftover after parsing attributes in process `syz.3.1389'. [ 202.215781][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 202.370896][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1391'. [ 202.423722][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1391'. [ 202.458001][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1392'. [ 202.563386][T11269] openvswitch: netlink: Message has 8 unknown bytes. [ 202.754354][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 202.755244][T11299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.755548][T11299] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1396'. [ 205.562400][T11271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.753119][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 205.944815][T11329] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 205.970218][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1406'. [ 206.068861][T11342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.192086][T11350] ip_tables: iptables: counters copy to user failed while replacing table [ 206.547308][T11362] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 206.644748][T11374] validate_nla: 37 callbacks suppressed [ 206.644769][T11374] netlink: 'syz.3.1415': attribute type 4 has an invalid length. [ 206.701873][T11376] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 206.701972][T11376] syzkaller1: linktype set to 823 [ 206.829912][T11385] netlink: 'syz.4.1420': attribute type 5 has an invalid length. [ 207.165168][T11382] bond4: left allmulticast mode [ 207.165193][T11382] wireguard1: left allmulticast mode [ 207.244133][T11408] batman_adv: batadv0: Adding interface: syzkaller0 [ 207.244149][T11408] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.244171][T11408] batman_adv: batadv0: Interface activated: syzkaller0 [ 207.430540][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.432572][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.435950][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.464269][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.464912][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.631211][T11407] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 207.709693][T11407] batman_adv: batadv0: Removing interface: syzkaller0 [ 207.785379][T11427] __nla_validate_parse: 5 callbacks suppressed [ 207.785398][T11427] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1431'. [ 207.846653][T11431] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1431'. [ 207.847047][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'. [ 207.961222][T11444] lo: entered promiscuous mode [ 207.961403][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.961625][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.961817][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.962010][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.962191][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.962379][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.962557][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.962771][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.962963][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.963155][T11444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.233986][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1436'. [ 208.340751][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 208.652797][T11411] wlan1 speed is unknown, defaulting to 1000 [ 208.729230][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 209.288877][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.289024][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.289148][T11411] bridge_slave_0: entered allmulticast mode [ 209.290990][T11411] bridge_slave_0: entered promiscuous mode [ 209.294384][T11411] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.294541][T11411] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.294921][T11411] bridge_slave_1: entered allmulticast mode [ 209.297187][T11411] bridge_slave_1: entered promiscuous mode [ 209.329332][T11411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.332219][T11411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.442225][T11411] team0: Port device team_slave_0 added [ 209.453389][T11411] team0: Port device team_slave_1 added [ 209.507494][T11411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.507512][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.507532][T11411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.508678][T11411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.508690][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.508711][T11411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.581685][ T5633] Bluetooth: hci7: command tx timeout [ 209.640601][T11411] hsr_slave_0: entered promiscuous mode [ 209.641758][T11411] hsr_slave_1: entered promiscuous mode [ 209.642522][T11411] debugfs: 'hsr0' already exists in 'hsr' [ 209.642540][T11411] Cannot create hsr debugfs directory [ 209.992292][T11411] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.015937][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.024166][T11411] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.036370][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.037175][T11411] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.077087][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.078208][T11411] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.106029][T11411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.132964][T11554] netlink: 'syz.3.1456': attribute type 3 has an invalid length. [ 210.153204][T11553] netlink: 'syz.6.1454': attribute type 1 has an invalid length. [ 210.153225][T11553] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1454'. [ 210.153238][T11553] netlink: 'syz.6.1454': attribute type 1 has an invalid length. [ 210.340302][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'. [ 210.455556][T11411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.498405][T11411] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.528627][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.528728][ T7413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.530592][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.530690][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.581353][T11578] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1459'. [ 210.639600][T11585] netlink: 'syz.4.1461': attribute type 2 has an invalid length. [ 210.733510][T11586] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1462'. [ 210.869025][T11583] No such timeout policy "syz0" [ 211.018696][T11602] Cannot find add_set index 4 as target [ 211.251843][T11616] batman_adv: batadv0: Adding interface: syzkaller0 [ 211.251861][T11616] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.251885][T11616] batman_adv: batadv0: Interface activated: syzkaller0 [ 211.618207][T11411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.646934][ T5633] Bluetooth: hci7: command tx timeout [ 212.174922][T11411] veth0_vlan: entered promiscuous mode [ 212.203162][T11411] veth1_vlan: entered promiscuous mode [ 212.323965][T11411] veth0_macvtap: entered promiscuous mode [ 212.344282][T11411] veth1_macvtap: entered promiscuous mode [ 212.401212][T11411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.421990][T11411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.475555][T11684] netlink: 'syz.6.1482': attribute type 1 has an invalid length. [ 212.539667][T11684] bond1: entered promiscuous mode [ 212.540058][T11684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.548372][ T7413] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.581819][ T7416] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.581865][ T7416] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.854723][T11684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.860218][T11684] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 212.860242][T11684] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 212.882297][T11684] bond1: (slave xfrm1): making interface the new active one [ 212.882321][T11684] xfrm1: entered promiscuous mode [ 212.901362][T11700] __nla_validate_parse: 6 callbacks suppressed [ 212.901381][T11700] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1483'. [ 212.904794][T11684] xfrm1: left promiscuous mode [ 213.005104][T11702] bond7 (unregistering): Released all slaves [ 213.057147][ T7413] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.079373][ T7414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.079393][ T7414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.152161][ T7413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.152181][ T7413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.335482][T11720] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 213.561317][T11732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1490'. [ 213.642776][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 213.700543][T11738] lo: left promiscuous mode [ 213.726285][ T5633] Bluetooth: hci7: command tx timeout [ 213.750957][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 213.846873][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1495'. [ 213.848382][T11748] netlink: 'syz.6.1491': attribute type 2 has an invalid length. [ 213.991975][T11758] net_ratelimit: 57 callbacks suppressed [ 213.991996][T11758] openvswitch: netlink: Key type 52 is out of range max 32 [ 214.339619][T11783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1502'. [ 214.678602][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 214.824926][T11814] ip_tables: iptables: counters copy to user failed while replacing table [ 214.825604][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1509'. [ 214.825623][T11814] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1509'. [ 214.895318][T11814] veth5: entered promiscuous mode [ 214.960650][T11823] Cannot find del_set index 0 as target [ 214.962938][T11823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.191441][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1518'. [ 215.191473][T11845] netlink: 'syz.7.1518': attribute type 5 has an invalid length. [ 215.219245][T11845] geneve2: entered promiscuous mode [ 215.219268][T11845] geneve2: entered allmulticast mode [ 215.225199][T11849] netlink: 'syz.7.1518': attribute type 5 has an invalid length. [ 215.249998][ T7411] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 215.250041][ T7411] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 215.250071][ T7411] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 215.250101][ T7411] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 215.354014][T11856] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 215.806386][ T5633] Bluetooth: hci7: command tx timeout [ 215.829017][T11872] syzkaller1: entered promiscuous mode [ 215.829032][T11872] syzkaller1: entered allmulticast mode [ 218.037561][T11829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.040087][T11846] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 218.040108][T11846] __nla_validate_parse: 5 callbacks suppressed [ 218.040119][T11846] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1517'. [ 218.041322][T11846] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 218.155244][T11876] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 218.231056][T11878] sctp: [Deprecated]: syz.0.1529 (pid 11878) Use of int in maxseg socket option. [ 218.231056][T11878] Use struct sctp_assoc_value instead [ 218.232333][T11878] openvswitch: netlink: IPv4 tunnel dst address is zero [ 218.337446][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.337681][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.337878][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.338094][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.338289][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.338477][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.338662][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.338879][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.350829][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 218.614640][T11902] x_tables: unsorted underflow at hook 4 [ 218.835836][T11915] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.872728][T11917] netlink: 'syz.7.1538': attribute type 1 has an invalid length. [ 219.160724][T11939] batman_adv: batadv0: Adding interface: syz_tun [ 219.160741][T11939] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.160764][T11939] batman_adv: batadv0: Interface activated: syz_tun [ 219.201577][T11946] xfrm1: entered promiscuous mode [ 219.201599][T11946] xfrm1: entered allmulticast mode [ 219.226085][T11945] vcan0: tx address claim with broadcast sa [ 219.518049][T11965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.809888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.071210][T11998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.995444][T12034] netlink: Conntrack attr has 8 unknown bytes [ 220.995479][T12034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.066676][T12037] syzkaller0: entered promiscuous mode [ 221.066697][T12037] syzkaller0: entered allmulticast mode [ 221.544521][T12051] syzkaller0: entered promiscuous mode [ 221.544543][T12051] syzkaller0: entered allmulticast mode [ 222.029204][T12062] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 223.035987][T12093] syzkaller0: entered promiscuous mode [ 223.036010][T12093] syzkaller0: entered allmulticast mode [ 223.043324][T12093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.220783][T12097] x_tables: duplicate underflow at hook 2 [ 223.221091][T12097] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 223.300127][T12104] __nla_validate_parse: 70 callbacks suppressed [ 223.300145][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1589'. [ 223.341975][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 223.370328][ T6258] IPVS: starting estimator thread 0... [ 223.394790][T12113] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1589'. [ 223.394822][T12113] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 223.398384][T12097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 223.399581][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1589'. [ 223.418734][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 223.439033][T12097] bond7: (slave bond8): making interface the new active one [ 223.440426][T12097] bond7: (slave bond8): Enslaving as an active interface with an up link [ 223.453809][T12104] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1589'. [ 223.489045][T12114] IPVS: using max 31 ests per chain, 74400 per kthread [ 223.752120][T12100] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 223.777298][T12121] netlink: 'syz.6.1590': attribute type 1 has an invalid length. [ 224.285616][T12125] smc: removing ib device syz0 [ 224.304000][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1591'. [ 224.428427][T12127] hsr_slave_1 (unregistering): left promiscuous mode [ 224.474070][T12125] smbdirect: ib_dev[syz0] removed [ 224.577543][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 225.574942][ T7414] IPVS: starting estimator thread 0... [ 225.656843][T12154] IPVS: using max 29 ests per chain, 69600 per kthread [ 225.955299][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 227.331345][T12135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.501011][T12181] netlink: 'syz.3.1607': attribute type 11 has an invalid length. [ 227.522692][T12181] netlink: 'syz.3.1607': attribute type 11 has an invalid length. [ 227.556602][T12186] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1606'. [ 227.905435][T12217] netlink: 'syz.0.1614': attribute type 8 has an invalid length. [ 228.194693][T12222] can: request_module (can-proto-0) failed. [ 228.243611][T12231] netlink: 'syz.4.1619': attribute type 7 has an invalid length. [ 228.426882][T12240] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 228.426907][T12240] __nla_validate_parse: 5 callbacks suppressed [ 228.426928][T12240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1621'. [ 228.686500][ T5627] Bluetooth: hci7: command 0x0405 tx timeout [ 228.759691][T12248] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 228.850746][T12259] tipc: Failed to remove unknown binding: 66,0,0/43690:2268688997/2268688998 [ 229.037473][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1630'. [ 229.533684][T12285] netlink: 'syz.0.1634': attribute type 3 has an invalid length. [ 229.554324][T12286] netlink: 'syz.4.1633': attribute type 83 has an invalid length. [ 229.692162][T12294] netlink: 'syz.4.1637': attribute type 4 has an invalid length. [ 229.723871][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1635'. [ 229.920536][T12298] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 229.936214][T12298] bond1 (unregistering): Released all slaves [ 229.990817][T12304] batman_adv: batadv0: Interface deactivated: syz_tun [ 230.082138][T12311] netlink: 'syz.4.1641': attribute type 23 has an invalid length. [ 230.237715][T12304] syz_tun: left allmulticast mode [ 230.254653][T12304] batman_adv: batadv0: Removing interface: syz_tun [ 230.329814][T12329] netlink: 'syz.3.1646': attribute type 4 has an invalid length. [ 230.857779][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 231.348643][T12376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1661'. [ 231.879324][T12401] netlink: 'syz.6.1669': attribute type 1 has an invalid length. [ 231.950718][T12401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.990371][T12400] bond2: (slave ip6gretap1): making interface the new active one [ 231.992571][T12400] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 232.028908][T12415] x_tables: duplicate underflow at hook 1 [ 232.036718][T12417] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 232.090660][T12418] tap0: tun_chr_ioctl cmd 1074025676 [ 232.090683][T12418] tap0: owner set to 0 [ 232.152808][T12424] tipc: Enabled bearer , priority 9 [ 232.260991][T12424] vlan3: entered promiscuous mode [ 232.261315][T12424] vlan3: entered allmulticast mode [ 232.422503][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 233.042229][T12464] x_tables: duplicate underflow at hook 1 [ 233.184303][T12470] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1687'. [ 233.324899][T12475] : renamed from bond_slave_0 (while UP) [ 233.348585][T12480] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 233.638246][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1693'. [ 233.656840][T12494] netlink: 'syz.7.1693': attribute type 5 has an invalid length. [ 233.657265][T12494] netlink: 'syz.7.1693': attribute type 9 has an invalid length. [ 233.731881][T12510] netlink: 'syz.7.1693': attribute type 9 has an invalid length. [ 233.732030][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1693'. [ 233.744742][T12505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1697'. [ 233.771306][T12498] batadv_slave_0: entered promiscuous mode [ 233.772433][T12506] netlink: 'syz.7.1693': attribute type 5 has an invalid length. [ 233.773551][T12495] batadv_slave_0: left promiscuous mode [ 233.834339][T12511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1697'. [ 233.901420][T12523] xt_IDLETIMER: label is empty or not nul-terminated [ 233.995272][T12529] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 234.000306][T12520] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1700'. [ 234.015102][T12529] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 234.067546][T12530] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 234.284799][T12538] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.317800][T12548] Cannot find set identified by id 4 to match [ 234.827280][T12578] nbd: nbd0 already in use [ 235.241520][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 235.299661][ T5280] veth1_vlan: left promiscuous mode [ 235.444110][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 235.551764][T12614] vlan4: entered allmulticast mode [ 235.551784][T12614] bridge3: entered allmulticast mode [ 235.552473][T12609] bridge3: port 1(erspan0) entered blocking state [ 235.552585][T12609] bridge3: port 1(erspan0) entered disabled state [ 235.552754][T12609] erspan0: entered allmulticast mode [ 235.565267][T12609] erspan0: entered promiscuous mode [ 235.575785][T12609] bridge3: port 1(erspan0) entered blocking state [ 235.575901][T12609] bridge3: port 1(erspan0) entered forwarding state [ 235.632481][T12622] openvswitch: netlink: IPv4 tunnel dst address is zero [ 235.725722][T12621] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1724'. [ 236.128544][T12656] TC_ACT_REPEAT abuse ? [ 236.583823][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1737'. [ 236.725153][T12694] tipc: Enabled bearer , priority 0 [ 236.864547][T12694] syzkaller0: entered promiscuous mode [ 236.864571][T12694] syzkaller0: entered allmulticast mode [ 236.865101][T12694] tipc: Resetting bearer [ 236.890911][T12692] tipc: Resetting bearer [ 236.955549][T12714] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1743'. [ 237.043520][T12715] netlink: 'syz.6.1742': attribute type 4 has an invalid length. [ 238.761236][T12692] tipc: Disabling bearer [ 238.810338][T12715] .`: renamed from bond0 (while UP) [ 238.834938][ T10] tipc: Node number set to 1 [ 239.002217][T12729] __nla_validate_parse: 1 callbacks suppressed [ 239.002236][T12729] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1746'. [ 239.352060][T12754] netlink: Failed to add %pB helper -22 [ 239.352112][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.715509][T12790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.786064][T12795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.925267][T12799] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1765'. [ 240.059401][T12802] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1766'. [ 240.059425][T12802] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1766'. [ 240.059440][T12802] netlink: 'syz.7.1766': attribute type 6 has an invalid length. [ 240.059452][T12802] netlink: 'syz.7.1766': attribute type 5 has an invalid length. [ 240.059463][T12802] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1766'. [ 240.060774][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1766'. [ 240.525996][T12802] netlink: 'syz.7.1766': attribute type 1 has an invalid length. [ 240.526016][T12802] netlink: 'syz.7.1766': attribute type 2 has an invalid length. [ 240.574261][T12805] netlink: 'syz.3.1769': attribute type 12 has an invalid length. [ 240.728292][T12815] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1772'. [ 240.734304][T12814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.738314][T12817] netlink: 'syz.7.1771': attribute type 4 has an invalid length. [ 240.773782][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1770'. [ 240.823934][T12819] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1772'. [ 241.029496][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1778'. [ 241.070975][ T5633] block nbd1: Receive control failed (result -32) [ 241.071428][ T5627] block nbd1: Receive control failed (result -32) [ 241.263330][T12834] netlink: 'syz.4.1776': attribute type 8 has an invalid length. [ 241.825626][T12903] netlink: 'syz.6.1793': attribute type 12 has an invalid length. [ 241.920531][T12903] bond0: option primary_reselect: invalid value (255) [ 241.948275][T12903] bond0 (unregistering): Released all slaves [ 242.232203][T12930] tc_dump_action: action bad kind [ 243.129721][T12985] pimreg3: entered allmulticast mode [ 243.228440][T12998] openvswitch: netlink: Message has 512 unknown bytes. [ 243.314917][T13006] bond4: entered allmulticast mode [ 243.314942][T13006] wireguard1: entered allmulticast mode [ 243.403529][T12998] openvswitch: netlink: Message has 8 unknown bytes. [ 243.415199][T12996] bond4: left allmulticast mode [ 243.415222][T12996] wireguard1: left allmulticast mode [ 243.702394][T13029] 0: reclassify loop, rule prio 0, protocol 03 [ 243.728127][T13032] bridge1: entered promiscuous mode [ 243.731948][T13032] bridge1: entered allmulticast mode [ 243.769850][T13033] bridge2: entered promiscuous mode [ 243.769871][T13033] bridge2: entered allmulticast mode [ 243.964658][T13046] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 244.048777][T13061] syzkaller1: entered promiscuous mode [ 244.048797][T13061] syzkaller1: entered allmulticast mode [ 244.067631][T13065] __nla_validate_parse: 15 callbacks suppressed [ 244.067651][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 244.739164][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1839'. [ 244.899699][T13113] netlink: 542 bytes leftover after parsing attributes in process `syz.4.1840'. [ 244.924402][T13122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1844'. [ 245.094489][T13131] netlink: 'syz.6.1845': attribute type 4 has an invalid length. [ 245.668547][T13153] netlink: 'syz.6.1852': attribute type 1 has an invalid length. [ 245.835073][T13153] bond0: entered promiscuous mode [ 245.847143][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.872517][T13174] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 245.879946][T13177] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1858'. [ 245.924271][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.924628][T13169] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 245.924646][T13169] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 245.926541][T13178] netlink: 'syz.6.1852': attribute type 1 has an invalid length. [ 245.947222][T13169] bond0: (slave wireguard0): making interface the new active one [ 245.947244][T13169] wireguard0: entered promiscuous mode [ 245.950973][T13169] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 246.000074][T13177] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1858'. [ 246.000685][T13177] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1858'. [ 246.000704][T13177] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1858'. [ 246.034057][T13153] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 246.051019][T13153] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 246.180017][T13184] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 246.193644][T13184] bond10 (unregistering): Released all slaves [ 246.237914][T13201] x_tables: duplicate underflow at hook 2 [ 246.296510][T13196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1862'. [ 246.305845][T13201] x_tables: duplicate underflow at hook 1 [ 246.597515][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1867'. [ 246.652418][T13220] bridge1: entered promiscuous mode [ 246.652433][T13220] bridge1: entered allmulticast mode [ 246.802775][T13239] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.292992][T13274] netlink: 'syz.0.1879': attribute type 9 has an invalid length. [ 247.293013][T13274] netlink: 'syz.0.1879': attribute type 4 has an invalid length. [ 247.414954][T13277] batman_adv: batadv0: Adding interface: syzkaller0 [ 247.414973][T13277] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.415001][T13277] batman_adv: batadv0: Interface activated: syzkaller0 [ 247.576994][T13277] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 247.614755][T13277] batman_adv: batadv0: Removing interface: syzkaller0 [ 247.643699][T13282] ip_tables: iptables: counters copy to user failed while replacing table [ 247.674237][T13284] netlink: 'syz.4.1882': attribute type 3 has an invalid length. [ 247.764985][T13291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.884584][T13301] netlink: 'syz.0.1887': attribute type 29 has an invalid length. [ 248.056534][T13306] netlink: get zone limit has 4 unknown bytes [ 248.141205][T13322] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 248.408833][T13338] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 250.393949][T13331] __nla_validate_parse: 9 callbacks suppressed [ 250.393966][T13331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1896'. [ 250.410738][T13334] geneve4: entered promiscuous mode [ 250.410758][T13334] geneve4: entered allmulticast mode [ 250.467626][ T7414] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 250.468481][ T7414] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 250.468519][ T7414] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 250.468555][ T7414] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 250.526628][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.990235][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1907'. [ 251.055194][T13380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.065314][T13380] Bluetooth: hci0: unsupported parameter 5134 [ 251.065335][T13380] Bluetooth: hci0: unsupported parameter 8192 [ 251.065346][T13380] Bluetooth: hci0: unsupported parameter 5134 [ 251.065357][T13380] Bluetooth: hci0: unsupported parameter 8192 [ 251.083906][T13380] netlink: 'syz.3.1908': attribute type 3 has an invalid length. [ 251.152316][T13383] netlink: 'syz.7.1909': attribute type 1 has an invalid length. [ 251.152338][T13383] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1909'. [ 251.269645][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1909'. [ 251.548016][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 251.705938][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.705974][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.705996][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.706018][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.706039][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.706060][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.707939][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.707972][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.707994][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708015][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708036][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708057][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708078][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708099][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708120][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708141][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708162][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708183][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708204][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708225][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708246][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708267][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708294][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708316][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708336][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.708357][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712159][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712187][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712209][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712230][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712251][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712272][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.712301][T13429] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 251.968319][T13433] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 252.275673][T13456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1927'. [ 252.290445][T13456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1927'. [ 252.340729][T13456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1927'. [ 252.418360][T13457] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1918'. [ 252.445750][T13457] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1918'. [ 252.598583][T13475] netlink: 'syz.7.1932': attribute type 1 has an invalid length. [ 252.735586][T13477] wlan1 speed is unknown, defaulting to 1000 [ 252.945270][T13493] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 252.945837][T13493] team0: Device ipvlan2 is already an upper device of the team interface [ 253.012604][T13499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 253.122814][T13505] ip_tables: iptables: counters copy to user failed while replacing table [ 253.644894][ T30] audit: type=1800 audit(1791607965.720:2): pid=13535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1945" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=488 res=0 errno=0 [ 254.228364][T13566] Bluetooth: MGMT ver 1.23 [ 254.463849][T13583] netlink: 'syz.4.1961': attribute type 29 has an invalid length. [ 254.569746][T13581] team0 (unregistering): Port device team_slave_0 removed [ 254.607560][T13581] team0 (unregistering): Port device team_slave_1 removed [ 254.842950][T13604] netlink: 'syz.7.1969': attribute type 1 has an invalid length. [ 254.842974][T13604] netlink: 'syz.7.1969': attribute type 1 has an invalid length. [ 255.113770][T13614] tc_dump_action: action bad kind [ 255.425912][T13639] vlan3: entered allmulticast mode [ 255.460435][T13636] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 255.490781][T13641] __nla_validate_parse: 16 callbacks suppressed [ 255.490800][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1980'. [ 255.576463][T13646] ip_tables: iptables: counters copy to user failed while replacing table [ 255.694117][T13655] netlink: 'syz.4.1981': attribute type 7 has an invalid length. [ 255.694138][T13655] netlink: 'syz.4.1981': attribute type 8 has an invalid length. [ 255.837841][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1987'. [ 255.862784][T13667] vlan2: entered promiscuous mode [ 255.862805][T13667] bond0: entered promiscuous mode [ 255.862816][T13667] : entered promiscuous mode [ 255.863058][T13667] bond_slave_1: entered promiscuous mode [ 255.897444][T13667] netlink: 'syz.7.1987': attribute type 1 has an invalid length. [ 256.099924][T13678] xt_hashlimit: size too large, truncated to 1048576 [ 256.205172][T13689] xt_hashlimit: size too large, truncated to 1048576 [ 256.875552][T13727] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 256.892155][T13726] netlink: 'syz.3.2003': attribute type 2 has an invalid length. [ 256.892202][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 256.939862][T13726] : entered promiscuous mode [ 257.021476][T13730] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2004'. [ 257.073772][T13734] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2005'. [ 257.106607][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2005'. [ 257.240645][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 257.339773][T13746] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2012'. [ 257.703825][T13764] netlink: Setting conntrack mark requires 'commit' flag. [ 257.703856][T13764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.816599][T13771] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 257.847718][T13771] bond2 (unregistering): Released all slaves [ 258.041409][T13777] netlink: 720 bytes leftover after parsing attributes in process `syz.3.2023'. [ 258.041747][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 258.041775][T13777] netlink: 'syz.3.2023': attribute type 5 has an invalid length. [ 258.082070][T13777] geneve3: entered promiscuous mode [ 258.082108][T13777] geneve3: entered allmulticast mode [ 258.088909][ T7411] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 258.089803][ T7411] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 258.089835][ T7411] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 258.096288][ T7411] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 258.308079][ T6258] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.309101][ T6258] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.309154][ T6258] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.309207][ T6258] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.669293][T13830] bridge0: port 1(dummy0) entered disabled state [ 258.824344][ T5627] Bluetooth: hci4: unexpected event 0x13 length: 321 > 255 [ 258.939143][T13837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.944173][T13830] syzkaller1: entered promiscuous mode [ 258.944195][T13830] syzkaller1: entered allmulticast mode [ 259.125505][T13858] netlink: 'syz.3.2040': attribute type 9 has an invalid length. [ 259.394998][T13870] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 259.409516][T13877] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 259.682386][T13908] xt_CONNSECMARK: invalid mode: 0 [ 259.819699][T13876] syzkaller0: entered promiscuous mode [ 259.819725][T13876] syzkaller0: entered allmulticast mode [ 260.617287][T13943] __nla_validate_parse: 24 callbacks suppressed [ 260.617306][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2060'. [ 262.654765][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 262.936711][T14006] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 263.064107][T14016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2078'. [ 264.017695][T14043] netlink: 'syz.6.2085': attribute type 64 has an invalid length. [ 264.017968][T14043] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.342663][T14062] netlink: 5032 bytes leftover after parsing attributes in process `syz.6.2089'. [ 264.342680][T14062] netlink: 6320 bytes leftover after parsing attributes in process `syz.6.2089'. [ 266.064154][T14019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.258948][T14073] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2092'. [ 266.804597][T14085] xt_REDIRECT: bad rangesize 26624. [ 266.842497][T14087] syzkaller0: entered promiscuous mode [ 266.842520][T14087] syzkaller0: entered allmulticast mode [ 266.954107][T14103] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2102'. [ 266.954132][T14103] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2102'. [ 266.979103][T14102] nbd: must specify an index to disconnect [ 267.008052][T14102] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2103'. [ 267.095116][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2102'. [ 267.149645][T14116] batadv_slave_0: entered promiscuous mode [ 267.153294][T14114] batadv_slave_0: left promiscuous mode [ 267.224111][T14117] netlink: 'syz.7.2106': attribute type 7 has an invalid length. [ 267.282220][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2108'. [ 267.282249][T14124] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 267.286020][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2108'. [ 267.286046][T14124] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 267.524396][T14139] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 267.539220][T14139] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2113'. [ 267.611766][T14144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2116'. [ 267.625923][T14145] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2116'. [ 267.751036][T14144] syzkaller0: entered promiscuous mode [ 267.751057][T14144] syzkaller0: entered allmulticast mode [ 267.902887][T14162] syzkaller0: entered promiscuous mode [ 267.902980][T14162] syzkaller0: entered allmulticast mode [ 268.058551][T14163] syzkaller1: entered promiscuous mode [ 268.058574][T14163] syzkaller1: entered allmulticast mode [ 268.140209][T14180] IPVS: Unknown mcast interface: lo [ 268.779284][T14220] lo: entered promiscuous mode [ 268.780392][T14220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.910536][T14223] syzkaller0: entered promiscuous mode [ 268.910559][T14223] syzkaller0: entered allmulticast mode [ 269.274491][T14249] netlink: 'syz.0.2147': attribute type 4 has an invalid length. [ 270.060984][T14309] syzkaller0: entered promiscuous mode [ 270.061008][T14309] syzkaller0: entered allmulticast mode [ 270.399139][T14321] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.551502][T14326] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 272.334184][T14406] nbd: must specify a size in bytes for the device [ 272.552915][T14422] sctp: [Deprecated]: syz.4.2191 (pid 14422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.552915][T14422] Use struct sctp_sack_info instead [ 272.680471][T14413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.216742][ T5627] Bluetooth: hci5: command 0x0405 tx timeout [ 283.326375][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 319.166376][ T5627] Bluetooth: hci6: command 0x0406 tx timeout [ 335.646884][ T31] INFO: task syz.5.1170:10358 blocked for more than 143 seconds. [ 335.646907][ T31] Not tainted syzkaller #0 [ 335.646924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.646936][ T31] task:syz.5.1170 state:D stack:26304 pid:10358 tgid:10357 ppid:8644 task_flags:0x400040 flags:0x00080002 [ 335.646991][ T31] Call Trace: [ 335.646998][ T31] [ 335.647011][ T31] __schedule+0x17db/0x58f0 [ 335.647064][ T31] ? __pfx___schedule+0x10/0x10 [ 335.647091][ T31] ? schedule+0x90/0x2b0 [ 335.647113][ T31] schedule+0x164/0x2b0 [ 335.647134][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.647185][ T31] __mutex_lock+0x7c1/0x1550 [ 335.647211][ T31] ? __mutex_lock+0x5d4/0x1550 [ 335.647232][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 335.647258][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.647284][ T31] ? kernel_text_address+0xa5/0xe0 [ 335.647306][ T31] ? __kernel_text_address+0xd/0x30 [ 335.647324][ T31] ? unwind_get_return_address+0x4d/0x90 [ 335.647350][ T31] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 335.647385][ T31] ? stack_trace_save+0xa9/0x100 [ 335.647404][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 335.647425][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 335.647453][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 335.647479][ T31] ? kasan_save_track+0x4f/0x80 [ 335.647499][ T31] ? kasan_save_track+0x3e/0x80 [ 335.647518][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 335.647539][ T31] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 335.647560][ T31] ? __alloc_skb+0x2c1/0x7a0 [ 335.647582][ T31] ? netlink_dump+0x1e7/0xee0 [ 335.647602][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 335.647619][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 335.647644][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 335.647668][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 335.647686][ T31] ? genl_rcv+0x28/0x40 [ 335.647708][ T31] ? netlink_unicast+0x7bd/0x940 [ 335.647726][ T31] ? netlink_sendmsg+0x813/0xb40 [ 335.647746][ T31] ? sock_sendmsg_nosec+0x13a/0x180 [ 335.647767][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 335.647784][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 335.647800][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 335.647817][ T31] ? do_syscall_64+0x166/0x520 [ 335.647834][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.647884][ T31] ? rcu_is_watching+0x16/0xb0 [ 335.647908][ T31] ? trace_kmalloc+0x2a/0xf0 [ 335.647931][ T31] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 335.647954][ T31] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 335.647973][ T31] ? netlink_dump+0x1e7/0xee0 [ 335.647990][ T31] ? netlink_dump+0x1e7/0xee0 [ 335.648017][ T31] genl_dumpit+0x10b/0x1b0 [ 335.648046][ T31] netlink_dump+0x711/0xee0 [ 335.648077][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 335.648107][ T31] ? genl_start+0x497/0x6d0 [ 335.648184][ T31] __netlink_dump_start+0x589/0x7b0 [ 335.648215][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 335.648247][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 335.648274][ T31] ? genl_get_cmd+0x523/0x960 [ 335.648305][ T31] ? __pfx_genl_start+0x10/0x10 [ 335.648330][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 335.648354][ T31] ? __pfx_genl_done+0x10/0x10 [ 335.648395][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 335.648429][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.648455][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 335.648497][ T31] netlink_rcv_skb+0x226/0x4a0 [ 335.648521][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.648550][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.648584][ T31] ? down_read+0x2be/0x330 [ 335.648609][ T31] genl_rcv+0x28/0x40 [ 335.648633][ T31] netlink_unicast+0x7bd/0x940 [ 335.648660][ T31] netlink_sendmsg+0x813/0xb40 [ 335.648690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.648719][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 335.648745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.648766][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 335.648792][ T31] ____sys_sendmsg+0x54e/0x850 [ 335.648818][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.648848][ T31] ? import_iovec+0x73/0xa0 [ 335.648879][ T31] ___sys_sendmsg+0x2a5/0x360 [ 335.648898][ T31] ? __lock_acquire+0x747/0x2de0 [ 335.648923][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.648947][ T31] ? futex_wait+0x2a2/0x390 [ 335.648996][ T31] ? __fget_files+0x2a/0x420 [ 335.649013][ T31] ? __fget_files+0x3a2/0x420 [ 335.649041][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 335.649065][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.649106][ T31] do_syscall_64+0x166/0x520 [ 335.649127][ T31] ? trace_irq_disable+0x3b/0x140 [ 335.649168][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.649194][ T31] ? clear_bhb_loop+0x70/0xc0 [ 335.649216][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.649234][ T31] RIP: 0033:0x7f99a799e1d9 [ 335.649250][ T31] RSP: 002b:00007f99a87ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.649269][ T31] RAX: ffffffffffffffda RBX: 00007f99a7c25fa0 RCX: 00007f99a799e1d9 [ 335.649281][ T31] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 335.649292][ T31] RBP: 00007f99a7a35888 R08: 0000000000000000 R09: 0000000000000000 [ 335.649304][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.649315][ T31] R13: 00007f99a7c26038 R14: 00007f99a7c25fa0 R15: 00007ffce9c042d8 [ 335.649345][ T31] [ 335.649357][ T31] INFO: task syz.2.1251:10727 blocked for more than 143 seconds. [ 335.649371][ T31] Not tainted syzkaller #0 [ 335.649380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.649388][ T31] task:syz.2.1251 state:D stack:26896 pid:10727 tgid:10721 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 335.649437][ T31] Call Trace: [ 335.649444][ T31] [ 335.649454][ T31] __schedule+0x17db/0x58f0 [ 335.649499][ T31] ? __pfx___schedule+0x10/0x10 [ 335.649525][ T31] ? schedule+0x90/0x2b0 [ 335.649544][ T31] schedule+0x164/0x2b0 [ 335.649562][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.649579][ T31] __mutex_lock+0x7c1/0x1550 [ 335.649602][ T31] ? __mutex_lock+0x5d4/0x1550 [ 335.649624][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 335.649652][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.649671][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 335.649700][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 335.649725][ T31] ? do_syscall_64+0x166/0x520 [ 335.649743][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.649776][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 335.649807][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 335.649848][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 335.649875][ T31] ? trace_kmalloc+0x2a/0xf0 [ 335.649897][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 335.649920][ T31] ? __nla_parse+0x40/0x60 [ 335.649950][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 335.649977][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 335.650011][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 335.650045][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 335.650083][ T31] ? bpf_lsm_capable+0x9/0x20 [ 335.650101][ T31] ? security_capable+0x7e/0x2c0 [ 335.650133][ T31] genl_rcv_msg+0x614/0x7a0 [ 335.650194][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.650221][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 335.650265][ T31] netlink_rcv_skb+0x226/0x4a0 [ 335.650288][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.650315][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.650351][ T31] ? down_read+0x2be/0x330 [ 335.650377][ T31] genl_rcv+0x28/0x40 [ 335.650400][ T31] netlink_unicast+0x7bd/0x940 [ 335.650432][ T31] netlink_sendmsg+0x813/0xb40 [ 335.650463][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.650492][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 335.650518][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.650538][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 335.650564][ T31] ____sys_sendmsg+0x54e/0x850 [ 335.650589][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.650617][ T31] ? import_iovec+0x73/0xa0 [ 335.650645][ T31] ___sys_sendmsg+0x2a5/0x360 [ 335.650662][ T31] ? __lock_acquire+0x747/0x2de0 [ 335.650686][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.650709][ T31] ? futex_wait+0x2a2/0x390 [ 335.650755][ T31] ? __fget_files+0x2a/0x420 [ 335.650772][ T31] ? __fget_files+0x3a2/0x420 [ 335.650798][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 335.650819][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.650874][ T31] do_syscall_64+0x166/0x520 [ 335.650894][ T31] ? trace_irq_disable+0x3b/0x140 [ 335.650913][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.650937][ T31] ? clear_bhb_loop+0x70/0xc0 [ 335.650960][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.650976][ T31] RIP: 0033:0x7f520e99e1d9 [ 335.650992][ T31] RSP: 002b:00007f520f889028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.651011][ T31] RAX: ffffffffffffffda RBX: 00007f520ec26090 RCX: 00007f520e99e1d9 [ 335.651024][ T31] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007 [ 335.651036][ T31] RBP: 00007f520ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 335.651047][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.651058][ T31] R13: 00007f520ec26128 R14: 00007f520ec26090 R15: 00007ffc062029e8 [ 335.651088][ T31] [ 335.651129][ T31] [ 335.651129][ T31] Showing all locks held in the system: [ 335.651139][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 335.651174][ T31] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 335.651248][ T31] locks held by getty/5380: 2, on CPU#1: [ 335.651260][ T31] #0: ffff888032afd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 335.651306][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 335.651366][ T31] locks held by kworker/u8:31/7418: 5, last CPU#1: [ 335.651378][ T31] #0: ffff8880567f9940 ((wq_completion)krds_cp_wq#6/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 335.651427][ T31] #1: ffffc9000602fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 335.651476][ T31] #2: ffff888045a8e780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 335.651520][ T31] #3: ffffffff8feac570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 335.651565][ T31] #4: ffff88801c0409d8 (&n->list_lock){-.-.}-{3:3}, at: fs_reclaim_acquire+0x7c/0x100 [ 335.651608][ T31] locks held by syz.1.547/7850: 2, on CPU#1: [ 335.651621][ T31] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.651667][ T31] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 335.651716][ T31] locks held by syz.5.1170/10358: 3, on CPU#1: [ 335.651728][ T31] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.651771][ T31] #1: ffff8880472c16e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 335.651814][ T31] #2: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 335.651861][ T31] locks held by syz.2.1251/10727: 2, on CPU#1: [ 335.651873][ T31] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.651920][ T31] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 335.651968][ T31] [ 335.651973][ T31] ============================================= [ 335.651973][ T31] [ 335.651989][ T31] NMI backtrace for cpu 0 [ 335.651999][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 335.652018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.652028][ T31] Call Trace: [ 335.652035][ T31] [ 335.652042][ T31] dump_stack_lvl+0xe8/0x150 [ 335.652069][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 335.652092][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.652121][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 335.652149][ T31] sys_info+0x135/0x170 [ 335.652168][ T31] watchdog+0xfd7/0x1030 [ 335.652192][ T31] ? watchdog+0x1c7/0x1030 [ 335.652205][ T31] kthread+0x38b/0x480 [ 335.652215][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.652225][ T31] ? __pfx_kthread+0x10/0x10 [ 335.652235][ T31] ret_from_fork+0x514/0xb70 [ 335.652247][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.652256][ T31] ? __switch_to+0xc89/0x1420 [ 335.652271][ T31] ? __pfx_kthread+0x10/0x10 [ 335.652281][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.652298][ T31] [ 335.652316][ T31] Sending NMI from CPU 0 to CPUs 1: [ 335.652356][ C1] NMI backtrace for cpu 1 [ 335.652369][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 335.652389][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.652400][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 335.652422][ C1] Code: 3b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 335.652438][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 335.652454][ C1] RAX: 0000000000132f67 RBX: ffffffff819bebe0 RCX: 8000000000000001 [ 335.652468][ C1] RDX: 0000000000000001 RSI: ffffffff8e46914c RDI: ffffffff8c6dd880 [ 335.652482][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 335.652496][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 335.652509][ C1] R13: 1ffff11003ed2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 335.652523][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 335.652539][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.652552][ C1] CR2: 00005571b12e0fc8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 335.652568][ C1] Call Trace: [ 335.652575][ C1] [ 335.652581][ C1] default_idle+0x9/0x20 [ 335.652603][ C1] default_idle_call+0x72/0xb0 [ 335.652627][ C1] do_idle+0x2e0/0x540 [ 335.652646][ C1] ? __pfx_do_idle+0x10/0x10 [ 335.652669][ C1] cpu_startup_entry+0x43/0x60 [ 335.652693][ C1] start_secondary+0x101/0x110 [ 335.652723][ C1] common_startup_64+0x13e/0x157 [ 335.652755][ C1] [ 335.653340][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 337.020248][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 337.029349][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.039383][ T31] Call Trace: [ 337.042653][ T31] [ 337.045568][ T31] vpanic+0x56d/0xa60 [ 337.049553][ T31] ? __pfx_vpanic+0x10/0x10 [ 337.054071][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 337.060071][ T31] panic+0xc5/0xd0 [ 337.063785][ T31] ? __pfx_panic+0x10/0x10 [ 337.068190][ T31] ? __pfx_debug_smp_processor_id+0x10/0x10 [ 337.074075][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 337.079089][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 337.085230][ T31] watchdog+0x1030/0x1030 [ 337.089547][ T31] ? watchdog+0x1c7/0x1030 [ 337.093973][ T31] kthread+0x38b/0x480 [ 337.098031][ T31] ? __pfx_watchdog+0x10/0x10 [ 337.102722][ T31] ? __pfx_kthread+0x10/0x10 [ 337.107300][ T31] ret_from_fork+0x514/0xb70 [ 337.111894][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 337.116985][ T31] ? __switch_to+0xc89/0x1420 [ 337.121668][ T31] ? __pfx_kthread+0x10/0x10 [ 337.126239][ T31] ret_from_fork_asm+0x1a/0x30 [ 337.130988][ T31] [ 337.134294][ T31] Kernel Offset: disabled [ 337.138611][ T31] Rebooting in 86400 seconds..