last executing test programs: 3m41.777946959s ago: executing program 2 (id=3445): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24001000) 3m41.60700259s ago: executing program 2 (id=3447): unshare(0x8000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) 3m41.423944125s ago: executing program 2 (id=3450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x30}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000765880e6c7b3380000000000010100000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65740cd70b0f00000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3m41.198175373s ago: executing program 2 (id=3454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x84) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfb, {0x0, 0x0, 0x0, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x2000a100) r7 = getpid() r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, &(0x7f0000003580)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000005c0)=0x0) r12 = syz_open_procfs$namespace(r7, &(0x7f0000000600)='ns/ipc\x00') r13 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r13, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r13, 0x0) listen(r13, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000405c}, 0x10800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r14, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m40.794627753s ago: executing program 2 (id=3459): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) epoll_create1(0x0) 3m40.644993394s ago: executing program 2 (id=3461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7aa5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x110}, 0x40010) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) socket$unix(0x1, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 3m24.898045049s ago: executing program 32 (id=3461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7aa5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x110}, 0x40010) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) socket$unix(0x1, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 2m38.097279773s ago: executing program 4 (id=4118): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001800)={'syztnl1\x00', &(0x7f0000001780)={'syztnl2\x00', r3, 0x4, 0x9, 0x5, 0xa85, 0xa, @mcast2, @rand_addr=' \x01\x00', 0x10, 0x40, 0x2, 0x1}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000780)="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", 0x1000, 0x40, &(0x7f0000001840)={0x11, 0x19, r4, 0x1, 0xff, 0x6, @local}, 0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0x0, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {0x0, 0x0, 0xa43b}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r7, 0x200) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendto(r9, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) (async) recvfrom(r8, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x4}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x48010) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r10, 0x29, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2m37.888971676s ago: executing program 4 (id=4123): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2m37.707005172s ago: executing program 4 (id=4126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB="9e8d01000000dfff000000000000e20000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.482969994s ago: executing program 4 (id=4131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000fd630000ffffffff00000000000000000000000000000045b3802da18b8211ce00000000000000000000000000000000ed0000000000000000000000000000000000000000008000000000000000000000000000000000000000000000feffffff11000000000000000000000000000800000000009f553c28e01375f1bca0eded0e2661055a9e9574e61d3929a703dafe"]}, 0x12d) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r9, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0xb}]}]}, 0x20}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000100)=0x100005, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) writev(r11, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r10, 0x11a, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r7, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x9, 0x4, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x67, 0x0, 0x98, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x13, 0xbc, [@dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x24}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x36}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1fab}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c005}, 0x90) 2m36.491127525s ago: executing program 4 (id=4151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m36.349520858s ago: executing program 4 (id=4155): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000000300)=""/188, 0xbc}], 0x6}, 0x10100) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x288, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a0c2f4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5064377a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x224, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "bd388dce9d7682fb2dadf0dc9cbc108f8b878643e3312be4c95617f14e93411d14f1aa"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "efd784bc0b5433b52b708456d6ad1ab22393ebcde17a9c0ea2bf0c931051097dce248eb2a09ad16d73ecf35dbb0b12de96f2fd5013ab105cf319d165e5c590042af3ce473769fd67773cd42493a96c060b80327541f949d913c4dcd4f807a82cb08a88d9c56401e971c928af14bae3296a56af378a849206b932a7706d4767c8d26f55dbe9578cfa8bb1fd41cf5c2cda3c70576415fb86a5ab431d3b454d2a973c891918b2abf99874bc298ee840c6f1d89b2fa0662943ad270a20516f"}, @TIPC_NLA_NODE_ID={0xfb, 0x3, "1f2f72aa0565b83cbd101fd1455c6fdfecf24c39d3c0d8a3e413320910d3b5f2e14008dc8cae266240a9d0a551feeeb9a27933ed02cb272c5db418f625356df15dcb5ce491f04151386ac1362b289612c4c60ab75c14a7856f84e21396830ce04c024d9cefb245c5d8c6104874f1f56b76b079a4751d2eba0029a643ef31e5d56ac18f0d79903a0fd3be7aa67f98e9299a8ea0cc60ea20c4913e7144384dd2473445154841c16baf0b4c6adff16aeab848df3e5a605ae0afa3ef5edef640f4cb6cd57e4d628e88f2ffdc620ca67aae68913f6066136af73fa4b3e344d8ce0fbcf754b918fdd44f60f61d6c4e2a6bfca88810bc425e70fc"}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4080801}, 0x0) 2m20.779056978s ago: executing program 33 (id=4155): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000000300)=""/188, 0xbc}], 0x6}, 0x10100) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x288, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a0c2f4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5064377a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x224, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "bd388dce9d7682fb2dadf0dc9cbc108f8b878643e3312be4c95617f14e93411d14f1aa"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "efd784bc0b5433b52b708456d6ad1ab22393ebcde17a9c0ea2bf0c931051097dce248eb2a09ad16d73ecf35dbb0b12de96f2fd5013ab105cf319d165e5c590042af3ce473769fd67773cd42493a96c060b80327541f949d913c4dcd4f807a82cb08a88d9c56401e971c928af14bae3296a56af378a849206b932a7706d4767c8d26f55dbe9578cfa8bb1fd41cf5c2cda3c70576415fb86a5ab431d3b454d2a973c891918b2abf99874bc298ee840c6f1d89b2fa0662943ad270a20516f"}, @TIPC_NLA_NODE_ID={0xfb, 0x3, "1f2f72aa0565b83cbd101fd1455c6fdfecf24c39d3c0d8a3e413320910d3b5f2e14008dc8cae266240a9d0a551feeeb9a27933ed02cb272c5db418f625356df15dcb5ce491f04151386ac1362b289612c4c60ab75c14a7856f84e21396830ce04c024d9cefb245c5d8c6104874f1f56b76b079a4751d2eba0029a643ef31e5d56ac18f0d79903a0fd3be7aa67f98e9299a8ea0cc60ea20c4913e7144384dd2473445154841c16baf0b4c6adff16aeab848df3e5a605ae0afa3ef5edef640f4cb6cd57e4d628e88f2ffdc620ca67aae68913f6066136af73fa4b3e344d8ce0fbcf754b918fdd44f60f61d6c4e2a6bfca88810bc425e70fc"}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4080801}, 0x0) 1m52.049628564s ago: executing program 5 (id=4737): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x1410, 0x1, 0x70bd2d, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m51.711660009s ago: executing program 5 (id=4742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) r3 = gettid() (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_NEWNSID={0x5c, 0x58, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r1}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m51.524591523s ago: executing program 5 (id=4744): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m51.344999866s ago: executing program 5 (id=4748): r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000080500000ee5209ae00000000000000000009"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) 1m51.135298792s ago: executing program 5 (id=4750): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"d1f7083572fdb677f7af69f42b877d37", 0x0, 0x0, {0x8, 0x5}, {0xfffffffffffff000, 0xdd7c}, 0xb7d, [0x100000001, 0x506514f5, 0x6, 0x9, 0x7, 0x9, 0x1fa, 0x2, 0x20002000, 0x6, 0x3, 0x8000000000000000, 0x7f, 0x3ff, 0x401, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000002c0)=0x1a, 0x4) readv(r3, &(0x7f00000017c0)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/187, 0xbb}, {&(0x7f00000015c0)=""/200, 0xc8}, {&(0x7f00000016c0)=""/244, 0xf4}], 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x14500}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00', 0x0, 0x8, r4}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20080094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r6, 0x0, 0x74, 0x8c, &(0x7f0000001b00)="62863d873c21839a93007665e5a2e26b7df7f528eb1872ac57ab78340e05b272d1944ba62e00e68e852b01a9d1536d9c8a6e7f12b6f5504f96e12a8a768990713ef402317b602a6a237b724a83a8c3e321aa700596af1003a5f1eee7b1e030e383d7b46f01e2bccfe33d5dec1f19f4487e43630f", &(0x7f0000001b80)=""/140, 0xc75, 0x0, 0x4f, 0x48, &(0x7f0000001c40)="5d6349d88fc95c5c7b50a485dff7f55f631276e2fe201bcf6ab7c318030ae3a4bcc6084313b95b392534d71c4e2c4b1c3d565e8b3f501bf7cc074fd30f21fc38a87391e4e9a09b5a08efd43029982f", &(0x7f0000001cc0)="a83b8e734f2de41af06750064ec31f86ab289948887f21d3c47524d81156ea291fa56fede842b86155f400bda086db3dc2a3515c9b9df4e6d26fc1a25ed8d8ee4b2b054c338fa8c4", 0x4, 0x0, 0xfffff5c7}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000001dc0)={0x3, 'veth0_to_hsr\x00', {0x4}, 0x2}) write(r3, &(0x7f0000001e00)="a77934c1d4260b36b0980444e0855fb3ba04fa0803bf81ef34eeca64b60e3ec51b6ecb36eda0e331a2499c05e5ed1707cd95ba1b3fc021be3acdb3c6fe40bb0619b7f2179cfb11ea009bd39759c76b380a99ef6252b36731b122ee2892299fee7bb8f74a0140816d2cc4ac4a5ed9bed938d3d2", 0x73) bind$netlink(r4, &(0x7f0000001e80)={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r0, &(0x7f0000001ec0)="69b37f73c4761e6fd4810122a20a39b2c4959ae71caf5caa402e8fa3c6f9e020bd86608186268a394d0aa8a4b27d2977a6c1c20995efe72911374de8e334bc83ed388cc196d13e7149bb83a23c4b0269e5249934a7017b6c01915b3d83080c5dcfb5d01388fbebc95a6dcd606eaa9a70cd66244dc3053cb33636ad48beecba88de7385d5199fa7dc7480b6771720073c110db9b6f92a737da8be342fd8d04983946a1819b19fe927b8c92ea0d1f0c203169521e5908f408388dbf0141b7bfbfe027c42dd828d42b245745dd73648d2ff2c381b8ed62c99282d851836dc2ea7681942171cc558edc79028d6a3", &(0x7f0000001fc0)=""/147}, 0x20) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000020c0)={0x1, [0x0]}, &(0x7f0000002100)=0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x54, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0xa}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="697dfba969e0480a2311fcf70b6a5a0b2032c7df120e0f9b94eaf107"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000801) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x34, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x40040) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000026c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002680)={&(0x7f0000002440)={0x210, r10, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "be96c720f761701f0b46fd408f8bc8fdc8f76e4afb849ba72cf5b653b8003311a9270f2ff3aeede2b513b17d431917878eebd95cb3d1fd80dfa3dc521c"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "35fdc4885654ff830ac398343e49bee4e99c4c8f5811cff1d90405f5cfdd65414c8004cd358e6188d3a7c2b70c60fdc20719b38c7df721f4f5790f33e312650188c4be96fabf70038a5863337b26a79c5c0b9b1adfbdc3eff3fe93b76e85e9d30e644e8e9fedd0672dbb91ee179ca2827f50b61587b510adf488119381"}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "3d4876e29952cb05139a7a1c0e09fd3c18f74eebe3f4255628667fddb4c84f4b227ceccddacb415ecd2f4722319871fe977b8a965bf271bb7f6e640d6a52fb8d288c1de5280b8a9885703f8d0cb8485bf3473395f0a4a06a8858c29b3c9832b415bf9aead3dcf183eba27aac30d98fb8ff018b4826512a63d9f30bef1cd63f306743f2a6076f191d92d5586d16b4319f270f1f66b63d893cccc1937b08ca9b1bc0bce0c3b60149129888bd28c860f9df"}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0x5, 0x7}, {0x7}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x79c}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x69de}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x4004851) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000002840)) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f00000028c0)={&(0x7f0000002880)=[{0x100, 0xa7a, 0x4, 0xffff}], 0x1, 0x20, 0x0, 0x3}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000002940)) 1m50.194735896s ago: executing program 5 (id=4760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @xfrm={{0x3d}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_KEY, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0x400d4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'ip6tnl0\x00'}}, 0x1e) setsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m40.325493415s ago: executing program 3 (id=4881): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, r1, 0xd5c15c672e322a81}, 0x14}}, 0x20000008) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYBLOB="87440c982d4320202ea0252cd467c7bb7dc18cb4cdd7551b9f0e632f3fc53163e4bbd28e2fdbe259693400a299dc20e413e0ddecc07e9ef4f2ffe0d388655bca282a40ff2f95b2683375f50c09ac017416ec814a5ac93bf207f5f78c615c5012b1d2cc08f9872dd0a8cdeed0bccb5570a4eef999975587db502aa1d2d3561a13be0ae8c74971feb0cfeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x91d5c78542c436e8, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) 1m39.078883176s ago: executing program 3 (id=4885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010700000000000000000d"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711092000000000006000000000075000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711092000000000006000000000075000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m38.862500481s ago: executing program 3 (id=4889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r3, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r2) (async) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r3, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) 1m38.389106335s ago: executing program 3 (id=4893): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = epoll_create(0x10000e9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x400448c9, &(0x7f0000000040)="b4c003990000000008") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x800442d2, 0x0) 1m38.216842133s ago: executing program 3 (id=4897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x2000}) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000280)=0x8c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) unshare(0x20000400) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x300) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff05, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m38.013434884s ago: executing program 3 (id=4901): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000080)='\'\xf0$\x00', 0xa900, &(0x7f00000000c0)={@_ha_fsid={[0x1000, 0x3]}, {0x0, 0x6, 0x3b, 0x5}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1ff}, {[0x2, 0x0, 0x2, 0xf3]}, 0x7, 0xb8, &(0x7f0000000200)=""/184}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {0x0, 0x4}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0x0, 0xc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m34.772366023s ago: executing program 34 (id=4760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @xfrm={{0x3d}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_KEY, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0x400d4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'ip6tnl0\x00'}}, 0x1e) setsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m22.943505325s ago: executing program 35 (id=4901): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000080)='\'\xf0$\x00', 0xa900, &(0x7f00000000c0)={@_ha_fsid={[0x1000, 0x3]}, {0x0, 0x6, 0x3b, 0x5}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1ff}, {[0x2, 0x0, 0x2, 0xf3]}, 0x7, 0xb8, &(0x7f0000000200)=""/184}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {0x0, 0x4}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0x0, 0xc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 24.871484134s ago: executing program 6 (id=5251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'ipvlan1\x00', @link_local}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x98c, 0x40, 0x107, 0xfffffffe, 0x0, {0x9, 0x7c}, [@nested={0x95f, 0x142, 0x0, 0x1, [@generic="fa8f751c517ec468505087462f9e6cbe41fdce6c8d6f5910bcbcb0ee3dd0cba2987cdafed740c9fe7a123c0e75dccda39cea9a76ff1948e732c210496f9a272f3b25e5b9a33547382d27445f29c306a168bc8fbd59318dc1b9f516196545627983d171f6914faefa91b89cd80d3d7ed9ab06a48bf9a56be6ded4c55fe9d657fdbd378373905eee4af1532b070af1084070dae053c95e76ef4bf9da851c5accc4e3d5c4d2d2c57eae5285342a4e3ffdca71b48b0f7c928d4a75fe61a2d9283f281adc310f9c6707c1167b067696dbc0d962a4c29d3a4d30abddc2525782aa33d86adfffc2799c53a3b97fed83daaadf461407b6ac0e02c2", @nested={0x278, 0x145, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @pid=r4}, @nested={0xfe, 0x101, 0x0, 0x1, [@typed={0x14, 0x119, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x6}, @generic="8a9cd311681a1415e872e97d1882231790302aca3f9c0bfe847551dda2831ec5fecc963ddcc629b2cff30099f6aa150591d64bf9ab13acb0687774e034358dfcad9b2e1e330922d341e9c36b21c9292979a6ab4913f0fe79f37484dee42c3b6608e3377345de9acc67e514f9d716f0baa5e4931ce37ff365af63440188fc816e67178f8ccd34c3bc5df683fe455b36c787ab4007d713fab91f9491ad4037229942d2dfcf9a428d10d0ef52d59eacf2b57ffd87a8255e47285d7dd27fe0f6e10fbbe6e3e04aac3fcb70e7d8aaa9e1ed0ab7e4969af399a22af4bb0f6cd8da"]}, @generic="c90a4340a2d747b0061614", @generic="7d57f0aaa01ff58b6ffa0e46eb3e6e4c4905b9ff07f61519aa5218452bb53c401850f80bea1e096c66e74096012071ab5421c4ce11274f0339ba2df20b64f49c39557ed995953f3f4c1156b35a044362a2ed9127edaa88a841725a47719b728968d2ba1ea398d25a32ab9ee3da729913cedb8538d5b71c28bcbc0b0b709a90cbead8db026d57259972d5b3cd2c", @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="597ba5966837d3d84eb6026169dd1a2196b15e023dc40f966d497e82dc9e94622aa333da1f407522e0d92e664220978677d2daca4b8cfa231afb23fb80d2652a0c5efbe4ae51ff374e480375231fa74290e4df23beb4cfcab2c75bc2d08353e126df0b0ca76e6ecce07aef07f38ec9686bb16fc056c1d0aa629891df12b48e336f18192c8f1ac1b5b30518dcff21f6321e6ec14504e6975d", @nested={0x1e, 0x112, 0x0, 0x1, [@generic="2f1ceba4affdb00efcc6c2404b2957dbd272171bd16a", @nested={0x4, 0x114}]}, @typed={0x8, 0x144, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x8, 0x119, 0x0, 0x1, [@typed={0x4, 0xee}]}, @nested={0xcf, 0x158, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @fd=r0}, @generic="c97159a71a38796d823206439a3d5da8162ec38889e2ce5c6608dafb6b0edaa620fddb4289c6ee283e5811522b5c65f6aecb7f60d37e3f24847c54d39123ed87b1e214bc9544cb02ba7f566fca3b25e7fbd1ae89ea4658080208a6ed23f8bfdba7e9fb7e9dd0ccc5a69f807fe8693817e6b509f907e06a11bf08969def56fcf9773b598c269bddc285e10f01e902055b399d88c25174955e784c447f95b27022f9262fe451d5f8bf02ddd66f10b6d433c31cb83ac7f68079489b09499ce6f77a5aa06c"]}, @nested={0x2b0, 0x91, 0x0, 0x1, [@generic="dcd7ee3df971a319e12fe26c15f7e5a2dc88b8875e672832514c8ec50ba07b87a0349af37c9738891cdbcd17218359751b0ef7ed02a2de3a8ee5bcb0d05e7c7ee715f27a756a240b660c79dcad0b382d4e047aa5b19e8a677278748b36f8b382226b33682238c4db0b841c7216a4729663bc6957d2907eb7c515ae4e36b955bf85bb637298a634dfd4a0ec20283e63ac0a681bd3", @nested={0x1ab, 0x2a, 0x0, 0x1, [@nested={0x4, 0x1d}, @typed={0xdc, 0x43, 0x0, 0x0, @binary="23f42bdbebe42433a2fcea3aaa4b7673a8d4291001e12d23a0e6c925c31009673a8aac3666e2cc2d6a5ea1be189067f30f5f41ddec4dcb4541207f772bf493c61ad259d6932dd6cf7962b61286941b561ff4bba4edb224edddbf2381547c2c3990742e98e4384f469585824514d1468c8668955a2dea739c75e5a1de1393a2729faa73b7ed56954b747a8bc125be6ea8bb3a2c181771d5b3e2f4f66c2f694d1ba2fd364db551cd61771ca08b19b0be855ea813b7fdcb9042e7dcb23ebf5287d7a87e8e55a144a4de43fddefa9792e2c915cac3b1d6f2d803"}, @generic="192cd59ceb052867e5183a2a7dd154916f92f1fea1c42f3d8193d6df6afdf2ddf75f95a246f47566f88f5155b7b9e24f2241aca1334f606738f8c4c6e971eb8c603209eda02ccb80389ceedb0bb02095be925181e2b5396e88b951631e7d66018ce690e02b06838bce4a2daa59965de0fd8dcefb3d6b959cc474becf5eaf89c2eda77dbad27d2acec226d6dfc47fbbf105ee8a040a8d11307dcedb47f5a53f3a002bdd5b61545d0ac1e2ad2cbad4a12f4bdd39952bec008860dee75b72051bc52a5e4c8328bd46"]}, @nested={0x27, 0xd7, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @ipv4=@remote}, @generic="1f07f37d2ec65f8621ca2516c7dfbd1f71f564813770b2", @nested={0x4, 0x29}]}, @generic="a74a0610118f745ff5e836", @nested={0x14, 0x164, 0x0, 0x1, [@typed={0xc, 0x83, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x13b}]}, @generic="7de647fb803f317047c3a5a193d40ba02025bd171a6e5d2bfeda66b949185cd0da5a49a836"]}, @typed={0x11, 0x49, 0x0, 0x0, @str='/dev/net/tun\x00'}, @nested={0x244, 0x10b, 0x0, 0x1, [@nested={0x23e, 0x126, 0x0, 0x1, [@generic="5f58f2620c9f05888fc4594078373b706fdd5ee82c7d060d36a72e0f8b1e384da2295003022da3e5c835f666b0936bbe1ad758d9419e6df89a371c4953072816706bbf0de439a098082c45d2b087345312b5dd163450d128567581bfdfa2183d265deb8d04a8d190c268d126cb3edc031d740893ec8126a6f5de5b5c14e3308313c118ba88aa9831dfc5867f09de97bc61dff0eb7c96744f67bd29f4924b5a99f8bbe49ed2d14b967006ecf1a8560e7b4f745f2f12df6391bc330f21555c3008a4df28d98a40f503064a9d1c5f90a7bc3cf1b95b", @generic="6e00ccbdf0d8087e7955de64b039b4a528da90e2a30b85508ca1e54f031c53a9c02c5c8065c3b549379088b3932c5a1af5945a333f831cd3975497f5e13e1850251d4e57aac15bec74dff896af4b4bfa6c0fc28dbef0b625bbd970747eae5bc401c5c6c2c462edfe015adf4b16a89f4df7ba87df9904258452e5329196eca9b95b8a0e1bcfd7ba1545839083b95e2af6116357a05f1b41f77547e83f98b9be7d73c00d460bbbf72bdd8c7d53f0ee5e87426c1f3da7e03da1765644e72ed9cd36983d2102df1b78b8fe52e28fbe77901ba245a03436b1a28744e70fdaec91500011f6f727b717be1d", @generic="e655939417d3445c0cc638c2fe1c6d7d74dc058db56d6ee456456666a0b94cb050ae4485f1e71295b7f5937434a91a0cd483bd11d1253e23baa95ce690200d8df9516c167df90638e819e3f567505c0d6ffa8fad994b65dc1ed8e017f1de3775bcb2f85887ad501b28bd640b7349", @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x6e}, @nested={0x4, 0x66}]}]}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0x8}]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x98c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) 23.800157051s ago: executing program 6 (id=5258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'tgr160-generic\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) 22.913488167s ago: executing program 6 (id=5261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r14 = openat$cgroup_type(r13, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_type(r14, &(0x7f0000000280), 0x9) write$cgroup_type(r14, &(0x7f00000000c0), 0x9) 21.149907831s ago: executing program 6 (id=5270): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x4e, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87"], 0xa0}}, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80800) 20.654758279s ago: executing program 6 (id=5273): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0xfff7, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xfffd, 0x3, @mcast2, 0x400000}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x4000, 0x17}, &(0x7f0000000140)=0x9) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb3662f2ee18c44653c3c3e3b7f6056f06544e49d92544e11e70c7", 0x35}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 20.302339162s ago: executing program 6 (id=5276): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@caif, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 4.917142329s ago: executing program 36 (id=5276): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@caif, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 4.880967526s ago: executing program 1 (id=5393): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2100000005000000000000000000000005000000", @ANYRES32, @ANYBLOB="40000000000000e8b985248523e541d9afe0a12b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0x6bf, 0x1, 0x10000}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) socket(0x8, 0x3, 0x4) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x22, 0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@deltaction={0x128, 0x31, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1fffe00}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000c}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000200), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) close(r8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1000000000000072, 0x0, 0x0, 0x86dd}, 0x4) (async) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d706572665f6576659c742676696f202d667265657a6572202d6465766563657320"], 0x22) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000e0000000000000085100000050000008505000000000000a70000000000000018000000000000000000000000000000950000000000000095000000000000003cbb98fe0cf202d2b62537e5d03410da899033a485aeea853be8e633cbebc46c5cb54b4800ab8a38e37621cf003ce88e8225d51a033370c9fcc45897150df81a241701edb0e221f193fa0d64950ffe2fba"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x32, r0}, 0x94) 4.880208851s ago: executing program 7 (id=5394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x9, 0xa}, {0x0, 0xfff1}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) 4.477807758s ago: executing program 1 (id=5397): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000300)}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x100, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe00000000691086000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xbe4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x66aa}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @loopback}], 0x3c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) 4.040650579s ago: executing program 1 (id=5399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110002000000"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.535666376s ago: executing program 7 (id=5401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) syz_open_procfs$namespace(r4, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@local, @in6=@empty}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xffffffd1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r6, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000740)={0xfffffffd, 0x17d1cfc9, 0x1, 0x1fa4, 0x400, 0x4, 0xfffffffe, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000060000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) (async) r10 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/98, 0x62}, {&(0x7f0000000900)=""/248, 0xf8}], 0x2, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x40000122) sendmsg$nl_route(r11, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=@ipv6_getroute={0x48, 0x1a, 0x0, 0x70bd29, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x3, 0xfe, 0x4, 0xfe, 0x5}, [@RTA_IIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xb}}, @RTA_PREF={0x5, 0x14, 0xfc}, @RTA_UID={0x8, 0x19, r12}, @RTA_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 3.473809673s ago: executing program 0 (id=5402): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0x20, &(0x7f00000019c0)={&(0x7f00000000c0)=""/107, 0x6b, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x13, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x58e8ef7}}, @alu={0x7, 0x0, 0x1, 0x0, 0x3, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x1, 0x7, 0x3, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @alu={0x4, 0x1, 0x6, 0xb, 0x7, 0x0, 0xfffffffffffffff0}], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x15, &(0x7f0000000240)=""/21, 0x41100, 0x24, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x80000000, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[r0, r0], &(0x7f0000000300)=[{0x0, 0x5, 0x10, 0x9}, {0x4, 0x4, 0xa, 0xa}, {0x0, 0x1, 0x9, 0x7}, {0x1, 0x4, 0x3, 0x4}, {0x2, 0x4, 0x5, 0x9}], 0x10, 0x1}, 0x94) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000980)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000140), 0x0}, 0x20) 3.027390466s ago: executing program 7 (id=5403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r1, 0x40049409, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r5) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r6, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r8, 0xe701ac47a3d23ecd, 0x70bd2b, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\x00\x00\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r9) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x140f, 0x100, 0x70bd2c, 0x80, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$IEEE802154_SCAN_REQ(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r10, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r10, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0xa8e969437680369a}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) 3.014946852s ago: executing program 0 (id=5404): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x3, 0x20000000, 0x4) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 3.001593748s ago: executing program 8 (id=5405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 2.702945423s ago: executing program 1 (id=5406): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004'], 0x28}}], 0x2, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000a40)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095", @ANYRESOCT, @ANYBLOB="f63acd6fdb2daf4999a7e13471e6d8c3c513d5248ae485533a95dae04c33c30f18ea01bef926e78180ae311ec47522625c3cab0390bab3e95058b1c6496527717f992442539f4b1b3c0cc28a58ba145d7f91e99a47b34dfb5efc24fb43c74f16ce3a24ab1623b158aec872d178733abd3e349dbdfd0d18ccc3e99d05fc95dd30"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000003e0e000000000000810000008520000004000000950000000000000048aa0f72d640f1f8424e1820da6503e8052c7c939e7f90556f0ca92d8f5a610aeae2d049dc62fe8db0645104503705d7c4ff7b4d6b71245396a6b55cb7dea190f337da0064917e393d5ecf1511f652e4f5f3497866f27e978cd604b3646944349b8391646422be3e0eb1d54df2351d63b5b061190c3c932c0e971d4d896f6d00"/174], &(0x7f00000006c0)='syzkaller\x00', 0x6fe6, 0x26, &(0x7f0000000700)=""/38, 0x40f00, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r2, r2]}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c3240000004000394f21ad7000fedb7547df47068c9978576192df256b9900000400c2"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4000080, &(0x7f0000000040)={0xc9, 0x8808, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="550033008000e100fffeffffffff080211000000c8048c201f6900000000000000000000640001400504097e07902a01072d1a20001a00000000000000000000f1000b000000060040000000047206030303030303000000"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x8, 0x80, 0x5, 0x972, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @loopback, {[@end, @lsrr={0x83, 0xb, 0x47, [@empty, @multicast1]}, @noop, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x9, [{@remote, 0x4}, {@loopback, 0x2}]}, @ssrr={0x89, 0xf, 0x7e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast]}, @end, @timestamp={0x44, 0x1c, 0x24, 0x0, 0x1, [0x5, 0xffff0001, 0x3, 0x8, 0x1, 0x3]}, @timestamp_prespec={0x44, 0xc, 0x34, 0x3, 0xe, [{@rand_addr=0x64010102, 0x2}]}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002100010000000000000000000200000300000000000000000500350001000000"], 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000ffdbdf2505000000080003000600000008000300020000001400068008000700", @ANYRES32=r10, @ANYBLOB="512240009b3ca3755b2a793da27607ec6adb583f1e559d404f7a92c623c850e724db7fbe703e7ab80147f83fd44b75795f3e72198c97aa9fde"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x1) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4000000) 2.432696838s ago: executing program 0 (id=5407): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2.277725014s ago: executing program 8 (id=5408): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bc26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x97c979544aced01, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bc26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x97c979544aced01, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async) 1.86168485s ago: executing program 0 (id=5409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000c0100000044d6b90000000000000000", @ANYRES32=0x0, @ANYBLOB="005002000000000010001a800c000a800500080002000000140003007369743000"/44], 0x44}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000700)="0edf4b670c52bb5df25d14bab52c6a985f6092aab0afa87337276fc17d45a9a07d4f2f19c54f886d9b47cf193f63c689552988129dc39e5309f344d33ed466655fc9a393dbc69e5e53a8b8f0fad2bd3b0b5e033b03472023143c7040fcf7882c30259222ba158c90dfa3d92a1c5e5e26c48af75e60fd4fedfd0d98bec987c58d7f99540f18220f8a03d0b61c747ae6e8467b339a4e30a485ba46947cf37dc46f0600455ad403e3dff181c0df27b0ae6649f3af9d3fd7c0a0f71f083a4fd89e7d72ef6d29fb5616", 0x3b}, {&(0x7f0000000880)="7ee6abd1b45327dc02d9772a76d77b50f75c523be9c715659f60eaa3c98db8d0c9ce4e3a80097b35ed414248071a7d5eb12d165262e4ad0326372664e54b275f8283b0bf4f0c65cbd55e7cf7ecbdb82eda6989defced29a2cd5eb960368f0e175aeb16fc", 0x64}, {&(0x7f0000000040)}, {&(0x7f0000000bc0)="7320d2710ca779fe069a94ae3bfc81426bb35113df8d2a7366e6d73c3888fa119af48b8cd8f2ed1b06679eec207d28384d76161adf48cc55bae1cf4cfafc4caf8f0a0dd021b1e8f51187d290a80b713d5cd60a5dcde53b21250bfaf6466c4996c9cdddb6957b5509a5aa8bb3e09296acdc1b4b2a2e11b60eeea3cb55ea572912f8ee595e721996131d3d450597b92f8c979a", 0x92}, {&(0x7f0000000800)="fb246b5d4f35a8c73b0e4f439e42d10e39b3cc7755e3aeeccc17b7f87e2b5ae596606ad991ae75b3fb855978d8ef881ee6e6e5349ccf548da0dee402900128a10ef67cda822578c13569a5f384bb7237ea4a361d648d5bc066dc85e91edd91077c0b8a049c94e71c28fa93244ad2494dea460329590e9a70", 0x78}, {&(0x7f0000000900)}], 0x6) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00028006"], 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r9) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797ae300000000f51c57fca8197525d367524a080041007278650014003300766c616e"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000b40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x23, &(0x7f0000000e40)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000004000000000000000000003d3730000100000018270000", @ANYRES32, @ANYBLOB="000000000100010018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r0, @ANYRESHEX=r10, @ANYRES32, @ANYBLOB="0000000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x80000000, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x3, 0x3, 0x10, 0x1}, {0x1, 0x2, 0xa}, {0x2, 0x1, 0xe, 0x1}, {0x8, 0x2, 0x0, 0x5}, {0x2, 0x3}, {0x3, 0x4, 0xe, 0xb}, {0x0, 0x1, 0x8}, {0x5, 0x2, 0x3, 0x6}, {0x4, 0x3, 0xa, 0x3}], 0x10, 0x1200000}, 0x94) 1.84254656s ago: executing program 1 (id=5410): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x4, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r12, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r10, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000740)={&(0x7f00000000c0), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x22c, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 1.813780421s ago: executing program 7 (id=5411): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88044}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.605508371s ago: executing program 8 (id=5412): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x50, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @local}, 0x14) 1.054237325s ago: executing program 7 (id=5413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e", 0x2d}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e", 0x2d}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x800) accept4$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x1800) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 991.868661ms ago: executing program 8 (id=5414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (rerun: 64) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r6, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x10) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) (rerun: 32) 629.040207ms ago: executing program 0 (id=5415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095", @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0xb, 0x20}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000020000100000000000000001400110076657468305f746f5f627269646765001400030076657468315f766c616e00000000000014000200fe80000000000000000000000008001700"/88], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000651515bf1e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 581.837663ms ago: executing program 8 (id=5416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x4, 0x33b}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000800)={r4, 0xde4, 0x1, 0x1}) socket(0x1, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000100)=r8, 0x8) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f0000000100)=r5, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x8, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000780)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 316.068347ms ago: executing program 8 (id=5417): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x27, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) 96.31258ms ago: executing program 1 (id=5418): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}}, 0x0) 13.92357ms ago: executing program 7 (id=5419): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x300}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) (async, rerun: 32) r0 = socket(0x2a, 0x2, 0x0) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) splice(r0, &(0x7f0000000000)=0xdbf, r0, &(0x7f0000000180)=0x6, 0x8, 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) getsockname$packet(r0, 0x0, 0x0) (async, rerun: 64) unshare(0x28000400) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 0s ago: executing program 0 (id=5420): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x2, 0x6, 0x7, 0x0, 0x51, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1e, 0x18, 0x4, 0x0, 0xe2, "e82ba9e9199be7e089e058f353c6887c4c56510e6e66046ced5fcc2243fd250b473cf01d02710070f5a7f1ef984295b7767c4b40d7c0c9e04f8b11e727185266fbc54f4ff76ad3b056b5e088d643d1b8a65f8534ae89634ece6d6b16c1e74e960899e719d7d1e1243e5ff4141f3b0ba38efeb197c7612aad94ee565cf1d8e9ca0f3b4748650d151ba6ac7a3f8c9dcd4a92cd33af6a9fd68846276107d60af0dc65cf63368cd5bbc533dd75254dafe3d1e0522ec20eb0d6791eae770a363b0962d27d80d0fbfcff21f1ede88a29027959de05247b5bb8fa8a206c2dc3f1c4a54b5ce6"}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x7}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbe, 0x4, {0x6, 0x2b, 0x1, 0x4, 0x0, 0x64a23cf3, 0x0, @in=@broadcast, @in6=@private2}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bb2, 0x8b70, {0x6, 0xff, 0xff, 0x5, 0x0, 0x7, 0x0, @in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x25}}}, @sadb_x_sec_ctx={0x13, 0x18, 0x10, 0x3, 0x89, "d1e4624416578b5589300c8f8e110fade3391d9ae6cc6921c9efbc8afdf5ff5362e572a72ff03d59ff403706323651c1da0c328aae9a94e4196c17708b1d7076ffb7b01ca6bef33d023b1262a6b56e24ab9f68680f7add134cd3f364265123c6e16256dc33d1195a573d7aa0e993da292c03f1040d2b59b730e6e5fc3cffba331ddd15d6118d9bc291"}, @sadb_ident={0x2, 0xa, 0xbb8e, 0x0, 0x7fff}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x800, @remote, 0x8000}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}]}, 0x288}}, 0x20004801) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="926287f5dca2ba940f10000000000000630000000000000095001d0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): S: starting estimator thread 0... [ 467.394880][T20740] ’’’’’’: renamed from virt_wifi0 [ 467.425648][T20742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4116'. [ 467.436273][T20738] IPVS: using max 34 ests per chain, 81600 per kthread [ 467.483582][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 467.991539][T20784] Bluetooth: MGMT ver 1.23 [ 468.097210][T20788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.108905][T20788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.142658][T20788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.152927][T20788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.163957][T20788] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 468.183337][T20788] batman_adv: batadv0: Removing interface: ipvlan2 [ 468.225045][T20793] tipc: Started in network mode [ 468.231357][T20793] tipc: Node identity ac14140f, cluster identity 4711 [ 468.238688][T20793] tipc: New replicast peer: 255.255.255.255 [ 468.249146][T20793] tipc: Enabled bearer , priority 10 [ 469.367107][ T5739] tipc: Node number set to 2886997007 [ 469.448064][T20880] NCSI netlink: No device for ifindex 813332851 [ 469.558660][T20880] bond0: entered promiscuous mode [ 469.564919][T20880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.577586][T20880] bond0: entered allmulticast mode [ 469.707512][T20900] openvswitch: netlink: IP tunnel dst address not specified [ 469.737420][T20900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.489467][T20940] tunl0: entered promiscuous mode [ 470.498224][T20940] validate_nla: 9 callbacks suppressed [ 470.498235][T20940] netlink: 'syz.1.4175': attribute type 3 has an invalid length. [ 470.512403][T20940] __nla_validate_parse: 15 callbacks suppressed [ 470.512414][T20940] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4175'. [ 470.552978][T20942] syzkaller0: entered promiscuous mode [ 470.558891][T20942] syzkaller0: entered allmulticast mode [ 471.085013][T20972] : renamed from bond0 (while UP) [ 471.345097][T20985] ip6t_srh: unknown srh invflags 4000 [ 471.487139][T20992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4194'. [ 471.569450][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4197'. [ 471.648246][T21009] netlink: 'syz.0.4199': attribute type 33 has an invalid length. [ 471.724161][T21015] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.4199'. [ 471.732754][T21009] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 471.759467][T21009] bond0 (unregistering): Released all slaves [ 471.975505][T21023] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 471.984724][T21023] openvswitch: netlink: IPv4 tun info is not correct [ 471.996898][T21023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4203'. [ 472.849247][T21064] syzkaller0: entered promiscuous mode [ 472.866496][T21064] syzkaller0: entered allmulticast mode [ 472.933555][T21073] nbd: must specify at least one socket [ 473.115086][T21084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4217'. [ 473.509191][T21104] x_tables: duplicate underflow at hook 1 [ 473.556606][T21104] x_tables: duplicate underflow at hook 1 [ 473.976578][T21131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4229'. [ 473.996406][T21131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4229'. [ 474.007421][T21131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4229'. [ 474.106455][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4229'. [ 474.491916][T21162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.502406][T21166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.177089][T21210] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 475.199465][T21210] team0: Port device batadv1 added [ 475.295727][T21213] netem: change failed [ 475.357196][T21217] xt_hashlimit: size too large, truncated to 1048576 [ 475.650601][T21230] __nla_validate_parse: 9 callbacks suppressed [ 475.650617][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4260'. [ 475.818831][T21240] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4262'. [ 475.889937][T21247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.960831][T21244] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4261'. [ 476.087099][T21254] bond0 (unregistering): Released all slaves [ 476.137179][T21258] syzkaller0: entered promiscuous mode [ 476.142856][T21258] syzkaller0: entered allmulticast mode [ 476.550797][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 476.662897][T21294] syz.5.4280: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 476.689589][T21292] Cannot find set identified by id 65534 to match [ 476.705194][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 476.729717][T21294] CPU: 1 UID: 0 PID: 21294 Comm: syz.5.4280 Not tainted syzkaller #0 PREEMPT(full) [ 476.729741][T21294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.729755][T21294] Call Trace: [ 476.729827][T21294] [ 476.729875][T21294] dump_stack_lvl+0xe8/0x150 [ 476.729978][T21294] warn_alloc+0x249/0x340 [ 476.730028][T21294] ? __pfx_stack_trace_save+0x10/0x10 [ 476.730103][T21294] ? __pfx_warn_alloc+0x10/0x10 [ 476.730132][T21294] ? __kasan_kmalloc+0x93/0xb0 [ 476.730159][T21294] ? __kmalloc_cache_noprof+0x318/0x660 [ 476.730181][T21294] ? xskq_create+0x56/0x170 [ 476.730310][T21294] ? xsk_init_queue+0x8a/0xe0 [ 476.730329][T21294] ? xsk_setsockopt+0x52a/0x960 [ 476.730348][T21294] ? do_sock_setsockopt+0x17c/0x1b0 [ 476.730443][T21294] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 476.730465][T21294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.730506][T21294] __vmalloc_node_range_noprof+0x12c/0x1730 [ 476.730554][T21294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 476.730591][T21294] ? __kasan_kmalloc+0x93/0xb0 [ 476.730621][T21294] vmalloc_user_noprof+0xad/0xe0 [ 476.730643][T21294] ? xskq_create+0xbf/0x170 [ 476.730668][T21294] xskq_create+0xbf/0x170 [ 476.730693][T21294] xsk_init_queue+0x8a/0xe0 [ 476.730717][T21294] xsk_setsockopt+0x52a/0x960 [ 476.730737][T21294] ? __fget_files+0x2a/0x420 [ 476.730775][T21294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 476.730797][T21294] ? __pfx_aa_sk_perm+0x10/0x10 [ 476.730909][T21294] ? aa_sock_opt_perm+0xff/0x1a0 [ 476.730965][T21294] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 476.731007][T21294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 476.731029][T21294] do_sock_setsockopt+0x17c/0x1b0 [ 476.731058][T21294] __x64_sys_setsockopt+0x13d/0x1b0 [ 476.731084][T21294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.731103][T21294] do_syscall_64+0x174/0x580 [ 476.731163][T21294] ? trace_irq_disable+0x3b/0x140 [ 476.731202][T21294] ? clear_bhb_loop+0x40/0x90 [ 476.731223][T21294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.731240][T21294] RIP: 0033:0x7ff4d179ce59 [ 476.731292][T21294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.731334][T21294] RSP: 002b:00007ff4d26be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 476.731383][T21294] RAX: ffffffffffffffda RBX: 00007ff4d1a16090 RCX: 00007ff4d179ce59 [ 476.731394][T21294] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 476.731404][T21294] RBP: 00007ff4d1832d6f R08: 0000000000000004 R09: 0000000000000000 [ 476.731415][T21294] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.731426][T21294] R13: 00007ff4d1a16128 R14: 00007ff4d1a16090 R15: 00007ffd7db5ec68 [ 476.731454][T21294] [ 476.731495][T21294] Mem-Info: [ 477.010285][T21294] active_anon:8561 inactive_anon:0 isolated_anon:0 [ 477.010285][T21294] active_file:2439 inactive_file:40567 isolated_file:0 [ 477.010285][T21294] unevictable:768 dirty:42 writeback:0 [ 477.010285][T21294] slab_reclaimable:12361 slab_unreclaimable:126712 [ 477.010285][T21294] mapped:36649 shmem:3690 pagetables:1506 [ 477.010285][T21294] sec_pagetables:0 bounce:0 [ 477.010285][T21294] kernel_misc_reclaimable:0 [ 477.010285][T21294] free:1274714 free_pcp:11689 free_cma:0 [ 477.055897][T21294] Node 0 active_anon:34244kB inactive_anon:0kB active_file:9756kB inactive_file:162068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146596kB dirty:168kB writeback:0kB shmem:13224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16344kB pagetables:5880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 477.105664][T21294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 477.157680][T21294] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 477.189254][T21294] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 477.195083][T21294] Node 0 DMA32 free:1148488kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34044kB inactive_anon:0kB active_file:9756kB inactive_file:162068kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2553208kB mlocked:0kB bounce:0kB free_pcp:40236kB local_pcp:19300kB free_cma:0kB [ 477.231549][T21294] lowmem_reserve[]: 0 0 0 0 0 [ 477.237848][T21294] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 477.276453][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4285'. [ 477.276680][T21294] lowmem_reserve[]: 0 0 0 0 0 [ 477.291732][T21294] Node 1 Normal free:3935136kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6992kB local_pcp:6992kB free_cma:0kB [ 477.324226][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4285'. [ 477.331154][T21307] xfrm2: entered promiscuous mode [ 477.340241][T21307] xfrm2: entered allmulticast mode [ 477.348763][T21294] lowmem_reserve[]: 0 0 0 0 0 [ 477.353554][T21294] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 477.371433][T21294] Node 0 DMA32: 8384*4kB (UME) 5411*8kB (UM) 2675*16kB (UM) 111*32kB (UME) 369*64kB (UM) 678*128kB (UME) 616*256kB (UE) 389*512kB (UE) 235*1024kB (UE) 125*2048kB (UM) 15*4096kB (UM) = 1148520kB [ 477.392698][T21294] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 477.405804][T21294] Node 1 Normal: 4*4kB (U) 14*8kB (UM) 8*16kB (UM) 7*32kB (UM) 11*64kB (UM) 6*128kB (UM) 6*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3935136kB [ 477.431847][T21294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.442749][T21294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.454980][T21294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.465059][T21317] tipc: Enabled bearer , priority 28 [ 477.474500][T21294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.475698][T21315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4287'. [ 477.489034][T21294] 46646 total pagecache pages [ 477.498856][T21294] 4 pages in swap cache [ 477.503051][T21294] Free swap = 124980kB [ 477.505073][T21315] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4287'. [ 477.509108][T21294] Total swap = 124996kB [ 477.518070][T21315] netlink: 'syz.0.4287': attribute type 6 has an invalid length. [ 477.522952][T21294] 2097051 pages RAM [ 477.534677][T21294] 0 pages HighMem/MovableOnly [ 477.540580][T21294] 426961 pages reserved [ 477.541157][T21315] netlink: 'syz.0.4287': attribute type 5 has an invalid length. [ 477.544810][T21294] 0 pages cma reserved [ 477.569123][T21315] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4287'. [ 477.645926][T21325] openvswitch: netlink: IP tunnel dst address not specified [ 477.876301][ T4950] Bluetooth: hci5: command 0x0406 tx timeout [ 477.984113][T21335] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.220334][T21358] netlink: 'syz.0.4297': attribute type 1 has an invalid length. [ 478.278589][T21353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.306833][T21358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.331970][T21360] bond0: (slave veth0_to_bond): making interface the new active one [ 478.341346][T21360] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.455822][T21358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.475469][T21358] bond0: (slave bond1): Enslaving as an active interface with a down link [ 479.006237][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.874322][T21455] nbd: must specify a size in bytes for the device [ 480.103411][T21474] netlink: 'syz.0.4328': attribute type 16 has an invalid length. [ 480.301708][T21487] netlink: 'syz.1.4332': attribute type 5 has an invalid length. [ 480.743190][T21514] __nla_validate_parse: 11 callbacks suppressed [ 480.743207][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4341'. [ 480.785163][T21517] dummy0: left promiscuous mode [ 480.803745][T21517] bridge3: port 1(dummy0) entered blocking state [ 480.812818][T21517] bridge3: port 1(dummy0) entered disabled state [ 480.819646][T21517] dummy0: entered allmulticast mode [ 480.827845][T21519] netlink: 'syz.0.4341': attribute type 10 has an invalid length. [ 480.838445][T21517] dummy0: entered promiscuous mode [ 480.843655][T21519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4341'. [ 480.873564][T21519] bridge3: port 1(dummy0) entered blocking state [ 480.881174][T21519] bridge3: port 1(dummy0) entered forwarding state [ 480.910391][T21519] dummy0: left allmulticast mode [ 480.916148][T21519] bridge3: port 1(dummy0) entered disabled state [ 480.932082][T21517] xt_cgroup: path and classid specified [ 480.947413][T21517] xt_cgroup: path and classid specified [ 480.973895][T21524] syzkaller0: entered promiscuous mode [ 480.980428][T21524] syzkaller0: entered allmulticast mode [ 481.028467][T21529] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 481.043604][T21527] syzkaller0: entered promiscuous mode [ 481.049656][T21527] syzkaller0: entered allmulticast mode [ 481.241470][T21538] netlink: 'syz.0.4349': attribute type 1 has an invalid length. [ 481.242084][T21535] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.249295][T21538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 481.266603][T21538] netlink: 'syz.0.4349': attribute type 1 has an invalid length. [ 481.339981][T21538] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4349'. [ 481.418449][T21546] netlink: 'syz.5.4352': attribute type 1 has an invalid length. [ 481.469683][ T5792] IPVS: starting estimator thread 0... [ 481.504339][T21546] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 481.557924][T21550] IPVS: using max 35 ests per chain, 84000 per kthread [ 481.602225][T21562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4356'. [ 481.611528][T21562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4356'. [ 481.649083][T21563] netlink: 'syz.1.4355': attribute type 1 has an invalid length. [ 481.829815][T21586] bond2: option all_slaves_active: invalid value (222) [ 481.839174][T21586] bond2 (unregistering): Released all slaves [ 482.720230][T21601] tc action pedit 'at' offset 46 out of bounds [ 484.681523][T21565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.164151][T21633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.165780][ T4950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 485.200975][ T4950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 485.210946][ T4950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 485.223923][ T4950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 485.232716][ T4950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 485.292469][T21640] netlink: 'syz.5.4378': attribute type 11 has an invalid length. [ 485.323397][T21640] validate_nla: 1 callbacks suppressed [ 485.323417][T21640] netlink: 'syz.5.4378': attribute type 5 has an invalid length. [ 485.363327][T21646] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4379'. [ 485.390453][T21646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4379'. [ 486.017060][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 486.101570][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4386'. [ 486.120801][T21690] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4390'. [ 486.147853][T21683] syzkaller0: entered promiscuous mode [ 486.159114][T21681] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.168075][T21690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4390'. [ 486.178569][T21683] syzkaller0: entered allmulticast mode [ 486.427782][T21708] netlink: 'syz.1.4394': attribute type 58 has an invalid length. [ 486.435770][T21708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4394'. [ 487.333500][ T4950] Bluetooth: hci6: command tx timeout [ 488.122891][ T4950] Bluetooth: hci4: command 0x0406 tx timeout [ 489.245165][T21732] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 489.254661][T21732] bond0: option packets_per_slave: allowed values 0 - 65535 [ 489.274238][T21732] bond0 (unregistering): Released all slaves [ 489.338563][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'. [ 489.397069][T17610] Bluetooth: hci6: command tx timeout [ 489.624093][T21635] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.627544][T21754] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 489.631585][T21635] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.649660][T21635] bridge_slave_0: entered allmulticast mode [ 489.657900][T21635] bridge_slave_0: entered promiscuous mode [ 489.668237][T21635] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.675595][T21635] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.683032][T21635] bridge_slave_1: entered allmulticast mode [ 489.691427][T21635] bridge_slave_1: entered promiscuous mode [ 489.761543][T21635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.789409][T21635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.892857][T21635] team0: Port device team_slave_0 added [ 489.907805][T21635] team0: Port device team_slave_1 added [ 489.931806][T21760] netlink: 'syz.0.4409': attribute type 29 has an invalid length. [ 489.970807][T21760] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4409'. [ 490.011036][T21635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.029129][T21635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.090209][T21635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.103537][T21635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.105468][T21763] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4410'. [ 490.112015][T21635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.149215][T21635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.217800][T21635] hsr_slave_0: entered promiscuous mode [ 490.227405][T21635] hsr_slave_1: entered promiscuous mode [ 490.234399][T21635] debugfs: 'hsr0' already exists in 'hsr' [ 490.241387][T21635] Cannot create hsr debugfs directory [ 490.607965][T21776] xt_addrtype: ipv6 does not support BROADCAST matching [ 490.963354][T21788] netlink: 'syz.5.4418': attribute type 9 has an invalid length. [ 490.993942][T21788] netlink: 'syz.5.4418': attribute type 6 has an invalid length. [ 491.145695][T21635] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 491.179734][T21635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.198839][T21635] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 491.231455][T21635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.289036][T21635] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 491.314332][T21635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.347252][T21635] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 491.432703][T21635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.476889][T17610] Bluetooth: hci6: command tx timeout [ 491.574835][T21828] syzkaller1: entered promiscuous mode [ 491.581969][T21828] syzkaller1: entered allmulticast mode [ 491.596483][T21830] netlink: 'syz.5.4427': attribute type 1 has an invalid length. [ 491.598990][T21828] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 491.659431][T21830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.279629][T21834] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 492.409507][T21635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.452977][T21841] IPv6: sit2: Disabled Multicast RS [ 492.477113][T21842] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 492.477240][T21635] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.488011][T21842] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 492.505027][T21842] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 492.514777][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.521916][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.564998][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.572220][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.626866][T21848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4432'. [ 492.953909][T21864] syzkaller0: entered promiscuous mode [ 492.959765][T21864] syzkaller0: entered allmulticast mode [ 493.009745][T21864] xt_ecn: cannot match TCP bits for non-tcp packets [ 493.192780][T21878] tipc: Trying to set illegal importance in message [ 493.223896][T21881] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4441'. [ 493.398039][T21890] netlink: 'syz.5.4444': attribute type 2 has an invalid length. [ 493.471798][T21635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.560050][T17610] Bluetooth: hci6: command tx timeout [ 493.646996][T21901] bond3: entered promiscuous mode [ 493.652260][T21901] bond3: entered allmulticast mode [ 493.658472][T21901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.676283][T21905] gtp0: entered allmulticast mode [ 493.687559][T21905] team0: Port device gtp0 added [ 493.692616][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4445'. [ 493.942146][T21918] netlink: 'syz.1.4452': attribute type 11 has an invalid length. [ 493.964899][T21918] netlink: 'syz.1.4452': attribute type 11 has an invalid length. [ 493.978633][T21918] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4452'. [ 494.086770][T21635] veth0_vlan: entered promiscuous mode [ 494.134359][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4455'. [ 494.175943][T21635] veth1_vlan: entered promiscuous mode [ 494.305949][T21635] veth0_macvtap: entered promiscuous mode [ 494.319650][T21635] veth1_macvtap: entered promiscuous mode [ 494.398003][T21635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.414817][T21635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.465561][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.491298][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.504594][T21951] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4462'. [ 494.505463][T21952] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4461'. [ 494.529430][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.540084][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.774205][T21963] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 494.788241][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.815871][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.924645][ T6025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.943165][ T6025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.044425][T21972] sock: sock_timestamping_bind_phc: sock not bind to device [ 495.110993][T21976] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4470'. [ 495.285906][T21989] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4475'. [ 495.315979][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4474'. [ 495.364626][T21989] 8021q: VLANs not supported on ip6tnl0 [ 495.385146][T21985] xt_hashlimit: size too large, truncated to 1048576 [ 495.902836][T22024] netlink: 'syz.0.4482': attribute type 11 has an invalid length. [ 495.947544][T22024] netlink: 'syz.0.4482': attribute type 11 has an invalid length. [ 496.302500][T22048] bridge0: port 1(ipvlan2) entered blocking state [ 496.321711][T22048] bridge0: port 1(ipvlan2) entered disabled state [ 496.330909][T22048] ipvlan2: entered allmulticast mode [ 496.348306][T22048] bridge0: entered allmulticast mode [ 496.408006][T22048] ipvlan2: left allmulticast mode [ 496.417976][T22048] bridge0: left allmulticast mode [ 497.231250][T22099] netlink: 'syz.3.4503': attribute type 4 has an invalid length. [ 497.793184][T22141] __nla_validate_parse: 46 callbacks suppressed [ 497.793204][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4512'. [ 497.937309][T22141] team0: Port device team_slave_0 removed [ 498.230482][T22169] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4520'. [ 498.574799][T22186] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 498.604543][T22186] IPVS: length: 8 != 1152 [ 498.808412][T22196] syzkaller0: entered promiscuous mode [ 498.847760][T22196] syzkaller0: entered allmulticast mode [ 499.378788][T22245] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4544'. [ 499.413804][T22245] 0·: renamed from hsr0 (while UP) [ 499.426469][T22245] 0·: entered allmulticast mode [ 499.432091][T22245] hsr_slave_0: entered allmulticast mode [ 499.438974][T22245] hsr_slave_1: entered allmulticast mode [ 499.448106][T22245] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 499.734348][T22260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.801982][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 500.017309][T22280] tipc: Enabled bearer , priority 0 [ 500.026792][T22280] syzkaller0: entered promiscuous mode [ 500.035827][T22280] syzkaller0: entered allmulticast mode [ 500.063888][T22280] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 500.142645][T22280] tipc: Resetting bearer [ 500.155772][T22279] tipc: Resetting bearer [ 500.210699][T22279] tipc: Disabling bearer [ 500.431024][T22302] netlink: 'syz.1.4559': attribute type 1 has an invalid length. [ 500.527290][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4561'. [ 500.598612][T22304] netlink: 'syz.5.4561': attribute type 5 has an invalid length. [ 500.619796][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4561'. [ 500.641423][T22299] netlink: 'syz.5.4561': attribute type 5 has an invalid length. [ 500.661364][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4561'. [ 500.793842][T22317] sctp: [Deprecated]: syz.3.4567 (pid 22317) Use of int in max_burst socket option. [ 500.793842][T22317] Use struct sctp_assoc_value instead [ 500.815163][T22320] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4568'. [ 501.191766][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 501.242929][T22339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4573'. [ 501.400821][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.417282][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.611343][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802276c800: rx timeout, send abort [ 501.653165][T22363] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 501.743386][T22357] can: request_module (can-proto-0) failed. [ 501.989743][T22381] netlink: 'syz.1.4586': attribute type 4 has an invalid length. [ 502.119704][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802276c800: abort rx timeout. Force session deactivation [ 502.373233][T22400] netem: change failed [ 503.029076][T22429] __nla_validate_parse: 5 callbacks suppressed [ 503.029096][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4599'. [ 503.070587][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4599'. [ 503.075393][T22430] netlink: 'syz.6.4600': attribute type 1 has an invalid length. [ 503.132220][T22437] tls_set_device_offload: netdev not found [ 503.139874][T22430] bridge1: entered allmulticast mode [ 503.377566][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 503.405185][T22456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4605'. [ 503.476568][T17610] Bluetooth: hci3: command 0x0406 tx timeout [ 503.764553][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 503.784082][T22479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4615'. [ 503.811589][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'. [ 503.813679][T22486] xt_ipcomp: unknown flags 1D [ 503.834858][ T98] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.834954][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 503.856580][T22479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4615'. [ 503.864294][ T98] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.866562][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'. [ 503.926560][ T98] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.940661][ T98] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.738556][T22481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.035435][T22546] syzkaller0: entered promiscuous mode [ 507.054847][T22546] syzkaller0: entered allmulticast mode [ 507.071100][T22546] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 507.142157][T22557] netlink: 'syz.6.4636': attribute type 3 has an invalid length. [ 507.165033][T22557] netlink: 'syz.6.4636': attribute type 2 has an invalid length. [ 507.843168][T22603] netlink: 'syz.0.4651': attribute type 2 has an invalid length. [ 507.877041][T22603] netlink: 'syz.0.4651': attribute type 2 has an invalid length. [ 507.979863][ T998] IPVS: starting estimator thread 0... [ 507.988721][T22613] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 508.087770][T22614] IPVS: using max 30 ests per chain, 72000 per kthread [ 508.155392][T22616] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 508.175371][T22624] netlink: 'syz.1.4657': attribute type 17 has an invalid length. [ 508.215428][T22624] __nla_validate_parse: 13 callbacks suppressed [ 508.215448][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4657'. [ 508.246729][T22624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4657'. [ 508.301812][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'. [ 508.514332][T22642] xt_hashlimit: size too large, truncated to 1048576 [ 508.586423][T22644] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4660'. [ 508.809998][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 508.846337][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'. [ 509.523936][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.574659][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.584476][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.598937][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.613016][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.621475][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4673'. [ 509.633675][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.644874][T22703] netem: invalid attributes len -5 [ 509.650977][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.660824][T22703] netem: change failed [ 509.666610][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.679528][T22700] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 509.814246][T22712] lo: entered promiscuous mode [ 509.861981][T22712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.975341][T22722] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4679'. [ 509.985869][T22726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4681'. [ 510.287019][T22745] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4686'. [ 510.318483][T22745] nbd: must specify a size in bytes for the device [ 510.611949][T22760] sctp: [Deprecated]: syz.1.4691 (pid 22760) Use of int in maxseg socket option. [ 510.611949][T22760] Use struct sctp_assoc_value instead [ 510.918534][T22771] tipc: Enabled bearer , priority 0 [ 510.975373][T22771] syzkaller0: entered promiscuous mode [ 510.988080][T22771] syzkaller0: entered allmulticast mode [ 511.068543][T22771] tipc: Resetting bearer [ 511.108092][T22770] tipc: Resetting bearer [ 511.210100][T22770] tipc: Disabling bearer [ 511.639805][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.723907][T22829] syzkaller1: entered promiscuous mode [ 512.037872][T22847] SET target dimension over the limit! [ 512.366744][T22865] team0: Device geneve1 is of different type [ 512.404261][T22865] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 512.593868][T22869] macvtap1: entered promiscuous mode [ 512.599951][T22883] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 512.614267][T22869] vlan0: entered promiscuous mode [ 512.620304][T22883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.629942][T22869] macvtap1: entered allmulticast mode [ 512.635591][T22869] vlan0: entered allmulticast mode [ 512.641996][T22869] veth0_vlan: entered allmulticast mode [ 513.268598][T22910] __nla_validate_parse: 12 callbacks suppressed [ 513.268618][T22910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4732'. [ 513.313590][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 513.552981][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4736'. [ 513.824514][T22941] validate_nla: 40 callbacks suppressed [ 513.824546][T22941] netlink: 'syz.0.4740': attribute type 1 has an invalid length. [ 513.869627][T22941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.966871][T22941] bond2: (slave ip6erspan0): making interface the new active one [ 514.015634][T22941] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 514.259162][T22961] erspan0: entered allmulticast mode [ 514.282372][ T29] audit: type=1804 audit(1781687845.083:13): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4747" name="/newroot/346/cgroup.controllers" dev="tmpfs" ino=1777 res=1 errno=0 [ 514.316978][T22958] bond0: entered promiscuous mode [ 514.344055][ T29] audit: type=1800 audit(1781687845.083:14): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4747" name="cgroup.controllers" dev="tmpfs" ino=1777 res=0 errno=0 [ 514.510609][T22976] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.4751'. [ 514.532572][T22976] netlink: Unknown conntrack attr (type=2304, max=9) [ 514.564629][T22976] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 514.689317][T22986] syz.1.4754: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 514.713783][T22988] netlink: 'syz.0.4756': attribute type 7 has an invalid length. [ 514.726831][T22986] CPU: 0 UID: 0 PID: 22986 Comm: syz.1.4754 Not tainted syzkaller #0 PREEMPT(full) [ 514.726862][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.726876][T22986] Call Trace: [ 514.726884][T22986] [ 514.726893][T22986] dump_stack_lvl+0xe8/0x150 [ 514.726924][T22986] warn_alloc+0x249/0x340 [ 514.726954][T22986] ? __pfx_stack_trace_save+0x10/0x10 [ 514.726989][T22986] ? __pfx_warn_alloc+0x10/0x10 [ 514.727023][T22986] ? __kasan_kmalloc+0x93/0xb0 [ 514.727049][T22986] ? __kmalloc_cache_noprof+0x318/0x660 [ 514.727076][T22986] ? xskq_create+0x56/0x170 [ 514.727102][T22986] ? xsk_init_queue+0x8a/0xe0 [ 514.727126][T22986] ? xsk_setsockopt+0x52a/0x960 [ 514.727148][T22986] ? do_sock_setsockopt+0x17c/0x1b0 [ 514.727174][T22986] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 514.727202][T22986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.727227][T22986] __vmalloc_node_range_noprof+0x12c/0x1730 [ 514.727280][T22986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 514.727312][T22986] ? __kasan_kmalloc+0x93/0xb0 [ 514.727352][T22986] vmalloc_user_noprof+0xad/0xe0 [ 514.727375][T22986] ? xskq_create+0xbf/0x170 [ 514.727400][T22986] xskq_create+0xbf/0x170 [ 514.727429][T22986] xsk_init_queue+0x8a/0xe0 [ 514.727457][T22986] xsk_setsockopt+0x52a/0x960 [ 514.727481][T22986] ? __fget_files+0x2a/0x420 [ 514.727505][T22986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 514.727530][T22986] ? __pfx_aa_sk_perm+0x10/0x10 [ 514.727562][T22986] ? aa_sock_opt_perm+0xff/0x1a0 [ 514.727591][T22986] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 514.727615][T22986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 514.727641][T22986] do_sock_setsockopt+0x17c/0x1b0 [ 514.727677][T22986] __x64_sys_setsockopt+0x13d/0x1b0 [ 514.727708][T22986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.727729][T22986] do_syscall_64+0x174/0x580 [ 514.727746][T22986] ? trace_irq_disable+0x3b/0x140 [ 514.727774][T22986] ? clear_bhb_loop+0x40/0x90 [ 514.727799][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.727817][T22986] RIP: 0033:0x7f6abf79ce59 [ 514.727836][T22986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.727854][T22986] RSP: 002b:00007f6ac062a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 514.727874][T22986] RAX: ffffffffffffffda RBX: 00007f6abfa16090 RCX: 00007f6abf79ce59 [ 514.727889][T22986] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 514.727901][T22986] RBP: 00007f6abf832d6f R08: 0000000000000004 R09: 0000000000000000 [ 514.727912][T22986] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.727925][T22986] R13: 00007f6abfa16128 R14: 00007f6abfa16090 R15: 00007ffc4ccd02d8 [ 514.727956][T22986] [ 514.727988][T22986] Mem-Info: [ 515.056730][T22986] active_anon:9105 inactive_anon:0 isolated_anon:0 [ 515.056730][T22986] active_file:2439 inactive_file:40584 isolated_file:0 [ 515.056730][T22986] unevictable:768 dirty:83 writeback:0 [ 515.056730][T22986] slab_reclaimable:12521 slab_unreclaimable:132566 [ 515.056730][T22986] mapped:42840 shmem:3642 pagetables:1564 [ 515.056730][T22986] sec_pagetables:0 bounce:0 [ 515.056730][T22986] kernel_misc_reclaimable:0 [ 515.056730][T22986] free:1260125 free_pcp:7829 free_cma:0 [ 515.137345][T22986] Node 0 active_anon:36420kB inactive_anon:0kB active_file:9756kB inactive_file:162136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171360kB dirty:232kB writeback:100kB shmem:13032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17208kB pagetables:6112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 515.185379][T22986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 515.253776][T22986] Node 0 DMA free:15348kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 515.349090][T22986] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 515.355199][T22998] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4759'. [ 515.371798][T22986] Node 0 DMA32 free:1086168kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36120kB inactive_anon:0kB active_file:9756kB inactive_file:162136kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2553208kB mlocked:0kB bounce:0kB free_pcp:24568kB local_pcp:14744kB free_cma:0kB [ 515.466322][T22986] lowmem_reserve[]: 0 0 0 0 0 [ 515.471163][T22986] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 515.510051][T22986] lowmem_reserve[]: 0 0 0 0 0 [ 515.515035][T22986] Node 1 Normal free:3938444kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3716kB local_pcp:0kB free_cma:0kB [ 515.555077][T22986] lowmem_reserve[]: 0 0 0 0 0 [ 515.560470][T22986] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (M) = 15348kB [ 515.591961][T22986] Node 0 DMA32: 8336*4kB (UME) 5408*8kB (UM) 2688*16kB (UM) 245*32kB (UM) 151*64kB (UME) 658*128kB (UME) 639*256kB (UM) 393*512kB (UE) 236*1024kB (UE) 126*2048kB (UM) 0*4096kB = 1085856kB [ 515.614047][T22986] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 515.628810][T22986] Node 1 Normal: 3*4kB (U) 14*8kB (UM) 9*16kB (UM) 8*32kB (UM) 12*64kB (UM) 5*128kB (UM) 7*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3938444kB [ 515.648270][T22986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.658824][T22986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.670797][T22986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.680815][T22986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.691212][T22986] 46665 total pagecache pages [ 515.695984][T22986] 4 pages in swap cache [ 515.701494][T22986] Free swap = 124980kB [ 515.707140][T22986] Total swap = 124996kB [ 515.711446][T22986] 2097051 pages RAM [ 515.715301][T22986] 0 pages HighMem/MovableOnly [ 515.723234][T23008] netlink: 'syz.6.4761': attribute type 1 has an invalid length. [ 515.731277][T23008] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4761'. [ 515.741875][T22986] 426961 pages reserved [ 515.746867][T23008] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4761'. [ 515.756762][T22986] 0 pages cma reserved [ 515.767961][T23008] netlink: 658 bytes leftover after parsing attributes in process `syz.6.4761'. [ 515.782624][T23007] netlink: 'syz.6.4761': attribute type 5 has an invalid length. [ 515.803482][T23007] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4761'. [ 515.820202][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 516.793790][T23080] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 517.292041][T23104] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 517.367210][T23106] netlink: 'syz.3.4793': attribute type 267 has an invalid length. [ 517.490277][T23115] netlink: 'syz.1.4796': attribute type 39 has an invalid length. [ 517.499889][T23113] syzkaller0: entered promiscuous mode [ 517.505498][T23113] syzkaller0: entered allmulticast mode [ 517.516740][T23115] hsr_slave_0: left promiscuous mode [ 517.523918][T23115] hsr_slave_1: left promiscuous mode [ 517.736972][T23123] xt_CT: No such helper "snmp" [ 518.092799][T23142] netlink: 'syz.1.4805': attribute type 1 has an invalid length. [ 518.101719][T23142] netlink: 'syz.1.4805': attribute type 1 has an invalid length. [ 518.234786][T23149] netlink: 'syz.1.4808': attribute type 1 has an invalid length. [ 518.243293][T23149] netlink: 'syz.1.4808': attribute type 7 has an invalid length. [ 518.251547][T23149] NCSI netlink: No device for ifindex 65584 [ 518.284893][T23149] tun0: tun_chr_ioctl cmd 1074025675 [ 518.290927][T23149] tun0: persist enabled [ 518.297199][T23149] __nla_validate_parse: 11 callbacks suppressed [ 518.297220][T23149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4808'. [ 518.391264][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4809'. [ 518.402815][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4809'. [ 518.459645][T23159] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4811'. [ 518.474687][T23159] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4811'. [ 518.613012][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4812'. [ 518.738964][T23170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.846456][ T4950] Bluetooth: hci1: command 0x0406 tx timeout [ 518.883791][T23166] syzkaller0: entered promiscuous mode [ 518.891016][T23166] syzkaller0: entered allmulticast mode [ 518.907066][T23165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.080237][T23180] syzkaller0: entered promiscuous mode [ 519.085993][T23180] syzkaller0: entered allmulticast mode [ 519.922094][T23228] syzkaller0: entered promiscuous mode [ 519.936400][T23228] syzkaller0: entered allmulticast mode [ 520.191682][T23238] macvtap1: entered promiscuous mode [ 520.209267][T23238] macvtap1: entered allmulticast mode [ 520.214773][T23238] veth1_vlan: entered allmulticast mode [ 520.222398][T23242] openvswitch: netlink: Key type 231 is out of range max 32 [ 520.346948][T23249] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4841'. [ 520.361558][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4841'. [ 520.401987][T23252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.421004][T23249] macvlan3: entered promiscuous mode [ 520.426758][T23249] macvlan3: entered allmulticast mode [ 520.433522][T23249] bond1: entered promiscuous mode [ 520.439912][T23249] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 520.453968][T23249] bond1: left promiscuous mode [ 520.485819][T23259] openvswitch: netlink: Message has -2 unknown bytes. [ 520.490290][T23252] macvlan3: entered promiscuous mode [ 520.498522][T23252] macvlan3: entered allmulticast mode [ 520.504720][T23252] bond1: entered promiscuous mode [ 520.511893][T23252] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 520.525149][T23252] bond1: left promiscuous mode [ 520.594710][T23265] syz_tun: refused to change device tx_queue_len [ 520.620320][T23268] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4843'. [ 520.764174][T23275] mac80211_hwsim hwsim47 ’: renamed from wlan1 [ 521.689280][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4851'. [ 521.904453][ T5961] gretap0: left allmulticast mode [ 521.909731][ T5961] gretap0: left promiscuous mode [ 521.915174][ T5961] bridge0: port 3(gretap0) entered disabled state [ 521.925350][ T5961] bridge_slave_1: left allmulticast mode [ 521.931456][ T5961] bridge_slave_1: left promiscuous mode [ 521.939449][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.955465][ T5961] bridge_slave_0: left allmulticast mode [ 521.961853][ T5961] bridge_slave_0: left promiscuous mode [ 521.967967][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.994373][ T5961] pimreg10: left allmulticast mode [ 522.159234][ T5961] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 522.167724][ T5961] ip6gre1 (unregistering): left promiscuous mode [ 522.294912][ T5961] bond10 (unregistering): (slave gretap2): Releasing active interface [ 522.346648][ T5961] bond6 (unregistering): (slave geneve3): Releasing active interface [ 522.789263][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.800188][ T5961] bond0 (unregistering): Released all slaves [ 522.810652][ T5961] bond1 (unregistering): Released all slaves [ 522.833566][ T5961] bond2 (unregistering): Released all slaves [ 522.857807][ T5961] bond3 (unregistering): Released all slaves [ 522.871050][ T5961] bond4 (unregistering): Released all slaves [ 522.889085][ T5961] bond5 (unregistering): Released all slaves [ 522.902870][ T5961] bond6 (unregistering): Released all slaves [ 522.922787][ T5961] bond7 (unregistering): Released all slaves [ 522.938104][ T5961] bond8 (unregistering): Released all slaves [ 522.952678][ T5961] bond9 (unregistering): Released all slaves [ 522.965728][ T5961] bond10 (unregistering): Released all slaves [ 523.198596][ T5961] tipc: Disabling bearer [ 523.204055][ T5961] tipc: Left network mode [ 523.321363][T23245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.573974][T23309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4853'. [ 523.613664][T23315] netlink: 320 bytes leftover after parsing attributes in process `syz.6.4855'. [ 523.962205][ T4950] Bluetooth: hci2: command 0x0406 tx timeout [ 524.782878][T23364] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4872'. [ 524.881879][T23366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.095278][ T5961] veth1_macvtap: left promiscuous mode [ 525.140052][ T5961] veth0_macvtap: left promiscuous mode [ 525.298091][T23386] sctp: [Deprecated]: syz.6.4880 (pid 23386) Use of int in maxseg socket option. [ 525.298091][T23386] Use struct sctp_assoc_value instead [ 525.626598][T23399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.676913][T23398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.991132][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 526.046966][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 526.776444][T23424] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4889'. [ 527.118559][ T5961] IPVS: stop unused estimator thread 0... [ 527.592154][T23467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4899'. [ 527.734913][T23480] xt_hashlimit: size too large, truncated to 1048576 [ 528.297788][T23501] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.305408][T23501] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.343501][T23501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4905'. [ 528.781977][T23526] validate_nla: 1 callbacks suppressed [ 528.781995][T23526] netlink: 'syz.1.4912': attribute type 63 has an invalid length. [ 528.783822][T23529] netlink: 'syz.1.4912': attribute type 63 has an invalid length. [ 528.805090][T23526] netlink: 'syz.1.4912': attribute type 63 has an invalid length. [ 528.813735][T23529] netlink: 'syz.1.4912': attribute type 63 has an invalid length. [ 529.441930][T23540] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£’ˆĢ„ŻBßŻ£| “¼Ś [ 529.766618][T23527] syz.6.4913 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 529.821703][T23527] CPU: 1 UID: 0 PID: 23527 Comm: syz.6.4913 Not tainted syzkaller #0 PREEMPT(full) [ 529.821726][T23527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.821735][T23527] Call Trace: [ 529.821741][T23527] [ 529.821749][T23527] dump_stack_lvl+0xe8/0x150 [ 529.821773][T23527] dump_header+0xd3/0x4b0 [ 529.821845][T23527] oom_kill_process+0x3ab/0x970 [ 529.821873][T23527] out_of_memory+0x1064/0x1480 [ 529.821891][T23527] ? try_charge_memcg+0xbca/0x1590 [ 529.821929][T23527] ? __pfx_out_of_memory+0x10/0x10 [ 529.821946][T23527] ? do_raw_spin_unlock+0xf5/0x210 [ 529.821986][T23527] try_charge_memcg+0xc74/0x1590 [ 529.822010][T23527] ? __lock_acquire+0x683/0x2cd0 [ 529.822036][T23527] ? __pfx_try_charge_memcg+0x10/0x10 [ 529.822075][T23527] ? charge_memcg+0x20/0x2b0 [ 529.822099][T23527] charge_memcg+0x19c/0x2b0 [ 529.822121][T23527] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 529.822141][T23527] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 529.822165][T23527] __swap_cache_prepare_and_add+0xdd/0x700 [ 529.822189][T23527] ? page_rmappable_folio+0x9a/0x170 [ 529.822220][T23527] swap_cache_alloc_folio+0xf1/0x240 [ 529.822242][T23527] swap_cluster_readahead+0x355/0x670 [ 529.822267][T23527] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 529.822298][T23527] ? get_vma_policy+0x27b/0x3c0 [ 529.822324][T23527] swapin_readahead+0x196/0xc50 [ 529.822345][T23527] ? swap_table_get+0x1e/0x260 [ 529.822368][T23527] ? __pfx_swapin_readahead+0x10/0x10 [ 529.822388][T23527] ? swap_table_get+0x1e/0x260 [ 529.822404][T23527] ? swap_table_get+0x1e/0x260 [ 529.822418][T23527] ? swap_table_get+0x1e/0x260 [ 529.822435][T23527] ? swap_table_get+0x216/0x260 [ 529.822453][T23527] ? swap_cache_get_folio+0x2ea/0x2f0 [ 529.822478][T23527] do_swap_page+0x545/0x5340 [ 529.822502][T23527] ? __pte_offset_map+0x29/0x240 [ 529.822533][T23527] ? do_swap_page+0x128/0x5340 [ 529.822549][T23527] ? __pfx_do_swap_page+0x10/0x10 [ 529.822566][T23527] ? __pte_offset_map+0x1ae/0x240 [ 529.822588][T23527] ? pte_offset_map_rw_nolock+0xea/0x160 [ 529.822610][T23527] handle_mm_fault+0x124e/0x3080 [ 529.822643][T23527] ? handle_mm_fault+0xec/0x3080 [ 529.822674][T23527] ? __pfx_handle_mm_fault+0x10/0x10 [ 529.822693][T23527] ? lock_vma_under_rcu+0x45a/0x500 [ 529.822745][T23527] do_user_addr_fault+0xa4d/0x1340 [ 529.822795][T23527] ? trace_page_fault_user+0x84/0x1e0 [ 529.822817][T23527] exc_page_fault+0x6a/0xc0 [ 529.822911][T23527] asm_exc_page_fault+0x26/0x30 [ 529.822928][T23527] RIP: 0033:0x7fa9eda6559e [ 529.822946][T23527] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 529.822961][T23527] RSP: 002b:00007ffd258316c0 EFLAGS: 00010206 [ 529.822979][T23527] RAX: 00007fa9ede15fa0 RBX: 00007fa9ede15fa0 RCX: 0000000000000026 [ 529.822991][T23527] RDX: 0000000000000001 RSI: 00007fa9ede16038 RDI: 000000000000000e [ 529.823003][T23527] RBP: 00007fa9ede17da0 R08: 0000000000000000 R09: 0000000000000001 [ 529.823014][T23527] R10: 0000000000000026 R11: 0000000000000246 R12: 00000000000814b5 [ 529.823025][T23527] R13: 00007fa9ede1618c R14: 0000000000081284 R15: 00007ffd25831830 [ 529.823058][T23527] [ 529.823192][T23527] memory: usage 307200kB, limit 307200kB, failcnt 235 [ 530.166481][T23527] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 530.187280][T23527] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 530.194627][T23527] Memory cgroup stats for /syz6: [ 530.194892][T23527] cache 0 [ 530.205820][T23527] rss 0 [ 530.208908][T23527] rss_huge 0 [ 530.212175][T23527] shmem 0 [ 530.215111][T23527] mapped_file 0 [ 530.219041][T23527] dirty 0 [ 530.222005][T23527] writeback 0 [ 530.225287][T23527] workingset_refault_anon 2 [ 530.230382][T23527] workingset_refault_file 0 [ 530.234911][T23527] swap 217088 [ 530.246405][T23527] swapcached 249856 [ 530.259004][T23527] pgpgin 9234 [ 530.272783][T23527] pgpgout 9228 [ 530.287724][T23527] pgfault 15336 [ 530.306110][T23527] pgmajfault 0 [ 530.314979][T23527] inactive_anon 4096 [ 530.333741][T23527] active_anon 20480 [ 530.340117][T23527] inactive_file 0 [ 530.366314][T23527] active_file 0 [ 530.376106][T23527] unevictable 0 [ 530.388992][T23527] hierarchical_memory_limit 314572800 [ 530.415260][T23527] hierarchical_memsw_limit 9223372036854771712 [ 530.431407][T23527] total_cache 0 [ 530.444713][T23527] total_rss 0 [ 530.455936][T23527] total_rss_huge 0 [ 530.467718][T23527] total_shmem 0 [ 530.479626][T23527] total_mapped_file 0 [ 530.484590][T23527] total_dirty 0 [ 530.488846][T23527] total_writeback 0 [ 530.492954][T23527] total_workingset_refault_anon 2 [ 530.501869][T23527] total_workingset_refault_file 0 [ 530.509145][T23527] total_swap 217088 [ 530.513071][T23527] total_swapcached 249856 [ 530.526913][T23527] total_pgpgin 9234 [ 530.530896][T23527] total_pgpgout 9228 [ 530.534869][T23527] total_pgfault 15336 [ 530.539878][T23527] total_pgmajfault 0 [ 530.543918][T23527] total_inactive_anon 4096 [ 530.549614][T23527] total_active_anon 20480 [ 530.554104][T23527] total_inactive_file 0 [ 530.558756][T23527] total_active_file 0 [ 530.562815][T23527] total_unevictable 0 [ 530.567251][T23527] anon_cost 0 [ 530.570606][T23527] file_cost 0 [ 530.573947][T23527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4913,pid=23527,uid=0 [ 530.592953][T23527] Memory cgroup out of memory: Killed process 23527 (syz.6.4913) total-vm:102424kB, anon-rss:1244kB, file-rss:23072kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 530.976281][ T4950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 530.990175][ T4950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 530.999463][ T4950] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 531.009525][ T4950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 531.018858][ T4950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 531.235059][T23587] gtp0: entered promiscuous mode [ 531.242089][T23587] gtp0: entered allmulticast mode [ 531.289146][T23590] openvswitch: netlink: IPv4 tun info is not correct [ 531.740484][T23609] netlink: 'syz.0.4934': attribute type 4 has an invalid length. [ 531.816449][T23615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4936'. [ 531.838044][T23615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4936'. [ 531.910444][T23619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4938'. [ 532.173911][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 532.283569][T23632] bond1: option xmit_hash_policy: invalid value (64) [ 532.317044][T23632] bond1 (unregistering): Released all slaves [ 532.768130][T23659] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4946'. [ 533.082311][T17610] Bluetooth: hci7: command tx timeout [ 535.156527][T17610] Bluetooth: hci7: command tx timeout [ 535.755306][T23674] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4950'. [ 536.167932][T23574] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.188579][T23574] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.206671][T23574] bridge_slave_0: entered allmulticast mode [ 536.215224][T23574] bridge_slave_0: entered promiscuous mode [ 536.230784][T23574] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.255853][T23574] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.263313][T23574] bridge_slave_1: entered allmulticast mode [ 536.270874][T23574] bridge_slave_1: entered promiscuous mode [ 536.314331][T23694] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4955'. [ 536.320270][T23574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.328888][T23694] nbd: illegal input index -8454144 [ 536.339957][T23574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.440117][T23574] team0: Port device team_slave_0 added [ 536.453151][T23574] team0: Port device team_slave_1 added [ 536.509714][T23574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.517177][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.536424][T23709] sctp: [Deprecated]: syz.0.4960 (pid 23709) Use of int in maxseg socket option. [ 536.536424][T23709] Use struct sctp_assoc_value instead [ 536.544799][T23574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.588176][T23574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.595369][T23574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.631549][T23574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.723850][T23574] hsr_slave_0: entered promiscuous mode [ 536.731435][T23574] hsr_slave_1: entered promiscuous mode [ 536.751447][T23574] debugfs: 'hsr0' already exists in 'hsr' [ 536.766407][T23574] Cannot create hsr debugfs directory [ 536.935320][T23721] : entered promiscuous mode [ 536.940247][T23721] bond_slave_0: entered promiscuous mode [ 537.141071][T23732] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4969'. [ 537.239170][T17610] Bluetooth: hci7: command tx timeout [ 537.259674][T23735] syzkaller0: entered promiscuous mode [ 537.265316][T23735] syzkaller0: entered allmulticast mode [ 537.320079][T23574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 537.332967][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.341627][T23574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 537.367321][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.389244][T23574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 537.407218][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.415515][T23574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 537.430215][T23574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.438299][T23743] lo speed is unknown, defaulting to 1000 [ 537.448053][T23743] lo speed is unknown, defaulting to 1000 [ 537.465168][T23743] lo speed is unknown, defaulting to 1000 [ 537.473478][T23743] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 537.489364][T23743] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 537.508430][T23743] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 537.531791][T23743] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 537.584723][T23743] lo speed is unknown, defaulting to 1000 [ 537.589850][T23574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.598493][T23743] lo speed is unknown, defaulting to 1000 [ 537.610541][T23743] lo speed is unknown, defaulting to 1000 [ 537.621218][T23574] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.628680][T23743] lo speed is unknown, defaulting to 1000 [ 537.639044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.646246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.655205][T23743] lo speed is unknown, defaulting to 1000 [ 537.665954][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.673073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.684471][T23743] lo speed is unknown, defaulting to 1000 [ 537.701585][T23743] lo speed is unknown, defaulting to 1000 [ 537.714231][T23743] lo speed is unknown, defaulting to 1000 [ 537.730556][T23743] lo speed is unknown, defaulting to 1000 [ 537.739497][T23743] lo speed is unknown, defaulting to 1000 [ 537.748958][T23743] lo speed is unknown, defaulting to 1000 [ 538.150019][T23574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.411269][T23574] veth0_vlan: entered promiscuous mode [ 538.432040][T23574] veth1_vlan: entered promiscuous mode [ 538.473829][T23574] veth0_macvtap: entered promiscuous mode [ 538.484703][T23574] veth1_macvtap: entered promiscuous mode [ 538.510119][T23574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.531133][T23574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.549398][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.561325][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.575365][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.585289][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.649447][T23790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4980'. [ 538.771417][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.789361][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.818763][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.827345][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.915769][T23793] netlink: 'syz.7.4925': attribute type 4 has an invalid length. [ 538.929954][T23793] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4925'. [ 538.958450][T23793] .`: renamed from bond0 (while UP) [ 538.989363][T23795] bridge1: entered promiscuous mode [ 538.998014][T23795] bridge1: entered allmulticast mode [ 539.008214][T23795] team0: Port device bridge1 added [ 539.018661][T23795] bridge0: port 3(team0) entered blocking state [ 539.025914][T23795] bridge0: port 3(team0) entered disabled state [ 539.033778][T23795] team0: entered allmulticast mode [ 539.052988][T23795] team_slave_0: entered allmulticast mode [ 539.067767][T23795] team_slave_1: entered allmulticast mode [ 539.110361][T23795] team0: entered promiscuous mode [ 539.123190][T23795] team_slave_0: entered promiscuous mode [ 539.131401][T23795] team_slave_1: entered promiscuous mode [ 539.318466][T17610] Bluetooth: hci7: command tx timeout [ 539.535141][T23821] tap0: tun_chr_ioctl cmd 2149341229 [ 539.659559][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4992'. [ 539.740276][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4994'. [ 539.870934][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 539.885500][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'. [ 539.898075][T23835] netlink: 'syz.0.4996': attribute type 15 has an invalid length. [ 539.925815][ T98] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 539.935804][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 539.945183][ T98] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 539.954620][ T98] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 539.969494][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'. [ 539.980432][ T98] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 539.989400][T23835] netlink: 'syz.0.4996': attribute type 15 has an invalid length. [ 540.003980][T23837] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.4997'. [ 540.018831][T23837] netlink: 'syz.6.4997': attribute type 1 has an invalid length. [ 540.082702][T23839] netlink: 'syz.0.4998': attribute type 5 has an invalid length. [ 540.272456][T23853] lo: left promiscuous mode [ 540.283120][T23853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.370661][ T29] audit: type=1800 audit(1781687871.173:15): pid=23857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5004" name="memory.events" dev="tmpfs" ino=725 res=0 errno=0 [ 540.400784][ T29] audit: type=1804 audit(1781687871.173:16): pid=23858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5004" name="/newroot/139/memory.events" dev="tmpfs" ino=725 res=1 errno=0 [ 540.462704][T23863] netlink: 'syz.1.5005': attribute type 11 has an invalid length. [ 540.960342][T23887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.023783][T23887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.065774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.073011][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.265341][ T5961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 541.760332][T23956] netlink: 'syz.1.5020': attribute type 23 has an invalid length. [ 542.072353][T23976] netlink: 'syz.7.5027': attribute type 1 has an invalid length. [ 542.220657][T23982] __nla_validate_parse: 41 callbacks suppressed [ 542.220677][T23982] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5031'. [ 542.259560][T23982] syzkaller0: entered promiscuous mode [ 542.276830][T23982] syzkaller0: entered allmulticast mode [ 542.320471][T23988] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5033'. [ 542.391431][T23988] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.399194][T23988] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.460097][ T5960] bridge_slave_1: left allmulticast mode [ 542.478465][ T5960] bridge_slave_1: left promiscuous mode [ 542.495429][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.506487][T23988] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5033'. [ 542.528153][ T5960] bridge_slave_0: left allmulticast mode [ 542.539353][ T5960] bridge_slave_0: left promiscuous mode [ 542.556563][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.642936][ T5960] pimreg3: left allmulticast mode [ 542.658533][ T5960] tipc: Resetting bearer [ 542.667461][T23997] netlink: 'syz.6.5035': attribute type 1 has an invalid length. [ 542.785219][ T4950] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 542.799696][ T4950] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 542.819332][ T4950] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 542.828574][ T4950] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 542.854215][ T4950] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 543.130047][ T5960] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 543.333724][ T5960] tipc: Disabling bearer [ 543.365370][ T5960] bond10 (unregistering): (slave geneve3): Releasing active interface [ 543.873361][ T5960] bond12 (unregistering): (slave bridge7): Releasing active interface [ 543.943892][ T5960] .` (unregistering): left promiscuous mode [ 543.952171][ T5960] bond_slave_0: left promiscuous mode [ 543.959871][ T5960] bond_slave_1: left promiscuous mode [ 543.987612][ T5960] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.997405][ T5960] bond_slave_0: left allmulticast mode [ 544.007995][ T5960] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.021100][ T5960] bond_slave_1: left allmulticast mode [ 544.030767][ T5960] .` (unregistering): Released all slaves [ 544.045442][ T5960] bond1 (unregistering): Released all slaves [ 544.069735][ T5960] bond2 (unregistering): Released all slaves [ 544.100336][ T5960] bond3 (unregistering): Released all slaves [ 544.127302][ T5960] bond4 (unregistering): Released all slaves [ 544.152656][ T5960] bond5 (unregistering): Released all slaves [ 544.178879][ T5960] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 544.190328][ T5960] bond6 (unregistering): Released all slaves [ 544.213915][ T5960] bond7 (unregistering): Released all slaves [ 544.234503][ T5960] bond8 (unregistering): Released all slaves [ 544.259865][ T5960] bond9 (unregistering): Released all slaves [ 544.305711][ T5960] bond10 (unregistering): Released all slaves [ 544.334683][ T5960] bond0 (unregistering): Released all slaves [ 544.367851][ T5960] bond11 (unregistering): Released all slaves [ 544.390287][ T5960] bond12 (unregistering): Released all slaves [ 544.413222][ T5960] bond13 (unregistering): Released all slaves [ 544.439038][ T5960] bond14 (unregistering): Released all slaves [ 544.462027][ T5960] bond15 (unregistering): Released all slaves [ 544.490406][T23993] tunl0: entered promiscuous mode [ 544.497974][T23993] netlink: 'syz.6.5035': attribute type 3 has an invalid length. [ 544.519622][T23993] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5035'. [ 544.560722][T23997] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 544.852487][T24010] syzkaller0: entered promiscuous mode [ 544.884218][T24010] syzkaller0: entered allmulticast mode [ 544.900950][ T5960] tipc: Disabling bearer [ 544.928052][T17610] Bluetooth: hci8: command tx timeout [ 544.949921][ T5960] tipc: Left network mode [ 545.071074][ T5960] IPVS: stopping backup sync thread 8498 ... [ 545.172923][T24028] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5039'. [ 545.245786][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.265282][T24030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5040'. [ 546.474937][T24042] netlink: 'syz.0.5042': attribute type 21 has an invalid length. [ 547.010506][T17610] Bluetooth: hci8: command tx timeout [ 547.488208][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.079859][T17610] Bluetooth: hci8: command tx timeout [ 549.101317][T24028] 0·: renamed from hsr0 (while UP) [ 549.109908][T24028] 0·: entered allmulticast mode [ 549.119474][T24028] hsr_slave_0: entered allmulticast mode [ 549.125760][T24028] hsr_slave_1: entered allmulticast mode [ 549.132395][T24028] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 549.465042][T24061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5046'. [ 549.898336][T24066] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 549.917560][T24079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5049'. [ 549.946800][T24080] netlink: 'syz.1.5051': attribute type 1 has an invalid length. [ 550.165485][T24080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.258057][T24093] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.5053'. [ 550.298957][T24083] vlan2: entered promiscuous mode [ 550.330580][T24083] bond1: entered promiscuous mode [ 550.336592][T24083] vlan2: entered allmulticast mode [ 550.342479][T24083] bond1: entered allmulticast mode [ 550.548491][T24001] lo speed is unknown, defaulting to 1000 [ 550.656495][T24107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5056'. [ 551.155448][T24113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5057'. [ 551.156457][T17610] Bluetooth: hci8: command tx timeout [ 551.212995][T24112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5057'. [ 551.263572][ T5960] hsr_slave_0: left promiscuous mode [ 551.280057][ T5960] hsr_slave_1: left promiscuous mode [ 551.286907][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.294581][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.306806][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.314337][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.349922][ T5960] veth1_macvtap: left promiscuous mode [ 551.355519][ T5960] veth0_macvtap: left allmulticast mode [ 551.362642][ T5960] veth0_macvtap: left promiscuous mode [ 551.537347][ T5960] pim6reg (unregistering): left allmulticast mode [ 551.757398][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 551.780808][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 552.249733][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5063'. [ 552.258198][T24131] syzkaller0: entered promiscuous mode [ 552.318026][T24131] syzkaller0: entered allmulticast mode [ 552.374898][T24133] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5062'. [ 553.225345][T24167] netlink: 'syz.6.5070': attribute type 4 has an invalid length. [ 553.266504][T24167] netlink: 'syz.6.5070': attribute type 4 has an invalid length. [ 553.336915][ T998] lo speed is unknown, defaulting to 1000 [ 553.353685][ T998] syś2: Port: 1 Link ACTIVE [ 553.411201][ T5960] IPVS: stop unused estimator thread 0... [ 553.509015][T24001] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.539417][T24001] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.565385][T24001] bridge_slave_0: entered allmulticast mode [ 553.594793][T24001] bridge_slave_0: entered promiscuous mode [ 553.634783][T24001] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.652300][T24001] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.673685][T24001] bridge_slave_1: entered allmulticast mode [ 553.694856][T24001] bridge_slave_1: entered promiscuous mode [ 553.805550][T24001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.824435][T24001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.876342][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.901955][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5075'. [ 553.943934][T24001] team0: Port device team_slave_0 added [ 553.969598][T24001] team0: Port device team_slave_1 added [ 554.119449][T24001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.142738][T24001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.216633][T24001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.242915][T24197] xt_CT: No such helper "snmp_trap" [ 554.335065][T24001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.366337][T24001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.477581][T24001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.746794][T24001] hsr_slave_0: entered promiscuous mode [ 554.774924][T24001] hsr_slave_1: entered promiscuous mode [ 554.809372][T24001] debugfs: 'hsr0' already exists in 'hsr' [ 554.826436][T24001] Cannot create hsr debugfs directory [ 555.120254][T24231] netlink: 'syz.6.5085': attribute type 11 has an invalid length. [ 555.928008][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5090'. [ 555.950775][T24266] xt_hashlimit: size too large, truncated to 1048576 [ 556.038338][T24276] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5093'. [ 556.263282][T24001] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.290197][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.307086][T24001] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.327506][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.377286][T24001] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.402403][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.411628][T24001] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 556.432072][T24001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.565846][T24288] openvswitch: netlink: Missing valid actions attribute. [ 556.603476][T24288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.644224][T24299] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5099'. [ 556.834603][T24311] netlink: 'syz.1.5101': attribute type 1 has an invalid length. [ 556.886811][T24311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.936304][T24311] vlan3: entered promiscuous mode [ 556.952116][T24311] bond2: entered promiscuous mode [ 556.977647][T24311] vlan3: entered allmulticast mode [ 556.997769][T24311] bond2: entered allmulticast mode [ 557.004139][T24320] netlink: 'syz.7.5102': attribute type 1 has an invalid length. [ 557.055323][T24311] bond2: (slave bridge8): making interface the new active one [ 557.097046][T24311] bridge8: entered promiscuous mode [ 557.119913][T24311] bridge8: entered allmulticast mode [ 557.152486][T24311] bond2: (slave bridge8): Enslaving as an active interface with an up link [ 557.193990][T24001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.297015][T24001] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.346970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.354073][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.453220][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.460462][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.545907][T24346] netlink: 'syz.0.5111': attribute type 3 has an invalid length. [ 557.601530][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5112'. [ 557.676982][T24348] tipc: Started in network mode [ 557.701408][T24348] tipc: Node identity c62d5d78723b, cluster identity 4711 [ 557.726816][T24348] tipc: Enabled bearer , priority 0 [ 557.801879][T24360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5112'. [ 557.852887][T24348] syzkaller0: entered promiscuous mode [ 557.866199][T24348] syzkaller0: entered allmulticast mode [ 557.875547][T24348] tipc: Resetting bearer [ 558.003679][T24347] tipc: Resetting bearer [ 560.622343][T24347] tipc: Disabling bearer [ 560.653783][T23916] tipc: Node number set to 3021364600 [ 560.790287][T24381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5117'. [ 560.853301][T24385] netlink: 'syz.1.5119': attribute type 1 has an invalid length. [ 560.963362][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5121'. [ 560.974726][T24393] netlink: 'syz.7.5121': attribute type 30 has an invalid length. [ 560.992894][T24396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5119'. [ 561.021823][T24399] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5122'. [ 561.032428][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5121'. [ 561.052823][T24404] netlink: 'syz.7.5121': attribute type 30 has an invalid length. [ 561.092730][T24406] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5123'. [ 561.123930][T24392] bond3: (slave geneve3): making interface the new active one [ 561.136578][T24406] nbd: illegal input index -8454144 [ 561.151037][T24392] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 561.195425][T24410] netlink: 'syz.6.5124': attribute type 1 has an invalid length. [ 561.221180][T24396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.231135][ T3330] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.458570][T24416] netlink: 'syz.7.5125': attribute type 39 has an invalid length. [ 561.492684][T24410] bond2: entered promiscuous mode [ 561.507969][T24410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.528856][ T3330] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.546750][ T6025] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.572867][T24413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.579287][T24424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5126'. [ 561.582948][T24413] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 561.598989][T24413] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 561.612110][T24413] bond2: (slave vti0): making interface the new active one [ 561.619777][T24413] vti0: entered promiscuous mode [ 561.625952][T24413] bond2: (slave vti0): Enslaving as an active interface with an up link [ 561.634970][T24416] hsr_slave_0: left promiscuous mode [ 561.643989][T24416] hsr_slave_1: left promiscuous mode [ 561.690141][ T6025] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.794511][ T6025] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 561.814283][ T6025] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 561.830043][T24001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.839794][ T6025] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 561.849656][T24427] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5127'. [ 561.861552][ T6025] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 561.872850][T24431] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 561.897002][T24427] netlink: 404 bytes leftover after parsing attributes in process `syz.6.5127'. [ 561.916255][T24427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5127'. [ 561.940721][T24427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5127'. [ 562.391091][T24462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.630000][T24001] veth0_vlan: entered promiscuous mode [ 562.635911][T24474] netlink: 'syz.6.5140': attribute type 1 has an invalid length. [ 562.680824][T24476] bridge0: left promiscuous mode [ 562.701418][T24476] : left promiscuous mode [ 562.707669][T24476] bond_slave_0: left promiscuous mode [ 562.727241][T24476] 8021q: adding VLAN 0 to HW filter on device  [ 562.737481][T24476] dummy0: left promiscuous mode [ 562.790304][T24476] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 562.838242][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.851906][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 562.896680][T23924] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.909692][T24476] xfrm2: left promiscuous mode [ 563.086571][T23924] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.149135][T24001] veth1_vlan: entered promiscuous mode [ 563.165757][T24493] bridge0: port 3(veth1_to_bridge) entered blocking state [ 563.173944][T24493] bridge0: port 3(veth1_to_bridge) entered disabled state [ 563.188299][T24493] veth1_to_bridge: entered allmulticast mode [ 563.198302][T24493] veth1_to_bridge: entered promiscuous mode [ 563.204452][T24493] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.220619][T24493] bridge0: port 3(veth1_to_bridge) entered blocking state [ 563.227912][T24493] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 563.357452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.370231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.382806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.395421][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.407949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.420497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.433037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.445569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 563.458116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 564.441036][T24515] xt_hashlimit: size too large, truncated to 1048576 [ 567.857041][ C0] net_ratelimit: 11062 callbacks suppressed [ 567.857064][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.875848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.888558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.901437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.914216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.927070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.939937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.953017][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.965741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 567.978978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 569.884427][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 570.051172][ T4950] Bluetooth: hci0: command 0x0406 tx timeout [ 571.393004][T24001] veth0_macvtap: entered promiscuous mode [ 571.419418][T24538] __nla_validate_parse: 7 callbacks suppressed [ 571.419437][T24538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5156'. [ 571.435651][T24539] x_tables: duplicate underflow at hook 3 [ 571.455405][T24001] veth1_macvtap: entered promiscuous mode [ 571.644313][T24547] netlink: 348 bytes leftover after parsing attributes in process `syz.7.5159'. [ 572.310553][T24001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.350399][T24001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.508032][ T98] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.537477][ T98] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.627289][ T98] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.657581][ T98] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.866787][ C0] net_ratelimit: 4666 callbacks suppressed [ 572.866805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.886101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.890718][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.899797][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.919698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.933218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.946604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.959991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.965330][T24575] netlink: 'syz.1.5165': attribute type 29 has an invalid length. [ 572.973362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 572.986623][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.993194][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 573.012626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 573.342383][ T3330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.381840][ T3330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.992978][T24610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5173'. [ 574.539177][T24628] sctp: [Deprecated]: syz.6.5177 (pid 24628) Use of int in max_burst socket option. [ 574.539177][T24628] Use struct sctp_assoc_value instead [ 574.900264][T24639] netlink: 'syz.6.5180': attribute type 1 has an invalid length. [ 574.908793][T24636] syzkaller1: entered promiscuous mode [ 574.939558][T24631] netlink: 'syz.8.5036': attribute type 15 has an invalid length. [ 574.959447][T24636] syzkaller1: entered allmulticast mode [ 575.133689][T24648] netlink: 'syz.6.5180': attribute type 10 has an invalid length. [ 575.170863][T24639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.194761][T24648] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5180'. [ 575.420607][T24641] bond3: (slave veth3): Enslaving as an active interface with a down link [ 575.726914][T24644] bond3: (slave dummy0): making interface the new active one [ 575.736852][T24644] dummy0: entered promiscuous mode [ 575.742516][T24644] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 575.821718][T24648] bond3: (slave dummy0): Releasing active interface [ 575.960413][T24659] tipc: Failed to remove unknown binding: 66,1,1/3021364600:2433834633/2433834635 [ 575.993433][T24661] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5185'. [ 576.014641][T24659] tipc: Failed to remove unknown binding: 66,1,1/3021364600:2433834633/2433834635 [ 576.173542][T24667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.180867][T24667] IPv6: NLM_F_CREATE should be set when creating new route [ 576.188193][T24667] IPv6: NLM_F_CREATE should be set when creating new route [ 576.475705][T24674] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5188'. [ 576.721235][T24674] smc: net device nr0 applied user defined pnetid SYZ2 [ 577.031998][T24690] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.346087][ C0] sched: DL replenish lagged too much [ 577.490478][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5195'. [ 577.749315][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.795196][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.835886][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.864421][T24713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5197'. [ 577.877095][ C0] net_ratelimit: 3812 callbacks suppressed [ 577.877116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.896489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.909961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.923460][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.925236][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.936917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.957869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.971424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.984962][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 577.998471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 578.013251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 578.283793][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5200'. [ 578.433869][T24717] tunl0: left promiscuous mode [ 578.981257][T24737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5204'. [ 579.027431][T24717] bridge0: port 3(team0) entered blocking state [ 579.034001][T24717] bridge0: port 3(team0) entered listening state [ 579.040667][T24717] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.047869][T24717] bridge0: port 2(bridge_slave_1) entered listening state [ 579.055250][T24717] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.062456][T24717] bridge0: port 1(bridge_slave_0) entered listening state [ 579.635273][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5206'. [ 579.992386][T24767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5206'. [ 580.007894][T24717] dummy0: left promiscuous mode [ 580.638879][T24717] veth0_to_team: entered promiscuous mode [ 580.650386][T24717] macvtap1: left promiscuous mode [ 580.675482][T24717] bond2: left promiscuous mode [ 580.684219][T24717] vti0: left promiscuous mode [ 580.755363][T24735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5204'. [ 580.888930][ T3330] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 580.975839][ T3330] bond3: (slave veth3): making interface the new active one [ 581.045465][ T3330] bond3: active interface up! [ 581.068485][T24745] syzkaller1: entered promiscuous mode [ 581.099203][T24745] syzkaller1: entered allmulticast mode [ 581.255297][T24775] netlink: 'syz.6.5209': attribute type 1 has an invalid length. [ 581.306925][T24749] syzkaller0: entered promiscuous mode [ 581.324557][T24749] syzkaller0: entered allmulticast mode [ 581.994654][T24775] bond4: entered promiscuous mode [ 582.002057][T24775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.204891][T24780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.238949][T24780] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 582.286023][T24780] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 582.378612][T24780] bond4: (slave ip6gre1): making interface the new active one [ 582.425610][T24780] ip6gre1: entered promiscuous mode [ 582.486003][T24780] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 582.648005][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'. [ 582.886748][ C0] net_ratelimit: 4142 callbacks suppressed [ 582.886769][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.905616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.919346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.932753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.945608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.958539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.971888][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.984994][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 582.997753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 583.010642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.897218][ C0] net_ratelimit: 4977 callbacks suppressed [ 587.897239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.916399][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.929139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.941952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.954679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.967580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.981031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 587.994391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 588.007669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 588.020949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 588.906824][T24783] tap0: tun_chr_ioctl cmd 1074025676 [ 588.912245][T24783] tap0: owner set to 0 [ 589.000500][T24813] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5216'. [ 589.038063][T24813] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5216'. [ 589.058422][T24813] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5216'. [ 589.428020][T24819] sctp: [Deprecated]: syz.8.5218 (pid 24819) Use of int in maxseg socket option. [ 589.428020][T24819] Use struct sctp_assoc_value instead [ 589.618285][T24834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 589.912906][T24837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5221'. [ 589.964250][T24842] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5224'. [ 591.009874][T24876] No such timeout policy "syz0" [ 591.021441][T24844] IPVS: Error connecting to the multicast addr [ 591.050641][T24858] tipc: Enabling of bearer rejected, failed to enable media [ 591.715008][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5230'. [ 591.778711][T24898] netlink: 'syz.8.5232': attribute type 1 has an invalid length. [ 592.906139][ C0] net_ratelimit: 4189 callbacks suppressed [ 592.906159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 592.925186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 592.938351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 592.951650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 592.964468][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 592.977290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 592.990132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 593.003747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 593.017110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 593.029922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 597.917262][ C0] net_ratelimit: 5018 callbacks suppressed [ 597.917290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 597.936581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 597.949434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 597.962336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 597.975584][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 597.988412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 598.001312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 598.014057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 598.027219][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 598.040334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 598.772479][T24922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5236'. [ 598.822521][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5236'. [ 598.924778][T24907] veth0_macvtap: entered allmulticast mode [ 599.690211][T24942] netlink: 'syz.8.5242': attribute type 21 has an invalid length. [ 599.733286][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5242'. [ 599.911559][T13658] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.927873][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5242'. [ 599.972503][T13658] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.019494][T13658] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.053774][T13658] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.597067][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 600.637245][T24966] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 600.639251][T24967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5248'. [ 601.353817][T24995] x_tables: unsorted underflow at hook 2 [ 602.536844][T25014] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 602.754491][T25014] bond3 (unregistering): Released all slaves [ 602.926889][ C0] net_ratelimit: 4237 callbacks suppressed [ 602.926911][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 602.945940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 602.959254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 602.972622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 602.985929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 602.999153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 603.012265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 603.025551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 603.039359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 603.052606][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 603.470165][T25045] netlink: 'syz.8.5264': attribute type 1 has an invalid length. [ 603.852375][T25053] netlink: 'syz.1.5266': attribute type 1 has an invalid length. [ 603.879103][T25053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5266'. [ 603.930543][T25031] tipc: Started in network mode [ 603.954408][T25031] tipc: Node identity 2ed5c668a50a, cluster identity 4711 [ 603.992077][T25031] tipc: Enabled bearer , priority 0 [ 604.161324][T25030] tipc: Disabling bearer [ 604.654006][T25067] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5270'. [ 604.932867][T25071] netlink: 'syz.8.5271': attribute type 1 has an invalid length. [ 605.010222][T25071] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5271'. [ 605.121828][T25071] netlink: 658 bytes leftover after parsing attributes in process `syz.8.5271'. [ 605.583856][T25095] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 605.630360][T25087] pim6reg: entered allmulticast mode [ 605.803838][T25092] pim6reg: left allmulticast mode [ 606.494599][T25116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5282'. [ 606.740284][T25126] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5287'. [ 607.304221][T25148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5290'. [ 607.881607][T25158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5296'. [ 607.926610][T25158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5296'. [ 607.936329][ C0] net_ratelimit: 3873 callbacks suppressed [ 607.936348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 607.955492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 607.968856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 607.982476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 607.996003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 608.009432][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 608.023683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 608.037341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 608.050749][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 608.064206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 608.494442][T25172] erspan0: entered allmulticast mode [ 608.720908][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5303'. [ 609.145117][T25176] team0: Port device team_slave_0 removed [ 609.556404][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 609.563680][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 609.570931][ C1] bridge0: port 3(team0) entered learning state [ 609.761905][T25195] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5312'. [ 611.054895][T25227] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5319'. [ 611.653633][T25245] netlink: 'syz.8.5327': attribute type 1 has an invalid length. [ 611.822427][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5328'. [ 612.262730][T25250] syzkaller0: entered promiscuous mode [ 612.275354][T25262] netlink: 'syz.8.5331': attribute type 1 has an invalid length. [ 612.342430][T25250] syzkaller0: entered allmulticast mode [ 612.524316][T25268] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5333'. [ 612.683064][T25274] xt_socket: unknown flags 0x8 [ 612.692487][T25274] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5334'. [ 612.946420][ C0] net_ratelimit: 3887 callbacks suppressed [ 612.946438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 612.965941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 612.979581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 612.993236][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.006940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.020673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.034446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.048621][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.062360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.076008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 613.109021][T25277] netlink: 'syz.8.5335': attribute type 1 has an invalid length. [ 613.317836][T25277] bond1: entered promiscuous mode [ 613.370076][T25277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.655911][T25299] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5339'. [ 613.692508][T25291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.701391][T25291] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 613.714229][T25291] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 613.737266][T25300] netlink: 'syz.0.5339': attribute type 10 has an invalid length. [ 613.760300][T25291] bond1: (slave ip6gre1): making interface the new active one [ 613.768504][T25291] ip6gre1: entered promiscuous mode [ 613.775862][T25291] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 613.798856][T25295] tipc: MTU too low for tipc bearer [ 614.186644][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5342'. [ 614.211400][T25310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5341'. [ 614.243193][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5342'. [ 614.260667][ T6025] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.275178][T25310] netlink: 'syz.7.5341': attribute type 1 has an invalid length. [ 614.287629][ T6025] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.469488][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5344'. [ 614.839138][ T6025] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.859008][T25314] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 614.859576][T25315] netlink: 'syz.8.5344': attribute type 2 has an invalid length. [ 614.900211][T25316] netlink: 'syz.8.5344': attribute type 2 has an invalid length. [ 614.926526][ T6025] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.264794][T25342] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5350'. [ 615.309615][T25347] gretap0: entered promiscuous mode [ 615.335447][T25347] vlan0: entered promiscuous mode [ 615.906793][T23924] IPVS: starting estimator thread 0... [ 616.016414][T25371] IPVS: using max 36 ests per chain, 86400 per kthread [ 616.664348][T25393] netlink: 576 bytes leftover after parsing attributes in process `syz.7.5364'. [ 617.053822][T25405] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5368'. [ 617.068350][T25403] lo: entered allmulticast mode [ 617.105988][T25403] tunl0: entered allmulticast mode [ 617.163864][T25403] gre0: entered allmulticast mode [ 617.255421][T25403] gretap0: entered allmulticast mode [ 617.425710][T25403] ip_vti0: entered allmulticast mode [ 617.473167][T25403] ip6_vti0: entered allmulticast mode [ 617.505480][T25403] sit0: entered allmulticast mode [ 617.535898][T25403] ip6tnl0: entered allmulticast mode [ 617.591868][T25403] ip6gre0: entered allmulticast mode [ 617.633038][T25403] syz_tun: entered allmulticast mode [ 617.956840][ C0] net_ratelimit: 3961 callbacks suppressed [ 617.956860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 617.976091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 617.989369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.002738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.016133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.029357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.042632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.057826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.071340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.084569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 618.659361][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'. [ 618.746393][T25451] SET target dimension over the limit! [ 618.863951][T25454] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5380'. [ 618.990284][T25455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5380'. [ 621.510767][ T4950] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 621.525257][ T4950] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 621.548303][ T4950] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 621.563878][ T4950] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 621.585088][ T4950] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 621.794370][T25535] netlink: 'syz.1.5399': attribute type 17 has an invalid length. [ 621.901177][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5399'. [ 622.027773][T25535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5399'. [ 622.111730][T25538] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5400'. [ 622.161297][T25542] netlink: 'syz.7.5401': attribute type 8 has an invalid length. [ 622.194088][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5401'. [ 622.241177][T25547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5402'. [ 622.299377][T25535] gretap0: entered promiscuous mode [ 622.343091][T25535] gretap0: left promiscuous mode [ 622.903025][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5405'. [ 622.951222][T25557] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 622.966116][ C0] net_ratelimit: 3952 callbacks suppressed [ 622.966134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 622.968413][T23918] syzkaller1: tun_net_xmit 90 [ 622.973380][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.001806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.014981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.015729][T25557] syzkaller1: Linktype set failed because interface is up [ 623.028095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.047454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.060668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.073907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.087096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.100309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 623.139120][T25560] macvlan2: entered allmulticast mode [ 623.145513][T25560] dummy0: entered allmulticast mode [ 623.158924][T25560] dummy0: entered promiscuous mode [ 623.185226][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5403'. [ 623.717652][ T4950] Bluetooth: hci9: command tx timeout [ 623.901904][T25580] netlink: 'syz.1.5410': attribute type 1 has an invalid length. [ 624.083183][T25580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.113200][T25591] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.5411'. [ 624.254196][T25585] pim6reg: entered allmulticast mode [ 624.303630][T25593] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5410'. [ 624.330708][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.467946][T25580] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 624.746752][T25585] macvlan2: entered promiscuous mode [ 624.774460][T25606] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5414'. [ 624.789513][T25585] macvlan2: entered allmulticast mode [ 624.818940][T25585] bond5: entered promiscuous mode [ 624.851900][T25585] veth0_to_bond: entered promiscuous mode [ 624.889882][T25585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 625.055740][T25585] bond5: left promiscuous mode [ 625.106970][T25585] veth0_to_bond: left promiscuous mode [ 625.557511][ T30] INFO: task syz.4.4155:20892 blocked for more than 143 seconds. [ 625.635876][ T30] Not tainted syzkaller #0 [ 625.683474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.772840][ T30] task:syz.4.4155 state:D stack:27184 pid:20892 tgid:20862 ppid:16755 task_flags:0x400040 flags:0x00080002 [ 625.797971][ T4950] Bluetooth: hci9: command tx timeout [ 625.879104][ T30] Call Trace: [ 625.890166][ T30] [ 625.899207][ T30] __schedule+0x1840/0x57a0 [ 625.913544][ T30] ? __lock_acquire+0x683/0x2cd0 [ 625.927177][ T30] ? __pfx___schedule+0x10/0x10 [ 625.942363][ T30] ? schedule+0x90/0x360 [ 625.959048][ T30] schedule+0x164/0x360 [ 625.975740][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.027005][ T30] __mutex_lock+0x7c5/0x1590 [ 626.059284][ T30] ? __mutex_lock+0x5c5/0x1590 [ 626.085051][ T30] ? nfsd_nl_listener_get_doit+0x104/0x5e0 [ 626.135317][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 626.175208][ T30] ? __nlmsg_put+0xef/0x1b0 [ 626.225709][ T30] ? genlmsg_put+0x137/0x2e0 [ 626.263819][ T30] nfsd_nl_listener_get_doit+0x104/0x5e0 [ 626.304346][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 626.358457][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 626.422140][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 626.461488][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 626.498928][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 626.527605][ T30] genl_rcv_msg+0x614/0x7a0 [ 626.542942][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.570443][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 626.602914][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 626.627624][ T30] netlink_rcv_skb+0x226/0x4a0 [ 626.647441][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.675591][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.714734][ T30] ? down_read+0x270/0x2e0 [ 626.741146][ T30] ? genl_rcv+0xd/0x40 [ 626.765866][ T30] genl_rcv+0x28/0x40 [ 626.791039][ T30] netlink_unicast+0x7bb/0x940 [ 626.821133][ T30] netlink_sendmsg+0x813/0xb40 [ 626.843780][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.863360][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 626.881692][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 626.903071][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.931479][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 626.945709][ T30] ? __might_fault+0xaf/0x130 [ 626.960265][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.971249][ T30] ? import_iovec+0x73/0xa0 [ 626.992461][ T30] ___sys_sendmsg+0x2a5/0x360 [ 627.012304][ T30] ? __lock_acquire+0x683/0x2cd0 [ 627.029414][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.061378][ T30] ? futex_wake+0x4d7/0x5b0 [ 627.068318][ T30] ? __fget_files+0x2a/0x420 [ 627.081346][ T30] ? __fget_files+0x3a2/0x420 [ 627.096710][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 627.115277][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.135092][ T30] ? rcu_is_watching+0x15/0xb0 [ 627.149378][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.174579][ T30] do_syscall_64+0x174/0x580 [ 627.197266][ T30] ? trace_irq_disable+0x3b/0x140 [ 627.217806][ T30] ? clear_bhb_loop+0x40/0x90 [ 627.234873][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.259082][ T30] RIP: 0033:0x7efd66f9ce59 [ 627.273174][ T30] RSP: 002b:00007efd67e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.307653][ T30] RAX: ffffffffffffffda RBX: 00007efd67216270 RCX: 00007efd66f9ce59 [ 627.342393][ T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000006 [ 627.369157][ T30] RBP: 00007efd67032d6f R08: 0000000000000000 R09: 0000000000000000 [ 627.395873][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.432268][ T30] R13: 00007efd67216308 R14: 00007efd67216270 R15: 00007ffce113b5d8 [ 627.455260][ T30] [ 627.483761][ T30] [ 627.483761][ T30] Showing all locks held in the system: [ 627.508367][T25632] veth3: entered allmulticast mode [ 627.624109][ T30] 2 locks held by ksoftirqd/0/15: [ 627.639948][T25527] lo speed is unknown, defaulting to 1000 [ 627.650137][ T30] 3 locks held by kworker/1:0/24: [ 627.665419][ T30] 1 lock held by khungtaskd/30: [ 627.681726][ T30] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 627.732734][ T30] 1 lock held by dhcpcd/5295: [ 627.752710][ T30] #0: ffffffff8fdc0700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 627.779658][ T30] 2 locks held by getty/5388: [ 627.793875][ T30] #0: ffff888036b810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 627.859676][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 627.886819][ T4950] Bluetooth: hci9: command tx timeout [ 627.918717][ T30] 2 locks held by syz.2.3461/18301: [ 627.938777][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 627.976515][ C0] net_ratelimit: 3995 callbacks suppressed [ 627.976535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 627.982535][ T30] #1: [ 627.995585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.011625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.021072][ T30] ffffffff8ec89ba0 [ 628.024883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.031324][ T30] ( [ 628.041881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.057590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.063334][ T30] nfsd_mutex [ 628.071755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.079684][ T30] ){+.+.}-{4:4} [ 628.088424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.088855][ T30] , at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 628.093169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.104197][ T30] 2 locks held by syz.4.4155/20892: [ 628.111566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:1a:45:02:60:3a, vlan:0) [ 628.123680][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.149536][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x5e0 [ 628.160023][ T30] 2 locks held by syz.5.4760/23002: [ 628.165376][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.173881][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 628.184206][ T30] 2 locks held by syz.5.4760/23003: [ 628.221211][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.253836][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x5e0 [ 628.299033][ T30] 2 locks held by syz.3.4901/23482: [ 628.321791][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.338051][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 628.366740][ T30] 2 locks held by syz.6.5276/25096: [ 628.377706][ T30] #0: ffffffff8fe2fea8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.395729][ T30] #1: ffffffff8ec89ba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 628.429326][ T30] 1 lock held by syz-executor/25527: [ 628.445641][ T30] 2 locks held by dhcpcd/25647: [ 628.452553][ T30] #0: ffff8880382dc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 628.473315][ T30] #1: ffffffff8e962aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 628.497399][ T30] 3 locks held by modprobe/25652: [ 628.511855][ T30] [ 628.525782][ T30] ============================================= [ 628.525782][ T30] [ 628.589433][ T30] NMI backtrace for cpu 1 [ 628.589455][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 628.589474][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.589484][ T30] Call Trace: [ 628.589491][ T30] [ 628.589499][ T30] dump_stack_lvl+0xe8/0x150 [ 628.589526][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 628.589631][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 628.589669][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 628.589694][ T30] sys_info+0x135/0x170 [ 628.589741][ T30] watchdog+0xfd7/0x1030 [ 628.589773][ T30] ? watchdog+0x1c7/0x1030 [ 628.589803][ T30] kthread+0x389/0x470 [ 628.589835][ T30] ? __pfx_watchdog+0x10/0x10 [ 628.589856][ T30] ? __pfx_kthread+0x10/0x10 [ 628.589879][ T30] ret_from_fork+0x514/0xb70 [ 628.589915][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 628.589934][ T30] ? __switch_to+0xc89/0x1420 [ 628.589961][ T30] ? __pfx_kthread+0x10/0x10 [ 628.589983][ T30] ret_from_fork_asm+0x1a/0x30 [ 628.590019][ T30] [ 628.590050][ T30] Sending NMI from CPU 1 to CPUs 0: [ 628.704290][ C0] NMI backtrace for cpu 0 [ 628.704309][ C0] CPU: 0 UID: 0 PID: 998 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 628.704327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.704337][ C0] Workqueue: events_power_efficient hash_netiface4_gc [ 628.704483][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 628.704504][ C0] Code: e8 7f c4 42 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 10 0c 8c 11 e8 bb 1d f8 09 89 c3 83 f8 08 73 65 [ 628.704517][ C0] RSP: 0018:ffffc90000007c40 EFLAGS: 00000202 [ 628.704530][ C0] RAX: ffffffff897b23d8 RBX: ffffffff897b2153 RCX: 0000000000000100 [ 628.704541][ C0] RDX: ffff888027e60000 RSI: 0000000000000001 RDI: 0000000000000000 [ 628.704551][ C0] RBP: dffffc0000000000 R08: ffffffff897b2153 R09: 0000000000000000 [ 628.704561][ C0] R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000001 [ 628.704571][ C0] R13: ffff8880b863cc28 R14: ffff88802dce88c0 R15: 0000000000000026 [ 628.704582][ C0] FS: 0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 [ 628.704594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.704604][ C0] CR2: 0000560f7b06f078 CR3: 0000000025ae8000 CR4: 00000000003526f0 [ 628.704618][ C0] Call Trace: [ 628.704624][ C0] [ 628.704632][ C0] process_backlog+0x652/0x1860 [ 628.704704][ C0] ? process_backlog+0x3c3/0x1860 [ 628.704730][ C0] __napi_poll+0xaa/0x330 [ 628.704749][ C0] net_rx_action+0x61d/0xf50 [ 628.704774][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 628.704808][ C0] handle_softirqs+0x225/0x840 [ 628.704832][ C0] ? do_softirq+0x76/0xd0 [ 628.704848][ C0] ? hash_netiface4_gc+0x237/0x610 [ 628.704865][ C0] do_softirq+0x76/0xd0 [ 628.704879][ C0] [ 628.704884][ C0] [ 628.704890][ C0] __local_bh_enable_ip+0xf8/0x130 [ 628.704904][ C0] hash_netiface4_gc+0x237/0x610 [ 628.704926][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 628.704940][ C0] process_scheduled_works+0xa8e/0x14e0 [ 628.704971][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.705003][ C0] ? assign_work+0x3cf/0x5d0 [ 628.705028][ C0] worker_thread+0xa47/0xfb0 [ 628.705056][ C0] kthread+0x389/0x470 [ 628.705074][ C0] ? __pfx_worker_thread+0x10/0x10 [ 628.705088][ C0] ? __pfx_kthread+0x10/0x10 [ 628.705106][ C0] ret_from_fork+0x514/0xb70 [ 628.705122][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 628.705137][ C0] ? __switch_to+0xc89/0x1420 [ 628.705158][ C0] ? __pfx_kthread+0x10/0x10 [ 628.705176][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.705207][ C0] [ 629.048493][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 629.055402][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 629.064525][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 629.074601][ T30] Call Trace: [ 629.077892][ T30] [ 629.080835][ T30] vpanic+0x56c/0xa60 [ 629.084835][ T30] ? __pfx___schedule+0x10/0x10 [ 629.089711][ T30] ? __pfx_vpanic+0x10/0x10 [ 629.094233][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 629.100498][ T30] panic+0xc5/0xd0 [ 629.104235][ T30] ? __pfx_panic+0x10/0x10 [ 629.108671][ T30] ? preempt_schedule_common+0x82/0xd0 [ 629.114156][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 629.119737][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 629.125918][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 629.132103][ T30] watchdog+0x1030/0x1030 [ 629.136477][ T30] ? watchdog+0x1c7/0x1030 [ 629.140923][ T30] kthread+0x389/0x470 [ 629.145015][ T30] ? __pfx_watchdog+0x10/0x10 [ 629.149716][ T30] ? __pfx_kthread+0x10/0x10 [ 629.154326][ T30] ret_from_fork+0x514/0xb70 [ 629.158931][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 629.164059][ T30] ? __switch_to+0xc89/0x1420 [ 629.168764][ T30] ? __pfx_kthread+0x10/0x10 [ 629.173385][ T30] ret_from_fork_asm+0x1a/0x30 [ 629.178195][ T30] [ 629.181536][ T30] Kernel Offset: disabled [ 629.185858][ T30] Rebooting in 86400 seconds..