last executing test programs: 3m58.836170978s ago: executing program 2 (id=903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 3m58.616001131s ago: executing program 2 (id=906): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(0x3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000100008000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300001de2000800"/18], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000ac0)={&(0x7f0000000680)="d96a0b51eac60b9f8e7c976ce83de01c9d73b139d574a31eb408e9f4f7a7ec99ca8ef8edd0c0556946bcafe19aef3c2de1dffe737717ee1f16e78fee7bab1deab76cc177755a05a0906b3e7c499e210a1c04abd3ba647183016b3de2dd49171569fd006c7412637e48cfe71dcc30d307d0fc100a0aeaaf1258e3dce2d0edac092cad0de46798e5e7eef25b5b297304de5fc8bceb43fdf785a734f2b66a9813cc9b8abc11bd36de31063fc128ca4f243f960dd6aef6abfa5d636b5346405af545e57975ccf60d6ae5c6b5fabdccc1", &(0x7f00000007c0)=""/35, &(0x7f0000000800)="4a46727e76c78e116b068fc1fb2de2342451354c1ae2404ee4abd979649f8366f8fb9eb97f8eeb98f5141fdfab8683ff79708696397cc57fd13d32dd7dd36d28c4c4495abc5f40ff88a98a5d16c456c4d4c9a37aeb4b", &(0x7f0000000880)="ca99550fa4ba5cb133eb13a15dedf72e54026a54e3d30b66c6ff017a851c7af046c33426c045e920c66ac746f838bd778633ae7540d9d9596acae7397aea0ded02734469d54d21f3a1d56705577916c74334b04d0a12eb5a2862a532ee4fac3dd921c58f4c7e8c648ae69c274b172884639e0bc5530141d7c01fbdc316650b6c705033acbe3605e64aa22d90a0e85449eceecfa988a0ac2edcf28354ee818d8566dd9929218545fbbd7d89129029b1da5856f680d6344d1d9ff1b670c9811867e41eaf68fa41c2eb14f1c353534ad19d27d8b370efafe19a674444fb8d782de1221cbbfd25b1fb1812cdaab806", 0xe8d3, r8}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0x100, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x8fb4, 0x4}, &(0x7f0000000440)=0x90) r10 = socket(0x23, 0x80805, 0x0) listen(r10, 0x0) accept4$tipc(r10, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000580)={r9, 0x78, &(0x7f0000000480)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}]}, &(0x7f00000005c0)=0x10) 3m57.003368003s ago: executing program 2 (id=920): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x48, 0x1}, 0x18}}, 0x0) 3m56.709731241s ago: executing program 2 (id=924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x9, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf8a544}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0xc, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000003c0)={0x10000, {{0xa, 0x4e24, 0x10000, @mcast1, 0x3}}}, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r9], 0x24}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 3m56.188987019s ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r1) close(0x3) 3m55.799166578s ago: executing program 2 (id=935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010700000000000000000d"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000002700090025bd7000ffffff7f060000008b0dc18bdddacb99d80ddbedfd793510caa1608b4a1a2dbd1aa4c47ed7086e86a3de0b4ec0401ab5dec88402dfef865bf847df208596ac44e3735a02b9a0628dfb5d8e89f41a876012bdb10442a9e76727886a74530086ef59"], 0x14}}, 0x4000080) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRESHEX=r0], 0x38}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r6 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20040040) recvmsg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x400040fd) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x9}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000e8dbdf251c0000000800030003000000080004000000000008000400ffffffff08000100", @ANYRES32=r5, @ANYBLOB="0800030005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80c8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x0, 0x20, @remote, @dev={0xfe, 0x80, '\x00', 0x7}, 0x20, 0x40, 0x3, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="00010000", @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf251200000008000900fbffffff80000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e000000000000140002006272696467655f736c6176655f3100001400020076657468305f766c616e00000000000008000300010000001400020076657468305f746f5f62726964676500080003000200000008000600000000000800070000040000080006000700000008000600dc06000044000180140002006272696467653000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="1400e595674eff6338280000000000000008000200", @ANYRES32=r13, @ANYBLOB="0800030002000000"], 0x100}, 0x1, 0x0, 0x0, 0xc0c0}, 0x800) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x4000040) r14 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000003ac0)={0x0, 0x0}) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@loopback, 0x4e23, 0x2, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x27}, 0xfe, 0x6c}, @in6=@loopback, {0x0, 0x0, 0x2, 0x8, 0x1, 0x9, 0x7fffffff, 0x8000000000000543}, {0x5, 0x8000000000000001}, {0xfffffffd}, 0x70bd2c, 0x3504, 0xa, 0x4, 0x0, 0x2d4363205ffec2a2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd24, 0x1, 0x70bd2d, 0x7}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) recvmmsg(r14, &(0x7f0000003980)=[{{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/185, 0xb9}], 0x5, &(0x7f0000000c00)=""/88, 0x58}, 0x1}, {{&(0x7f0000000c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/4, 0x4}, {&(0x7f0000000d40)=""/234, 0xea}, {&(0x7f0000000e40)=""/245, 0xf5}], 0x3, &(0x7f0000000f80)=""/123, 0x7b}, 0x80a}, {{&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/242, 0xf2}, {&(0x7f0000002180)=""/226, 0xe2}, {&(0x7f0000002280)=""/12, 0xc}, {&(0x7f00000022c0)=""/103, 0x67}, {&(0x7f0000002340)=""/126, 0x7e}], 0x6, &(0x7f0000003b40)=""/123, 0x7b}, 0x103ff}, {{&(0x7f00000024c0)=@in, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002540)=""/189, 0xbd}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/227, 0xe3}, {&(0x7f0000003700)=""/104, 0x68}, {&(0x7f0000003780)=""/6, 0x6}], 0x5}, 0x95c9}, {{&(0x7f0000003840)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003940)=[{&(0x7f00000038c0)=""/109, 0x6d}], 0x1}, 0xf}], 0x5, 0x20, &(0x7f0000003b00)={r15, r16+60000000}) 3m40.679244221s ago: executing program 32 (id=935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010700000000000000000d"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000002700090025bd7000ffffff7f060000008b0dc18bdddacb99d80ddbedfd793510caa1608b4a1a2dbd1aa4c47ed7086e86a3de0b4ec0401ab5dec88402dfef865bf847df208596ac44e3735a02b9a0628dfb5d8e89f41a876012bdb10442a9e76727886a74530086ef59"], 0x14}}, 0x4000080) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRESHEX=r0], 0x38}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r6 = socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20040040) recvmsg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x400040fd) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x9}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000e8dbdf251c0000000800030003000000080004000000000008000400ffffffff08000100", @ANYRES32=r5, @ANYBLOB="0800030005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80c8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x0, 0x20, @remote, @dev={0xfe, 0x80, '\x00', 0x7}, 0x20, 0x40, 0x3, 0x9}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="00010000", @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf251200000008000900fbffffff80000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e000000000000140002006272696467655f736c6176655f3100001400020076657468305f766c616e00000000000008000300010000001400020076657468305f746f5f62726964676500080003000200000008000600000000000800070000040000080006000700000008000600dc06000044000180140002006272696467653000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="1400e595674eff6338280000000000000008000200", @ANYRES32=r13, @ANYBLOB="0800030002000000"], 0x100}, 0x1, 0x0, 0x0, 0xc0c0}, 0x800) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x4000040) r14 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000003ac0)={0x0, 0x0}) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@loopback, 0x4e23, 0x2, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x27}, 0xfe, 0x6c}, @in6=@loopback, {0x0, 0x0, 0x2, 0x8, 0x1, 0x9, 0x7fffffff, 0x8000000000000543}, {0x5, 0x8000000000000001}, {0xfffffffd}, 0x70bd2c, 0x3504, 0xa, 0x4, 0x0, 0x2d4363205ffec2a2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd24, 0x1, 0x70bd2d, 0x7}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) recvmmsg(r14, &(0x7f0000003980)=[{{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/185, 0xb9}], 0x5, &(0x7f0000000c00)=""/88, 0x58}, 0x1}, {{&(0x7f0000000c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/4, 0x4}, {&(0x7f0000000d40)=""/234, 0xea}, {&(0x7f0000000e40)=""/245, 0xf5}], 0x3, &(0x7f0000000f80)=""/123, 0x7b}, 0x80a}, {{&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/242, 0xf2}, {&(0x7f0000002180)=""/226, 0xe2}, {&(0x7f0000002280)=""/12, 0xc}, {&(0x7f00000022c0)=""/103, 0x67}, {&(0x7f0000002340)=""/126, 0x7e}], 0x6, &(0x7f0000003b40)=""/123, 0x7b}, 0x103ff}, {{&(0x7f00000024c0)=@in, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002540)=""/189, 0xbd}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/227, 0xe3}, {&(0x7f0000003700)=""/104, 0x68}, {&(0x7f0000003780)=""/6, 0x6}], 0x5}, 0x95c9}, {{&(0x7f0000003840)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003940)=[{&(0x7f00000038c0)=""/109, 0x6d}], 0x1}, 0xf}], 0x5, 0x20, &(0x7f0000003b00)={r15, r16+60000000}) 2m35.91665961s ago: executing program 5 (id=1568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@remote, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @broadcast, @broadcast, @multicast2}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) syz_emit_ethernet(0xef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011164e907573ad2ebc6c103d50724e5a9faa840ae7fb550dea827990c1784670fd4fb1f18cc838fdf17582d514579be57da7561c1f4420c319281e313a59426b48de059c6eb0c59a5b419a8f32592d1c73084589e4ab3df0c53da20735439e9c4d1a8b8d25843581608c254d948d33828995927e6800a80e3a508a58eb1d44b445983ef9a405c59f7bf3c38b013ef90f1cb17cac01cc3ebe7ba48163e299fcb4ca04ea7a912732839a60f40f5d57622de869ab367b423edd8a32d8a7f5e4c0e1d2402e4c67f7a4263266d2ad0a282790b6b8fc73f81df94ab94f"], 0x0) 2m35.614936766s ago: executing program 5 (id=1572): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x400000000000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48085}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x2}, {0x8f9b}, 0x100, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x1b2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000e0000000000000000c82000000dd8149b56ce4c157c8daa97db8097e3612e8bae11973ff880901b668a7215301d2bc0bd4e71b77e53ac9bf68e324650fd0a6663fe3d1f8533ca9e6049f4b8daea8271214bf9fb78fdb30e657becd90928bf7031833e7d9f372f2b639efb41cd56e777800002e744584f65570258d3fdb5cbe40e23b4344dd9751000000dda95dba7d9327989c5d1d088189967f48064694d575e35e0d979617714924626b93f70674100c82a483bfb12b74bc0cd099b60aece9b2e2c450f07b6dac687495cb5665d8f98238fc7467c505d945a09200000000"], 0xec}) r6 = socket$inet6(0xa, 0x3, 0x7ffefdff) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r6, 0x0, 0x0, 0xbb8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @local}, 0x1c) 2m35.385619168s ago: executing program 5 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=@newtfilter={0x124, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0xc, 0x5, 0xe, 0x8, 0xfff, 0x1, 0x1, 0x6, [{0x80000000, 0x6, 0x7fffffff, 0x2}, {0xcc61, 0x8, 0x800400}, {0x2, 0x34b, 0x4, 0x5}, {0x4, 0x307, 0xfffffffc, 0x5}, {0x7, 0x1, 0x10000, 0x10}, {0x1, 0x4, 0x800, 0x1}, {0x0, 0xffffffff, 0x80000001, 0x266e}, {0x7, 0x9, 0x8, 0xfffffffd}, {0x631b, 0x6c75, 0xa3, 0x1}, {0x10000, 0x2, 0xf, 0xbd7}, {0xd685f1d, 0x0, 0xfffffff8, 0x80000001}, {0x2, 0x2, 0xfffffffd, 0xfffffff7}, {0xffff, 0x1, 0x8, 0xff}, {0x3, 0x8, 0x2a7, 0x7}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 2m31.016701818s ago: executing program 5 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2m30.636683902s ago: executing program 5 (id=1592): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback, 0x0, 0x0, 0x1a7, &(0x7f0000000740)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000900)={0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\b\x00\x00\x009\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="cd100d37acb6ca072389dfe69a64a0af55de8e9342e1769f216b6595aa3eefe8555089e2a6d1726566ecdc2aef688442d4055df9318db6fed8ec21d99854494f3488a78c37150bbcdff687d41c1d7faf5cc8bd82bc75d54fb05ef22688e9de6a2e5a6682c6d657bf7e143c7ba1df88989cd81510b61e8818bef2192b5756ede23efd76ed24121f51add868fa6bcc86490b334142cc1ced2b8d6d7c16f86a947a53560f4d94e2d486a6a5efe993a0d072a69b29135c441583fc231ac6cc398a40b3d5013296a7baca88df1aee77353c2f7b5199428d0a410b37c6f1d76d8ca928903bf05068a8c97894668b4ef528", @ANYRES32=r4, @ANYRES64=r1], 0x20) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) r10 = socket(0x10, 0x803, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) (async) sendmsg$key(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x2, 0x2, 0x1, 0x2, 0x34, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bbf, 0x525c, {0x6, 0x3c, 0x7, 0xff, 0x0, 0x9, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0}}, @sadb_x_sec_ctx={0x21, 0x18, 0x9, 0x6, 0xfd, "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"}, @sadb_lifetime={0x4, 0x3, 0x10000, 0x81, 0x4, 0x3}, @sadb_lifetime={0x4, 0x2, 0x5, 0x400000008000, 0x9, 0x5}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x1a0}}, 0x80c1) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) (async) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32) r15 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xc68}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 64) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (rerun: 64) 2m30.280431243s ago: executing program 5 (id=1598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xfffffffffffffe32, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x1, 0x11, 0x0, @private1, @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r5 = socket(0x1e, 0x5, 0x0) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140a, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x20004020) 2m14.961175854s ago: executing program 33 (id=1598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xfffffffffffffe32, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x1, 0x11, 0x0, @private1, @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r5 = socket(0x1e, 0x5, 0x0) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140a, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x20004020) 2m9.286991958s ago: executing program 4 (id=1750): sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) (async, rerun: 64) r0 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x29, 0x7, 0x5, {0x10, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x4e23, 0x4e23, 0xb}, {0x0, @random="11e508bee0e3", 0x9, 0x8, [0x4, 0xffffff90]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x100, 0x14, 0x1, 0x9}, {0x0, @random="204a59a02eaa", 0x6, 0x8, [0x4, 0x7ff]}, 0xfffffffffffffffc, 0x2}}}) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d3a0ed90b321db41dab6e37129", 0xd) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000600), 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3b25fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m8.75238263s ago: executing program 4 (id=1752): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007c, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05080000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180070001007274000014000280080001400000000a080002400000002408000b40000000000900010073797a30"], 0xd4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) 2m8.454919482s ago: executing program 4 (id=1758): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000003c0)) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x134, 0x30, 0x1, 0x0, 0x0, {}, [{0x120, 0x1, [@m_ife={0x11c, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x931}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xcd, 0x6, "0ec8cbe991fd4fe4e75cd13aca51836a64e6f6b579ebcf47ef64bbf4e4245c324519a2bd5a0f388a396317cc6752c6234589373e935f885f5727cd64407e8101a101a95d2352cc3ea6ad03f377a408c35505793f6e8b4f906526f39594c8687d40ff03b0ff930b5937233dae7779ad5e4bc8c23bfee2750683310aac7770c7e3f51644fc5e652e02b801a90e0f521df9befc2afb9b5ecd93d4eee6f63e390668af500f9f712b24ee8c83df42b2e932c2d80794cf7877b3fc81b43627de78e82bb45b0f438d66db4a49"}, {0xc}, {0xc}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000003c0)) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x134, 0x30, 0x1, 0x0, 0x0, {}, [{0x120, 0x1, [@m_ife={0x11c, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x931}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xcd, 0x6, "0ec8cbe991fd4fe4e75cd13aca51836a64e6f6b579ebcf47ef64bbf4e4245c324519a2bd5a0f388a396317cc6752c6234589373e935f885f5727cd64407e8101a101a95d2352cc3ea6ad03f377a408c35505793f6e8b4f906526f39594c8687d40ff03b0ff930b5937233dae7779ad5e4bc8c23bfee2750683310aac7770c7e3f51644fc5e652e02b801a90e0f521df9befc2afb9b5ecd93d4eee6f63e390668af500f9f712b24ee8c83df42b2e932c2d80794cf7877b3fc81b43627de78e82bb45b0f438d66db4a49"}, {0xc}, {0xc}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 2m8.146965026s ago: executing program 4 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xc00}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0xfc, 0x28, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff2}, {0xfffc, 0xfff3}, {0x10, 0xffff}}, [@c_cbq={{0x8}, {0x74, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x4, 0x1, 0x10, 0x8, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x4}, 0x2, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x35, 0x3, 0x1e, 0xd, 0x3, 0x4, 0x4, 0x7fff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x2, 0x4, 0xe, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x72, 0x2, 0x5, 0x7, 0x7, 0x2e}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x10, 0x2, 0x14, 0x69, 0x8, 0x101, 0x7fffffff, 0x9}}]}}, @c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x7, 0x8, 0x4, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x2, 0x10, 0x3, 0xc, 0x12, 0x5, 0x8758}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x33, 0x0, 0x14, 0xf, 0xfffffffa, 0x9, 0x6, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x2, 0x100, 0xf001, 0x10, 0x7}}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40040) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x140a, 0x9, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x2004c014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101}, 0x50) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000100000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001608000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c5}, 0x40840) 2m7.549856277s ago: executing program 4 (id=1767): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)="845bbcba7101ebb21ef5a286ffecef1a8dea23ef57960c8e052b252e6620a34c27fc353d82d6c5c27a269e28c26b4f984dbcd2dcb495e1a7ba", 0x39) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 2m6.964743427s ago: executing program 4 (id=1772): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x1, 0x43e) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d, r6}, 0x10, &(0x7f0000000380)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000059365f4336e77c782fb1dcb86dfa8ad831c05245c1b68935dce3d06947c6b9867345196e5932f703f5a60647ff510c9fabb287f756ded3a87424b7cb", @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf25070000000c0006800800060001000000080004000180000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40091) 1m51.854694485s ago: executing program 34 (id=1772): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x1, 0x43e) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d, r6}, 0x10, &(0x7f0000000380)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000059365f4336e77c782fb1dcb86dfa8ad831c05245c1b68935dce3d06947c6b9867345196e5932f703f5a60647ff510c9fabb287f756ded3a87424b7cb", @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf25070000000c0006800800060001000000080004000180000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40091) 3.009882742s ago: executing program 7 (id=2629): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380"], 0x48}}, 0x0) 2.679522258s ago: executing program 7 (id=2634): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000011c0)={{0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x191002, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x257]}, {0x5ed, 0x2, 0x8, 0x5}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x3}, {[0x0, 0x5, 0x6, 0xb]}, 0xcb5d, 0x1000, &(0x7f00000001c0)=""/4096}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7d29, 0x0, 0x0, 0x0, 0x200}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00'}, 0x94) 2.455355551s ago: executing program 7 (id=2637): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000881) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000280)=""/195, 0x83d00, 0x2b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async, rerun: 64) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r6 = socket(0x1, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000003c0)={0x1d, 0x0, 0x1, {}, 0xfd}, 0x18) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@getchain={0x44, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb}, {0x7, 0x4}, {0xa, 0x3}}, [{0x8, 0xb, 0xfff}, {0x8, 0xb, 0x5202}, {0x8, 0xb, 0x165}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c064}, 0x98) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x11, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 2.422581315s ago: executing program 3 (id=2638): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x7, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.090174896s ago: executing program 0 (id=2643): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 2.024842252s ago: executing program 3 (id=2646): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000042000000400000d644ad87e4c2290a6edbf5d020000000000000075e8f30dcb6c0cf060797f1c14a931acca72a1ec1763d29d30638599c9d161ad499200ce7d73e3d103861652631be343e5a433b4a6d8af068334641f7c4186abb7d7c0cb88075e42847461984cf6b191590eb382dccaee13234103166ffe62b22175a118926e0f8f62b288de536b8e6ddd2cfa2a7f617745cd34a7c7c87c06a05e1937855e5a78b3016e9ecce5f038786ac06498d4af6dbb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.987842259s ago: executing program 0 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff2, 0x8}, {0xfff1, 0x7}, {0x0, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x0) recvfrom$llc(r3, &(0x7f0000000340)=""/232, 0xe8, 0x100c0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x410, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8958}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8048}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000800)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x3, 0x1, 0x1, 0x0, 0x80, 0x8}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), r8) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000004}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=r2, 0x9, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0]}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000b40)={0x7, 0x7f, 0xe5f, 0x7, 0x3}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r11, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48011) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$alg(r6, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000cc0)=0x9, 0x4) 1.903959854s ago: executing program 7 (id=2648): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={r5, &(0x7f0000000100)=':[\x00', 0x80, &(0x7f0000000140)={@align=0x19c, {0x7ff, 0xa, 0x100, 0x100000000}}, 0xfffffff7, &(0x7f0000000180), &(0x7f00000001c0)=0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000003000000090000008000000002000000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000001bf51a9b706c83b9aa3e8c719933a2ffff3bd2d7697a76dc681f5b41664df92d37c51207380a50d61756e1002894c523764676966dce6f25dc6057328e55a1ecdd4cd0d6edf9cb6c341dddc6bdb023965054b95cb2ec5a0337dba38e40ecfeeaf42b5f1fdc8d25163a7e04b30058a6d2cbe149eee9668e04677124e5e41f6664e6ac6db0789fc3ce73799a961ea0af4932eb0b5bbca8b5143c627bf72babe3cb1838bb56", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05000000020000000300"/28], 0x50) close(0x3) 1.795812138s ago: executing program 6 (id=2649): r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r4 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) (async) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xe, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000001280)={0x0, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000001180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x1409, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4aeecc1539319221}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x8, 0xe, 0x0, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x65, 0x0, 0xf0, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, {[@end, @generic={0x44, 0xa, "3186b64e892d60cc"}, @cipso={0x86, 0x1f, 0x2, [{0x1, 0xe, "dd255b2fbd430b938c9cbf10"}, {0x1, 0x3, 'b'}, {0x5, 0x8, "38580dc4b717"}]}, @timestamp_addr={0x44, 0x14, 0x4b, 0x1, 0x9, [{@loopback, 0x1}, {@private=0xa010100, 0x2}]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x2, [{0x0, 0x9, "a173cc856d259c"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x87, 0x3, 0x5, [{@remote, 0x2}]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0xffff, r8}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40042) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="98020000110001040000000000000000000017ff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x15f}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x24}}, 0x20048000) (async) bind$phonet(r0, &(0x7f0000000480)={0x23, 0x1, 0x22, 0x5b}, 0x10) 1.63817746s ago: executing program 3 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x8, 0x9, 0x0, 0x201, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 1.391204214s ago: executing program 3 (id=2652): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYRES8=0x0], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.368497394s ago: executing program 0 (id=2653): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 1.360382756s ago: executing program 7 (id=2654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xec}}, 0x0) 1.220274366s ago: executing program 6 (id=2655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) 1.216738575s ago: executing program 1 (id=2656): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=')\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0xf5, 0x3]}, {0x7, 0x0, 0x80000001, 0x1}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000001c0)={0x0, 0x7211, 0x0, [0x10, 0x4, 0x3, 0xa1ef, 0x3], [0x40, 0x7, 0x10, 0x1, 0x8, 0x80000000, 0x100, 0x5, 0x3, 0x5, 0x0, 0x726a12fd, 0x1, 0x7, 0xfe00, 0x2, 0x7, 0x2, 0x9, 0x1000, 0x5, 0x4bd, 0x9, 0x7, 0x8, 0x1000, 0xc2, 0x2, 0x4, 0x5d, 0x6, 0x770, 0x8, 0x5, 0x2, 0x1, 0x800, 0x0, 0x800, 0x0, 0x3, 0x5, 0xc, 0x10000, 0x2000, 0x7ff, 0x9, 0xfffffffffffffbff, 0x3, 0x1, 0x6, 0xd, 0x9, 0x80000001, 0xffffffff, 0xff, 0x6, 0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x10001, 0x100000001, 0x1000, 0x0, 0x7, 0xc880000000000000, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x800, 0x1000000000000, 0x8, 0x6, 0x4, 0x7, 0x47, 0x3, 0x0, 0xe, 0x5289, 0x6, 0x101, 0x3ff, 0xffff, 0xfffffffffffffff8, 0x6, 0xb3a, 0x2, 0x7, 0x2d59, 0x2, 0x5, 0x9, 0x401, 0x4, 0xffffffff, 0x7, 0x343, 0x6, 0x8000000000000001, 0x8, 0x3, 0xd51, 0x40, 0x9, 0x8000000000000000, 0x3, 0x1, 0x6, 0x4, 0x7ff, 0x6, 0x3, 0x29ec, 0x3565, 0x9]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={r1, 0x1}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xc, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x71, 0x5}, @union={0xc, 0x5, 0x0, 0x5, 0x1, 0x80, [{0x1, 0x4, 0xfffffff0}, {0x9, 0x4, 0x401}, {0x1, 0x4, 0xfe}, {0x7, 0x1}, {0xf, 0x3, 0x722}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0x5}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x61, 0x0, 0x61, 0x61, 0x61, 0x5f, 0x1e]}}, &(0x7f0000000ac0)=""/13, 0xa4, 0xd, 0x1, 0x101}, 0x28) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x40010, r2, 0x66258000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000b40)={'pim6reg0\x00', {0x2, 0x4e20, @multicast2}}) readv(r2, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/147, 0x93}], 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x102) shutdown(r0, 0x0) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000d80)=0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000dc0)=0x10, 0x4) (async) sendmsg$rds(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000e00)=""/190, 0xbe}, {&(0x7f0000000ec0)=""/206, 0xce}, {&(0x7f0000000fc0)=""/133, 0x85}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/248, 0xf8}, {&(0x7f0000001240)=""/40, 0x28}], 0x6, &(0x7f00000016c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xe4}, @cswp={0x58, 0x114, 0x7, {{0x526, 0x7fffffff}, &(0x7f0000001300)=0x100000000, &(0x7f0000001340)=0x7, 0xfe, 0xee6d, 0xf2, 0x2, 0x2, 0x38d}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffeffff, 0x7f}, &(0x7f0000001380)=0x100, &(0x7f00000013c0)=0xa0, 0xf, 0x2, 0x80000001, 0x1, 0x20, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x82, 0xfff}, &(0x7f0000001400)=0x3, &(0x7f0000001440)=0x1, 0x3, 0x7f, 0x100000001, 0x3, 0x5dbbf09c438e0997, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0xfffffffc}}, @rdma_args={0x48, 0x114, 0x1, {{0xfff, 0x33f}, {&(0x7f0000001480)=""/120, 0x78}, &(0x7f0000001600)=[{&(0x7f0000001500)=""/119, 0x77}, {&(0x7f0000001580)=""/122, 0x7a}], 0x2, 0x10, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7df1, 0x3ff}, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680)=0x7, 0x1000, 0x1, 0xaf2, 0xd7b7aa0, 0x0, 0x4c1417f9}}], 0x1d8, 0x8000}, 0x20000084) (async) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000001900)=0x7) (async) sendmmsg(r0, &(0x7f0000003d40)=[{{&(0x7f0000001940)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @private=0xa010102}, 0x0, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000019c0)="77dc52eeda2401e81d17fba9d6314c6e8dcdf6046f9170a23ec13a234f52e4", 0x1f}, {&(0x7f0000001a00)="4d2a689f567c92b3cb85dacf210bbf317fb30e3d7b29b499603e1f325cefaf473a37bbb4c8895aa33256e6234758e5a2aa7ca9d8cbf9a36a33a4d4742c82b007019ff47775e0da2d5d2d41b6c0eda591b57347fbd0bc718776296f139a050a84de3abd75ea069069ec5d670c3285110edd2f922b970f38ed41df5bf60ebd09471c5352bd7875eee8e2dc2f9a3dc9e855ab2f22d440e2462f48d95a95f3f70b147dea4003dced7b7c47fe54196fb56de8d27e67f5dff36d137f7211befbb23b49f7f12659d1dd03364c25de31acbb863807264b0042e03494cb40bf4a5a89d7a46dd58e1a04aab8e0", 0xe8}, {&(0x7f0000001b00)="2bf569bdeaee59631a6f44853b4242d4f90ee6384f1ed73d4f03dfd73f8f1b22591e9d13713b6ac662cdc257b73bd2bde1ae7d50d816811795faaff409bf40d374792dedb11312c1c4269936b3607a93c9f59fff3ade6e6045965736a5c0b14b0f11", 0x62}, {&(0x7f0000001b80)="3b0825eaef126be8f21b066285657ea03cbe34c55de14ffa49ca98f1ac99ede10fffcf1efa1baf08e72588ee84e06e8bf9c0a98b37631ef4e18ce62fbb4ad31dac7257f9857e9cea04b00cbd2b327b976b47486f35ebfa0f1471797a470541951a0206a7440b408b2953f4f927bfce15ac1a9ce45bb8620c816073bbb7ef11afb7e59ec0c257305b424f", 0x8a}, {&(0x7f0000001c40)="d98378bdf40bfa", 0x7}, {&(0x7f0000001c80)="167a840314a7", 0x6}], 0x6, &(0x7f0000001d40)=[{0x18, 0x108, 0x1, "45b716"}, {0xd0, 0x118, 0x5, "02c46094ae43605185cf7240756dc4b54478d3701a4160c84c1800d15f7d3075800fc9ddd9bd4e81898da27034d4cc247dc7fd0d3894f00a3fa0ee37c2ac44b1315d36abdf37826df53e4dffd1e7d51970c810042f404533feb5a4a87c6681c5376dcdeb286e4597fe544bfbafee127baf3968fdf4e15be02719cbb398a854bfe25fcd48cf4769821908a3997484dace5199b60012b16b52d4bca1eacdd960acf9174666cdabd0c3300ab243192ba773713883841480528a1fcfd877"}, {0x90, 0x111, 0x1, "39cdab453f4634f394a6a3ecdc568178c1372e0309a31736b040123872eaa89cf02f2fa8dfc84bddfb544fefd519f60bb2d7261f8bb56c172e83f2da8d1db46c83c034b388a19f14bb6b3b75d61e90617ea94976f5cc115270fb016956041cd5c798cf726401133fb1c540c0cf14386395f3ee5f1bbd75df8cad0c592a28"}, {0x18, 0x115, 0x6, "3180f4743130b9"}], 0x190}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f00)="9c03b1bf14a88ceb6922cc54b66e687b07753ebe3901092bae99a5be1eae7f6be0f65ee21b3aef0cdd7622ce0df439db90da32df081f5cf2963e6e46a4608769e830cbbb7f8f03e4c6125c63f68edde28bd9df45499e151ea8ec32297100ee3f77a0fa7aa1bc3bd07531ad6d349a1e9ff7710c5edd5c52717ee508ec", 0x7c}, {&(0x7f0000001f80)="eeca7d9811888830d30b12cc4bdee3a15a032895d29a45c3442f15da17889a77f04ffe37d70a68c0694f61fc4d48f2282632f97858b9ac46cf8645733a996c4f4f6cfd5876c8ed9be891d680732e602f15b68e6983cc3d51d42a0cf6594055c37e5fb63846c73fc5c4e3bcfb", 0x6c}], 0x2, &(0x7f0000002040)=[{0x50, 0x3a, 0xf, "db0486fba45a2456fec334455408e0731917f5a1fe0ef10ac766048c7cfc05ab8394a1cf6f3ada84a6b43f48cae6056ce82648ab51f0a0b4c28360e338fd"}, {0x50, 0x119, 0x7, "1ee411655608d2cec1dc3ce3ae873bd005e52b489f071307579061ab32855ef25ba47db76c00461632ca27c54beaef66b2762ada2439c5568c8e944e"}, {0xb0, 0x29, 0x4, "40c64f8b06cd6a05624f586663213e31e6bd7d1e209b848b27dc8941ccb28b2a11dbe69e48934cba097aa5aa4842ec457dd0b4876c17ca9f17e1ceee85a23da7f7057e41e6deab95846091fe1ab5c9f26a0997b7a1316ad22cec3ea99604b03b7cc7fd2588e8358cca3cb18c95b714debbef6fd332eac9555c5c9e007c42732d534ec19b39398445f939126affaa1b739942f2c3606c97ca1f447b"}, {0x78, 0xff, 0x6, "1333714e1a366bf4ff17df1e6801db15a7c70e6680416f90b90e6000e6c24025a7b1eb17a56e9ed8859786c1983e9367095f4b8aec8f198eb833092ae05c0efeca273afb9db094a687e21b9aecd55078a7312ce04e49ceb019e601afe8259a82ce29f6ac"}, {0x100, 0x10c, 0x1000, "8d3753362e0ad8f566050543422173adfd7d0f650722d2e0e1d034174404579e36d2c45a04f54767841361762b3de8218bb7c110233fab4ad813bc8cfff2440952cc76121c711a874b88d5043755759a438c6dfbc2bfd8ef5949e05157de85c0ffd9848b0114bbf556206440b73cb7c55a11fc4fd4b557adc311f972c7895b078889f04352b0db579a93ac4919b520238f814e5889c74800b9420d8e1034b371289292278661fdabbac4fb9b1a74cc19b6960c7ee30ba956a058f09edbeb493cca01d6421669a3e32c8e77fadbb0333565175156525294a60ab439b4ad75fddd6e0502bea251efdd706de787"}, {0xe8, 0x115, 0x5, "a9b2e9172b7216143348653fc833ca4e903242a5028e9a8b49d69a1472233b133620956d190d9bd3831fe082db02c0ac9f894de1174b490f2b1dea20c22b0d7a1f218cbdd9b803b9d237885eef61d6ef80e874745382dc8af81274582fc66b82d53bc57c6e93825575111fceb44a84048b8b7a845bbb38f526180db9e3ff30ac5cfee19b9e34f43fa9cf90fa28dd1dc33bfaea6a08fff1096f39b31d0d51d451ca90218dfeb6e1d057528e62ae3b96325d4db1f5bfd48b35bc9ca7b45ccfd913f6b5bf997fea0beea6b7e20cf2691ce388ec"}, {0x20, 0x11, 0x2f, "5480684effa027b9ec9e11a0cc2f3795"}, {0x28, 0x108, 0x8, "6263c049181235563adbfa50566da1692615"}, {0xc8, 0x108, 0x543, "54a2ee549e97fa69a9d24d461a7e78b25552266c687b03209a88d34e16001074dc2b39088d6dc1dd9d3ca0607e0a59dfa3db1e18354e038fcf778549c78e5dd043783b41cbc0b1b4f502728e2f34bb6c57e56c5baf9ba0bf90945debd114e8f57713e1124312c972dd613586510b4c1dc90d130da6f708f13612c206293029c2eed81518f692350c576b9adefb5d71fa6f22b797914716b310f6bc762c405de395094dd524d93727c2b401c9df5bc71f74904b"}], 0x4c0}}, {{&(0x7f0000002500)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003780)=[{&(0x7f0000002580)="e1ab", 0x2}, {&(0x7f00000025c0)="0cc2a1221a87c05c1a167444971add49db3a01a3a307da7df2b900b4efeca7c45676df5bd056e15dcc6903bcb0e8f4fd7e9304ddd0926dd6454d53a341c3434a0163586a873bf1b047faada38d52446f6686405248d820c9a232c39453f0fe163e96516b20f7a3e21d8e14503300", 0x6e}, {&(0x7f0000002640)}, {&(0x7f0000002680)="28b2d5a770d61ec41ac4e98fd8a6119abbebc97107630da85bd85b843715e2f56a31f4670ce1324e72fae5afebad7e7dadfc226314999f9febfb15834414e99375b2e13c9eb182886128d393e948871a35f09cac972a9e92868a148a81688a699246e17685fa9d3bf24c800bda2803755a2b71094093ebe97359ce76d09144fbf1bc798a5a6e7ab507c2327d37f532ca180227a08ac0f990df62ca10c65f5003d0561ef3ba68c76a036ba5130578e2b6ff72e1ee74a7799933daf7956b0e59eb4e3973c4e5b932d168ef496b22015414d9e0e6ee3e934cf3cafaafe25ca130", 0xdf}, {&(0x7f0000002780)="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", 0x1000}], 0x5, &(0x7f0000003800)=[{0xc0, 0x108, 0x3, "cff24ccc34aaabcba8ecc0bdb64d9fdaf66e0b913f032b0fe1f13fee935ecad28b3ae52a91e0cd80fea2183bbc752dfc1c1bb3c02de3a5a38de54186392226fb5a58dc6f29cb30f901279957960bcd6660a30def2f7f0ad01dd93598a982d3e09e63ab50fc23869963a83930fa761db0fa880f9aec75296a9b3effb7b6314e774f96dea7f8cd623555107bb077b7c18a62357178be12e816253890d89400aff21114be3a760ceb416a5be2d9"}], 0xc0}}, {{&(0x7f00000038c0)=@generic={0x26, "c96ba35eeecb416e54b6d4f938e91219902ba3b2b883d62a95e57648de756b4aa67902279e515d462032271af1c661ed28a21495b1988921c03aa530da6f7c6ede3a1abcb46bafb16701ab87c47381d5b8599f363856531b9ccc04fe1dc9ab6416bdd010f7321dfc94fafd04ce8ece4d08b6f02bdc74f934f597be157ff7"}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003940)="596a6c04c3be411f61a87e908a8865282ca6067dc4145f4bdc8dbb899bbe382bbecb5bad5386d00d7ea68781aebe4b0fcabfc26f5f803533c4031bd0828b34cd3dc7b903ecf48db72719bae6f5528028b4186e41d7eb11debaad238b1f5a0c24dd8b982c11799b3c7911ea58862e9d447336e10f0aef439860", 0x79}, {&(0x7f00000039c0)="5d1116dd6fec911c6706b7473ce7f0e3b1c55c6048a93a2322025ff273bdd61daa855bd4fa89d7369dc093d126681651beca002abc2afd1f5ce67b2c76a44951c942ffbd6261ecff116636fedc1d5da4782ca10e53ed", 0x56}, {&(0x7f0000003a40)="b340d957a4ac9abd187e61b9bedb1269cddde428db757434abd80f7249ff56c5f9bc2d425676abd66a6f524867ccf4e4b37f6ce5f134d8e1ce8dd610ff13b93215c97bde11808aa2067c5daa0b98ac4f71e35198a8c16534666624ec7b81a94c2d7d3e1910e68aacbda03d4fb8522139310b7018ef95fc9e0389d6e679832f31e911a86ae8479d8c99df66693b529067d3466abb29d7efbb195c33be3521a4fa77d93f4969406a62574b767a0bdf63e2eb8ea743b133d8ddf775bf17a0e6073a17004057d7d3650d1b609a5f00606c729a51f5d01ab5a480dfda6c4faa008ef82723c8429e272939d5f038", 0xeb}, {&(0x7f0000003b40)="fdce4ef88feab01b553c0bac5ba03c4744012a95a54b59ae0c6de4cf00fc1e2faa26a188391240b6c62be9bc31193c9405a74e4426c29d46c01aaeae00aec3a64576f721d61f09b864d3787f0504e0f0eeb41e58b046556ea3b61be94a8b7cafc52133c0513f52935543fba5b296015fb3481b75e26e6153257bf237771b1f997d3e472b820da7de339263adcc19c3b18717d1f021ef0fdceb42027ce341537e47ed73087350e978d126f2c20c0d70b817a5c61e22f776b272aef4441afe", 0xbe}], 0x4, &(0x7f0000003c40)=[{0xc0, 0x102, 0x4, "6616353c7a3fe3181e53aa5e82b66411c5b287d1a4d3fcc7ce285911bec9b88d4314b3ce41385883780ba2f4a6d5ff8d03b8f7e8d7110893649cda2df6ad57d719636f9ca4c9ed12e759c5a007796753e91c473158ae4bb971d28c3c3c60d2ca4418a9374251ac8594fbf7e95e614c86bdb6baf07332c63a1f6b8ed9ef048b1bd96b2aace3032cf124987b685a81a7d336e266f0e00254eb1c34cea4fae7cf58293c38c64e9a79610d17f5ecec"}, {0x10, 0x109, 0x80}], 0xd0}}], 0x4, 0x4040000) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000003e40)={0x100000000, 0xc9e}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003e80), &(0x7f0000003ec0)=0x4) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000003f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000003f40)) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000003f80)=0x7fffffff, 0x4) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003fc0)=0x0) write$cgroup_pid(r0, &(0x7f0000004000)=r4, 0x12) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x20, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) pipe(&(0x7f0000004140)) 1.152225683s ago: executing program 7 (id=2657): syz_emit_ethernet(0x160, &(0x7f0000000500)={@link_local, @link_local, @void, {@ipv4={0x800, @tipc={{0x4c, 0x4, 0x1, 0x2b, 0x152, 0x67, 0x0, 0x2, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, {[@timestamp_prespec={0x44, 0xc, 0xa7, 0x3, 0x9, [{@remote, 0xe}]}, @timestamp_addr={0x44, 0x34, 0xc0, 0x1, 0x3, [{@rand_addr=0x64010101, 0x800}, {@multicast2, 0x5}, {@rand_addr=0x64010101, 0xe5f}, {@local, 0x7}, {@private=0xa010101, 0x3}, {@multicast1, 0x8}]}, @timestamp_addr={0x44, 0x24, 0x52, 0x1, 0x1, [{@multicast1, 0x4}, {@broadcast, 0x800}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e08}]}, @cipso={0x86, 0x26, 0x0, [{0x1, 0xc, "2f2f1456a5e63726682a"}, {0x0, 0x2}, {0x1, 0x12, "604e00c9d1d628714b89e6bf8e2580f9"}]}, @lsrr={0x83, 0x7, 0x8d, [@rand_addr=0x64010100]}, @cipso={0x86, 0x43, 0x3, [{0x2, 0x2}, {0x6, 0x12, "caa4802e24919ddb6a14a77f237d561d"}, {0x0, 0xb, "3cbe0d87bfcaff1b97"}, {0x0, 0x11, "7661bdeee92876d1fa94974ef1fe3a"}, {0x6, 0x2}, {0x2, 0xb, "4b999c57e91d6c7c37"}]}, @ssrr={0x89, 0xf, 0x6b, [@loopback, @remote, @broadcast]}, @timestamp={0x44, 0xc, 0xcb, 0x0, 0x4, [0x0, 0xe59b]}, @timestamp_prespec={0x44, 0x2c, 0x96, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@multicast1, 0x9a}, {@empty, 0x7}, {@loopback, 0x3}, {@broadcast}]}, @noop]}}, @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, 0xa, 0x0, 0x3, 0x6, 0x76b, 0x4, 0x4e23, 0x4e22}, 0x1, 0x2}}, [0x0, 0x0]}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x1) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYBLOB="3dd44de0846c550bc584e82fac7e322fed733a25176e02ba15fe65396ffc425a32799b6230cad9a1fe04b89b91c5455105f8611246e796a6522fcf9fd9eab90102b3dd5b34bae0581c1b76", @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in=@broadcast, 0x0, 0x2b}, @in6=@mcast2, {}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.143604436s ago: executing program 0 (id=2658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfffd, 0xfff3}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeb9, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x6, 0x8, 0x9, 0x0, 0xd6, 0x800, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0x1, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0x4, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8004, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x8010000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x9c}, 0x9, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.032708882s ago: executing program 3 (id=2659): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) r1 = accept$inet6(r0, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$igmp(0x2, 0x3, 0x2) socketpair(0x5, 0x6, 0x4, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4004000) socket$inet(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44840}, 0x200088c1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000004c0)={r0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000680)=0xe8) sendmsg$nl_route(r8, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@can_delroute={0x28, 0x19, 0x300, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, r9}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r10, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}}, 0x14008080) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="b4050000ffffffff611034000000000018200000", @ANYRES32=r5, @ANYBLOB="00000000000400009500000000000000682fd46fbb789c26726037a3787ae3d8d1ae4fa78c78ebab12c3d4c09478d33ee0a891"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r11, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 1.028736479s ago: executing program 1 (id=2660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x56a, 0x45}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x80000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000002c0)={r2, &(0x7f00000001c0)='nl80211\x00', 0x8a900, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x100]}, {0xff7f, 0x4, 0xff80, 0x6}}, 0x101, &(0x7f0000000240), &(0x7f0000000280)=0x9}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r2, 0x4, 0xffffffffffffffff, 0x9}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@deltaction={0x1d0, 0x31, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x86}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x73f0}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7cd5}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x83bc}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf24}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000040}, 0x48001) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000600)={0x4, 0x4}, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000640)=0x199, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r1, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff77}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ead}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000008c0)={r4, &(0x7f00000007c0)='+\xa8[\x00', 0x121200, &(0x7f0000000800)={@align=0x1, {0x8000, 0x6, 0x3, 0xd7}}, 0x2, &(0x7f0000000840), &(0x7f0000000880)}) sendmsg$nl_route(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@getneightbl={0x14, 0x42, 0x10, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r6, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc2a, 0x12}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000b80), 0x4) getsockopt$inet_udp_int(r4, 0x11, 0x66, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r2) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x118, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2a}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4040021) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000fc0)=0x50, &(0x7f0000001000)=0x2) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x6}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f0000001180)={r4, &(0x7f0000001080)='}{(-\\]\x1e\x00', 0x14100, &(0x7f00000010c0)={@align=0x10, {0x7, 0x9, 0x2, 0x1}}, 0x1, &(0x7f0000001100), &(0x7f0000001140)=0x7f}) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0xa80000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x144, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000004) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000001500)={'veth0_to_bond\x00'}) 859.507354ms ago: executing program 1 (id=2661): r0 = epoll_create(0x1) r1 = epoll_create(0x4) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) sendto$inet(r2, &(0x7f0000000140), 0x0, 0x44800, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0xa56, 0x7, 0x54, 0x4}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r3, 0x12504000) 859.216756ms ago: executing program 6 (id=2662): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0xc}, 0x94) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r2, 0x5}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 686.345109ms ago: executing program 3 (id=2663): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000002fc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x9c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x9c}}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003040)="2e00000011008188040f80ec59acbc0413a181b204000000000100000010e61e0e00dd2c0fd206f30f2ce1710b28", 0x2e}], 0x1}, 0x24) getpeername$inet6(0xffffffffffffffff, &(0x7f0000003000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000003300)=0x1c) (async) getpeername$inet6(0xffffffffffffffff, &(0x7f0000003000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000003300)=0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_MARK={0xbe, 0x8, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x9d205fdd05e52a8a) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_MARK={0xbe, 0x8, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x9d205fdd05e52a8a) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) recvmmsg$unix(r6, &(0x7f0000003080)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f00000003c0)=""/89, 0x59}, {&(0x7f0000000440)=""/4, 0x4}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f0000000640)=""/142, 0x8e}], 0x7, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/58, 0x3a}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/27, 0x1b}, {&(0x7f0000000b80)=""/67, 0x43}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000cc0)=""/86, 0x56}, {&(0x7f0000000d40)=""/119, 0x77}, {&(0x7f0000000dc0)=""/104, 0x68}], 0xa, &(0x7f0000000f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/11, 0xb}, {&(0x7f0000001100)=""/169, 0xa9}], 0x3, &(0x7f0000001200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000002780)=[{&(0x7f0000001340)=""/135, 0x87}, {&(0x7f0000001400)=""/49, 0x31}, {&(0x7f0000001440)=""/236, 0xec}, {&(0x7f0000001540)=""/186, 0xba}, {&(0x7f0000003200)=""/199, 0xc7}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x7, &(0x7f0000002800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/11, 0xb}, {&(0x7f0000002940)=""/214, 0xd6}, {&(0x7f0000002a40)=""/42, 0x2a}], 0x3, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000002d00)=""/166, 0xa6}, {&(0x7f0000002dc0)=""/209, 0xd1}], 0x3, &(0x7f0000002f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x6, 0x3, 0x0) 622.717577ms ago: executing program 1 (id=2664): syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000004000000000000000ff0000000000000000000000000000003a0100000000000007a300000000000080ff000000000000"], 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000004000000000000000ff0000000000000000000000000000003a0100000000000007a300000000000080ff000000000000"], 0x0) (async) 394.728738ms ago: executing program 0 (id=2665): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a0001", 0x37}], 0x1}, 0x819) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000095"], 0x0, 0x81, 0x0, 0x0, 0x41100, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 394.168464ms ago: executing program 6 (id=2666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80800) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x46d, 0x0, 0x0, 0x202, 0x80000008]}, &(0x7f00000001c0)=0x78) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) 247.814731ms ago: executing program 0 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000001040)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x6, 0x2, @loopback, @empty}, "e65ce9f23cda77d3"}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010880}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000032529bd7000005ed459c6d5b0cf", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100", @ANYRES32=r1, @ANYBLOB="0a0003003a712f0756b80000"], 0x4c}}, 0x0) 246.258975ms ago: executing program 1 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000040)='syzkaller\x00', 0xc00, &(0x7f0000000080)={@align=0x80, {0xab3, 0x2, 0x47c, 0xfff}}, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 170.350136ms ago: executing program 6 (id=2669): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xfd3ee000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async) r2 = socket(0x10, 0xa, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x18, 0x1b, 0x100, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) 62.811996ms ago: executing program 6 (id=2670): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}, 0x3}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}, 0x3}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}], 0x2}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="bedefa01c362219e83e8a160abb9382d133a3113b949a3a2c5ef61030d68a394d0d1551b5e147d3eaaf6ea2ee632d618cab17eee9071814466ee45564126a99919c062621dd04f008030a5dddac0986bf08095980852a34a5536187e3e85349e47bc5266fa8cb66ec96b7e4ac4ee1a99d8e27cca78d7e8c400e4ca9731a5fe6f7a0cb57e02d1bbbdaaa6d38b3c34b1921d61e25b108c3279f8926e51b06dd8361225426ccad9c1405f6c40355a7dea2c2722ce5720cc19a0d4e50099891c6ae2e6a4b82b20eaf4e1fc2c6d8461da823a3ec4ce2a8d23a40786f70b273e08881511", 0xe1}, {&(0x7f00000002c0)="27126d47f654ff02daf12751e0f71216f7c8317799ae6bc5ece0d7347afe9d9fe9b4ff84860774f73c69e952c6a83f115d807a98baac68503e12a32e828464a3925fdef77b8bc26c3d53adcc07b92c03a49fe25df6e18441e7e4bd103f4c11bdd6c6950ae4b3e93b2565de5f322be01643c54bf79b4f92300d54689046b8815fa9b8765c6d9f14f0", 0x88}, {0x0}], 0x3, &(0x7f0000000700)=[{0x10, 0x3a, 0x7}, {0x10, 0x117, 0x7}, {0x10, 0xff, 0x6}, {0x60, 0x10c, 0x100, "e90d64bb183a3040914861ce70577d5a59c792d8155c389459702f105796834e60dbce45d4c8af73cf2c32e035ca2e59027dab1db56f56676ef664b7c20aa8050a2e5fbd66107bd1fe3945ca"}], 0x90}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000059c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x80, 0x0}}], 0x4, 0x40) (async) sendmmsg(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="bedefa01c362219e83e8a160abb9382d133a3113b949a3a2c5ef61030d68a394d0d1551b5e147d3eaaf6ea2ee632d618cab17eee9071814466ee45564126a99919c062621dd04f008030a5dddac0986bf08095980852a34a5536187e3e85349e47bc5266fa8cb66ec96b7e4ac4ee1a99d8e27cca78d7e8c400e4ca9731a5fe6f7a0cb57e02d1bbbdaaa6d38b3c34b1921d61e25b108c3279f8926e51b06dd8361225426ccad9c1405f6c40355a7dea2c2722ce5720cc19a0d4e50099891c6ae2e6a4b82b20eaf4e1fc2c6d8461da823a3ec4ce2a8d23a40786f70b273e08881511", 0xe1}, {&(0x7f00000002c0)="27126d47f654ff02daf12751e0f71216f7c8317799ae6bc5ece0d7347afe9d9fe9b4ff84860774f73c69e952c6a83f115d807a98baac68503e12a32e828464a3925fdef77b8bc26c3d53adcc07b92c03a49fe25df6e18441e7e4bd103f4c11bdd6c6950ae4b3e93b2565de5f322be01643c54bf79b4f92300d54689046b8815fa9b8765c6d9f14f0", 0x88}, {0x0}], 0x3, &(0x7f0000000700)=[{0x10, 0x3a, 0x7}, {0x10, 0x117, 0x7}, {0x10, 0xff, 0x6}, {0x60, 0x10c, 0x100, "e90d64bb183a3040914861ce70577d5a59c792d8155c389459702f105796834e60dbce45d4c8af73cf2c32e035ca2e59027dab1db56f56676ef664b7c20aa8050a2e5fbd66107bd1fe3945ca"}], 0x90}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000059c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x80, 0x0}}], 0x4, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a430fe0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) 0s ago: executing program 1 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=r1, @ANYBLOB="c104000000efd0f6ab677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) kernel console output (not intermixed with test programs): 8770] netlink: 180 bytes leftover after parsing attributes in process `syz.4.744'. [ 225.142977][ T8826] netlink: 68 bytes leftover after parsing attributes in process `syz.3.763'. [ 225.233542][ T8829] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 225.261543][ T8838] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 225.273537][ T8829] netlink: 'syz.0.761': attribute type 15 has an invalid length. [ 225.560526][ T8838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.687466][ T8845] bond2: (slave geneve3): making interface the new active one [ 225.705365][ T8845] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 226.084966][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 226.521596][ T8889] netlink: 'syz.2.770': attribute type 12 has an invalid length. [ 226.552692][ T8889] netlink: 'syz.2.770': attribute type 29 has an invalid length. [ 226.564014][ T8889] netlink: 148 bytes leftover after parsing attributes in process `syz.2.770'. [ 226.620337][ T8889] netlink: 59 bytes leftover after parsing attributes in process `syz.2.770'. [ 226.983519][ T8909] netlink: 'syz.0.773': attribute type 10 has an invalid length. [ 227.022104][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.047125][ T8909] bond0: (slave team0): Enslaving as an active interface with an up link [ 227.108021][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 227.147923][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 229.016647][ T8977] tipc: Enabling not permitted [ 229.046305][ T8977] tipc: Enabling of bearer rejected, failed to enable media [ 229.224244][ T4942] Bluetooth: hci4: link tx timeout [ 229.231075][ T4942] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 229.253663][ T8981] netlink: 'syz.2.785': attribute type 64 has an invalid length. [ 229.296379][ T8979] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 229.325105][ T8979] team0: Device ipvlan2 is already an upper device of the team interface [ 229.529118][ T8989] bridge0: entered promiscuous mode [ 229.593975][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'. [ 229.791433][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'. [ 229.841654][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'. [ 230.054796][ T9012] FAULT_INJECTION: forcing a failure. [ 230.054796][ T9012] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 230.105789][ T9012] CPU: 1 UID: 0 PID: 9012 Comm: syz.0.793 Not tainted syzkaller #0 PREEMPT(full) [ 230.105827][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 230.105848][ T9012] Call Trace: [ 230.105857][ T9012] [ 230.105865][ T9012] dump_stack_lvl+0xe8/0x150 [ 230.105904][ T9012] should_fail_ex+0x40c/0x560 [ 230.105936][ T9012] _copy_from_user+0x2d/0xb0 [ 230.105969][ T9012] ___sys_sendmsg+0x1c6/0x360 [ 230.105991][ T9012] ? __lock_acquire+0x683/0x2cf0 [ 230.106026][ T9012] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.106086][ T9012] ? __fget_files+0x2a/0x420 [ 230.106114][ T9012] ? __fget_files+0x3a2/0x420 [ 230.106153][ T9012] __x64_sys_sendmsg+0x1b1/0x290 [ 230.106178][ T9012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.106219][ T9012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.106243][ T9012] do_syscall_64+0x174/0x580 [ 230.106265][ T9012] ? clear_bhb_loop+0x40/0x90 [ 230.106292][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.106314][ T9012] RIP: 0033:0x7f068d19de99 [ 230.106340][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.106362][ T9012] RSP: 002b:00007f068e09a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.106389][ T9012] RAX: ffffffffffffffda RBX: 00007f068d425fa0 RCX: 00007f068d19de99 [ 230.106405][ T9012] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 000000000000000a [ 230.106430][ T9012] RBP: 00007f068e09a090 R08: 0000000000000000 R09: 0000000000000000 [ 230.106443][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.106455][ T9012] R13: 00007f068d426038 R14: 00007f068d425fa0 R15: 00007fff0f753d48 [ 230.106489][ T9012] [ 230.182181][ T9017] netlink: 'syz.3.794': attribute type 2 has an invalid length. [ 230.569694][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 230.604621][ T9017] tipc: Started in network mode [ 230.642706][ T9017] tipc: Node identity ac14142f, cluster identity 4711 [ 230.679750][ T9017] tipc: New replicast peer: 0.0.0.0 [ 230.719503][ T9017] tipc: Enabled bearer , priority 10 [ 231.088424][ T9057] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 231.169610][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.224733][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.248234][ T9062] xt_hashlimit: size too large, truncated to 1048576 [ 231.328467][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 231.430378][ T9037] veth0_macvtap: left allmulticast mode [ 231.437630][ T9037] macvtap0: left allmulticast mode [ 231.467344][ T9037] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 231.496117][ T9037] bridge1: left promiscuous mode [ 231.501714][ T9037] bridge1: left allmulticast mode [ 231.518526][ T9037] veth3: left promiscuous mode [ 231.557463][ T9037] bridge3: left promiscuous mode [ 231.575930][ T9037] bridge3: left allmulticast mode [ 231.589232][ T9037] macvtap1: left allmulticast mode [ 231.595715][ T9037] geneve3: left promiscuous mode [ 231.604706][ T9037] bond4: left promiscuous mode [ 231.614220][ T9037] veth5: left promiscuous mode [ 231.620007][ T9037] bridge0: left promiscuous mode [ 231.858331][ T6831] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.933397][ T6831] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 231.968547][ T6831] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.015718][ T6831] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.053333][ T6831] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 232.089474][ T6831] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.145978][ T6831] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.161270][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'. [ 232.177029][ T6831] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 232.212313][ T6831] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.234547][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 232.282037][ T9093] block nbd0: Unsupported socket: should be TCP or UNIX. [ 232.321504][ T10] tipc: Node number set to 2886997039 [ 232.377273][ T6831] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.411800][ T6831] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 232.452261][ T6831] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.734364][ T9106] syzkaller0: entered promiscuous mode [ 232.752451][ T9106] syzkaller0: entered allmulticast mode [ 232.980627][ T9109] tipc: Enabling of bearer rejected, failed to enable media [ 233.416075][ T9129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.820'. [ 233.812393][ T9141] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 233.840343][ T9151] Unsupported ieee802154 address type: 0 [ 233.901510][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.825'. [ 234.038165][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 234.247700][ T9176] netlink: 'syz.1.831': attribute type 2 has an invalid length. [ 234.267271][ T9176] netlink: 100 bytes leftover after parsing attributes in process `syz.1.831'. [ 234.347682][ T9173] xt_nat: multiple ranges no longer supported [ 234.721099][ T9155] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 234.756325][ T9155] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 234.841874][ T9189] syzkaller0: entered promiscuous mode [ 234.867522][ T9189] syzkaller0: entered allmulticast mode [ 237.994308][ T9200] tipc: MTU too low for tipc bearer [ 238.189778][ T9198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.285745][ T9267] __nla_validate_parse: 1 callbacks suppressed [ 238.285859][ T9267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 238.364923][ T9214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.417546][ T9214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.454840][ T9214] bond0 (unregistering): Released all slaves [ 238.948583][ T9198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.076648][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 239.147051][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 239.432754][ T9198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.544861][ T9306] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 239.632126][ T9306] netlink: 208 bytes leftover after parsing attributes in process `syz.3.851'. [ 239.716159][ T9198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.166882][ T80] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.336786][ T9331] syzkaller0: entered promiscuous mode [ 240.356674][ T9331] syzkaller0: entered allmulticast mode [ 240.364960][ T434] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.722473][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 243.775864][ T9198] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.929827][ T9198] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.951848][ T9404] netlink: 244 bytes leftover after parsing attributes in process `syz.3.868'. [ 244.109490][ T9418] ipvlan2: entered promiscuous mode [ 244.417925][ T9428] sit0: entered promiscuous mode [ 244.445569][ T9428] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 244.464528][ T9428] netlink: 1 bytes leftover after parsing attributes in process `syz.3.873'. [ 244.709365][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 244.808874][ T9445] netlink: 388 bytes leftover after parsing attributes in process `syz.1.877'. [ 244.976741][ T9451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 245.349374][ T9451] bond4: entered promiscuous mode [ 245.382915][ T9451] bond4: entered allmulticast mode [ 245.401091][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.421001][ T9451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.471331][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.884'. [ 245.551924][ T9455] sit3: entered promiscuous mode [ 245.575462][ T9455] sit3: entered allmulticast mode [ 245.812487][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 245.965156][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 246.478584][ T9523] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 246.543799][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 246.644880][ T9530] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 246.667625][ T9530] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 246.696825][ T9533] syzkaller0: entered promiscuous mode [ 246.712991][ T9533] syzkaller0: entered allmulticast mode [ 246.775225][ T5645] Bluetooth: hci1: command 0x0401 tx timeout [ 246.782161][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 246.789826][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.796387][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 247.047944][ T9544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.056127][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 247.063774][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 247.654843][ T9573] netlink: 'syz.2.906': attribute type 83 has an invalid length. [ 249.088399][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.156388][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.190260][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.224591][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.256066][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.325082][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.367193][ T9622] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 249.653144][ T9653] __nla_validate_parse: 1 callbacks suppressed [ 249.653164][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 249.731920][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.926'. [ 249.863519][ T9660] netlink: 240 bytes leftover after parsing attributes in process `syz.4.928'. [ 249.907754][ T9660] netlink: 428 bytes leftover after parsing attributes in process `syz.4.928'. [ 250.008128][ T9666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.931'. [ 250.048427][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 250.146192][ T9670] openvswitch: netlink: Multiple metadata blocks provided [ 250.171311][ T9671] xt_cluster: node mask cannot exceed total number of nodes [ 250.306776][ T9672] bond5: entered promiscuous mode [ 250.322746][ T9672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.359524][ T9680] IPv6: NLM_F_REPLACE set, but no existing node found! [ 250.537344][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.937'. [ 250.561886][ T9686] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 250.575647][ T9686] bond6 (unregistering): Released all slaves [ 250.789639][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 251.204713][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.943'. [ 252.001428][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 252.046077][ T9734] team0 (unregistering): Port device team_slave_0 removed [ 252.072530][ T9734] team0 (unregistering): Port device team_slave_1 removed [ 252.713295][ T9765] h: entered promiscuous mode [ 252.797919][ T9767] validate_nla: 55 callbacks suppressed [ 252.797942][ T9767] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 252.907363][ T9767] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.942814][ T9773] bond6: (slave geneve4): making interface the new active one [ 252.953124][ T9773] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 252.966813][ T9776] team_slave_1: Caught tx_queue_len zero misconfig [ 253.011780][ T80] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.064882][ T80] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.148067][ T80] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.172648][ T80] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.631747][ T9813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.640922][ T9813] bridge0: port 3(bond5) entered blocking state [ 253.649523][ T9813] bridge0: port 3(bond5) entered disabled state [ 253.659541][ T9813] bond5: entered allmulticast mode [ 253.669565][ T9813] bond5: entered promiscuous mode [ 254.171702][ T9839] openvswitch: netlink: Missing key (keys=40, expected=100) [ 254.681487][ T9864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.773747][ T9866] netlink: 'syz.4.989': attribute type 12 has an invalid length. [ 254.868219][ T9878] __nla_validate_parse: 2 callbacks suppressed [ 254.868239][ T9878] netlink: 76 bytes leftover after parsing attributes in process `syz.0.990'. [ 254.886429][ T9878] ip6tnl0: Caught tx_queue_len zero misconfig [ 254.895185][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 255.058290][ T9884] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.992'. [ 255.234650][ T9889] team0: Device gtp0 is up. Set it down before adding it as a team port [ 255.341343][ T9895] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 255.362839][ T9895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.555349][ T9902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.999'. [ 255.739599][ T9911] netlink: 'syz.4.1001': attribute type 27 has an invalid length. [ 255.751621][ T9911] netlink: 'syz.4.1001': attribute type 4 has an invalid length. [ 255.761671][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 255.832438][ T9911] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1001'. [ 256.216596][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1007'. [ 256.701809][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 256.971264][ T9969] netlink: 'syz.1.1016': attribute type 2 has an invalid length. [ 257.670463][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1026'. [ 258.256879][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 258.294745][T10031] xt_policy: too many policy elements [ 258.308753][T10027] syzkaller0: entered promiscuous mode [ 258.317825][T10027] syzkaller0: entered allmulticast mode [ 261.055380][T10032] syz.1.1033 (10032) used greatest stack depth: 17856 bytes left [ 261.362188][T10053] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 261.539191][T10064] __nla_validate_parse: 2 callbacks suppressed [ 261.539212][T10064] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1045'. [ 261.577593][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 261.709524][T10068] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1046'. [ 261.810098][T10070] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 262.176182][T10087] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 262.320283][T10090] syzkaller0: entered promiscuous mode [ 262.329106][T10090] syzkaller0: entered allmulticast mode [ 262.788415][T10114] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 262.903744][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1064'. [ 262.913400][T10123] openvswitch: netlink: Flow key attr not present in new flow. [ 263.380734][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 263.416996][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 263.451463][T10139] netlink: 'syz.4.1067': attribute type 3 has an invalid length. [ 263.758088][T10167] bridge_slave_0 (unregistering): left allmulticast mode [ 263.770045][T10167] bridge_slave_0 (unregistering): left promiscuous mode [ 263.792524][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.939718][T10171] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1074'. [ 264.062787][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 264.066910][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 264.084690][T10180] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1077'. [ 264.094911][T10180] netlink: 'syz.3.1077': attribute type 5 has an invalid length. [ 264.386028][T10196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.540630][T10205] ipt_ECN: cannot use operation on non-tcp rule [ 264.720979][T10212] xt_hashlimit: overflow, try lower: 3/0 [ 264.924678][T10220] netlink: zone id is out of range [ 264.952955][T10220] netlink: zone id is out of range [ 264.972885][T10220] netlink: zone id is out of range [ 264.989972][T10220] netlink: zone id is out of range [ 265.012297][T10220] netlink: zone id is out of range [ 265.170460][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.231105][T10237] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.255419][T10240] xt_hashlimit: size too large, truncated to 1048576 [ 265.708252][ T4942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 265.723640][ T4942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 265.738912][ T4942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.753174][ T4942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.762902][ T4942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.071911][T10272] netlink: 'syz.1.1098': attribute type 3 has an invalid length. [ 266.652123][T10258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.925390][T10301] __nla_validate_parse: 10 callbacks suppressed [ 266.925409][T10301] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1104'. [ 267.227500][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'. [ 267.238312][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 267.261011][T10311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1107'. [ 267.278601][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 267.638769][T10329] syzkaller0: entered promiscuous mode [ 267.656377][T10329] syzkaller0: entered allmulticast mode [ 267.803929][ T4942] Bluetooth: hci5: command tx timeout [ 268.016038][T10336] net_ratelimit: 2 callbacks suppressed [ 268.016058][T10336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.292301][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 268.293315][T10363] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1117'. [ 268.340746][T10365] syzkaller1: entered promiscuous mode [ 268.367125][T10365] syzkaller1: entered allmulticast mode [ 268.393643][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 268.543260][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1121'. [ 268.700678][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1120'. [ 268.854801][T10253] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.889148][T10253] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.949503][T10253] bridge_slave_0: entered allmulticast mode [ 268.982931][T10253] bridge_slave_0: entered promiscuous mode [ 269.012151][T10253] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.037062][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.069129][T10253] bridge_slave_1: entered allmulticast mode [ 269.106351][T10253] bridge_slave_1: entered promiscuous mode [ 269.279330][T10405] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 269.293712][T10253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.330259][T10253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.375772][T10253] team0: Port device team_slave_0 added [ 269.390621][T10253] team0: Port device team_slave_1 added [ 269.430895][T10253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.439999][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.468605][T10253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.485195][T10253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.495454][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.526892][T10253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.629712][T10253] hsr_slave_0: entered promiscuous mode [ 269.638584][T10253] hsr_slave_1: entered promiscuous mode [ 269.649641][T10253] debugfs: 'hsr0' already exists in 'hsr' [ 269.658518][T10253] Cannot create hsr debugfs directory [ 269.882857][ T4942] Bluetooth: hci5: command tx timeout [ 270.198262][T10427] ±ÿª¨úrBº“: renamed from lo [ 270.285185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.204937][T10434] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 271.266599][T10436] macvlan0: entered promiscuous mode [ 271.463301][T10443] netlink: 'syz.0.1139': attribute type 7 has an invalid length. [ 271.473776][T10443] netlink: 'syz.0.1139': attribute type 8 has an invalid length. [ 271.489968][T10443] erspan0: entered promiscuous mode [ 271.498144][T10443] gretap0: entered promiscuous mode [ 271.505681][T10443] erspan0: left promiscuous mode [ 271.513876][T10443] gretap0: left promiscuous mode [ 271.809777][T10388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.893617][T10253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.940585][T10253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.965224][ T4942] Bluetooth: hci5: command tx timeout [ 271.991621][T10253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.021734][T10253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.038875][T10253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.099758][T10455] __nla_validate_parse: 4 callbacks suppressed [ 272.099783][T10455] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1144'. [ 272.138545][T10253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.154610][T10253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.155025][T10456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1142'. [ 272.189576][T10253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.427809][T10478] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 272.452529][ T4942] Bluetooth: hci1: command 0x0401 tx timeout [ 272.462214][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 272.641070][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 272.666589][T10485] xt_hashlimit: size too large, truncated to 1048576 [ 272.871358][T10253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.915831][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 272.968451][T10253] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.037826][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.046179][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.094712][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1154'. [ 273.125715][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.134083][ T6833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.184760][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 273.235696][T10498] block nbd0: not configured, cannot reconfigure [ 273.516015][ T30] audit: type=1804 audit(1784618889.975:3): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1156" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1239 res=1 errno=0 [ 273.593529][ T30] audit: type=1800 audit(1784618889.975:4): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1156" name="cgroup.controllers" dev="tmpfs" ino=1239 res=0 errno=0 [ 273.928124][T10530] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1162'. [ 274.002785][T10532] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1164'. [ 274.052507][ T4942] Bluetooth: hci5: command tx timeout [ 274.077590][T10536] tipc: Enabling of bearer rejected, failed to enable media [ 274.245553][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 274.402414][T10549] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 274.458820][T10549] bond7: (slave vti0): Error -95 calling set_mac_address [ 274.530583][T10555] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1170'. [ 274.822909][T10564] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 274.849183][T10569] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 274.917789][T10253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.268815][T10595] tipc: Started in network mode [ 275.278130][T10595] tipc: Node identity d2ae28db3396, cluster identity 4711 [ 275.288553][T10595] tipc: Enabled bearer , priority 0 [ 275.304570][T10595] syzkaller0: entered promiscuous mode [ 275.345652][T10595] syzkaller0: entered allmulticast mode [ 275.487678][T10599] tipc: Resetting bearer [ 275.526678][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.548775][T10601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.735644][T10607] tipc: Resetting bearer [ 275.737482][T10616] netlink: 'syz.0.1182': attribute type 4 has an invalid length. [ 275.788932][T10618] netlink: 'syz.0.1182': attribute type 4 has an invalid length. [ 275.804922][T10607] tipc: Disabling bearer [ 276.031034][T10350] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.065732][T10633] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 276.068952][T10253] veth0_vlan: entered promiscuous mode [ 276.093542][T10350] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.109890][T10350] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.120753][T10350] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.166881][T10253] veth1_vlan: entered promiscuous mode [ 276.336085][T10253] veth0_macvtap: entered promiscuous mode [ 276.530915][T10253] veth1_macvtap: entered promiscuous mode [ 276.606593][T10660] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 276.655454][T10660] bond0: (slave vti0): Error -95 calling set_mac_address [ 276.747825][T10253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.814448][T10253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.861386][T10673] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.901186][T10352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.947493][T10352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.975708][T10352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.034682][T10352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.350597][T10352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.381235][T10352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.520982][T10352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.537354][T10352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.143745][T10719] __nla_validate_parse: 12 callbacks suppressed [ 278.143825][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 278.342748][T10733] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1210'. [ 278.374285][T10734] openvswitch: netlink: Missing key (keys=40, expected=100) [ 278.386495][T10731] bond0: entered promiscuous mode [ 278.417878][T10731] batadv1: entered promiscuous mode [ 278.444810][T10731] batadv0: entered promiscuous mode [ 278.463310][T10738] netlink: 'syz.5.1213': attribute type 2 has an invalid length. [ 278.476193][T10731] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 278.485662][T10738] netlink: 'syz.5.1213': attribute type 11 has an invalid length. [ 278.507252][T10738] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1213'. [ 278.585725][T10731] bond0: left promiscuous mode [ 278.595282][T10731] batadv1: left promiscuous mode [ 278.770297][T10731] batadv0: left promiscuous mode [ 279.359414][T10761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1219'. [ 279.390693][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1219'. [ 279.502386][T10757] can: request_module (can-proto-3) failed. [ 279.936793][T10793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1227'. [ 279.977950][T10789] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 280.008817][T10793] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1227'. [ 280.265585][T10813] openvswitch: netlink: IP tunnel dst address not specified [ 280.555055][T10814] netlink: 'syz.3.1228': attribute type 10 has an invalid length. [ 280.578989][T10814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1228'. [ 280.648670][T10821] x_tables: duplicate underflow at hook 1 [ 280.843819][T10814] team0: Port device geneve1 added [ 280.995690][T10845] tipc: Started in network mode [ 281.022424][T10845] tipc: Node identity , cluster identity 4711 [ 281.036671][T10845] tipc: Failed to set node id, please configure manually [ 281.055934][T10845] tipc: Enabling of bearer rejected, failed to enable media [ 281.076269][T10352] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 281.221214][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 281.480665][T10866] bond2: option xmit_hash_policy: invalid value (64) [ 281.506583][T10871] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1239'. [ 281.528162][T10866] bond2 (unregistering): Released all slaves [ 281.691272][T10839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.035015][T10939] netlink: 'syz.4.1257': attribute type 3 has an invalid length. [ 283.122556][T10944] gretap0: entered promiscuous mode [ 283.139409][T10950] 0ªî{X¹¦: renamed from gretap0 [ 283.149696][T10950] 0ªî{X¹¦: left promiscuous mode [ 283.158971][T10950] 0ªî{X¹¦: entered allmulticast mode [ 283.174585][T10950] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 283.605920][T10965] __nla_validate_parse: 4 callbacks suppressed [ 283.605942][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1263'. [ 284.023091][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'. [ 284.280889][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 284.693532][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1273'. [ 284.944174][T11010] vlan2: entered promiscuous mode [ 284.973798][T11010] bridge0: entered promiscuous mode [ 285.201619][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1277'. [ 285.216562][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1277'. [ 286.150009][T11051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.150802][T11062] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 286.498345][T11083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.629867][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1296'. [ 286.727156][T11089] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1297'. [ 286.769059][T11089] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1297'. [ 286.954257][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1300'. [ 286.997540][T11109] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 288.623090][T11174] __nla_validate_parse: 10 callbacks suppressed [ 288.623110][T11174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1322'. [ 288.816925][T11181] vlan0: entered promiscuous mode [ 289.038197][T10347] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.073068][T10347] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.241097][T11216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1331'. [ 289.466161][T11223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.045743][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 290.075014][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 292.091716][T11203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.467366][T11263] netlink: 'syz.3.1344': attribute type 11 has an invalid length. [ 292.509610][T11263] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 292.530740][T11263] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1344'. [ 292.742606][T11278] C: renamed from lo (while UP) [ 292.769617][T11278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 292.819531][T11279] tipc: Enabling of bearer rejected, failed to enable media [ 293.104369][T11291] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 293.216438][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'. [ 293.670142][T11325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1360'. [ 293.717086][T11325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1360'. [ 293.954265][T11334] xt_l2tp: v2 doesn't support IP mode [ 294.036443][T11339] netlink: 'syz.0.1363': attribute type 12 has an invalid length. [ 294.149056][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 294.190313][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 294.228454][T11343] netlink: 'syz.4.1364': attribute type 29 has an invalid length. [ 294.275624][T11350] netlink: 'syz.3.1366': attribute type 16 has an invalid length. [ 294.368263][T11355] »»»»»»: renamed from bond_slave_0 [ 294.749428][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 295.147079][T11387] netlink: 'syz.4.1375': attribute type 32 has an invalid length. [ 295.175412][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 295.259516][T11387] bond2: option coupled_control: invalid value (2) [ 295.270962][T11387] bond2 (unregistering): Released all slaves [ 295.469163][T11400] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 295.796467][T11410] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 295.811237][T11410] bond8 (unregistering): Released all slaves [ 296.467413][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 296.537898][T11431] netlink: 'syz.1.1386': attribute type 83 has an invalid length. [ 296.619378][T11431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1386'. [ 296.755411][T11446] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 296.993234][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1391'. [ 299.835215][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1395'. [ 300.421487][T11486] syzkaller0: entered promiscuous mode [ 300.431810][T11486] syzkaller0: entered allmulticast mode [ 300.572495][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 301.360288][T11512] syzkaller0: entered promiscuous mode [ 301.382641][T11512] syzkaller0: entered allmulticast mode [ 301.553043][T11515] bond6 (unregistering): Released all slaves [ 301.648484][T11522] netlink: 'syz.5.1413': attribute type 21 has an invalid length. [ 301.666807][T11522] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1413'. [ 301.832660][T11522] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1413'. [ 302.070157][T11527] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 302.245021][T11527] bond8: entered promiscuous mode [ 302.311451][T11527] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.420211][T11536] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.454569][T11536] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 302.492379][T11536] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 302.538554][T11536] bond8: (slave ip6gre2): making interface the new active one [ 302.586638][T11536] ip6gre2: entered promiscuous mode [ 302.616257][T11536] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 303.082102][ T4942] Bluetooth: hci5: command tx timeout [ 304.092645][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 304.172229][T11593] ip6gre1: entered allmulticast mode [ 304.308404][T11603] netlink: 'syz.5.1439': attribute type 1 has an invalid length. [ 304.332576][T11604] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 304.420596][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1439'. [ 304.501513][T11604] bond6: entered promiscuous mode [ 304.534746][T11604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.720593][T11606] bond2: (slave geneve3): making interface the new active one [ 304.737459][T11606] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 304.861484][T11620] bond9: option min_links: invalid value (18446744073709551614) [ 304.875594][T11620] bond9: option min_links: allowed values 0 - 2147483647 [ 304.905556][T11620] bond9 (unregistering): Released all slaves [ 304.951029][T11630] TCP: TCP_TX_DELAY enabled [ 305.041102][T11637] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1449'. [ 305.096871][T10353] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.125131][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'. [ 305.215835][T10353] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.256529][T10353] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.493898][T10353] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.804674][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 305.848773][T11656] netlink: 'syz.4.1455': attribute type 1 has an invalid length. [ 305.937278][T11656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1455'. [ 305.991737][T11656] NCSI netlink: No device for ifindex 0 [ 306.080531][T11663] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 306.349667][T11675] openvswitch: netlink: IP tunnel dst address not specified [ 306.382153][T11675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.474589][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1458'. [ 306.920131][T11654] batman_adv: batadv0: Interface deactivated: wlan0 [ 307.735847][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.899546][T11723] sctp: [Deprecated]: syz.5.1468 (pid 11723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.899546][T11723] Use struct sctp_sack_info instead [ 307.937273][T11728] netlink: 'syz.4.1469': attribute type 32 has an invalid length. [ 307.951631][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 308.001456][T11728] bond2: Setting coupled_control to off (0) [ 308.050975][T11728] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1469'. [ 308.177723][T11728] gretap0: entered promiscuous mode [ 308.222577][T11728] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1469'. [ 308.279139][T11728] 0ªî{X¹¦: renamed from gretap0 [ 308.346847][T11728] 0ªî{X¹¦: left promiscuous mode [ 308.380429][T11728] 0ªî{X¹¦: entered allmulticast mode [ 308.443623][T11728] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 308.652445][T11768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.905556][T11776] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.071175][T11776] syzkaller0: entered promiscuous mode [ 309.109539][T11776] syzkaller0: entered allmulticast mode [ 310.114813][T11847] Unsupported ieee802154 address type: 0 [ 310.300919][T11856] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 310.332214][T11856] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1494'. [ 313.894795][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 314.311079][T11917] netlink: 'syz.5.1503': attribute type 1 has an invalid length. [ 314.368651][T11921] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 314.518149][T11923] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 314.564396][T11921] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.591817][T11930] bond7: (slave gretap1): making interface the new active one [ 314.606523][T11930] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 315.024939][T11923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.161827][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 315.187280][T11939] bond3: (slave gretap0): making interface the new active one [ 315.208121][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 315.237635][T11939] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 315.350130][T11928] syzkaller1: entered promiscuous mode [ 315.371673][T11928] syzkaller1: entered allmulticast mode [ 315.500610][T11983] IPv6: addrconf: prefix option has invalid lifetime [ 315.709520][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 315.837962][T11990] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 315.881374][T11990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.903879][T11990] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1512'. [ 316.109934][T12004] x_tables: duplicate underflow at hook 4 [ 316.125653][T12002] netlink: 'syz.5.1515': attribute type 10 has an invalid length. [ 316.384274][T12018] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 319.232378][T12002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.255537][T12002] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 319.301487][T12018] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 319.397266][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1520'. [ 319.421749][T12023] veth9: entered allmulticast mode [ 319.458040][T12033] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1520'. [ 319.654187][T12041] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 319.732781][T12046] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1524'. [ 319.945869][T12049] syzkaller0: entered promiscuous mode [ 319.974979][T12049] syzkaller0: entered allmulticast mode [ 320.162155][T12063] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1529'. [ 320.254886][T12071] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1529'. [ 320.438668][T12079] netlink: 'syz.4.1530': attribute type 12 has an invalid length. [ 320.769721][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 320.802420][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 320.821120][T12097] netlink: 'syz.4.1534': attribute type 16 has an invalid length. [ 321.005673][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 321.107876][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 323.914118][T12123] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 324.160224][T12123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.185650][T12142] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 324.387414][T12128] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 324.482101][ T47] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 324.622944][T10349] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 325.124899][T12150] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 325.403934][T12175] netlink: 'syz.4.1549': attribute type 8 has an invalid length. [ 325.625159][T12183] syzkaller1: entered promiscuous mode [ 325.656384][T12183] syzkaller1: entered allmulticast mode [ 326.064707][T12208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1555'. [ 326.089955][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 326.111448][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 326.127369][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 330.195903][T12268] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1568'. [ 330.211834][T12270] veth1_to_bond: entered allmulticast mode [ 330.219054][T12269] veth1_to_bond: entered promiscuous mode [ 330.264147][T12277] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1569'. [ 330.380424][T12270] veth1_to_bond: left promiscuous mode [ 330.387738][T12270] veth1_to_bond: left allmulticast mode [ 330.503894][T10351] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 330.608072][T12287] nbd: couldn't find device at index 134217728 [ 330.767100][T12297] xt_hashlimit: size too large, truncated to 1048576 [ 330.873483][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 331.056252][T12306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 331.153436][T12310] team0: Caught tx_queue_len zero misconfig [ 331.346147][T12320] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 331.517054][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 331.916766][T12338] Bluetooth: MGMT ver 1.23 [ 335.035917][T12353] netlink: 524 bytes leftover after parsing attributes in process `syz.1.1585'. [ 335.071099][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 335.096853][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 335.110917][T12360] vcan1: entered promiscuous mode [ 335.118502][T12360] vcan1: entered allmulticast mode [ 336.122956][T12404] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 339.325100][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 339.374371][T12432] netlink: 'syz.4.1606': attribute type 1 has an invalid length. [ 339.401783][T12429] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 339.450900][T12429] bond2 (unregistering): Released all slaves [ 339.801873][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.814332][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.823452][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.832627][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.841510][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.843928][T12454] syzkaller0: entered promiscuous mode [ 339.848941][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.864939][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.872187][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.879660][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.887788][T12446] tc action pedit offset must be on 32 bit boundaries [ 339.895625][T12446] 0: reclassify loop, rule prio 0, protocol 800 [ 339.921442][T12454] syzkaller0: entered allmulticast mode [ 339.964569][T12454] tipc: Started in network mode [ 339.971319][T12454] tipc: Node identity 8a5f919c37e4, cluster identity 4711 [ 339.983726][T12454] tipc: Enabled bearer , priority 0 [ 340.001523][T12452] tipc: Resetting bearer [ 340.089368][T12452] tipc: Disabling bearer [ 340.118875][T12463] xt_hashlimit: size too large, truncated to 1048576 [ 340.194874][T12467] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1613'. [ 340.288516][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 340.516340][T12478] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1617'. [ 340.552439][T12480] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1617'. [ 340.855011][T12495] xt_hashlimit: size too large, truncated to 1048576 [ 340.865576][T12496] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 344.169034][T12520] team0: Device gtp0 is up. Set it down before adding it as a team port [ 344.273521][T12525] pim6reg: entered allmulticast mode [ 344.291103][T12527] tc_dump_action: action bad kind [ 344.503994][T12543] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 344.544820][T12543] veth0_macvtap: Caught tx_queue_len zero misconfig [ 345.339607][T12576] netlink: 'syz.1.1638': attribute type 20 has an invalid length. [ 345.349287][T12576] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.532787][T12580] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1639'. [ 345.647172][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 345.667061][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 345.684075][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'. [ 345.714724][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.740991][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.923305][T12586] netlink: 'syz.0.1643': attribute type 16 has an invalid length. [ 345.942042][T12586] netlink: 'syz.0.1643': attribute type 17 has an invalid length. [ 345.959139][T12594] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 345.986281][T12586] eql: remember to turn off Van-Jacobson compression on your slave devices [ 346.032679][T12586] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 346.088416][T12598] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 346.099421][T12598] netlink: 'syz.1.1646': attribute type 4 has an invalid length. [ 346.123942][T12598] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.1646'. [ 346.207420][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1647'. [ 346.336944][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'. [ 347.015203][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'. [ 347.070869][T12633] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 347.087893][T12638] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.281149][T12645] sctp: [Deprecated]: syz.0.1658 (pid 12645) Use of int in maxseg socket option. [ 347.281149][T12645] Use struct sctp_assoc_value instead [ 347.338726][T12651] netlink: 'syz.3.1659': attribute type 2 has an invalid length. [ 347.360756][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 348.020220][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 348.201537][T12689] tcf_pedit_act: 7 callbacks suppressed [ 348.201651][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.217970][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.227293][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.234863][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.242510][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.251146][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.260556][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.268933][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.276893][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.285297][T12689] tc action pedit offset must be on 32 bit boundaries [ 348.293415][T12689] 0: reclassify loop, rule prio 0, protocol 800 [ 350.310592][ T6833] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 351.287666][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.301601][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.312801][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.324498][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.332716][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.782965][T12855] xt_cluster: node mask cannot exceed total number of nodes [ 352.000468][T12866] __nla_validate_parse: 11 callbacks suppressed [ 352.000519][T12866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'. [ 352.143636][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.151758][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.160102][T12836] bridge_slave_0: entered allmulticast mode [ 352.169466][T12836] bridge_slave_0: entered promiscuous mode [ 352.178160][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.186222][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.194193][T12836] bridge_slave_1: entered allmulticast mode [ 352.207560][T12836] bridge_slave_1: entered promiscuous mode [ 352.258453][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.273826][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.325684][T12836] team0: Port device team_slave_0 added [ 352.335849][T12836] team0: Port device team_slave_1 added [ 352.381136][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.389238][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.418933][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.435746][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.449502][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.485817][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.558535][T12836] hsr_slave_0: entered promiscuous mode [ 352.566807][T12836] hsr_slave_1: entered promiscuous mode [ 352.574692][T12836] debugfs: 'hsr0' already exists in 'hsr' [ 352.580978][T12836] Cannot create hsr debugfs directory [ 352.905939][T12786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.995473][T12836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.091179][T12836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.137039][T12836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 353.153684][T12836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.170594][T12836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 353.224931][T12836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.265164][T12836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 353.352494][T12836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.402961][ T4942] Bluetooth: hci6: command tx timeout [ 353.776895][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.888699][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.954839][T10347] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.962632][T10347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.054079][T10347] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.061696][T10347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.256698][T12926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1720'. [ 354.310433][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1720'. [ 354.664801][T12952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1725'. [ 354.688007][T12944] bond2 (unregistering): Released all slaves [ 354.743449][T12954] netlink: 'syz.4.1726': attribute type 64 has an invalid length. [ 354.753753][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 354.981506][T12961] netlink: 'syz.3.1728': attribute type 21 has an invalid length. [ 355.013135][T12961] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1728'. [ 355.046122][T12961] netlink: 'syz.3.1728': attribute type 4 has an invalid length. [ 355.071535][T12970] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 355.079592][T12961] netlink: 'syz.3.1728': attribute type 5 has an invalid length. [ 355.115294][T12961] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1728'. [ 355.189672][T12970] bond8: entered promiscuous mode [ 355.206657][T12970] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.334334][T12973] bond8: (slave bridge12): making interface the new active one [ 355.357800][T12973] bridge12: entered promiscuous mode [ 355.375574][T12980] netlink: 'syz.1.1733': attribute type 1 has an invalid length. [ 355.385085][T12973] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 355.443905][T12980] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.482912][ T4942] Bluetooth: hci6: command tx timeout [ 355.714807][T12997] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1738'. [ 356.136161][T13019] netlink: 'syz.3.1742': attribute type 1 has an invalid length. [ 356.802387][T13052] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 357.109808][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.307519][T13060] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 357.506092][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 357.562712][ T4942] Bluetooth: hci6: command tx timeout [ 357.654331][T13079] syzkaller0: entered promiscuous mode [ 357.663146][T13079] syzkaller0: entered allmulticast mode [ 357.802823][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 357.848153][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 358.406297][T12836] veth0_vlan: entered promiscuous mode [ 358.460447][T12836] veth1_vlan: entered promiscuous mode [ 358.514708][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 358.608745][T12836] veth0_macvtap: entered promiscuous mode [ 358.616779][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 358.702542][T13120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.716979][T12836] veth1_macvtap: entered promiscuous mode [ 358.805099][T13131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.860501][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 358.904568][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 358.937445][T13136] x_tables: duplicate underflow at hook 1 [ 359.026109][T13138] sctp: [Deprecated]: syz.3.1771 (pid 13138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.026109][T13138] Use struct sctp_sack_info instead [ 359.111720][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.229426][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.235206][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1772'. [ 359.313702][T10352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.343018][T10352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.368776][T13147] tipc: Enabled bearer , priority 0 [ 359.426077][T13150] syzkaller0: entered promiscuous mode [ 359.432228][T13150] syzkaller0: entered allmulticast mode [ 359.440155][T13150] tipc: Resetting bearer [ 359.448701][T10352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.460268][T10352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.490473][T13157] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 359.577788][T13150] tipc: Resetting bearer [ 359.644432][ T4942] Bluetooth: hci6: command tx timeout [ 362.745214][T13150] tipc: Disabling bearer [ 362.766427][T13154] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 362.829040][ T5755] tipc: Node number set to 3778554075 [ 362.983694][T13166] netlink: 'syz.3.1777': attribute type 10 has an invalid length. [ 363.054592][T13166] veth1_macvtap: left promiscuous mode [ 363.154215][T13172] netlink: 'syz.0.1778': attribute type 1 has an invalid length. [ 363.165853][T10352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.186800][T10352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.198999][T13172] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1778'. [ 363.254252][T13176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.297819][T13176] batman_adv: batadv0: Adding interface: bond0 [ 363.310276][T13176] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.348506][T13176] batman_adv: batadv0: Interface activated: bond0 [ 363.373214][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 363.413362][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 363.434932][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 363.478013][T10350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.495474][T10350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.588394][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 363.696705][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'. [ 363.709239][T13192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1782'. [ 363.716030][T13185] team0 (unregistering): Port device team_slave_0 removed [ 363.751251][T13185] team0 (unregistering): Port device team_slave_1 removed [ 363.773798][T13185] team0 (unregistering): Port device vlan0 removed [ 363.789773][T13185] team0 (unregistering): Port device geneve1 removed [ 363.800883][T13193] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 364.006892][T13199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1785'. [ 364.035689][T13200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1702'. [ 364.100463][T13200] netlink: 'syz.6.1702': attribute type 7 has an invalid length. [ 364.143235][T13200] netlink: 'syz.6.1702': attribute type 8 has an invalid length. [ 364.168704][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1702'. [ 364.391616][T13186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.512636][T13212] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 364.715117][T13222] xt_hashlimit: max too large, truncated to 1048576 [ 364.767166][T13222] No such timeout policy "syz1" [ 364.783884][T13212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.822037][T13214] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 364.885784][T13214] bond2: entered allmulticast mode [ 364.968433][T13216] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 365.084684][T13230] nbd1: detected capacity change from 0 to 63 [ 365.097167][T13233] block nbd1: NBD_DISCONNECT [ 365.109724][T13233] block nbd1: Disconnected due to user request. [ 365.140797][ T1526] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 365.159793][ T1526] Buffer I/O error on dev nbd1, logical block 0, async page read [ 365.167997][ T1526] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 365.178981][ T1526] Buffer I/O error on dev nbd1, logical block 1, async page read [ 365.188303][ T1526] Buffer I/O error on dev nbd1, logical block 2, async page read [ 365.197357][ T1526] Buffer I/O error on dev nbd1, logical block 3, async page read [ 365.210459][ T1526] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.216168][T13233] block nbd1: shutting down sockets [ 365.220932][ T1526] Buffer I/O error on dev nbd1, logical block 0, async page read [ 365.221021][ T1526] Buffer I/O error on dev nbd1, logical block 1, async page read [ 365.221080][ T1526] Buffer I/O error on dev nbd1, logical block 2, async page read [ 365.221139][ T1526] Buffer I/O error on dev nbd1, logical block 3, async page read [ 365.222617][ T1526] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 365.275543][ T1526] Buffer I/O error on dev nbd1, logical block 0, async page read [ 365.285338][ T1526] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 365.298433][ T1526] Buffer I/O error on dev nbd1, logical block 1, async page read [ 365.309324][ T1526] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 365.326615][ T3173] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.339038][ T3173] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.350419][T13230] nft_compat: unsupported protocol 0 [ 365.385195][ T3173] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.399855][ T1526] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 365.411807][T13160] ldm_validate_partition_table(): Disk read failed. [ 365.422038][T13160] Dev nbd1: unable to read RDB block 0 [ 365.444097][T13160] nbd1: unable to read partition table [ 365.473926][T13160] ldm_validate_partition_table(): Disk read failed. [ 365.488884][T13160] Dev nbd1: unable to read RDB block 0 [ 365.500014][T13160] nbd1: unable to read partition table [ 365.519264][T13242] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 365.764287][T13258] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 365.858551][T13264] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 367.187923][T13320] ip6gre3: entered promiscuous mode [ 367.194665][T13320] ip6gre3: entered allmulticast mode [ 367.377159][T13331] netlink: 'syz.3.1823': attribute type 12 has an invalid length. [ 367.570055][T13339] IPv6: sit2: Disabled Multicast RS [ 367.579593][T13339] sit2: entered allmulticast mode [ 367.799309][T13349] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 367.975344][T13358] netlink: 'syz.3.1830': attribute type 7 has an invalid length. [ 368.011978][T13358] netlink: 'syz.3.1830': attribute type 8 has an invalid length. [ 368.565093][T13387] __nla_validate_parse: 18 callbacks suppressed [ 368.565115][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1837'. [ 368.592021][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1837'. [ 368.940694][T13402] IPv6: sit1: Disabled Multicast RS [ 369.496184][T13422] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1849'. [ 369.658337][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1850'. [ 369.670256][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1850'. [ 369.781580][T13427] netlink: 'syz.1.1851': attribute type 2 has an invalid length. [ 369.824998][T13427] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 369.833640][T13427] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 369.876531][T13430] syzkaller0: entered promiscuous mode [ 369.883977][T13430] syzkaller0: entered allmulticast mode [ 370.141836][T13438] netlink: 'syz.6.1855': attribute type 22 has an invalid length. [ 370.153733][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1855'. [ 370.187515][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1856'. [ 370.201818][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1856'. [ 374.425204][T13477] netlink: 'syz.1.1865': attribute type 30 has an invalid length. [ 374.597308][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.626292][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.637473][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.651707][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.663499][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.745761][T13484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.846317][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 374.909734][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 376.506071][T13526] netlink: 'syz.6.1873': attribute type 21 has an invalid length. [ 376.531993][T13526] netlink: 'syz.6.1873': attribute type 22 has an invalid length. [ 376.547026][T13526] netlink: 'syz.6.1873': attribute type 23 has an invalid length. [ 376.569175][T13526] netlink: 'syz.6.1873': attribute type 25 has an invalid length. [ 376.577948][T13526] netlink: 'syz.6.1873': attribute type 26 has an invalid length. [ 376.587349][T13526] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1873'. [ 376.773395][ T5639] Bluetooth: hci7: command tx timeout [ 378.849775][ T5639] Bluetooth: hci7: command tx timeout [ 379.716224][T13520] syzkaller0: entered promiscuous mode [ 379.736926][T13520] syzkaller0: entered allmulticast mode [ 379.938064][T13548] netlink: 'syz.0.1877': attribute type 8 has an invalid length. [ 379.951290][T13547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.929452][ T5639] Bluetooth: hci7: command tx timeout [ 383.002156][ T5639] Bluetooth: hci7: command tx timeout [ 383.464416][T13560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.577761][T13568] netlink: 'syz.1.1883': attribute type 1 has an invalid length. [ 383.668241][T13574] veth9: entered allmulticast mode [ 383.678926][T13574] bond10: (slave veth9): Enslaving as an active interface with a down link [ 383.712285][T13568] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 388.153281][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 388.166466][T13601] netlink: 'syz.1.1890': attribute type 9 has an invalid length. [ 388.334283][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 388.541602][T13479] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.559745][T13479] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.593989][T13479] bridge_slave_0: entered allmulticast mode [ 388.627687][T13479] bridge_slave_0: entered promiscuous mode [ 388.735197][T13479] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.775339][T13637] netlink: 'syz.6.1901': attribute type 3 has an invalid length. [ 388.782692][T13479] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.839155][T13479] bridge_slave_1: entered allmulticast mode [ 388.864534][T13479] bridge_slave_1: entered promiscuous mode [ 388.873723][T13637] netlink: 'syz.6.1901': attribute type 1 has an invalid length. [ 389.252843][T13479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.340840][T13479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.560519][T13479] team0: Port device team_slave_0 added [ 389.646718][T13479] team0: Port device team_slave_1 added [ 389.830850][T13668] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1907'. [ 393.296095][T13479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.304543][T13479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.336724][T13479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.397215][T13479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.434425][T13479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.499886][T13479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.691428][T13687] nft_compat: unsupported protocol 0 [ 393.721417][T13479] hsr_slave_0: entered promiscuous mode [ 393.757119][T13479] hsr_slave_1: entered promiscuous mode [ 393.775131][T13479] debugfs: 'hsr0' already exists in 'hsr' [ 393.792247][T13479] Cannot create hsr debugfs directory [ 394.157213][T13708] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 394.177760][T13708] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1918'. [ 394.514121][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1922'. [ 394.688777][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 394.700610][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 397.866469][T13743] bridge0: port 1(veth1_to_bridge) entered blocking state [ 397.884830][T13741] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1926'. [ 397.917348][T13743] bridge0: port 1(veth1_to_bridge) entered disabled state [ 397.935202][T13743] veth1_to_bridge: entered allmulticast mode [ 397.959388][T13743] veth1_to_bridge: entered promiscuous mode [ 398.035880][T13479] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.095156][T13479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.121165][T13479] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.177413][T13479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.212535][T13753] team0: Device 26±ÿª¨úrBº“ is loopback device. Loopback devices can't be added as a team port [ 398.240636][T13753] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 398.328657][T13479] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.395289][T13479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.419416][T13479] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 398.433410][T13770] netlink: 'syz.0.1933': attribute type 2 has an invalid length. [ 398.445920][T13770] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1933'. [ 398.483064][T13479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.687246][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 398.908204][T13479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.010188][T13479] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.074634][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.083061][T10349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.157156][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.165459][T10350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.331233][T13812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 399.449742][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 399.542222][T13818] syz.1.1946: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.562934][T13818] CPU: 0 UID: 0 PID: 13818 Comm: syz.1.1946 Not tainted syzkaller #0 PREEMPT(full) [ 399.562972][T13818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 399.562998][T13818] Call Trace: [ 399.563089][T13818] [ 399.563167][T13818] dump_stack_lvl+0xe8/0x150 [ 399.563372][T13818] warn_alloc+0x24c/0x270 [ 399.563435][T13818] ? stack_depot_save_flags+0x33/0x800 [ 399.563593][T13818] ? __pfx_warn_alloc+0x10/0x10 [ 399.563626][T13818] ? kasan_save_track+0x3e/0x80 [ 399.563666][T13818] ? __kasan_kmalloc+0x93/0xb0 [ 399.563700][T13818] ? xsk_setsockopt+0x52a/0x960 [ 399.563811][T13818] ? do_sock_setsockopt+0x17c/0x1b0 [ 399.563941][T13818] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 399.563977][T13818] ? do_syscall_64+0x174/0x580 [ 399.564049][T13818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.564105][T13818] __vmalloc_node_range_noprof+0x12c/0x1730 [ 399.564174][T13818] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.564212][T13818] ? __kasan_kmalloc+0x93/0xb0 [ 399.564248][T13818] ? __kmalloc_cache_noprof+0x32d/0x660 [ 399.564288][T13818] ? __kmalloc_cache_noprof+0x150/0x660 [ 399.564324][T13818] vmalloc_user_noprof+0xad/0xe0 [ 399.564355][T13818] ? xskq_create+0xbf/0x170 [ 399.564424][T13818] xskq_create+0xbf/0x170 [ 399.564464][T13818] xsk_init_queue+0x8a/0xe0 [ 399.564513][T13818] xsk_setsockopt+0x52a/0x960 [ 399.564546][T13818] ? __fget_files+0x2a/0x420 [ 399.564602][T13818] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.564637][T13818] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.564781][T13818] ? aa_sock_opt_perm+0xff/0x1a0 [ 399.564809][T13818] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 399.564873][T13818] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.564920][T13818] do_sock_setsockopt+0x17c/0x1b0 [ 399.564966][T13818] __x64_sys_setsockopt+0x13d/0x1b0 [ 399.565019][T13818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.565048][T13818] do_syscall_64+0x174/0x580 [ 399.565073][T13818] ? clear_bhb_loop+0x40/0x90 [ 399.565110][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.565135][T13818] RIP: 0033:0x7f92cc79de99 [ 399.565170][T13818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.565192][T13818] RSP: 002b:00007f92cd5e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.565260][T13818] RAX: ffffffffffffffda RBX: 00007f92cca25fa0 RCX: 00007f92cc79de99 [ 399.565278][T13818] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 399.565293][T13818] RBP: 00007f92cc833eaf R08: 0000000000000004 R09: 0000000000000000 [ 399.565307][T13818] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.565332][T13818] R13: 00007f92cca26038 R14: 00007f92cca25fa0 R15: 00007fff26d44448 [ 399.565373][T13818] [ 399.565510][T13818] Mem-Info: [ 399.932943][T13818] active_anon:6925 inactive_anon:0 isolated_anon:0 [ 399.932943][T13818] active_file:0 inactive_file:43404 isolated_file:0 [ 399.932943][T13818] unevictable:768 dirty:67 writeback:0 [ 399.932943][T13818] slab_reclaimable:11297 slab_unreclaimable:113867 [ 399.932943][T13818] mapped:44837 shmem:1292 pagetables:1506 [ 399.932943][T13818] sec_pagetables:0 bounce:0 [ 399.932943][T13818] kernel_misc_reclaimable:0 [ 399.932943][T13818] free:1269388 free_pcp:10365 free_cma:0 [ 400.063744][T13818] Node 0 active_anon:27500kB inactive_anon:0kB active_file:0kB inactive_file:173412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:183548kB dirty:268kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14612kB pagetables:5684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 400.192306][T13818] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 400.239702][T13834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1948'. [ 400.285304][T13818] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.384743][T13818] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 400.405821][T13818] Node 0 DMA32 free:1114284kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27684kB inactive_anon:0kB active_file:0kB inactive_file:173412kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2548684kB mlocked:0kB bounce:0kB free_pcp:40172kB local_pcp:20752kB free_cma:0kB [ 400.539572][T13818] lowmem_reserve[]: 0 0 0 0 0 [ 400.560602][T13818] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.623034][T13818] lowmem_reserve[]: 0 0 0 0 0 [ 400.623352][T13846] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1952'. [ 400.632394][T13818] [ 400.656387][T13818] Node 1 Normal free:3948296kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.715306][T13847] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1952'. [ 400.742173][T13818] lowmem_reserve[]: 0 0 0 0 0 [ 400.756911][T13818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 400.782544][T13846] netlink: 'syz.6.1952': attribute type 10 has an invalid length. [ 400.783267][T13847] netlink: 'syz.6.1952': attribute type 10 has an invalid length. [ 400.810968][T13818] Node 0 DMA32: 2119*4kB (UM) 798*8kB (UME) 254*16kB (UM) 191*32kB (UME) 44*64kB (UME) 51*128kB (UME) 28*256kB (UME) 7*512kB (UE) 0*1024kB 4*2048kB (UE) 259*4096kB (UM) = 1114188kB [ 400.827230][T13846] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1952'. [ 400.846374][T13847] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1952'. [ 400.858482][T13852] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 400.868031][T13818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 400.912310][T13818] Node 1 Normal: 0*4kB 7*8kB (UM) 7*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948296kB [ 400.943198][T13847] team0: Port device geneve1 added [ 400.957413][T13818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.972826][T13818] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.985505][T13818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.997314][T13818] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.064155][T13818] 46019 total pagecache pages [ 401.103865][T13818] 0 pages in swap cache [ 401.125871][T13818] Free swap = 124996kB [ 401.136376][T13818] Total swap = 124996kB [ 401.154312][T13818] 2097051 pages RAM [ 401.163156][T13818] 0 pages HighMem/MovableOnly [ 401.179661][T13818] 428200 pages reserved [ 401.199812][T13818] 0 pages cma reserved [ 401.273564][T13859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 401.500766][T13867] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 401.520657][T13869] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 401.578311][T13869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.689979][T13872] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 401.694463][T13875] netlink: 'syz.6.1961': attribute type 49 has an invalid length. [ 401.776652][T13874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 401.915274][T13875] ip6gretap0: entered promiscuous mode [ 401.924089][T13875] ip6gretap0: entered allmulticast mode [ 402.014480][T13872] 8021q: adding VLAN 0 to HW filter on device bond11 [ 402.050243][T13479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.408632][T13905] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 402.529555][T13886] syzkaller0: entered promiscuous mode [ 402.544230][T13886] syzkaller0: entered allmulticast mode [ 402.555711][T13910] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1969'. [ 407.847175][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 408.164402][T13479] veth0_vlan: entered promiscuous mode [ 408.225325][T13479] veth1_vlan: entered promiscuous mode [ 408.397164][T13479] veth0_macvtap: entered promiscuous mode [ 408.448740][T13479] veth1_macvtap: entered promiscuous mode [ 408.639351][T13978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1981'. [ 408.678316][T13479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.770341][T13479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.941126][T13991] batadv_slave_0: Caught tx_queue_len zero misconfig [ 408.984366][ T6833] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.025773][ T6833] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.097008][ T6833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.141842][ T6833] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.222615][T14001] xt_hashlimit: size too large, truncated to 1048576 [ 409.446975][ T6833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.484992][ T6833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.642262][T10349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.672179][T10349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.230872][T14040] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1993'. [ 410.319162][T14042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.483027][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1861'. [ 410.778366][T14047] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 410.964444][T14071] sctp: [Deprecated]: syz.6.2002 (pid 14071) Use of int in max_burst socket option deprecated. [ 410.964444][T14071] Use struct sctp_assoc_value instead [ 411.005828][T14071] sctp: [Deprecated]: syz.6.2002 (pid 14071) Use of int in max_burst socket option deprecated. [ 411.005828][T14071] Use struct sctp_assoc_value instead [ 411.329398][T14084] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2004'. [ 411.694307][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2007'. [ 411.925567][T14107] xt_hashlimit: size too large, truncated to 1048576 [ 412.732902][T14142] C: renamed from lo (while UP) [ 412.736352][ T30] audit: type=1800 audit(1784619029.185:5): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2018" name=680B20 dev="tmpfs" ino=342 res=0 errno=0 [ 412.785850][T14142] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 412.820205][T14144] netlink: 'syz.0.2019': attribute type 29 has an invalid length. [ 412.852146][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 412.866765][T14150] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.202604][T14164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.244327][T14155] bond3: entered allmulticast mode [ 413.272355][T14155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.748186][T14166] syzkaller0: entered promiscuous mode [ 413.771789][T14166] syzkaller0: entered allmulticast mode [ 413.787889][T14180] netlink: 'syz.0.2031': attribute type 2 has an invalid length. [ 413.846733][T14180] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2031'. [ 414.098266][T14190] netlink: 'syz.3.2033': attribute type 142 has an invalid length. [ 418.100393][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 418.133894][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 418.359421][T14228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.475737][T14229] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 418.509613][T14229] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 418.585654][T14242] netlink: 'syz.6.2045': attribute type 1 has an invalid length. [ 418.611458][T14242] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2045'. [ 418.627778][T14231] bridge6: entered promiscuous mode [ 418.645810][T14231] bridge6: entered allmulticast mode [ 418.656767][T14243] netlink: 'syz.6.2045': attribute type 1 has an invalid length. [ 418.688022][T14243] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2045'. [ 419.048410][T14259] netlink: 'syz.3.2048': attribute type 39 has an invalid length. [ 419.394418][T14274] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.435851][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.464234][T14278] openvswitch: netlink: IP tunnel dst address not specified [ 419.895475][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2064'. [ 419.922591][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2064'. [ 419.943508][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 419.954449][T14308] openvswitch: netlink: IPv4 tunnel dst address is zero [ 419.974574][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2064'. [ 420.031708][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2064'. [ 420.154800][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2065'. [ 420.467121][T14329] sctp: [Deprecated]: syz.0.2069 (pid 14329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.467121][T14329] Use struct sctp_sack_info instead [ 420.548120][T14331] sctp: [Deprecated]: syz.0.2069 (pid 14331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.548120][T14331] Use struct sctp_sack_info instead [ 421.161467][T14345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.199593][T14345] batadv_slave_0: entered promiscuous mode [ 422.291351][T14416] netlink: 'syz.1.2086': attribute type 6 has an invalid length. [ 422.470536][T14424] sctp: [Deprecated]: syz.6.2088 (pid 14424) Use of int in maxseg socket option. [ 422.470536][T14424] Use struct sctp_assoc_value instead [ 422.810179][T14438] syzkaller0: entered promiscuous mode [ 422.830394][T14438] syzkaller0: entered allmulticast mode [ 423.279424][T14468] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 423.421131][T14475] __nla_validate_parse: 12 callbacks suppressed [ 423.421154][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2096'. [ 423.560871][T14472] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 423.700690][T14472] bond14 (unregistering): Released all slaves [ 423.949592][T14475] 8021q: adding VLAN 0 to HW filter on device bond13 [ 423.971397][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 424.025305][T14485] block nbd0: not configured, cannot reconfigure [ 424.231105][T14494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 424.304419][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2103'. [ 424.319344][ T5639] block nbd0: Receive control failed (result -107) [ 424.431271][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 424.586940][T14493] team0: Port device team_slave_0 removed [ 424.617976][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 424.866725][T14522] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2110'. [ 424.913698][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2110'. [ 426.095445][T14573] netlink: 'syz.6.2123': attribute type 3 has an invalid length. [ 426.200214][T14576] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2124'. [ 426.218614][T14573] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2123'. [ 426.265774][T14573] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.275832][T14573] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.457295][T14590] netlink: 'syz.7.2127': attribute type 2 has an invalid length. [ 427.200681][T14628] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 427.226862][T14628] netlink: 'syz.3.2137': attribute type 1 has an invalid length. [ 427.591799][T14639] bond10 (unregistering): Released all slaves [ 427.672962][T14655] unsupported nlmsg_type 40 [ 427.705718][T14654] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 428.199784][T14678] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 428.233395][T14678] netlink: 'syz.3.2148': attribute type 2 has an invalid length. [ 428.261619][T14681] syzkaller0: entered promiscuous mode [ 428.277752][T14681] syzkaller0: entered allmulticast mode [ 428.936456][T14711] __nla_validate_parse: 12 callbacks suppressed [ 428.936477][T14711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2157'. [ 429.086027][T14717] netlink: 'syz.6.2160': attribute type 1 has an invalid length. [ 429.310367][T14717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.327585][T14727] openvswitch: netlink: Actions may not be safe on all matching packets [ 429.357140][T14719] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 429.384771][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 429.402503][T14719] bond1: entered allmulticast mode [ 429.496040][T14732] bond0: Caught tx_queue_len zero misconfig [ 429.533257][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2165'. [ 429.604612][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 429.619946][T14743] syzkaller0: entered promiscuous mode [ 429.627141][T14743] syzkaller0: entered allmulticast mode [ 429.883549][T14755] atomic_op ffff8880536a5998 conn xmit_atomic 0000000000000000 [ 431.083881][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 431.119186][T14803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2180'. [ 431.137710][T14805] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2181'. [ 431.165934][T14805] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2181'. [ 431.279251][T14813] bond0: option miimon: invalid value (18446744071829782528) [ 431.302527][T14815] x_tables: duplicate underflow at hook 1 [ 431.335335][T14813] bond0: option miimon: allowed values 0 - 2147483647 [ 431.943814][T14850] ±ÿª¨úrBº“: left promiscuous mode [ 432.036486][T14850] batman_adv: batadv0: Interface deactivated: bond0 [ 432.110552][T14850] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 432.622623][T14865] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 432.835968][T14879] netlink: 'syz.1.2197': attribute type 10 has an invalid length. [ 432.856340][T14879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2197'. [ 432.867061][T14870] bond1: invalid ARP target 0.0.0.0 specified for addition [ 432.880314][T14870] bond1: option arp_ip_target: invalid value (0) [ 432.891583][T14870] bond1 (unregistering): Released all slaves [ 432.988680][T14879] team0: Port device geneve1 added [ 433.024143][T14884] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2198'. [ 433.068650][T14888] netlink: 'syz.3.2200': attribute type 4 has an invalid length. [ 433.230894][T14894] xt_hashlimit: size too large, truncated to 1048576 [ 433.303082][T14900] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 433.352558][T14900] 0ªX¹¦Dö»: entered allmulticast mode [ 433.634367][T14918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.972750][T14924] bond0 (unregistering): (slave veth5): Releasing active interface [ 433.996443][T14924] batadv1: entered promiscuous mode [ 434.077217][T14924] bond0 (unregistering): (slave batadv1): Releasing active interface [ 434.107533][T14929] netlink: 'syz.6.2214': attribute type 21 has an invalid length. [ 434.143504][T14924] bond0 (unregistering): (slave veth7): Releasing active interface [ 434.155621][T14929] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.175962][T14929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.184039][T14929] IPv6: NLM_F_CREATE should be set when creating new route [ 434.192433][T14929] IPv6: NLM_F_CREATE should be set when creating new route [ 434.206138][T14929] IPv6: NLM_F_CREATE should be set when creating new route [ 434.242495][T14924] bond0 (unregistering): Released all slaves [ 434.260437][T14931] netlink: 'syz.6.2214': attribute type 21 has an invalid length. [ 434.301522][T14931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.376478][T14928] __nla_validate_parse: 3 callbacks suppressed [ 434.376501][T14928] netlink: 81 bytes leftover after parsing attributes in process `syz.0.2213'. [ 434.575133][T14943] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2217'. [ 434.609800][T14943] tipc: Enabling of bearer rejected, failed to enable media [ 434.795638][T14950] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2220'. [ 434.821831][T14953] ip6tnl3: entered allmulticast mode [ 434.982022][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2224'. [ 435.111243][T14969] netlink: 'syz.6.2225': attribute type 1 has an invalid length. [ 435.225593][T14964] bond14: entered promiscuous mode [ 435.244112][T14964] 8021q: adding VLAN 0 to HW filter on device bond14 [ 435.361507][T14964] 8021q: adding VLAN 0 to HW filter on device bond14 [ 435.381022][T14964] bond14: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 435.415872][T14985] xt_ecn: cannot match TCP bits for non-tcp packets [ 435.427239][T14985] netlink: 'syz.7.2229': attribute type 2 has an invalid length. [ 435.435847][T14985] netlink: 'syz.7.2229': attribute type 11 has an invalid length. [ 435.446537][T14964] bond14: (slave ip6gre4): Error -95 calling set_mac_address [ 435.466640][T14985] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2229'. [ 436.520560][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 436.788015][T15045] tipc: MTU too low for tipc bearer [ 437.069449][T15049] bridge5: entered promiscuous mode [ 437.098319][T15049] bridge5: entered allmulticast mode [ 437.478571][T15064] syzkaller0: entered promiscuous mode [ 437.491339][T15064] syzkaller0: entered allmulticast mode [ 437.889116][T15089] bridge_slave_1: left allmulticast mode [ 437.918722][T15089] bridge_slave_1: left promiscuous mode [ 437.998814][T15089] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.107375][T15089] bridge_slave_0: left allmulticast mode [ 438.140614][T15089] bridge_slave_0: left promiscuous mode [ 438.166846][T15089] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.327948][T15090] tipc: Enabling of bearer rejected, failed to enable media [ 438.379502][T15111] geneve2: entered promiscuous mode [ 438.422314][T10351] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 45706 - 0 [ 438.482552][T10351] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 45706 - 0 [ 438.533776][T10351] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 45706 - 0 [ 438.600369][T15120] pimreg: entered allmulticast mode [ 439.096392][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 439.133377][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2270'. [ 439.170913][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2270'. [ 439.197124][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2270'. [ 439.314773][T15146] bond2: entered promiscuous mode [ 439.321268][T15146] bond2: entered allmulticast mode [ 442.990609][T15164] lo speed is unknown, defaulting to 1000 [ 443.019974][T15164] lo speed is unknown, defaulting to 1000 [ 443.046309][T15164] lo speed is unknown, defaulting to 1000 [ 443.112618][T15164] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 443.140552][T15164] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 443.159453][T15164] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 443.181276][T15164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 443.202754][T15164] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 443.300472][T15184] macvtap0: entered allmulticast mode [ 443.329873][T15184] veth0_macvtap: entered allmulticast mode [ 443.453966][T15164] lo speed is unknown, defaulting to 1000 [ 443.468252][T15164] lo speed is unknown, defaulting to 1000 [ 443.477573][T15164] lo speed is unknown, defaulting to 1000 [ 443.489933][T15164] lo speed is unknown, defaulting to 1000 [ 443.539307][T15164] lo speed is unknown, defaulting to 1000 [ 443.576505][T15164] lo speed is unknown, defaulting to 1000 [ 443.582742][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 443.582769][T15194] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2286'. [ 443.582907][T15194] netlink: 'syz.1.2286': attribute type 5 has an invalid length. [ 443.654756][T15164] lo speed is unknown, defaulting to 1000 [ 443.739518][T15164] lo speed is unknown, defaulting to 1000 [ 443.924089][T15206] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2289'. [ 444.045681][T15218] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 444.640028][T15218] ±ÿª¨úrBº“: renamed from lo [ 444.981079][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2298'. [ 445.211962][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2299'. [ 445.650488][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 448.936198][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2303'. [ 448.981618][T15270] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2304'. [ 449.419413][T15294] netlink: 'syz.7.2311': attribute type 15 has an invalid length. [ 449.466536][T15294] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2311'. [ 449.479597][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 449.544316][T15305] netlink: 'syz.3.2312': attribute type 19 has an invalid length. [ 449.561811][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'. [ 449.568003][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 449.701287][T15305] netlink: 'syz.3.2312': attribute type 19 has an invalid length. [ 449.720992][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 449.734286][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2315'. [ 449.748920][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2315'. [ 449.999064][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2319'. [ 450.734484][T15362] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 450.828312][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.846075][T15341] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.920699][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.972296][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.983964][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.006157][T15341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.017803][T15341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.037536][T15341] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 451.590810][T15396] openvswitch: netlink: Flow key attr not present in new flow. [ 451.636497][T15398] netlink: 'syz.6.2338': attribute type 39 has an invalid length. [ 452.281326][T15427] block nbd1: Unsupported socket: should be TCP or UNIX. [ 452.309494][T15428] netlink: 'syz.6.2346': attribute type 24 has an invalid length. [ 452.427956][T15394] sctp: [Deprecated]: syz.0.2337 (pid 15394) Use of int in maxseg socket option. [ 452.427956][T15394] Use struct sctp_assoc_value instead [ 452.642589][T15441] syzkaller0: entered promiscuous mode [ 452.669351][T15441] syzkaller0: entered allmulticast mode [ 452.703052][T15445] netlink: 'syz.6.2351': attribute type 5 has an invalid length. [ 453.154137][T15462] netlink: 'syz.3.2355': attribute type 15 has an invalid length. [ 453.177516][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.331191][T15468] netlink: 'syz.0.2357': attribute type 4 has an invalid length. [ 453.370901][T15468] netlink: 'syz.0.2357': attribute type 4 has an invalid length. [ 453.636115][T15468] netlink: 'syz.0.2357': attribute type 5 has an invalid length. [ 453.708951][T15495] smc: net device vlan1 applied user defined pnetid SYZ2 [ 454.396729][T15501] syzkaller0: entered promiscuous mode [ 454.409925][T15501] syzkaller0: entered allmulticast mode [ 454.433024][T15505] __nla_validate_parse: 12 callbacks suppressed [ 454.433045][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2368'. [ 454.927073][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'. [ 454.950817][T15528] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2375'. [ 454.973967][T15533] block nbd1: Unsupported socket: should be TCP or UNIX. [ 455.205128][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2380'. [ 455.283272][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2382'. [ 455.292650][T15550] vlan3: entered promiscuous mode [ 455.298537][T15550] 0ªX¹¦Dö»: entered promiscuous mode [ 455.364534][T15552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.854744][T15577] netlink: 'syz.6.2389': attribute type 1 has an invalid length. [ 455.877821][T15577] netlink: 'syz.6.2389': attribute type 2 has an invalid length. [ 456.035398][T15584] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 456.081376][T15580] bridge17: entered promiscuous mode [ 456.100195][T15580] bridge17: entered allmulticast mode [ 456.302823][T15580] syzkaller0: entered promiscuous mode [ 456.309925][T15580] syzkaller0: entered allmulticast mode [ 456.443046][T15607] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2397'. [ 456.659129][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 456.728659][T15615] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 459.012028][ T5639] Bluetooth: hci7: command tx timeout [ 460.584173][T15649] bridge_slave_0: left allmulticast mode [ 460.603473][T15649] bridge_slave_0: left promiscuous mode [ 460.611596][T15649] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.670585][T15649] bridge_slave_1: left allmulticast mode [ 460.695245][T15649] bridge_slave_1: left promiscuous mode [ 460.709215][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.730820][T15649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.747928][T15649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.811194][T15653] tipc: Enabling of bearer rejected, failed to enable media [ 461.425989][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 461.580251][T15693] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2420'. [ 461.813866][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2422'. [ 461.931572][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2425'. [ 461.978550][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2425'. [ 462.220721][T15733] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 462.240442][T15733] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2430'. [ 462.253472][T15733] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 462.272914][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2430'. [ 462.333292][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 463.058333][T15771] nbd: socks must be embedded in a SOCK_ITEM attr [ 463.525825][T15785] xt_hashlimit: invalid interval [ 463.570350][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'. [ 463.767478][T15791] Cannot find set identified by id 65534 to match [ 464.369161][T15815] syzkaller0: entered promiscuous mode [ 464.392509][T15815] syzkaller0: entered allmulticast mode [ 464.436899][T15815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2452'. [ 464.711371][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.723275][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.830487][T15834] netlink: 'syz.0.2459': attribute type 13 has an invalid length. [ 465.076166][T15844] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 465.098741][T15846] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 465.129076][T15849] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 465.970413][T15892] openvswitch: netlink: Key type 153 is out of range max 32 [ 466.498895][T15915] syz_tun: entered allmulticast mode [ 466.593971][T15915] dvmrp8: entered allmulticast mode [ 466.668082][T15911] syz_tun: left allmulticast mode [ 467.071301][T15939] __nla_validate_parse: 3 callbacks suppressed [ 467.071320][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'. [ 467.126496][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2486'. [ 467.169197][T15941] netlink: 'syz.6.2487': attribute type 1 has an invalid length. [ 467.214297][T15944] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2488'. [ 467.347200][T15939] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 467.492608][T15955] netlink: 'syz.7.2491': attribute type 6 has an invalid length. [ 467.823554][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'. [ 468.336721][T15982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.448064][T15990] netlink: 'syz.1.2499': attribute type 13 has an invalid length. [ 468.516580][T15990] netlink: 'syz.1.2499': attribute type 58 has an invalid length. [ 468.623868][T15990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2499'. [ 468.708759][T15990] netlink: 'syz.1.2499': attribute type 13 has an invalid length. [ 468.742601][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 468.761503][T15990] netlink: 'syz.1.2499': attribute type 58 has an invalid length. [ 468.791007][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 468.842181][T15990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2499'. [ 468.980132][T15990] netlink: 'syz.1.2499': attribute type 13 has an invalid length. [ 469.022918][T15990] netlink: 'syz.1.2499': attribute type 58 has an invalid length. [ 469.108339][T15990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2499'. [ 469.608047][T16021] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 469.651536][T16021] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 469.689310][T16021] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2505'. [ 469.859074][T16041] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.886578][T16030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.979983][T16035] bond1: (slave veth0_to_bond): making interface the new active one [ 469.992570][T16035] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 470.021576][T16042] bond1: entered promiscuous mode [ 470.041818][T16042] veth0_to_bond: entered promiscuous mode [ 470.084367][T16042] bond1: entered allmulticast mode [ 470.117423][T16042] veth0_to_bond: entered allmulticast mode [ 470.545456][T16065] ip6gre2: entered promiscuous mode [ 470.572192][T16065] ip6gre2: entered allmulticast mode [ 470.668425][T16072] syzkaller0: entered promiscuous mode [ 470.692099][T16072] syzkaller0: entered allmulticast mode [ 470.750050][T16074] ªªªªªo: renamed from wg0 (while UP) [ 471.093578][T16088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.110307][T16090] ip6gre0: Master is either lo or non-ether device [ 471.138544][T16088] tipc: Enabling of bearer rejected, failed to enable media [ 471.625971][T16117] nftables ruleset with unbound set [ 471.728703][T16121] xt_hashlimit: size too large, truncated to 1048576 [ 471.821528][T16117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.701458][T16159] __nla_validate_parse: 8 callbacks suppressed [ 473.701482][T16159] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2542'. [ 473.733744][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2542'. [ 473.745877][T16159] validate_nla: 7 callbacks suppressed [ 473.745930][T16159] netlink: 'syz.7.2542': attribute type 10 has an invalid length. [ 473.761450][T16159] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2542'. [ 473.783285][T16159] geneve2: entered promiscuous mode [ 473.788912][T16159] geneve2: entered allmulticast mode [ 474.469105][T16109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.479411][T16118] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2531'. [ 474.703308][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.733151][T16174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.786114][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.870800][T16174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.915830][ T24] IPVS: starting estimator thread 0... [ 475.034183][T16190] IPVS: using max 33 ests per chain, 79200 per kthread [ 475.433388][T16209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2557'. [ 475.578058][T16218] veth0: entered promiscuous mode [ 475.611433][T16218] veth0: left promiscuous mode [ 475.618325][T16221] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2561'. [ 476.312601][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.320602][T16243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.994983][T16285] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004 [ 477.170047][ T5648] Bluetooth: hci5: command 0x0406 tx timeout [ 477.170399][ T5646] Bluetooth: hci6: command 0x0406 tx timeout [ 477.912292][T16328] geneve2: entered promiscuous mode [ 478.051065][T16333] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2584'. [ 478.097208][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2585'. [ 478.563499][T16351] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2591'. [ 478.622530][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2591'. [ 478.735669][ T13] nci: nci_ntf_packet: unknown ntf opcode 0xd31 [ 478.899436][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2594'. [ 479.208384][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2597'. [ 479.913266][T16401] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2604'. [ 481.557290][T16356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.886550][T16423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2610'. [ 481.898396][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'. [ 481.910325][T16423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2610'. [ 481.987998][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'. [ 482.039236][T16423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2610'. [ 482.098278][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2615'. [ 482.385010][T16448] team0: Device xfrm0 is of different type [ 482.438890][T16451] tipc: Enabled bearer , priority 0 [ 482.552767][T16460] xt_CONNSECMARK: invalid mode: 0 [ 482.573661][T16463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2624'. [ 482.650334][T16470] x_tables: duplicate underflow at hook 1 [ 482.699152][T16475] x_tables: duplicate underflow at hook 1 [ 483.232057][T16500] netlink: 'syz.1.2631': attribute type 11 has an invalid length. [ 483.661176][T16518] netlink: 'syz.6.2636': attribute type 1 has an invalid length. [ 484.084149][T16544] netlink: 'syz.3.2646': attribute type 39 has an invalid length. [ 484.218814][T16554] netlink: 'syz.7.2648': attribute type 1 has an invalid length. [ 484.252042][T16554] netlink: 'syz.7.2648': attribute type 3 has an invalid length. [ 484.284785][T16554] __nla_validate_parse: 71 callbacks suppressed [ 484.284807][T16554] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2648'. [ 484.351327][T16554] NCSI netlink: No device for ifindex 813332851 [ 484.436157][T16565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2651'. [ 484.955851][T16587] syzkaller0: entered promiscuous mode [ 484.979309][T16587] syzkaller0: entered allmulticast mode [ 485.185517][T16596] syzkaller0: entered promiscuous mode [ 485.212514][T16596] syzkaller0: entered allmulticast mode [ 485.246048][T16602] netlink: 'syz.1.2661': attribute type 83 has an invalid length. [ 485.353315][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 485.392543][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 485.660873][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2666'. [ 485.986216][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2671'. [ 486.610962][ T31] INFO: task syz.5.1598:12394 blocked for more than 143 seconds. [ 486.620768][ T31] Not tainted syzkaller #0 [ 486.628481][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.639501][ T31] task:syz.5.1598 state:D stack:25296 pid:12394 tgid:12393 ppid:10253 task_flags:0x400140 flags:0x00080002 [ 486.653687][ T31] Call Trace: [ 486.657293][ T31] [ 486.660719][ T31] __schedule+0x17d9/0x56c0 [ 486.666148][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.672676][ T31] ? __pfx___schedule+0x10/0x10 [ 486.679067][ T31] ? schedule+0x90/0x2b0 [ 486.684866][ T31] schedule+0x164/0x2b0 [ 486.689553][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.695703][ T31] __mutex_lock+0x7bf/0x1550 [ 486.701350][ T31] ? __mutex_lock+0x5d4/0x1550 [ 486.707784][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 486.715515][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.721972][ T31] ? rcu_is_watching+0x15/0xb0 [ 486.728007][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 486.734288][ T31] ? __kmalloc_noprof+0x396/0x720 [ 486.740378][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 486.748305][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 486.758494][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 486.768998][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 486.776209][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.784371][ T31] ? bpf_lsm_capable+0x9/0x20 [ 486.789527][ T31] ? security_capable+0x7e/0x2c0 [ 486.796166][ T31] genl_rcv_msg+0x614/0x7a0 [ 486.800776][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.806954][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 486.814075][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 486.820106][ T31] netlink_rcv_skb+0x226/0x4a0 [ 486.825725][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.831728][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.839060][ T31] ? down_read+0x2be/0x330 [ 486.846273][ T31] genl_rcv+0x28/0x40 [ 486.851368][ T31] netlink_unicast+0x7bb/0x940 [ 486.857374][ T31] netlink_sendmsg+0x813/0xb40 [ 486.865604][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.872107][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.877949][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.885744][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 486.892639][ T31] ____sys_sendmsg+0x54e/0x850 [ 486.898184][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.904320][ T31] ? import_iovec+0x73/0xa0 [ 486.910574][ T31] ___sys_sendmsg+0x2a5/0x360 [ 486.918180][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.924692][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.930571][ T31] ? futex_wait+0x2a2/0x390 [ 486.936294][ T31] ? __fget_files+0x2a/0x420 [ 486.941807][ T31] ? __fget_files+0x3a2/0x420 [ 486.947789][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 486.956900][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.963188][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.969674][ T31] do_syscall_64+0x174/0x580 [ 486.974995][ T31] ? trace_irq_disable+0x3b/0x140 [ 486.980779][ T31] ? clear_bhb_loop+0x40/0x90 [ 486.986135][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.993000][ T31] RIP: 0033:0x7f067ff9de99 [ 486.997850][ T31] RSP: 002b:00007f0680eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.008158][ T31] RAX: ffffffffffffffda RBX: 00007f0680225fa0 RCX: 00007f067ff9de99 [ 487.018206][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000005 [ 487.027903][ T31] RBP: 00007f0680033eaf R08: 0000000000000000 R09: 0000000000000000 [ 487.036763][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.045651][ T31] R13: 00007f0680226038 R14: 00007f0680225fa0 R15: 00007ffd933494a8 [ 487.054746][ T31] [ 487.071564][ T31] [ 487.071564][ T31] Showing all locks held in the system: [ 487.080427][ T31] 3 locks held by kworker/1:0/24: [ 487.086206][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.099506][ T31] #1: ffffc900001e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.112770][ T31] #2: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 487.124940][ T31] 1 lock held by khungtaskd/31: [ 487.130172][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 487.141139][ T31] 1 lock held by syslogd/4974: [ 487.146701][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 487.158541][ T31] 1 lock held by klogd/4981: [ 487.163973][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 487.175559][ T31] 2 locks held by getty/5380: [ 487.180506][ T31] #0: ffff888032c3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 487.191145][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 487.202166][ T31] 2 locks held by syz.2.935/9680: [ 487.207591][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.218483][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 487.232215][ T31] 3 locks held by kworker/u8:22/10353: [ 487.239068][ T31] #0: ffff88801b1a0940 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.255835][ T31] #1: ffffc90002da7c40 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.272473][ T31] #2: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: basic_delete_filter_work+0x16/0x30 [ 487.284334][ T31] 2 locks held by syz.5.1598/12394: [ 487.290215][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.300086][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 487.311124][ T31] 2 locks held by syz.4.1772/13143: [ 487.319119][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.329327][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 487.340504][ T31] 2 locks held by syz.7.2657/16584: [ 487.346530][ T31] #0: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 487.356986][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 487.368420][ T31] 1 lock held by syz.3.2663/16605: [ 487.373988][ T31] #0: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 487.384276][ T31] 2 locks held by syz.0.2667/16617: [ 487.390143][ T31] #0: ffffffff9057cd78 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 487.403412][ T31] #1: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 487.415588][ T31] 2 locks held by syz.6.2670/16624: [ 487.422220][ T31] #0: ffffffff9000db00 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 487.433200][ T31] #1: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 487.448270][ T31] 1 lock held by syz.6.2670/16625: [ 487.456921][ T31] #0: ffffffff9000db00 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 487.468935][ T31] 1 lock held by syz.1.2671/16627: [ 487.476239][ T31] #0: ffffffff9002cd00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 487.488837][ T31] [ 487.504008][ T31] ============================================= [ 487.504008][ T31] [ 487.514982][ T31] NMI backtrace for cpu 1 [ 487.515009][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 487.515037][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 487.515048][ T31] Call Trace: [ 487.515056][ T31] [ 487.515063][ T31] dump_stack_lvl+0xe8/0x150 [ 487.515093][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 487.515202][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 487.515249][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 487.515282][ T31] sys_info+0x135/0x170 [ 487.515329][ T31] watchdog+0xfd7/0x1030 [ 487.515355][ T31] ? watchdog+0x1c7/0x1030 [ 487.515378][ T31] kthread+0x388/0x470 [ 487.515408][ T31] ? __pfx_watchdog+0x10/0x10 [ 487.515424][ T31] ? __pfx_kthread+0x10/0x10 [ 487.515447][ T31] ret_from_fork+0x514/0xb70 [ 487.515485][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 487.515507][ T31] ? __switch_to+0xc89/0x1420 [ 487.515530][ T31] ? __pfx_kthread+0x10/0x10 [ 487.515553][ T31] ret_from_fork_asm+0x1a/0x30 [ 487.515580][ T31] [ 487.515597][ T31] Sending NMI from CPU 1 to CPUs 0: [ 487.640057][ C0] NMI backtrace for cpu 0 [ 487.640077][ C0] CPU: 0 UID: 0 PID: 7576 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 487.640099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 487.640112][ C0] Workqueue: events_unbound toggle_allocation_gate [ 487.640147][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 487.640175][ C0] Code: ad ca 11 00 00 00 00 eb b5 e8 c5 5d 2d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 68 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a 5e 30 0a cc 48 8d 3d 72 be b8 [ 487.640191][ C0] RSP: 0018:ffffc90006acf748 EFLAGS: 00000286 [ 487.640207][ C0] RAX: cb64d6a8a808a100 RBX: 0000000000000206 RCX: 0000000000000046 [ 487.640220][ C0] RDX: 0000000000000005 RSI: ffffffff8e4b0ae2 RDI: ffffffff8c4bda80 [ 487.640232][ C0] RBP: ffff8880360b0c68 R08: ffff88801b04f603 R09: 1ffff11003609ec0 [ 487.640246][ C0] R10: dffffc0000000000 R11: ffffed1003609ec1 R12: 0000000000000005 [ 487.640259][ C0] R13: 0000000000000005 R14: ffffffff8eb59c60 R15: ffff8880360b0000 [ 487.640272][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 487.640287][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.640300][ C0] CR2: 000000110c3a20a4 CR3: 000000000e946000 CR4: 00000000003526f0 [ 487.640318][ C0] Call Trace: [ 487.640327][ C0] [ 487.640338][ C0] ? kmem_cache_alloc_node_noprof+0xc8/0x610 [ 487.640361][ C0] __text_poke+0x85a/0x9b0 [ 487.640386][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 487.640405][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 487.640434][ C0] ? kmem_cache_alloc_node_noprof+0xc8/0x610 [ 487.640455][ C0] ? __pfx___text_poke+0x10/0x10 [ 487.640488][ C0] smp_text_poke_batch_finish+0x8f2/0x1110 [ 487.640511][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.640534][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 487.640561][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 487.640588][ C0] ? __jump_label_update+0x347/0x370 [ 487.640644][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 487.640670][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 487.640697][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 487.640718][ C0] static_key_disable+0x1a/0x20 [ 487.640743][ C0] toggle_allocation_gate+0x1fe/0x290 [ 487.640769][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 487.640796][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 487.640822][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 487.640847][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 487.640867][ C0] process_scheduled_works+0xa8e/0x14e0 [ 487.640905][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.640930][ C0] ? assign_work+0x3cf/0x5d0 [ 487.640953][ C0] worker_thread+0xa47/0xfb0 [ 487.641002][ C0] kthread+0x388/0x470 [ 487.641029][ C0] ? __pfx_worker_thread+0x10/0x10 [ 487.641048][ C0] ? __pfx_kthread+0x10/0x10 [ 487.641074][ C0] ret_from_fork+0x514/0xb70 [ 487.641102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 487.641127][ C0] ? __switch_to+0xc89/0x1420 [ 487.641150][ C0] ? __pfx_kthread+0x10/0x10 [ 487.641176][ C0] ret_from_fork_asm+0x1a/0x30 [ 487.641203][ C0] [ 487.644832][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 487.644908][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 487.644990][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 487.645024][ T31] Call Trace: [ 487.645047][ T31] [ 487.645086][ T31] vpanic+0x56c/0xa60 [ 487.645243][ T31] ? __pfx___schedule+0x10/0x10 [ 487.645351][ T31] ? __pfx_vpanic+0x10/0x10 [ 487.645493][ T31] panic+0xc5/0xd0 [ 487.645580][ T31] ? __pfx_panic+0x10/0x10 [ 487.645666][ T31] ? preempt_schedule_common+0x82/0xd0 [ 487.645754][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 487.645829][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 487.645922][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 487.646011][ T31] watchdog+0x1030/0x1030 [ 487.646106][ T31] ? watchdog+0x1c7/0x1030 [ 487.646202][ T31] kthread+0x388/0x470 [ 487.646299][ T31] ? __pfx_watchdog+0x10/0x10 [ 487.646363][ T31] ? __pfx_kthread+0x10/0x10 [ 487.646456][ T31] ret_from_fork+0x514/0xb70 [ 487.646536][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 488.126113][ T31] ? __switch_to+0xc89/0x1420 [ 488.131273][ T31] ? __pfx_kthread+0x10/0x10 [ 488.136177][ T31] ret_from_fork_asm+0x1a/0x30 [ 488.141711][ T31] [ 488.145917][ T31] Kernel Offset: disabled [ 488.150892][ T31] Rebooting in 86400 seconds..