last executing test programs: 3m5.990933893s ago: executing program 3 (id=2880): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r1], 0x2c}}, 0x4004050) 3m5.861858446s ago: executing program 3 (id=2883): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000002c0)="aa69c2eb87", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000050000000100000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009c86c2f0dff69c766d1aff5f60b516d53ea09965f03c4890cd49b40bc0f9c44fc043793c54dcb9befba58e6af3233c46223cc507bc40e2e553549134cf22cc1a393dddee1428e9a4173217ad181f86f8b34a3c8a5f177e8d5c9bf48992dd2b0cac7d47cf339d9e"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000340)) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000100)={r6, r4, 0x9, 0x0, 0x0, 0x9, 0xe4, 0x10cf, 0xb, 0xb, 0x2, 0x1, 'syz0\x00'}) 3m5.663357424s ago: executing program 3 (id=2890): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) 3m4.64847694s ago: executing program 3 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x134, r1, 0x3571d3e37228d3bb, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c080) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x134, r1, 0x3571d3e37228d3bb, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c080) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x6d5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x4) (async) close(0x4) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_sample={0x97, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x812}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3a5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) socket$kcm(0x2, 0xd, 0x2) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.567283755s ago: executing program 3 (id=2906): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m4.4360969s ago: executing program 3 (id=2907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) bind$packet(r4, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x9}, 0x14) 2m49.378086321s ago: executing program 32 (id=2907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) bind$packet(r4, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x9}, 0x14) 2m37.736500419s ago: executing program 4 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x7d, 0xa, 0x0, 0x0, @uid}]}, 0xe6}}, 0x84) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r6, 0xe44a0000) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) 2m37.653170629s ago: executing program 4 (id=3160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) 2m37.324307289s ago: executing program 4 (id=3164): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x1}, 0x18) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r2 = socket(0x1, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m37.140306685s ago: executing program 4 (id=3167): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x70bd28, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xc4, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x1c}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0xc4}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc02", @ANYRES16=r10, @ANYBLOB="00022cbd7000fedbdf256500", @ANYRES32, @ANYBLOB="0c0099000f0000004f00000054020380b4000080ad000100974ce9d010dd72c17e7115814ee6e7657a54e1674fb5802a64c4766546d3af748712037b348aa33e7b5e7bb9a9d7e364397d50a51596f6b78f94bdc36f61aea066aba8e0beb325074ea71ed54a47c5de43f013ea4eb4babf902be63baa0784b8d9c900a8252a7a53eeaa6fc16af394bae7534259102e26df1fe33a339db8889dfe03c96a0bb0bb6f2e20a48303c1541f36e3a4818dd330afaac4cb3888d3fd1a65039bc7c66ed769ea000000a40000809f000200f1e045c37a14672e921263557c953e75b1edde470a45a4be8df5afa6d2fef1bba55c0b563d034dc921b645a2154018b972d433e66ffca4d99eeb4699d940b942c29f88b1e1cf73287ade9061c0d65451c18c14d366410dd78ce72702dc98b52fe18da7bc09dcdb9d2c48c06bb427330dfd88530fbd83c4032e5767e94852276219d571db40b610ca6a97f30a89ea4d38112e4173ec115f3ef9ee5100f8000080f4000200bb68f87458478fdf737cb58218ac3ee0bde3116f1cdc98e57f523bb0a7f1918114e1bce7510aa2347b0eab6def6af0a5a3340e8d65e6ea4a0167b937b09ba54f62950be0629adf1a33a9d4220735239bd5525eac0e4b730524c24e4b771a880f4ea8983fe8adf180dfe5ba21ae3c8670dcf167980d25ca896cd8084f4c5f228947e346ffa4a7fee61aa9f6a19847abfba448a3b0026f751178d340dead445486f7342a7149fc3f739d41d9a8f58e1c1f2c39372a966ab95ff787739d2e1736e06e8f6f0fe9b737fa65db7e6e9560704d918e6ae2bf83a06dc303c6a1427d07705a6426d66d4b6ba6cae23d3b5a34"], 0x2bc}, 0x1, 0x0, 0x0, 0x4}, 0x801) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r9, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x1, &(0x7f00000009c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 2m37.050264113s ago: executing program 4 (id=3169): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) 2m36.87051275s ago: executing program 4 (id=3174): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x9) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 2m21.806109748s ago: executing program 33 (id=3174): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x9) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 1m19.998376185s ago: executing program 0 (id=4286): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m19.675886768s ago: executing program 0 (id=4293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000ad0000000000000000850000002700000085000000050000009500"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m19.641944095s ago: executing program 0 (id=4294): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x0) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) sendto$inet6(r9, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000340)="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", 0x180, 0x40800, 0x0, 0x0) recvfrom(r9, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0) syz_open_procfs$namespace(r8, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRESOCT=r4], 0x38}}, 0x10) 1m19.480448805s ago: executing program 0 (id=4296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x405) close(r0) r3 = accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) (async) listen(r0, 0x405) (async) close(r0) (async) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) (async) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) 1m19.280583316s ago: executing program 0 (id=4302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "c0"}, 0x9) r1 = socket(0x26, 0x800, 0x0) r2 = gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) 1m19.106515802s ago: executing program 0 (id=4304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) 1m4.039458856s ago: executing program 34 (id=4304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) 6.627430982s ago: executing program 6 (id=5134): sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803000000a8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0xfffffff8, 0x46, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x48, 0x80, 0x7fff, 0xfffffffd]}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='dummy0\x00') sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.432439002s ago: executing program 6 (id=5136): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012807c2101007866726d000000000c0002880800020005000000da274c8e54d0ac45893a5356d0b3aacdc57268c0798616911a"], 0x3c}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = socket$isdn(0x22, 0x2, 0x23) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@local, 0x77, r6}) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@bridge_getneigh={0x30, 0x1e, 0x4, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r6, 0x180, 0x800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r2, &(0x7f00000008c0)}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x4, 0x10}, 0xc) 6.220592654s ago: executing program 6 (id=5141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x20) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x7, &(0x7f0000000000), 0xa0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000422001a4a1137919040c27b00000000007a", @ANYRES32=0x0, @ANYRESOCT=r0], 0x4c}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) 6.004368258s ago: executing program 6 (id=5146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4000000090a010400000000000000000a0000040900010073797a310000000008000540000000020936020073797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000880)=""/4116, 0x1014}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}], 0x2, 0x40002000, 0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001a80)={@remote, 0x0}, &(0x7f00000003c0)=0x67) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000018c0)={r0, 0x4, 0x8, 0xfff}) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@bloom_filter={0x1e, 0x5, 0x1, 0x8000, 0x600, 0xffffffffffffffff, 0x0, '\x00', r3, r4, 0x4, 0x0, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r8, r10, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) r11 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r11, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x80, 0x0}, 0x40000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x4, 0x0, 0x0, 0x10, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001980)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001a40)={'syztnl1\x00', &(0x7f00000019c0)={'syztnl0\x00', r13, 0x10, 0x7800, 0x2, 0x17f9, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0x23, 0x47, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) 5.560649794s ago: executing program 6 (id=5152): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x750e}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.043928032s ago: executing program 7 (id=5183): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000400000004000000070000000000000033a16c3a730291aae2df281f3004aeec508124875687562ceac6476d27fe218d2879b42273f2004316d35d4520c99b3efefbce707fe4e27046db2600000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x9) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000280)) write$ppp(r1, &(0x7f0000000540)='|Z', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf256a00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000842110000010000ee9eae6762e5914160276750112e5b106c74d1c034"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0xffffff81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, {0xa, 0x4e21, 0x2f87, @remote, 0x8}, 0xffffffffffffffff, {[0x7fff, 0x389, 0x6, 0x8, 0xfff, 0x5, 0xe3, 0x310]}}, 0x5c) ioctl$PPPOEIOCSFWD(r0, 0x40047459, 0x0) 1.628545636s ago: executing program 2 (id=5187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000403a0020010000000000000000000000000001ff020000000000000000000000000001010390787c00000060e80080000732ffff020000000000000000000000000001ff020000000000000000000000000001be0000000000000079f354a4d44f873e"], 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xd, 0x1}, 0x4c000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r6, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x7f, 0xf2d}, 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = socket(0xa, 0x1, 0x0) close(r7) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000010c0)={0x0, 0x1de9, 0x70}, 0xc) getsockopt$inet6_tcp_buf(r4, 0x6, 0x0, &(0x7f0000000080)=""/55, &(0x7f0000000140)=0x37) connect$l2tp6(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002f192000000e900000500000000060015000200000014001680100008800c0003800500010001000000"], 0x38}}, 0x4) 1.596064373s ago: executing program 5 (id=5189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'v'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20014040}, 0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x37c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1471}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x65f83c15}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4081}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x664}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0x108, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x88000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb83c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbd2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa4ff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x58b8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3c9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb08}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x14044883}, 0x20000004) syz_genetlink_get_family_id$team(&(0x7f0000000600), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x70040300}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000840}, 0x171b823bccd8bf09) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000740)={{r4}, "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"}) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000001740)={0x0, 0x0, "4fe679dedd474b86295812f936d8a21a"}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001780)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2a, &(0x7f00000017c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ba00}}, @ldst={0x1, 0x0, 0x0, 0x9, 0x3, 0x1, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001940)='GPL\x00', 0x8, 0xe0, &(0x7f0000001980)=""/224, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x1, 0xa, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001b00)=[0x1], &(0x7f0000001b40)=[{0x0, 0x4, 0xe, 0x9}, {0x2, 0x3, 0x9, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r5, 0x0, 0x39, 0x92, &(0x7f0000001c40)="c05341ee67bfadbd1b78af59ca143a7fcb62a93b6be2104f8106a08c2586d57876dbc6437c5752c3e6571b15bea15692412da74b8f1b9247c4", &(0x7f0000001c80)=""/146, 0x40, 0x0, 0x8, 0x4f, &(0x7f0000001d40)="68e7c5a6350f5dda", &(0x7f0000001d80)="1ed6a4f5f377ddff110f5e6a8240c089c580ad15e0615633f4ee7a6fb3105ed28bde75ae54f3fb15adf86c2624b05127245840b24cbd3576b92e277d0886e4d65590bdaef6b28bae0949135a6d4ab8"}, 0x50) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000001e80)) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f00)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001fc0)={'ip6gre0\x00', &(0x7f0000001f40)={'syztnl0\x00', 0x0, 0x2f, 0xe, 0x1, 0x5, 0x16, @remote, @mcast1, 0xc0, 0x7, 0x6, 0x8}}) connect$packet(r7, &(0x7f0000002000)={0x11, 0x4, r8, 0x1, 0x9, 0x6, @multicast}, 0x14) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000024c0)=@nat={'nat\x00', 0x19, 0x3, 0x412, [0x200000002080, 0x0, 0x0, 0x2000000020b0, 0x20000000229c], 0x0, &(0x7f0000002040), &(0x7f0000002080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x40, 0xa00, 'ip6gretap0\x00', 'pimreg\x00', 'batadv_slave_1\x00', 'team_slave_0\x00', @random="d03b6d8d6b34", [0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 0xfffffffffffffffd}}}}, {0x11, 0x43, 0x88e5, 'batadv_slave_0\x00', 'geneve0\x00', 'xfrm0\x00', 'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0xff], 0xe6, 0xe6, 0x116, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1}, {0xfffffffffffffffd}], 0x2, 0x1}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@multicast, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x0, 0x0, 0x88f5, 'veth0_to_batadv\x00', 'bond_slave_0\x00', 'veth0_to_batadv\x00', 'macvtap0\x00', @random="65bcb8454de8", [], @broadcast, [0xff, 0xba8d99558db719bb, 0xff, 0xff, 0xff, 0xff], 0x10e, 0x146, 0x196, [@arp={{'arp\x00', 0x0, 0x38}, {{0x110, 0x88a2, 0x9, @local, 0xff, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x88}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x10}, {0x4}]}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x1}}}}}]}]}, 0x48a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000025c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002540), &(0x7f0000002580)=r5}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002600)={0x0, 0x1, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000037c0)={0x6, 0xb, &(0x7f0000002640)=@raw=[@generic={0x0, 0x4, 0x7, 0x8, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x8, 0x2, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0x5, 0x1, 0x0, r11}], &(0x7f00000026c0)='GPL\x00', 0x4000000, 0x1000, &(0x7f0000002700)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003700)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003780), 0x0, 0x10, 0x401}, 0x94) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000003880)={'pimreg0\x00', 0x9}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000038c0)={0xe1e, {{0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}}, {{0xa, 0x4e21, 0x2, @empty, 0x80000000}}}, 0x108) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a40), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r13, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x1c, r14, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000810) 1.584896819s ago: executing program 7 (id=5190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xffffffffffffff75, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x0, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0x0, 0x7, {0x1, 0x1}}}}]}]}, 0x98}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250800010000000000080015000000000008004f000000000008004b00130000000800030021"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3300000010000304fdffffff000000000000000028b4bac60abe53821ba5b9eb9a6670b79ad22e219eb92f1b3fcda7811c516a5cada8eb93841ee097540cb821c7a52d7a6da7c9175b245a62becc2db8438008be14f4e0cc67303280ce4d680172d0a89470f55a3a4288b022b12f4de5b80d638e30c5aae40b708e67807cdcabd6116f6ec8120713f91a94ee2da9a8d4a3173cea98163fab3fe722fb1c24aed8b456f276d84610ec2c38d453b208eda6537280c74b6e394c9de29837f0ac5a5321398625a039", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300800200000800070009000000"], 0x44}}, 0x0) 1.524360313s ago: executing program 1 (id=5191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r2 = accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@local, @empty, 0x0}, &(0x7f0000000300)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0xc, 0x4e23, 0x9, 0xa, 0x80, 0x20, 0x2f, r3, r4}, {0x3, 0x800, 0x2, 0x700000000000000, 0xc, 0xffff, 0x0, 0x2}, {0x0, 0x5ed930d2, 0x0, 0x2}, 0x8, 0x6e6bbf, 0x2, 0x0, 0x3, 0x3}, {{@in6=@private1, 0x4d6, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x5, 0x1, 0x6, 0x9880, 0x10001, 0x200}}, 0xe8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) (async) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c, 0x0) (async) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@local, @empty}, &(0x7f0000000300)=0xc) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0xc, 0x4e23, 0x9, 0xa, 0x80, 0x20, 0x2f, r3, r4}, {0x3, 0x800, 0x2, 0x700000000000000, 0xc, 0xffff, 0x0, 0x2}, {0x0, 0x5ed930d2, 0x0, 0x2}, 0x8, 0x6e6bbf, 0x2, 0x0, 0x3, 0x3}, {{@in6=@private1, 0x4d6, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x5, 0x1, 0x6, 0x9880, 0x10001, 0x200}}, 0xe8) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) 1.467680934s ago: executing program 7 (id=5192): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x5, 0x49, 0x9, 0x2}, {0xfffa, 0xc, 0xd, 0x6}, {0x8, 0xe, 0x6, 0x1}, {0xc, 0x5, 0x4, 0x7}]}, 0x10) 1.409972021s ago: executing program 1 (id=5193): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f00000030c0)=[{r1, 0x1000}], 0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000005000125000000000000000085000000cd96c700950000"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB='\x00'/21], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB='\x00'/21], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1], 0x28}}, 0x4800) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1], 0x28}}, 0x4800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r3}, 0x38) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0xf, 0x0}}, {0x6}, 0x14, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'dummy0\x00'}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r7, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r10, 0x303, 0x70bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) unshare(0x20000400) (async) unshare(0x20000400) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0xd) (async) bind$tipc(r11, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0xd) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB="5e017b"], 0x4) 1.156653098s ago: executing program 5 (id=5194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-\xb6%{\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20008000) 1.13576539s ago: executing program 7 (id=5195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000000c0)="41383886952f44452e3a6a04170e1a2f4f128ee6c61f5dd04eff6f3a1509ae06bf13e3f49e6a25d8c41b6c8d8423ec31018f0d8cd2e54a1b77ed88bcb2da740da3a254e2e08558ccc512cd264f9f934c479150d7eb17baf9349ae135c2b5c480ee3bfb3760801a638dcb6a9db40617fb212fcea7e90aff14b1bc375ee9af266f91", 0x81}, {&(0x7f0000000180)="f0be856ced641011eb2e01003b712ad42d1f55168fb84a2825", 0x19}, {&(0x7f00000001c0)="82841550c04b1fdbb279639f4a62893ec0388e1cc1c015374cd37e49469dd0c84e129e489a302edbdb41a802d5b7d8028586d00ee535b92a483650441fc57a5e32e9c12572f47b09115a9ce742eb37bb40a9dcc196a667e30a93a0233504932c3eace82019d92e3bb09eec3a4582207a16f08e2fd144750d417cd8d5bb77a72a231bd781f8bda4ab7589cb757d5650", 0x8f}, {&(0x7f0000000300)="e41d5229bb4f76c20c78a99662955ed5d57e55d25639042bad2c2f4b10ffe4786951a1ab4eddd2a5f7a33be429", 0x2d}, {&(0x7f0000000340)="2e8b919cab5e2a0325c2477d0c56e050421520c72b2e1f42b3ba43e76a958666c9bd275da2b49f829af4a71ccf84c74606328270ebf12a4517e54d2cccf5c0982ea641e8dde3f451e8c8586f3e2417eca27fb00cdcf57f25478ecf6df6cc345acd5bd175", 0x64}, {&(0x7f00000003c0)="b4f700ea7e36471cedb84b98fe885f3592cf25ac2ba18c7ddeea2c85c0dea81b765d4665c4ce5774bc13be75104c7b0b8f787e83b44ea98248f0f00eb5e91a5cc0021d347cd72b3aa9a18962547ab9330fd8bd054f8def00aaa6f2e77b45314556055e02660b", 0x66}, {&(0x7f0000000580)="9df38eddc459bc1b3aed1ee3042b8161f5bc3f121721428df85dbebd883b1735872f3bb9e492036585181178cd51381cfffe81e5f07c183caa0eb2561379e0814af4aaee6cfa5d993d3acbf683cc69c345e07f469fef4a8bcf38de30186b2493f39ca2717919a1273e4cce1b2a73271c29e6b7db3db004f76c6685e1781386116f1abdfbe1117dd686aa7d1cef2c60122403ff", 0x93}, {&(0x7f0000001640)="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", 0x1000}], 0x8, &(0x7f00000006c0)=[@rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x67, 0xa, 0x2, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @mcast2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x1c8, 0x29, 0x37, {0x33, 0x35, '\x00', [@generic={0x0, 0x92, "08a37062880b81fbb09b3a9c4aa2d8236ed2485c30db1eaf2781bf7a83ab10baf31666c64425944bd0a6966857997fe2dbd663b77952cbc4afa3c1a2c22ba7050c4b391286bebb445b75ba468929a1a38ef00fdd9a569e8813aae85b6cf7e95c6420e686ef7f9446df56340999bfe93cc75c4870d330e14b610bc2354e4b0e4276648b0934e8befaa3f6a0be7260732f60d2"}, @generic={0x80, 0x4a, "aa882b64f0c3024fa9a07869ac566fc016c5484656bf6ffb5be695f1e238c7cbb1dab297ac23008fff4f03b468f9fcaa6bcf785b9fdb40e6012ffd4309fb14a84e381f376b85878d4c82"}, @generic={0x78, 0xcd, "faf6526b3127a0ee39dbfbbc7022a1e93885ec2a22c461469a897551e3bc301fd3a36597828738ebac6b53216dfe7e7e2f474a320b1b51709c34caf77873e59a589236efb5e04e9164495084f0b44e986c20fe30227e2ac2fded9d8c139f87318620f4ac2927c9cc0914967bbaccede592c494ea5d867a55c6fb227d5bd2c0b010e9d330b89d2af8c4bdd985541b1b1a5a629b8c4c09330ad88a3ed0e90b4b440112af8a9d09c64377af563eeee45640fc4e2f2f5898aad06bdee01f3a98456d034e739503c4b9f50e67fd7f56"}]}}}], 0x2c0}}], 0x1, 0x20004000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) r7 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x2f90, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) recvmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.134820638s ago: executing program 1 (id=5196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x18, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0x4, 0x9}]}, 0x18}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfffff536, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r7, 0x11a, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x26, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x943}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x5, 0x2, 0x2, 0xfffffffffffffff8, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d06}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.072888418s ago: executing program 5 (id=5197): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) 907.567982ms ago: executing program 5 (id=5198): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="201000000d14731425bd7000fbdbdf2508003e000300000008003e0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x2404c010}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x7d, 0xa9, @random="e4102c1e69f76b216a886382f441e54b0431a685f8fb37854ba2502aa86251384746dc96cb97fbf014ab3f0e549252e1818a7f1993e8e7c904a6e2cf93031cd3660c2d17d758414a6b92e14fdcc6bf80a488e0f3241f58d107710c8ba83c83260830e563d993b686714e903ff5c543f9dc37998707482566c7"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x880) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) r15 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r15, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x12c, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 906.870327ms ago: executing program 1 (id=5199): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm, @mss={0x2, 0x6}, @sack_perm, @window={0x3, 0x8, 0x6}, @mss, @window={0x3, 0x1, 0x40}], 0x7) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$phonet(0x23, 0x2, 0x1) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) listen(r4, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}}, 0x0) 717.020944ms ago: executing program 1 (id=5200): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1028, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "167ed0351f2293abcc89877e9ce2fb84a9c649f5c1681cd208236bd5bcd573091aefd634859e0535d7509a8e4c95116af137a75c5dcf11f943d50f137e3343c89d380189264174893a5f3fcd361975ff71f9ce284e0d4a6dfb4d455751f6bb2d8d15841f1c37c7ab2cf378a5928141aadaa2a1c79fe1658d0c6f6f2fee05ed17317cfd892e939b61f086c998b5b8a0df6630b78170e97083f9fc62cf789afb33d4222f3377a5fe76f17302fc2e9919bf72c4cbddbf0a5cce3d0e3576e67c4be2773a1c53d924146a9a7a88b7db209573965b47eeddf4b4043dcb193dd2aec49f56ae5228e3674705fd19cb7ef78606220b65d928812a1c27b8f8b0d087a28695ab667a8950b538a8424b00cc1812b345f0bf96f2889ff42c47526221ae26e1ddb523cd82be6f89baeba1289dc2c5db5affddc7e3f04054869425f3a09c71b361c05d94bcc1df113eccd9db413435010ab1baa1127bd8b632bac00c0ee05c9333eec1cfb20fa0a98f99b3e3ddd8b9b19a1cec1991ce3b655654edf7bd968b490553da1ab957db37d1ac252dce32de728d7b09dd6a3c444ea9fd0ec609a4dd5c339a6105549e5db98f6c42f476939f21c30898164e11843cc01bcf19e926c20d905dbcfb750dd6fb78a66ed8f81b1cb238535740a57482bc956b99c0045444cefda38c2f35014344eb9ebf2e7cd70d5fabc06f72ec8264022cc48dfa516ef54e7355fd974fb90cf468ad0a1dac4ef8b1140f5bffa9ec77ed2f0bc3395ff78129ab3455c1dcbc889e68d65fcdabd3dd851e99f4978b72342feca2a5da5d6f06b3c260fdbd9c31253068254baaf2a620b71528727cd7c1f62820024b33da0280ff188981f0c1340f8382bb423fa8f1dbe13dfa38b7901b2b73b2b305899fb24cc3cc8af3219f30d4713ca7ee7b4352a7f63b3dfa37788969d47ba7bb39ac0276a60fc57d9203acb0cd89093cdbfd2219dcce2d68895361e9cab4dcb199456d4ecdaed88db83285d93068b49475ab6b676de833fe839b57736307e7159dc7fe0833e3b551e06e380fe4ad1c353175bcf423352d5b0e9f1e72c63de8008fa616d24033cdefa3e99280dbf4a0c78a29ea88b4c13821db575a16db3177e281042899db284f2baed9cd01e188aa937a14808df4bf067b449ed0708ddc33ef9d9f59987cdccdec1d7af2b93a2c066e24d1e47528be2739263ec64e4ce961d51c31952db6627ca3fbcd8df99e6a6c02174cedb5c6efd71f737861283bcbd51e63edcfd2b99660c8ba7500a5e65e53dca24b648da7c3a952d611df855b06629a8f18b50609b798d2b7f8589aa7a15482fd6de1048158c9678f0edc62e28849154bbb59b64dcb8ffd1b99f30a796467bf8e72ff1ee9e99bf21e866eea308555ac510c37b56dc1c34db8db768f44102d15e4d0a57096afed92bc1db287b9e2bbe33ed6521828be9733afadfdd8013280dc772246389649cce43db56ece41f7c3b9b1b0ecf818117d3397e82d568e81a050da9c20dbd22f7f8fd0235c89964d226a97ce594f8a984c36b145e1145c2b9b626c74acb8433c4c40d99fdff5e6ffba01c092c633e97ebcbf89e04bbab6f9f47f816a2a4641c5be7b4ce8447b29a92ea5620fce1661fa4499fc2f010090122aa2c936cb55f0538bf8532caa2f9289042d3a1152184f07c166ee083610ee80520c8d35386c1b312915a978ee80bbaaec885dffede01c0ad9b929c31e60e59eca89be3c973bf34703478e37c567bd2c69f15e41bfc2ea73ddbc914f5be027d774d1efa4b42df0aabbfac641444a0aeccc66c1e7474c7f5c2d809668cd8010c21f96e061ef2fe7562720861096c88cdde41a22e47013e76ed68517c38f9f37f58c39651c185ae14b0f01cfee5c915d76963e17d9a554be888060fd09334037b38253e053c37d84b7f45ad6d0b7a852452c2a088347edec112cf0296b1fbae987c6442bab1a7af5219f9717e4f627ec2edb7584aa04066f91f06d551ae92604d33da8bae39cc3d668768838cca08edcc402c74223ce4731be40a87245e6e45c98f728ff1f867bd67741e7a5b45683fa4f566f3e2262eecf98d425e237718deb27ad03d54bb4b4d0f32a4d318bec592bbabc2d778d0f51d1540fbdbc8fdcabc510090b3cc3cf668694c5b3cd71d4b6e78a7103e9a5aabde5897c72f21edceceb5f6ec9d3a2ebc8a449c4bc8f73cbb00859d86b523a173cfa775342b97a1b0f2cf49c728c21025afd8260f50c85aebf248da1de469dd1851ba499c7dc457da0a28a8c7b0ebd493c04ac1a3d7db090ed23f296c02a326ceb3b1beaa307d4a8b8dbd321a44c4ebbdd36b9f569a6983a61b2ad4077f517a3338c73553780443a85a88d7eb612a585d635ee20c190b2a38073263ed4771332265b229e28ce1ae1fdba78266f3cefdc12847efe1948523acde31699b7bbc55270f99337cbc8f16f0c7deecfd8d96969a4b38d14210d27b29a3619cd1012a36216ae148d267d328b7d6c565c866442e200a45d4c62e967be6e34ca3e441c8fdb1f6e47fbb4bc0481c3373997ff382112c6ef0e9e26eae19e9797d8e8ccc8c18308d37e03ee80add3b04ed2e397a8e9750a84fdbee17a7fe1d93c96e5fbb44ce4edceda3ef1446766d697995e9182facbc230d69f60092190888d6ef14d625509c999312db1a54a30a1af4289762119625441623c71b49e9c3596bfed4388bd61a24c0d3e0d2d353871573ee7a6940d71857f9b742425ddd697fb3fcb9590b8f9445eb64e1dcbc4f3da34f5791e283b90b7de507d75f886c23442e7a22ff284dcc924b06f2885680d2454aa5bc462d6404892992b4eafbf185c3a59645383dd70d835a4fa693bf74db66e73c287f3af66387e259dc5f31ec168426f1d9fa9338a14bee405bea8d04b1b072cf33d63a30ab296b02fa16912887c138ea8d5229b10e15ec433805e5c6e8abf44dcbd177d7553fcfdcb34796d06fe6a0b005a24b73a465e93ba7b70562aa7e945a122bf83b36a81948e0c63191d4d60099c47372db8b04bad49917ee50e7ce7fc37c4f04d1eae135deebc2471fb38fb88aedbb138565ccb95a4f6ecd0adc92932327a658b175f25ad024a92dbf55dfef81c2d4365928c291963516aa27d792287bad952daf5fef179f4cccd5cb116cdcab6a3519526cbd2c8f48549a13e9e07648bef7eae6213821a1a15c0bfc9bfd1952150dc0609ccbbe7d0ac93e944c1e9b91077f809b4a6c756668b1bdf78c1ddac483a9a26d5c25b1d4d6cdfd51b7ce069de5a8e86450e93bcfe4e11e39d2f31a0e4ae03b6130446cd7bf792d81f066ae266823f8b40c46f72e641a711f6a4a38c54ee60799324688924496705ea7354c792649d07b7dfa4aaf5a4e22fc55f72288abeb19aa222b17d484a10e4dd5586f708d56949f3a7bee9d334731d7da554d0c800857355f12c164b6e69f7214a0bde1f56c42643da5a8a771e75cea9e95f0f2ee6c64979e639639f47b1f8b18df65c8a9f270e28c363c8796c72fa2a0be714d51c2f5ca38e2f1e2a9917fefd61595641d8bdb3e9682e0f39a823e6d6d45df4a714ace051af21c127474bf93020feb83bb65d4d8b89672f0cf68969814000b44ea030f24e135c1674324f0ebaacb757cb70752bddb312d89246f2a2095e638398d1df6b4f69be02e484b61e07f1da8d65478443fea69e711c2bb6ab35595fcf35ea60af6476686adc2138f5c865186613489ec7b21249054e1767296d2ce272663b97271c75c4aa699e752e4bcd8b6566ee62bc4d39d2e01eb15c9960f0e32fcd2a71792b526cf16a3290e1a73ce9308de07efbc751eff84bc5db6ff68b560b39440dff6da16e1506e775a075932f0131ed6a7ab3fa7ac7700261cf45129692a4c1cce0be7370ad5af851807612071fd8c6694e0ab6eb1dda4e0a1236f8e90731f2101410b5fdd2052679d0b00007906e0da0c43f765c230bb92340562f191be57f1cf0dab5a2cb80769907e3a4c8bb8ea17a25f03f8c50e2418e012587776dfb1c059cf7af7c065ddce7314010c2ef72177f427fd283d817a5437fddd887fbdd414d8e10b98d6f1daf14fb6d1e1270472ef314552bcccff5f701b0b6a51160a0ae6e73890d2f97722eec83a54d96c0cdf5c2dd35af32c2f87a81125e7d6e6f1369a476c193074ed7b08a7b9fcbd249b10db6b13d9ac55232124387864bc93e1fee5a121f2fdb1341b3cac6e34a52e86fd64bc4de114c63bae8173bffe7bbb9c0e3880c9c6477c21181e63e24cc099f680e0ac0887d5c44e1cd15ce25cae3cf205e3abf4036cd378c43462c5d42d6095df61954ef6a3f74f17af422ba0f103676355619aa78dafb6bbdb2d4ce4c8ca3ba0d8e44b33e7e1c37f370c412cab89ed7befd1eb3205eb7eaf9408c627edeb845b8d0ef0425beb6af81c2be069e056a041ff7d1f1a093aa20629e74a0dc91c2b23b8fd91778e99965a719963b6dd3611077204128b24140014506bb5c6dfcdcd116da4b279ce6c1dd64d0f6e108d02e92ad601246f4b21647ae988804380ad3b697ada31c5f0523798e5cbfd5fe9b083312bd1a28a605a1746b070bed9fb1dd87bdb50c246935292ba9dc37f3c5bdb92407fd683aa2bbb6022f1763088a4c21a822a0d6466f4496746e1a472e07fcd7c9d9883513f46fc77672afbd0b0ffb70b09e5901112f2f18fc68b33cb8b34d104d6af586f55d80455c671b69b6e9114124e1af091425404afdcd8df8e664df316487ed4db724ebd9148973e6d719ea9064410d07d59f3e3806f50c76844c850fab56cde0a502f8c4dc295173bf0d2f7477a4e436474dc49f6443a3f4a3b9f77642ce2b698fba436a10feaefc3a042862038b9d1081b503238290462b43d4dbf7f9d7b2d2fba3a3439ec5951107a4f8434511efdfe4cacdc9bc8b2d76618b34e7150425bd5da9cf23d28e89c9dde86fe33627261245f476fa99751bbeb0feff528bf5313f1a5300a758172d818589868aaee6e433186c65b331834276e076fa608b4c98616a4dbd1c47fee9b9130151ade47f8bc6d0d847a1d9b9fa3508d44e1a5f0ab07931ec4371cbc62e96870b9bbde6992fd49742c13a2e74a31a5171a3d125aded4c6d8ce751cbe40bb2c5f004473f6f4776ca1468cda72a5899b1bae90aef9f014d3ea2d6ca7c4c2269b95b55e206c5aabc4be477ea3fd04c0b82cf44a6a9cdbe8faf22482f5d17187141305cb284d112dfa80ed67b5d80c3c0c6f2a2002000a95031df6cee1dc21ca9a9228d20b0c9c7b7f7ba5a52c561839bb00c0efc623de2e07f7875ed2c5bffce52f24ee623a4de3d35464334caeb24c537b14a7f5a56684fc587357840a031782bacdbd168664159db0015dd0b290d0f8a56b718370ff82b27ca83ac62ca0c46afea4ab1f838f0b4c16f7037aaa3bdbfb8af0985bfa19ab36dd57abb0de0c4e7d4bab1d5d81517d5e266166e1aa7fe215c44c4c0c5e4016a7653f9c36946d7aca49e934bf3c68333bbb2225cbfe62c3ab9c1c8cd21c7a55b6a39dbde3f56e763a8ac2b99a848a1127d6ebad3322f89da1d076ba24dfb4ba019cb2ad4525a3a02f59311688759d6d3b4ef6d46fcea0fffd62061c139711ec90493e7eb04d1679adab08307412d087ff06f1872e42939a0f52f3138777daa6cbaf07e367c16d442a9df8086a147732a2e4318d930cf50a387496991b54f0e6df778b1543378e75eca60134d0bf867ea04c9abb80887cc754c07a4d5a81b383dfd7e44b4a2a03a15b38299fd2a27eeddf5f493403790406dd2e4d260b51ef54d5e909243"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1028}, 0x1, 0x0, 0x0, 0x24008010}, 0x41146) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r6, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r6, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000440), 0x10) listen(r11, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r12, 0x1) connect$vsock_stream(r12, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x2d, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x4040000) 694.545706ms ago: executing program 2 (id=5201): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000140)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0xb1, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) 504.722835ms ago: executing program 2 (id=5202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00200010000304000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128009000100766c616e00000000080002800400038014000300766c616e3000"/52], 0x4c}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) 434.356578ms ago: executing program 5 (id=5203): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000240001002abd7000fedbdf2544000000bd000e80ff"], 0xd4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r1}, 0x10) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="190000002300000003fa0703003f000000e3ffffff0000810011d618d2874bc5939c64ffa839c734f84cf90302e4246844549b547c206508909184f4b28ee9c973cb66b3753a605ec44567c20a4e62e8", @ANYRES32, @ANYBLOB='7\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000100), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 416.870143ms ago: executing program 2 (id=5204): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x801076469c94fa07}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}}, 0x48080) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e000000208000100", @ANYRES8=r6], 0x34}}, 0x48044) (async) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x31c, 0x13, 0x400, 0x70bd26, 0x25dfdbfe, {0x25, 0x8, 0x4, 0x7, {0x4e24, 0x4e23, [0x2, 0x81, 0x8, 0x5], [0x3, 0x5, 0x45ff, 0x1], r5, [0x1]}, 0x1, 0xd2ef}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "6e744535091b71b00789d2313ed2b6ee1e9579459fa245c1784781dca487508372d12a7da110872ebfcefc5f14b21ef81175fba63b0c6fd2877ae668cd7f6376077296d94c04e433f305ea7f997abcc5ee8b67da008dd9c60179b185b157179842ae9da9d37a1903069fcedf20c38d5eff012bd9be3d30e1455a65d2115a6bddbccfba295ec6187a24891041bcd20b2a97f2"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "719d428339d7bd8bf8bc2bc10d75512d8e1c808123bfa3f412c630a779e23781412a97f2dd217d99639d3625f9f5bbd2bd9b217e9c4e04b55506a29ee4332bc15876d981e98e4332260b66c701b39002b706f7ec2867830b69dba82a91c14233cc3d555a0e2c208c3e5adcb3505c152ec25fb1a7177c84e07a25c8b9f666252ca5ac3b52abe11ed18256bb7f40a60339736d3e087007ade764e7603dee8d4e30b03c19aa4c7a9597f905e8f294f82a10d522e13a0f5d46a05baa61c9d09e1a8d2c0c6a73eac5958ce6ced40ed9fbc5"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "49d78dda8b7e4d22cf9b5b8faaa392feea8003b7bade11b2fcc70967c96902c58fa042f0ca8add4e8c672457ceeb46fb603a9230a3eb81a7e0c4a3c7a61dd1731111fffe2c251d051756ec0b536046b8de838ebbc59798f1876e9ff421bcb69799aea9f7ca15c9f2d76a8584f7a48af110f1ac17876b8446d1119b025a28ebfc8c1ac3ebadf367682d5ca19ffab978cbe01d3c3631b56a76e57153bf8c1fbe92b5258798e092c5d29df041ca59d763fc2c5ca82c5da6a2547c4f8b8689395c245a6d768129cd"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "e7a501c7b82ba6cbb61340c90ab5718943aad4b1e2ff39beb78f2d275b9b4684b7e95990e2efb415a1e06be5414e2117ff3ea945a1b4b3215f1473b11fbc3d95d5"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "5f0508205daafd5b2a8c09b8451ce39279b260191e22cf4e834d3136812806a7b487a3d6e133c05b29424d85c0b825291d977dec0e81a6c61d792ccf288ba953ad9bd6f9981e1b5c8cda"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r16, 0x0, 0x0}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r11}]}}}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r11, 0x89f7, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={@private=0xa010100, 0x1, 0x0, 0xa0, 0x0, [{@dev}, {@multicast1}, {@initdev}, {@remote}, {@multicast2}, {@local}, {@initdev}, {@initdev}, {@broadcast}, {@loopback}]}}) 267.881538ms ago: executing program 1 (id=5205): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"7bb31d48a8e45c079b2631f760c1228d", 0x0, 0x0, {0x6, 0x3}, {0x2, 0x10000}, 0x7fff, [0x9, 0x3e01999b, 0xb2dc, 0x5, 0x1, 0x1, 0x80000000, 0xe, 0x2, 0x6, 0xb, 0x10001, 0x2, 0x9, 0x9, 0x2]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000780)={"4a31acacd9f0e67286c5a5f97df9a182", r2, r3, {0x10000}, {0x2, 0x9}, 0x63, [0xfffffffffffffffa, 0x7, 0x3, 0x80000000000, 0x80000000, 0x3, 0x9, 0xa, 0x4, 0x16800000000, 0xb, 0x0, 0x800, 0x3, 0x0, 0x4]}) r4 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) recvmmsg$unix(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xfffffed6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x90) 267.123228ms ago: executing program 2 (id=5206): socket$inet6(0xa, 0x2, 0x3a) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000c0ed68700000000000000000002008000000000000000000008000200ac1e0001"], 0x24}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r2, 0x0, 0xfe, 0x97, &(0x7f0000000800)="13a7f317602d26d5cb42904df7653587b954079e4fe21fcf3350dfeed6324ed31a977690e120b5f210deabe7cbf4c43be23aba4ef4725507066f301dc904344bacda04f4747eb007a516b818b9f1251e3ed37e38522c00e7cf648bddbddf4e53d6ff5ed9bdd9d36e884a493e504514d12480dd5ceaff43ec763e8241a31b491305095c39f91bd393b0025446d28159a018e247efaba864a919af64183a8d206eb51ed7701dd878502b8def4c6d2e63ae9d7d2b518dde1100202ec846702ba6085b63f83a1dab1a435e47929454db7ccf5f66eea2c078fedcdd949548af5005be699b96f1a506039f28640e54773babe048af239c9c833b578b477050a9e9", &(0x7f0000000900)=""/151, 0x1, 0x0, 0xfe, 0x7a, &(0x7f00000009c0)="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", &(0x7f0000000ac0)="d9687a0a77fe3073447ecc86ab895587300ee45809b8108fe2b71ca4b3e69ff1f1787c15e48c1b89a268bdb748831164328e656eb5596065424cda24dba9780adc8ca7236d5735ac18da9ecb1405c981c812c988ea1f9607ee9fd019fba9793463af8c07c47d4cb4150f691230b9f7863b811cc76d0a5d98f446", 0x0, 0x0, 0x4}, 0x50) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{0x6, 0x2, 0x9a, 0x5}, {0x4, 0x2, 0x7f, 0x3}, {0x8, 0x5, 0x6, 0x4}, {0x200, 0xfc, 0x77, 0x1}, {0x8001, 0xb0, 0x55, 0x6}, {0x4, 0x5, 0x1, 0x4}, {0x705d, 0x1, 0xdb, 0x7fff}]}) (async) getsockopt$sock_int(r7, 0x1, 0x22, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000100)=0x4f, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x200}, 0x10) (async) write(r13, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0x9, 0x4}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 266.591574ms ago: executing program 5 (id=5207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x4001) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x6c}}, 0x0) socket$inet6(0xa, 0x80000, 0x2) 206.106757ms ago: executing program 7 (id=5208): socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r1, 0x0, 0x21, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) 56.679775ms ago: executing program 7 (id=5209): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1412, 0x230, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0xfffffffffffffffe, 0x4000000) 8.424505ms ago: executing program 6 (id=5210): r0 = socket$inet6(0xa, 0x2, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}}, 0x2e) (async) write$tun(r1, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}}, 0x2e) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x7, 0x7}) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r4) socket$netlink(0x10, 0x3, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x49, &(0x7f0000000040)=r8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0xe, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000003d0000022dbd7000fddbdf25100000007f0b30698964d8639d9d95d78b0d097f01c81e7648f1750ff7adf089678b2671e960e5e67a16d1f45c9fdd1ead76bc0ae66ffea3d4de03cc23a460132c5a545ed9000000276795b0466400dbf67021ade00d6d34b46a038aa1a4e9ccc25bc58eca5a1626e0af4179919181e86b97c01ad6ff58e0e583dd9647415e3df13995d668456732248124bcc1700fb1104b0a7466bddf31afb306a04a799ec6fc2c79f726d49c66a93fdf48e69c05ae59b34278"], 0x58}, 0x1, 0x0, 0x0, 0x48830}, 0x20000000) 0s ago: executing program 2 (id=5211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000180800000000000100000000020000000000ff00000000000c001608000000"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): tipc: Node identity d6f5d8a690e, cluster identity 4711 [ 368.932069][T16927] tipc: Enabled bearer , priority 0 [ 368.962569][T16659] veth0_macvtap: entered promiscuous mode [ 369.016045][T16927] tipc: Disabling bearer [ 369.049921][T16659] veth1_macvtap: entered promiscuous mode [ 369.139416][T16659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.154990][T16946] __nla_validate_parse: 5 callbacks suppressed [ 369.155008][T16946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3116'. [ 369.167225][T16948] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20000 [ 369.197691][T16659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.242982][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.279554][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.298717][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.345722][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.409466][ T5862] Bluetooth: hci1: command tx timeout [ 369.462122][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.479615][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.546811][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.577005][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.736343][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3123'. [ 369.989152][T15763] IPVS: starting estimator thread 0... [ 370.087864][T16983] IPVS: using max 26 ests per chain, 62400 per kthread [ 370.117293][T16986] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.126728][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.158933][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3129'. [ 370.389410][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 370.407477][T16992] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 370.651127][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.661057][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.670137][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.679961][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.692297][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.943943][T17016] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3138'. [ 370.981124][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 371.161818][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 371.215596][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 371.404589][T17027] netdevsim netdevsim0: Direct firmware load for [ 371.404589][T17027] failed with error -2 [ 371.452914][T17027] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 371.452914][T17027] [ 371.816860][T17047] Unsupported ieee802154 address type: 0 [ 372.071009][T17069] netlink: 'syz.4.3158': attribute type 10 has an invalid length. [ 372.082480][T17069] tipc: Enabling of bearer rejected, failed to enable media [ 372.168669][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 372.202732][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3159'. [ 372.241634][T17073] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 372.253271][T17073] bond1 (unregistering): Released all slaves [ 372.439537][T17003] chnl_net:caif_netlink_parms(): no params data found [ 372.685168][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.695938][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.704078][T17003] bridge_slave_0: entered allmulticast mode [ 372.713659][T17003] bridge_slave_0: entered promiscuous mode [ 372.726141][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.740164][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.756514][T17003] bridge_slave_1: entered allmulticast mode [ 372.771474][T17003] bridge_slave_1: entered promiscuous mode [ 372.771491][ T5862] Bluetooth: hci4: command tx timeout [ 372.943307][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.023391][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.142688][T17132] gre1: entered promiscuous mode [ 373.151968][T17132] gre1: entered allmulticast mode [ 373.181821][T17003] team0: Port device team_slave_0 added [ 373.195032][T17003] team0: Port device team_slave_1 added [ 373.306779][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.317600][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.346475][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.375207][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.382358][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.409897][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.525056][T17003] hsr_slave_0: entered promiscuous mode [ 373.532308][T17003] hsr_slave_1: entered promiscuous mode [ 373.539514][T17003] debugfs: 'hsr0' already exists in 'hsr' [ 373.545414][T17003] Cannot create hsr debugfs directory [ 373.567640][T17150] netlink: 'syz.5.3182': attribute type 3 has an invalid length. [ 373.672269][T17156] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 373.696044][T17156] bond1: entered promiscuous mode [ 373.701528][T17156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.716514][T17158] tipc: Enabled bearer , priority 0 [ 373.742220][T17156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.751184][T17156] bond1: (slave bond2): making interface the new active one [ 373.758594][T17156] bond2: entered promiscuous mode [ 373.764306][T17156] bond1: (slave bond2): Enslaving as an active interface with an up link [ 373.788227][T17158] syzkaller0: entered promiscuous mode [ 373.793751][T17158] syzkaller0: entered allmulticast mode [ 373.840777][T17158] tipc: Resetting bearer [ 373.896729][T17157] tipc: Resetting bearer [ 373.917173][T17157] tipc: Disabling bearer [ 374.020991][T17003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.033281][T17003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 374.046427][T17003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.209597][T17003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.224516][T17003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 374.235168][T17003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.284950][T17184] netlink: ct family unspecified [ 374.302228][T17184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.351669][T17003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.387803][T17003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 374.409480][T17003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.555732][T17190] __nla_validate_parse: 73 callbacks suppressed [ 374.555754][T17190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3195'. [ 374.573308][T17190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3195'. [ 374.848400][ T5862] Bluetooth: hci4: command tx timeout [ 374.875714][T17003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.890095][T17003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.905475][T17003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.917558][T17003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.965648][T17203] netlink: 'syz.2.3199': attribute type 10 has an invalid length. [ 375.122844][T17003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.173096][T17003] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.218189][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.225401][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.251100][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.258406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.546690][T17235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.605448][T17239] ipip0: entered allmulticast mode [ 375.713727][T17003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.770653][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3206'. [ 375.780791][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3206'. [ 375.791580][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3206'. [ 375.813756][T17003] veth0_vlan: entered promiscuous mode [ 375.871398][T17003] veth1_vlan: entered promiscuous mode [ 375.934612][T17245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.974951][T17003] veth0_macvtap: entered promiscuous mode [ 375.999134][T17003] veth1_macvtap: entered promiscuous mode [ 376.040174][T17003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.071381][T17003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.089305][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.109897][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.143339][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.156113][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.249489][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.257338][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.314634][T14297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.323820][T14297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.350053][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3209'. [ 376.373631][T17254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3209'. [ 376.434877][T17254] gretap1: entered promiscuous mode [ 376.447529][T17254] gretap1: entered allmulticast mode [ 376.930110][ T5862] Bluetooth: hci4: command tx timeout [ 377.952814][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3227'. [ 378.283954][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 378.660602][T17329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.991365][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 379.023131][ T5862] Bluetooth: hci4: command tx timeout [ 379.222219][T17349] netlink: 'syz.5.3236': attribute type 5 has an invalid length. [ 379.230711][T17347] netlink: 'syz.5.3236': attribute type 5 has an invalid length. [ 379.409638][T17173] Set syz1 is full, maxelem 65536 reached [ 379.453462][T17357] syzkaller1: entered promiscuous mode [ 379.462867][T17357] syzkaller1: entered allmulticast mode [ 379.522261][T17358] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 379.639466][T17372] __nla_validate_parse: 2 callbacks suppressed [ 379.639485][T17372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3244'. [ 379.707844][T17375] Unsupported ieee802154 address type: 0 [ 379.749388][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 379.816107][T17379] tap0: tun_chr_ioctl cmd 1074025677 [ 379.823519][T17379] tap0: linktype set to 65534 [ 379.832320][T17379] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.855383][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3249'. [ 379.883730][T17385] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 379.945670][T17393] netlink: 'syz.2.3251': attribute type 10 has an invalid length. [ 379.988280][T17393] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 380.006831][T17393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.182345][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 380.226030][T17400] sctp: [Deprecated]: syz.1.3254 (pid 17400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.226030][T17400] Use struct sctp_sack_info instead [ 380.394150][T17422] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 380.477007][T17424] pim6reg: entered allmulticast mode [ 380.487298][T15763] IPVS: starting estimator thread 0... [ 380.578385][T17429] IPVS: using max 28 ests per chain, 67200 per kthread [ 380.649794][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3266'. [ 380.671693][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3266'. [ 380.924113][T17450] gtp0: entered promiscuous mode [ 380.938387][T17450] gtp0: entered allmulticast mode [ 380.945500][T17452] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3270'. [ 381.065028][T17461] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3273'. [ 381.080674][T17456] geneve2: entered promiscuous mode [ 381.087136][T17456] geneve2: entered allmulticast mode [ 381.097275][ T5862] Bluetooth: hci4: command tx timeout [ 381.102801][ T50] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 381.111991][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3274'. [ 381.152149][ T50] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 381.161240][ T50] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 381.185380][ T50] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 381.305151][T17475] block nbd2: Unsupported socket: should be TCP or UNIX. [ 381.438910][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3279'. [ 381.482180][T17488] pim6reg1: entered promiscuous mode [ 381.517992][T17488] pim6reg1: entered allmulticast mode [ 382.272418][T17530] tipc: Enabling of bearer rejected, failed to enable media [ 382.312077][T17530] syzkaller0: entered promiscuous mode [ 382.328190][T17530] syzkaller0: entered allmulticast mode [ 382.357005][T17544] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 382.433537][T17544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.532891][T17549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.548658][T17549] bond1: (slave vxcan4): The slave device specified does not support setting the MAC address [ 382.566319][T17549] bond1: (slave vxcan4): Error -95 calling set_mac_address [ 382.660353][T17560] netlink: 'syz.5.3304': attribute type 1 has an invalid length. [ 382.713916][T17560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.725827][T17560] netlink: 'syz.5.3304': attribute type 9 has an invalid length. [ 382.780752][T17567] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 383.022037][T17589] netlink: 'syz.0.3313': attribute type 15 has an invalid length. [ 383.173273][T17598] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 383.187267][T17598] netlink: 'syz.1.3315': attribute type 2 has an invalid length. [ 383.219685][T17599] tipc: Enabling of bearer rejected, failed to enable media [ 383.365659][T17614] netlink: 'syz.1.3320': attribute type 14 has an invalid length. [ 383.464457][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.486123][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.513859][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.541631][T17620] IPv6: sit1: Disabled Multicast RS [ 383.559864][T17620] sit1: entered allmulticast mode [ 383.616053][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.974582][T17651] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 384.255747][T17666] team0: Device ip6gre1 is of different type [ 384.320765][T17672] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 384.615646][T17690] syzkaller1: entered promiscuous mode [ 384.629952][T17690] syzkaller1: entered allmulticast mode [ 384.769000][ T5862] Bluetooth: hci0: command 0x0401 tx timeout [ 384.825659][T17697] __nla_validate_parse: 49 callbacks suppressed [ 384.825679][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 384.853196][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3341'. [ 385.011578][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 385.162405][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 385.270093][T17724] ip6erspan0: tun_chr_ioctl cmd 1074025675 [ 385.292120][T17724] ip6erspan0: persist disabled [ 385.335090][T17729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3349'. [ 385.360488][T17732] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3351'. [ 385.524950][T17739] pimreg: entered allmulticast mode [ 385.583014][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 385.665211][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3357'. [ 385.705087][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'. [ 385.820065][T17749] validate_nla: 1 callbacks suppressed [ 385.820084][T17749] netlink: 'syz.0.3358': attribute type 12 has an invalid length. [ 385.836146][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'. [ 385.875660][T17749] netlink: 'syz.0.3358': attribute type 12 has an invalid length. [ 385.938599][T17767] bond3: option xmit_hash_policy: invalid value (64) [ 385.947972][T17767] bond3 (unregistering): Released all slaves [ 386.143953][T17787] netlink: 'syz.1.3368': attribute type 23 has an invalid length. [ 386.351292][T17801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 388.304655][T17909] gretap2: entered promiscuous mode [ 388.346873][T17909] gretap2: entered allmulticast mode [ 388.698871][T17932] netlink: 'syz.5.3408': attribute type 1 has an invalid length. [ 388.706804][T17932] netlink: 'syz.5.3408': attribute type 3 has an invalid length. [ 388.742657][T17926] pimreg: entered allmulticast mode [ 388.764801][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.775337][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.786528][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.800887][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.809107][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.504129][T17963] netlink: 'syz.5.3418': attribute type 33 has an invalid length. [ 389.588262][T17966] dvmrp0: entered allmulticast mode [ 389.835508][T17981] tipc: Enabling of bearer rejected, failed to enable media [ 390.368065][T18020] __nla_validate_parse: 21 callbacks suppressed [ 390.368086][T18020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3430'. [ 390.603291][T17934] chnl_net:caif_netlink_parms(): no params data found [ 390.720644][T17934] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.728325][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.735636][T17934] bridge_slave_0: entered allmulticast mode [ 390.745163][T17934] bridge_slave_0: entered promiscuous mode [ 390.753943][T17934] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.762438][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.770329][T17934] bridge_slave_1: entered allmulticast mode [ 390.777947][T17934] bridge_slave_1: entered promiscuous mode [ 390.808797][T17934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.821634][T17934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.856494][ T5862] Bluetooth: hci6: command tx timeout [ 391.012038][T17934] team0: Port device team_slave_0 added [ 391.037120][T18039] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 391.037300][T17934] team0: Port device team_slave_1 added [ 391.110395][T18050] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3435'. [ 391.133188][T18048] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'. [ 391.159536][T17934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.177653][T17934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.229414][T17934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.278933][T18057] netlink: 'syz.5.3436': attribute type 5 has an invalid length. [ 391.386528][T17934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.396006][T17934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.444255][T17934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.543790][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 391.582745][T17934] hsr_slave_0: entered promiscuous mode [ 391.590244][T17934] hsr_slave_1: entered promiscuous mode [ 391.597094][T17934] debugfs: 'hsr0' already exists in 'hsr' [ 391.608375][T17934] Cannot create hsr debugfs directory [ 391.609671][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3441'. [ 391.655677][T18074] netlink: 'syz.2.3442': attribute type 10 has an invalid length. [ 391.677678][T18076] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3443'. [ 391.700763][T18071] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3441'. [ 391.710399][T18071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.734936][T18074] batman_adv: batadv0: Adding interface: team0 [ 391.742555][T18074] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.770152][T18074] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 392.209302][T17934] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.303209][T17934] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.343118][T17934] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.383557][T17934] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.400716][T18106] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3452'. [ 392.552665][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 392.632945][T17934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.682834][T17934] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.721300][T14297] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.728586][T14297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.774285][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.781599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.930229][ T5862] Bluetooth: hci6: command tx timeout [ 393.312615][T18145] lo: entered promiscuous mode [ 393.331867][T18145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.371446][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3462'. [ 393.461864][T17934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.394121][T18200] netlink: 'syz.0.3474': attribute type 1 has an invalid length. [ 394.404067][T18200] netlink: 'syz.0.3474': attribute type 9 has an invalid length. [ 394.455780][T17934] veth0_vlan: entered promiscuous mode [ 394.495017][T17934] veth1_vlan: entered promiscuous mode [ 394.662946][T17934] veth0_macvtap: entered promiscuous mode [ 394.690454][T17934] veth1_macvtap: entered promiscuous mode [ 394.753260][T17934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.801632][T17934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.881629][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.943021][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.965290][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.013537][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.022580][ T5862] Bluetooth: hci6: command tx timeout [ 395.100916][T18231] bond0: entered allmulticast mode [ 395.111169][T18231] bond_slave_0: entered allmulticast mode [ 395.136840][T18235] netlink: 'syz.1.3487': attribute type 2 has an invalid length. [ 395.146598][T18231] bond_slave_1: entered allmulticast mode [ 395.173608][T18235] netlink: 'syz.1.3487': attribute type 1 has an invalid length. [ 395.192264][T18235] netlink: 'syz.1.3487': attribute type 2 has an invalid length. [ 395.222102][T18235] netlink: 'syz.1.3487': attribute type 1 has an invalid length. [ 395.324782][T18243] tc_dump_action: action bad kind [ 395.342415][T18243] netlink: 'syz.0.3490': attribute type 12 has an invalid length. [ 395.354900][T14297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.378064][T14297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.484284][T18245] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 395.495665][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.505761][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.678914][T18261] netlink: 'syz.0.3492': attribute type 39 has an invalid length. [ 395.682114][T18251] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.043923][T18282] __nla_validate_parse: 46 callbacks suppressed [ 396.043942][T18282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3500'. [ 396.237519][T18297] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3505'. [ 396.262160][T18299] sctp: [Deprecated]: syz.5.3506 (pid 18299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.262160][T18299] Use struct sctp_sack_info instead [ 396.270084][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 396.284005][T18302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3508'. [ 396.341349][T18297] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3505'. [ 396.351065][T18297] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3505'. [ 396.734526][T18330] validate_nla: 1 callbacks suppressed [ 396.734546][T18330] netlink: 'syz.5.3516': attribute type 83 has an invalid length. [ 396.807216][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 396.818044][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 396.828651][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 396.838527][T18335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 397.030628][T18357] netlink: 'syz.2.3525': attribute type 5 has an invalid length. [ 397.089517][ T5862] Bluetooth: hci6: command tx timeout [ 397.470867][T18377] syzkaller0: entered promiscuous mode [ 397.476646][T18377] syzkaller0: entered allmulticast mode [ 397.543004][T18330] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 398.244002][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805806ac00: rx timeout, send abort [ 398.741463][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805806b000: rx timeout, send abort [ 398.753369][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805806ac00: abort rx timeout. Force session deactivation [ 398.782826][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 399.253790][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805806b000: abort rx timeout. Force session deactivation [ 399.973954][T18432] veth1_to_bond: entered allmulticast mode [ 400.106150][T18435] bond0: (slave bond_slave_1): Releasing backup interface [ 400.193370][T18435] veth1_to_bond (unregistering): left allmulticast mode [ 401.655723][T18512] __nla_validate_parse: 24 callbacks suppressed [ 401.655742][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3574'. [ 401.682124][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3574'. [ 401.692552][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3574'. [ 401.703667][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3574'. [ 401.797966][T18515] veth0qvirt_wifi: renamed from ipvlan1 [ 401.988341][T18524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3577'. [ 402.307993][T18539] netlink: 'syz.2.3582': attribute type 21 has an invalid length. [ 402.327615][T18539] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.345928][T18539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.353256][T18539] IPv6: NLM_F_CREATE should be set when creating new route [ 402.360775][T18539] IPv6: NLM_F_CREATE should be set when creating new route [ 402.368036][T18539] IPv6: NLM_F_CREATE should be set when creating new route [ 402.416491][T18539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3582'. [ 402.614814][T18553] vcan0: entered allmulticast mode [ 402.773328][T18565] netlink: 'syz.2.3591': attribute type 21 has an invalid length. [ 402.934029][T18576] netlink: 'syz.1.3595': attribute type 2 has an invalid length. [ 402.962081][T18576] netlink: 'syz.1.3595': attribute type 2 has an invalid length. [ 402.984784][T18576] netlink: 'syz.1.3595': attribute type 2 has an invalid length. [ 402.985535][T18579] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3593'. [ 403.003430][T18583] netlink: 'syz.2.3594': attribute type 10 has an invalid length. [ 403.003595][T14296] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 403.021806][T18576] netlink: 'syz.1.3595': attribute type 2 has an invalid length. [ 403.056451][T18583] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 403.224917][T18594] netlink: 'syz.5.3599': attribute type 19 has an invalid length. [ 404.000902][T18608] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3604'. [ 404.061007][T18608] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3604'. [ 404.356585][T18634] tipc: Enabled bearer , priority 0 [ 404.397311][T18634] syzkaller0: entered promiscuous mode [ 404.423063][T18634] syzkaller0: entered allmulticast mode [ 404.530951][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3617'. [ 404.757426][T18631] tipc: Resetting bearer [ 404.819791][T18631] tipc: Disabling bearer [ 404.886866][T18658] bridge2: entered allmulticast mode [ 405.528150][T18697] tipc: Started in network mode [ 405.544159][T18697] tipc: Node identity a6a8d2cac52a, cluster identity 4711 [ 405.574708][T18697] tipc: Enabled bearer , priority 0 [ 405.600885][T18708] veth0_to_bridge: entered promiscuous mode [ 405.607088][T18708] veth0_to_bridge: entered allmulticast mode [ 405.624404][T18706] tipc: Started in network mode [ 405.635701][T18706] tipc: Node identity 5ab8183699e7, cluster identity 4711 [ 405.659467][T18706] tipc: Enabled bearer , priority 0 [ 405.673191][T18697] pim6reg: entered allmulticast mode [ 405.680078][T18710] syzkaller0: entered promiscuous mode [ 405.685663][T18710] syzkaller0: entered allmulticast mode [ 405.696906][T18708] pim6reg: left allmulticast mode [ 405.767632][T18716] netlink: 'syz.0.3636': attribute type 12 has an invalid length. [ 405.814327][T18696] tipc: Disabling bearer [ 405.852562][T18694] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 405.854214][T18706] tipc: Resetting bearer [ 405.919418][T18692] tipc: Resetting bearer [ 405.969715][T18692] tipc: Disabling bearer [ 406.007174][T18723] netlink: zone id is out of range [ 406.032968][T18723] netlink: zone id is out of range [ 406.060467][T18723] netlink: zone id is out of range [ 406.065633][T18723] netlink: zone id is out of range [ 407.195565][T18804] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 407.224174][T18804] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 407.432124][T18819] validate_nla: 1 callbacks suppressed [ 407.432144][T18819] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 407.466417][T18819] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 407.504685][T18825] tipc: Started in network mode [ 407.504890][T18829] __nla_validate_parse: 6 callbacks suppressed [ 407.504905][T18829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3667'. [ 407.559471][T18825] tipc: Node identity 1686ffa9e34d, cluster identity 4711 [ 407.584393][T18825] tipc: Enabled bearer , priority 0 [ 407.602610][T18825] syzkaller0: entered promiscuous mode [ 407.621021][T18825] syzkaller0: entered allmulticast mode [ 407.628563][T18833] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:60053 [ 407.670460][T18834] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 407.761889][T18825] tipc: Resetting bearer [ 407.793991][T18821] tipc: Resetting bearer [ 407.829655][T18821] tipc: Disabling bearer [ 407.843389][T18838] tipc: Enabled bearer , priority 0 [ 407.850933][T18840] syzkaller0: entered promiscuous mode [ 407.857233][T18840] syzkaller0: entered allmulticast mode [ 407.865138][T18842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3672'. [ 407.911497][T18839] tipc: Resetting bearer [ 407.917571][T18842] netlink: 'syz.0.3672': attribute type 7 has an invalid length. [ 407.941693][T18837] tipc: Resetting bearer [ 407.991618][T18837] tipc: Disabling bearer [ 408.079831][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 408.091829][T18850] tc_dump_action: action bad kind [ 408.161758][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 408.175079][T18853] tc_dump_action: action bad kind [ 408.191239][T18855] syzkaller1: entered promiscuous mode [ 408.196875][T18855] syzkaller1: entered allmulticast mode [ 408.511340][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3682'. [ 408.517014][T18868] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 408.563060][T18868] bond1 (unregistering): Released all slaves [ 408.954435][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 409.033438][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3689'. [ 409.414225][T18909] netlink: 'syz.2.3693': attribute type 4 has an invalid length. [ 410.181155][T18916] veth0_virt_wifi: renamed from dummy0 (while UP) [ 410.246136][T18919] syzkaller1: entered promiscuous mode [ 410.255018][T18919] syzkaller1: entered allmulticast mode [ 410.621591][T18935] dvmrp0: left allmulticast mode [ 410.626101][T18933] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3703'. [ 410.637014][T18935] pimreg: left allmulticast mode [ 410.745133][T18947] syzkaller1: entered promiscuous mode [ 410.755615][T18947] syzkaller1: entered allmulticast mode [ 411.053116][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3711'. [ 411.169849][T18964] netlink: 'syz.0.3711': attribute type 1 has an invalid length. [ 411.275974][T18970] batman_adv: batadv0: Adding interface: dummy0 [ 411.300874][T18970] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.384371][T18970] batman_adv: batadv0: Interface activated: dummy0 [ 411.493747][T18979] sctp: [Deprecated]: syz.5.3716 (pid 18979) Use of int in max_burst socket option. [ 411.493747][T18979] Use struct sctp_assoc_value instead [ 411.544300][T18982] netlink: 'syz.1.3717': attribute type 12 has an invalid length. [ 411.623232][T18992] veth1_macvtap: left promiscuous mode [ 411.650579][T18992] macsec0: entered promiscuous mode [ 411.666132][T18992] macsec0: entered allmulticast mode [ 411.717984][T18992] veth1_macvtap: entered promiscuous mode [ 411.744743][T18992] veth1_macvtap: entered allmulticast mode [ 411.774758][T18992] macsec0: left promiscuous mode [ 411.780720][T18992] macsec0: left allmulticast mode [ 411.788448][T19003] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3722'. [ 411.798275][T18992] veth1_macvtap: left allmulticast mode [ 411.871956][T19007] nft_compat: unsupported protocol 0 [ 411.879366][T19005] gre0: Master is either lo or non-ether device [ 411.899475][T19008] gre0: Master is either lo or non-ether device [ 412.097354][T19028] sctp: [Deprecated]: syz.0.3732 (pid 19028) Use of int in maxseg socket option. [ 412.097354][T19028] Use struct sctp_assoc_value instead [ 412.546313][T19041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.558449][T19041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.770281][T19041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.781046][T19041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.792801][T19056] __nla_validate_parse: 2 callbacks suppressed [ 412.792820][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3738'. [ 412.824058][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 412.928314][T19058] openvswitch: netlink: Flow key attr not present in new flow. [ 412.950131][T19041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.972839][T19041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.991896][ T50] nci: nci_rx_work: unknown MT 0x1 [ 413.122587][T19041] bond0: (slave netdevsim0): Releasing backup interface [ 413.135336][T19041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.145998][T19041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.315159][T14296] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.325044][T14296] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.360956][T14296] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.371603][T14296] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.400616][T14296] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.412801][T14296] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.447074][ T3496] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.455612][ T3496] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.560128][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 413.822103][T19090] netlink: 'syz.6.3745': attribute type 1 has an invalid length. [ 414.358584][T19117] netlink: 'syz.2.3753': attribute type 11 has an invalid length. [ 414.742120][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'. [ 414.784515][T19133] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3758'. [ 414.983030][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3765'. [ 415.218644][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 415.437090][T19185] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3775'. [ 415.493234][T19185] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3775'. [ 415.586236][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3779'. [ 415.655252][T19203] netlink: 'syz.6.3782': attribute type 1 has an invalid length. [ 415.782052][T19212] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 415.796992][T19212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 415.872728][T19215] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 415.883339][T19215] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 415.987468][T19225] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 416.014265][T19225] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 416.027427][T19225] gretap1: entered promiscuous mode [ 416.038101][T19225] gretap1: entered allmulticast mode [ 417.296748][T19286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.410165][T19286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.708526][T19315] tipc: Enabled bearer , priority 0 [ 417.735426][T19315] syzkaller0: entered promiscuous mode [ 417.741417][T19315] syzkaller0: entered allmulticast mode [ 417.825274][T19311] tipc: Disabling bearer [ 417.991303][T19337] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 418.242650][T19351] __nla_validate_parse: 8 callbacks suppressed [ 418.242671][T19351] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3824'. [ 418.382149][T19359] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3822'. [ 418.760323][T19352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3822'. [ 418.829840][T19354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3822'. [ 418.909399][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3830'. [ 419.052985][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3833'. [ 419.123058][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3831'. [ 419.299391][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3838'. [ 419.329964][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 419.330611][T19397] openvswitch: netlink: Duplicate key (type 32). [ 419.356427][T19398] netlink: 'syz.1.3839': attribute type 19 has an invalid length. [ 419.380401][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 419.403816][T19398] netlink: 'syz.1.3839': attribute type 19 has an invalid length. [ 419.824305][T19431] netlink: 'syz.0.3849': attribute type 2 has an invalid length. [ 420.197172][T19460] netlink: 'syz.0.3858': attribute type 4 has an invalid length. [ 420.224126][T19459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.495171][T19480] netlink: 'syz.2.3859': attribute type 2 has an invalid length. [ 420.582310][T19462] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 420.598746][T19470] C: renamed from lo [ 420.611194][T19485] team0: Cannot enslave team device to itself [ 420.621400][T19484] tipc: Enabled bearer , priority 0 [ 420.629364][T19484] syzkaller0: entered promiscuous mode [ 420.651323][T19484] syzkaller0: entered allmulticast mode [ 420.740548][T19484] tipc: Resetting bearer [ 420.771960][T19483] tipc: Resetting bearer [ 420.830401][T19483] tipc: Disabling bearer [ 420.943921][T19492] syzkaller0: entered allmulticast mode [ 421.043549][T19508] netlink: 'syz.0.3872': attribute type 11 has an invalid length. [ 421.063473][T19508] netlink: 'syz.0.3872': attribute type 11 has an invalid length. [ 422.874614][T19550] IPVS: length: 128 != 8 [ 422.913029][T19551] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 423.037273][T19535] tipc: Started in network mode [ 423.050626][T19535] tipc: Node identity 2ab98b33e2f9, cluster identity 4711 [ 423.065830][T19535] tipc: Enabled bearer , priority 0 [ 423.097020][T19536] syzkaller0: entered promiscuous mode [ 423.109973][T19536] syzkaller0: entered allmulticast mode [ 423.127087][T19543] tipc: Resetting bearer [ 423.215822][T19543] tipc: Resetting bearer [ 423.298015][T19543] tipc: Disabling bearer [ 423.335139][T19570] __nla_validate_parse: 43 callbacks suppressed [ 423.335158][T19570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3887'. [ 423.359664][T19570] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3887'. [ 423.465108][T19581] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3891'. [ 423.485074][T19581] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3891'. [ 423.497920][T19584] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3892'. [ 423.507486][T19582] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3891'. [ 423.518272][T19582] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3891'. [ 423.983764][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3903'. [ 424.129283][T19629] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3905'. [ 424.156827][T19628] netlink: 192 bytes leftover after parsing attributes in process `syz.6.3906'. [ 424.170687][T19625] Bluetooth: hci6: Opcode 0x0c20 failed: -4 [ 424.786297][T19676] netlink: zone id is out of range [ 424.791928][T19676] netlink: zone id is out of range [ 424.797058][T19676] netlink: zone id is out of range [ 424.802577][T19676] netlink: zone id is out of range [ 424.807765][T19676] netlink: zone id is out of range [ 424.813048][T19676] netlink: zone id is out of range [ 424.818540][T19676] netlink: zone id is out of range [ 424.824191][T19676] netlink: zone id is out of range [ 424.830672][T19676] netlink: zone id is out of range [ 424.835906][T19676] netlink: zone id is out of range [ 425.334092][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.438162][T19704] bridge_slave_1 (unregistering): left allmulticast mode [ 425.445364][T19704] bridge_slave_1 (unregistering): left promiscuous mode [ 425.464568][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.130868][ T5862] Bluetooth: hci6: command 0x0c20 tx timeout [ 426.519953][T19782] netlink: 'syz.2.3953': attribute type 12 has an invalid length. [ 426.596980][T19782] bond4: option primary_reselect: invalid value (255) [ 426.642984][T19782] bond4 (unregistering): Released all slaves [ 427.152472][T19816] netlink: 'syz.5.3964': attribute type 12 has an invalid length. [ 427.178812][T19816] netlink: 'syz.5.3964': attribute type 12 has an invalid length. [ 427.317207][T19828] netlink: 'syz.0.3968': attribute type 10 has an invalid length. [ 427.334360][T19828] batman_adv: batadv0: Removing interface: team0 [ 427.342887][T19828] bridge0: port 2(team0) entered blocking state [ 427.349558][T19828] bridge0: port 2(team0) entered disabled state [ 427.358264][T19828] team0: entered allmulticast mode [ 427.363505][T19828] team_slave_0: entered allmulticast mode [ 427.371028][T19828] team_slave_1: entered allmulticast mode [ 427.378859][T19828] team0: entered promiscuous mode [ 427.383976][T19828] team_slave_0: entered promiscuous mode [ 427.390172][T19828] team_slave_1: entered promiscuous mode [ 427.532115][T19841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.799780][T19854] Unknown options in mask b7f2 [ 427.977563][T19864] macvtap1: entered promiscuous mode [ 427.983109][T19864] vlan0: entered promiscuous mode [ 427.988555][T19864] macvtap1: entered allmulticast mode [ 427.993948][T19864] vlan0: entered allmulticast mode [ 427.999337][T19864] veth0_vlan: entered allmulticast mode [ 428.006623][T19865] tipc: Enabled bearer , priority 0 [ 428.117378][T19859] tipc: Disabling bearer [ 428.259484][T19886] netlink: 'syz.5.3986': attribute type 9 has an invalid length. [ 428.398750][T19899] netlink: 'syz.5.3987': attribute type 4 has an invalid length. [ 428.406706][T19899] __nla_validate_parse: 83 callbacks suppressed [ 428.406723][T19899] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3987'. [ 428.520059][T19898] team0: Device wireguard0 is of different type [ 428.645072][T19911] netlink: 'syz.5.3991': attribute type 1 has an invalid length. [ 428.716080][T19911] bond2: (slave bridge3): making interface the new active one [ 428.726092][T19911] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 428.774293][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3992'. [ 429.535663][T19958] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4004'. [ 429.656895][T19965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4008'. [ 429.796758][T19973] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4011'. [ 429.814900][T19973] NCSI netlink: No device for ifindex 0 [ 429.897892][T19978] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4013'. [ 430.045220][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4017'. [ 430.098966][T19989] netlink: 'syz.0.4016': attribute type 1 has an invalid length. [ 430.158352][T20002] netlink: 'syz.2.4021': attribute type 1 has an invalid length. [ 430.162590][T19993] bond3: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.234324][T19993] bond3: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 430.250333][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4016'. [ 430.259737][T19993] bond3: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 430.405569][T20006] bond4: (slave gretap2): making interface the new active one [ 430.416650][T20006] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 430.622234][T20029] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 430.635572][T20029] bond4 (unregistering): Released all slaves [ 431.005352][T20053] net_ratelimit: 29 callbacks suppressed [ 431.005374][T20053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.191487][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4039'. [ 431.211595][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4039'. [ 431.284157][T20065] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 431.313740][T20063] vlan2: entered promiscuous mode [ 431.325816][T20063] bridge0: entered promiscuous mode [ 431.901803][T20087] sctp: [Deprecated]: syz.5.4047 (pid 20087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.901803][T20087] Use struct sctp_sack_info instead [ 431.902504][T20089] tipc: Enabled bearer , priority 0 [ 431.935606][T20089] syzkaller0: entered promiscuous mode [ 431.944893][T20089] syzkaller0: entered allmulticast mode [ 432.069150][T20092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.079815][T20089] tipc: Resetting bearer [ 432.153832][T20092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.161501][T20092] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 432.173517][T20092] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 432.240739][T20088] tipc: Resetting bearer [ 432.289617][T20088] tipc: Disabling bearer [ 432.411919][T20110] nftables ruleset with unbound set [ 432.650236][T20125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.998550][T20156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.254060][T20180] netlink: 'syz.6.4073': attribute type 33 has an invalid length. [ 433.324324][T20180] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 433.338660][T20180] bond1 (unregistering): Released all slaves [ 433.375990][T20183] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 433.385203][T20183] 0ªî{X¹¦: entered allmulticast mode [ 433.391207][T20183] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 433.615721][T20184] netlink: 'syz.0.4074': attribute type 12 has an invalid length. [ 433.635068][T20201] __nla_validate_parse: 11 callbacks suppressed [ 433.635087][T20201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4078'. [ 433.885839][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4082'. [ 435.459009][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4082'. [ 435.495433][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'. [ 435.944338][T20261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.093406][T20261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.124883][T20268] can: request_module (can-proto-0) failed. [ 436.635153][T20304] netlink: 'syz.1.4106': attribute type 23 has an invalid length. [ 436.683578][T20304] sctp: [Deprecated]: syz.1.4106 (pid 20304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.683578][T20304] Use struct sctp_sack_info instead [ 436.720324][T20308] netlink: 'syz.6.4103': attribute type 62 has an invalid length. [ 436.894789][T20319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4108'. [ 437.101341][T20334] nbd: socks must be embedded in a SOCK_ITEM attr [ 437.271722][T20349] netlink: 'syz.5.4117': attribute type 83 has an invalid length. [ 437.451484][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 437.667382][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 437.726958][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 437.740149][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 438.176364][T20362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4118'. [ 438.244625][T20381] vlan2: entered allmulticast mode [ 438.258177][T20381] bridge0: entered allmulticast mode [ 438.274180][T20380] netlink: 'syz.5.4124': attribute type 7 has an invalid length. [ 438.298189][T20380] netlink: 'syz.5.4124': attribute type 8 has an invalid length. [ 438.556294][T20406] netlink: 'syz.2.4129': attribute type 5 has an invalid length. [ 438.757923][T20420] netlink: 'syz.6.4135': attribute type 1 has an invalid length. [ 438.777433][T20420] __nla_validate_parse: 6 callbacks suppressed [ 438.777452][T20420] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4135'. [ 438.796252][T20420] nbd: couldn't find device at index 1048576 [ 439.084924][T20444] bond0: (slave rose0): Error: Device can not be enslaved while up [ 439.365348][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4141'. [ 439.383588][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4142'. [ 439.397325][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4141'. [ 439.642967][T20478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4147'. [ 439.680457][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 439.840303][T20489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4153'. [ 439.849936][T20489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4153'. [ 440.072282][T20494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.162378][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4155'. [ 440.551176][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4166'. [ 440.604029][T20544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.692755][T20542] block nbd2: server does not support multiple connections per device. [ 440.701396][ T5862] Bluetooth: hci6: command 0x0c20 tx timeout [ 440.715040][T20542] block nbd2: shutting down sockets [ 440.920865][T20561] syzkaller0: entered promiscuous mode [ 440.926408][T20561] syzkaller0: entered allmulticast mode [ 440.932572][ T30] audit: type=1107 audit(1759642664.347:3): pid=20560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙœ´M<‰7l…t¿Ý•/Öé Ž6òЍŠç›' [ 440.949329][T20567] bridge_slave_1: left allmulticast mode [ 440.955007][T20567] bridge_slave_1: left promiscuous mode [ 440.968802][T20567] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.981419][T20567] bridge_slave_0: left allmulticast mode [ 440.987171][T20567] bridge_slave_0: left promiscuous mode [ 440.993605][T20567] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.201460][T20576] netlink: 'syz.6.4176': attribute type 1 has an invalid length. [ 442.750277][T20576] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 443.012595][ T5850] Bluetooth: hci6: command 0x0c20 tx timeout [ 443.261215][T20624] syzkaller0: entered promiscuous mode [ 443.289058][T20624] syzkaller0: entered allmulticast mode [ 443.310888][T20624] netlink: 'syz.2.4192': attribute type 3 has an invalid length. [ 443.467949][T20640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.505952][T20640] netlink: 'syz.0.4195': attribute type 24 has an invalid length. [ 443.812156][T20659] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 443.845491][T20666] __nla_validate_parse: 14 callbacks suppressed [ 443.845511][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'. [ 443.912491][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4205'. [ 444.086228][T20686] openvswitch: netlink: Key type 48 is out of range max 32 [ 444.795485][T20726] tipc: Enabled bearer , priority 0 [ 444.824094][T20726] syzkaller0: entered promiscuous mode [ 444.858209][T20726] syzkaller0: entered allmulticast mode [ 444.959215][T20730] tipc: Resetting bearer [ 445.000613][T20722] tipc: Resetting bearer [ 445.076545][T20722] tipc: Disabling bearer [ 445.384471][T20758] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4222'. [ 445.591203][T20768] sctp: [Deprecated]: syz.5.4225 (pid 20768) Use of int in max_burst socket option deprecated. [ 445.591203][T20768] Use struct sctp_assoc_value instead [ 445.649926][T20770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 446.076424][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'. [ 446.094915][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4233'. [ 446.270290][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 446.395299][T20802] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4237'. [ 446.506721][T20806] netlink: 'syz.5.4239': attribute type 11 has an invalid length. [ 446.535914][T20806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 446.577067][T20808] netlink: 'syz.0.4240': attribute type 1 has an invalid length. [ 446.714462][T20814] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 446.789744][T20815] netlink: 'syz.2.4241': attribute type 6 has an invalid length. [ 446.797518][T20815] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4241'. [ 446.858227][T20814] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 446.888602][T20814] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4242'. [ 447.022299][T20831] openvswitch: netlink: Missing key (keys=40, expected=100) [ 447.173268][T20832] bond0: (slave rose0): Error: Device can not be enslaved while up [ 448.031208][T20880] netlink: 'syz.2.4261': attribute type 20 has an invalid length. [ 448.119703][T20880] netlink: 'syz.2.4261': attribute type 20 has an invalid length. [ 448.227552][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e821c00: rx timeout, send abort [ 448.325729][T20900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.337226][T20900] bond_slave_0: left allmulticast mode [ 448.354360][T20900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.364788][T20900] bond_slave_1: left allmulticast mode [ 448.384466][T20900] bond0 (unregistering): Released all slaves [ 448.684284][T20917] geneve3: entered promiscuous mode [ 448.694483][T20917] geneve3: entered allmulticast mode [ 448.711401][T20917] netlink: 'syz.1.4269': attribute type 1 has an invalid length. [ 448.719763][T20917] netlink: 'syz.1.4269': attribute type 1 has an invalid length. [ 448.727785][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e822000: rx timeout, send abort [ 448.736259][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e821c00: abort rx timeout. Force session deactivation [ 448.825973][T20921] netlink: 'syz.1.4271': attribute type 1 has an invalid length. [ 448.905896][T20926] __nla_validate_parse: 6 callbacks suppressed [ 448.905917][T20926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4272'. [ 448.953997][T20921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.963962][T20921] bond3: (slave bond4): making interface the new active one [ 448.976309][T20921] bond3: (slave bond4): Enslaving as an active interface with an up link [ 449.015896][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 449.035081][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4274'. [ 449.037944][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'. [ 449.079967][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'. [ 449.101776][T20935] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 449.214548][T20940] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4275'. [ 449.236218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e822000: abort rx timeout. Force session deactivation [ 449.316751][T20947] netlink: 'syz.1.4279': attribute type 1 has an invalid length. [ 449.368111][T20945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4278'. [ 449.390700][T20947] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 449.402462][T20947] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 449.513368][T20948] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 449.694280][T20967] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4283'. [ 449.898544][T20980] netlink: 'syz.0.4286': attribute type 21 has an invalid length. [ 449.916939][T20980] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4286'. [ 449.937449][T20980] netlink: 'syz.0.4286': attribute type 4 has an invalid length. [ 449.970843][T20980] netlink: 'syz.0.4286': attribute type 5 has an invalid length. [ 449.971788][T20985] netlink: 'syz.0.4286': attribute type 21 has an invalid length. [ 449.987892][T20980] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4286'. [ 450.021808][T20985] netlink: 'syz.0.4286': attribute type 4 has an invalid length. [ 450.031158][T20985] netlink: 'syz.0.4286': attribute type 5 has an invalid length. [ 450.081149][T20988] bond5 (unregistering): Released all slaves [ 450.524077][T21024] hsr_slave_0: left promiscuous mode [ 450.558479][T21024] hsr_slave_1: left promiscuous mode [ 451.043723][T21045] syzkaller1: entered promiscuous mode [ 451.053454][T21045] syzkaller1: entered allmulticast mode [ 451.218663][T21053] syzkaller0: entered promiscuous mode [ 451.224271][T21053] syzkaller0: entered allmulticast mode [ 452.954372][T21059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 453.790847][T21101] bond4 (unregistering): Released all slaves [ 453.816572][T21115] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 453.970238][T21123] __nla_validate_parse: 8 callbacks suppressed [ 453.970256][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 454.025387][T21121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.237237][T21144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4330'. [ 454.246067][T21148] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4333'. [ 454.250037][T21146] validate_nla: 1 callbacks suppressed [ 454.250056][T21146] netlink: 'syz.1.4332': attribute type 1 has an invalid length. [ 454.271196][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4332'. [ 454.552998][T21168] warn_alloc: 1 callbacks suppressed [ 454.553017][T21168] syz.6.4339: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 454.579873][T21168] CPU: 1 UID: 0 PID: 21168 Comm: syz.6.4339 Not tainted syzkaller #0 PREEMPT(full) [ 454.579903][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.579924][T21168] Call Trace: [ 454.579932][T21168] [ 454.579941][T21168] dump_stack_lvl+0x189/0x250 [ 454.579976][T21168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.580001][T21168] ? __pfx__printk+0x10/0x10 [ 454.580031][T21168] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 454.580058][T21168] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 454.580086][T21168] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 454.580116][T21168] warn_alloc+0x214/0x310 [ 454.580145][T21168] ? stack_depot_save_flags+0x40/0x860 [ 454.580175][T21168] ? __pfx_warn_alloc+0x10/0x10 [ 454.580205][T21168] ? kasan_save_track+0x4f/0x80 [ 454.580226][T21168] ? xskq_create+0x56/0x170 [ 454.580253][T21168] ? xsk_init_queue+0xb0/0x110 [ 454.580279][T21168] ? xsk_setsockopt+0x4dc/0x8d0 [ 454.580304][T21168] ? do_sock_setsockopt+0x17c/0x1b0 [ 454.580325][T21168] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 454.580345][T21168] ? do_syscall_64+0xfa/0x3b0 [ 454.580364][T21168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.580393][T21168] __vmalloc_node_range_noprof+0x125/0x12f0 [ 454.580462][T21168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.580496][T21168] ? __kasan_kmalloc+0x93/0xb0 [ 454.580524][T21168] vmalloc_user_noprof+0xad/0xf0 [ 454.580550][T21168] ? xskq_create+0xbf/0x170 [ 454.580577][T21168] xskq_create+0xbf/0x170 [ 454.580604][T21168] xsk_init_queue+0xb0/0x110 [ 454.580633][T21168] xsk_setsockopt+0x4dc/0x8d0 [ 454.580665][T21168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 454.580694][T21168] ? __pfx_aa_sk_perm+0x10/0x10 [ 454.580723][T21168] ? aa_sock_opt_perm+0xff/0x1b0 [ 454.580757][T21168] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 454.580786][T21168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 454.580816][T21168] do_sock_setsockopt+0x17c/0x1b0 [ 454.580843][T21168] __x64_sys_setsockopt+0x13f/0x1b0 [ 454.580873][T21168] do_syscall_64+0xfa/0x3b0 [ 454.580893][T21168] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.580923][T21168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.580944][T21168] ? clear_bhb_loop+0x60/0xb0 [ 454.580969][T21168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.580989][T21168] RIP: 0033:0x7f311958eec9 [ 454.581008][T21168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.581026][T21168] RSP: 002b:00007f311a4d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.581048][T21168] RAX: ffffffffffffffda RBX: 00007f31197e6090 RCX: 00007f311958eec9 [ 454.581063][T21168] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 454.581074][T21168] RBP: 00007f3119611f91 R08: 0000000000000004 R09: 0000000000000000 [ 454.581087][T21168] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.581100][T21168] R13: 00007f31197e6128 R14: 00007f31197e6090 R15: 00007ffe070ab6c8 [ 454.581136][T21168] [ 454.614317][T21168] Mem-Info: [ 454.633659][T21173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4340'. [ 454.641829][T21168] active_anon:4601 inactive_anon:0 isolated_anon:0 [ 454.641829][T21168] active_file:2884 inactive_file:40012 isolated_file:0 [ 454.641829][T21168] unevictable:768 dirty:72 writeback:0 [ 454.641829][T21168] slab_reclaimable:13496 slab_unreclaimable:144283 [ 454.641829][T21168] mapped:39150 shmem:1363 pagetables:1330 [ 454.641829][T21168] sec_pagetables:0 bounce:0 [ 454.641829][T21168] kernel_misc_reclaimable:0 [ 454.641829][T21168] free:1249364 free_pcp:17663 free_cma:0 [ 454.641895][T21168] Node 0 active_anon:18404kB inactive_anon:0kB active_file:11536kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156600kB dirty:288kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16024kB pagetables:5180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 454.641951][T21168] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 454.642013][T21168] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.642073][T21168] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 454.642120][T21168] Node 0 DMA32 free:1090076kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18360kB inactive_anon:0kB active_file:11536kB inactive_file:159524kB unevictable:1536kB writepending:288kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:53788kB local_pcp:27496kB free_cma:0kB [ 454.642183][T21168] lowmem_reserve[]: 0 0 0 0 0 [ 454.642229][T21168] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.642282][T21168] lowmem_reserve[]: 0 0 0 0 0 [ 454.642326][T21168] Node 1 Normal free:3892020kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16864kB local_pcp:6528kB free_cma:0kB [ 454.642384][T21168] lowmem_reserve[]: 0 0 0 0 0 [ 454.642427][T21168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.642563][T21168] Node 0 DMA32: 1339*4kB (UME) 572*8kB (UM) 229*16kB (UM) 199*32kB (UME) 35*64kB (UM) 6*128kB [ 454.680877][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4339'. [ 454.683748][T21168] (UME) [ 454.695722][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4339'. [ 454.709302][T21168] 201*256kB (UM) 260*512kB (UM) 162*1024kB (UME) 6*2048kB (UM) 172*4096kB (UM) = 1090236kB [ 455.211622][T21168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.224519][T21168] Node 1 Normal: 183*4kB (UE) 49*8kB (UME) 39*16kB (UME) 99*32kB (UME) 32*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3892020kB [ 455.243303][T21168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.255434][T21168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.265104][T21168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.277605][T21168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.308242][T21168] 44256 total pagecache pages [ 455.318243][T21168] 0 pages in swap cache [ 455.322522][T21168] Free swap = 124996kB [ 455.339250][T21178] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 455.372247][T21168] Total swap = 124996kB [ 455.372480][T21178] bond5: entered promiscuous mode [ 455.376445][T21168] 2097051 pages RAM [ 455.382258][T21178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.394717][T21168] 0 pages HighMem/MovableOnly [ 455.399694][T21168] 423781 pages reserved [ 455.404040][T21168] 0 pages cma reserved [ 455.515357][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4345'. [ 455.579377][T21189] tc_dump_action: action bad kind [ 455.592579][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4345'. [ 455.612949][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4344'. [ 455.887516][T21206] bridge5: entered allmulticast mode [ 455.993636][T21212] netlink: 'syz.2.4353': attribute type 1 has an invalid length. [ 456.007900][T21214] netlink: 'syz.2.4353': attribute type 1 has an invalid length. [ 456.027047][T21212] bridge_slave_1: left allmulticast mode [ 456.036290][T21212] bridge_slave_1: left promiscuous mode [ 456.054467][T21212] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.076377][T21212] bridge_slave_0: left allmulticast mode [ 456.093134][T21212] bridge_slave_0: left promiscuous mode [ 456.103494][T21212] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.155564][T21221] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 456.711453][T21249] netlink: 'syz.5.4367': attribute type 4 has an invalid length. [ 456.991468][T21269] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 457.723086][T21307] netlink: 'syz.6.4386': attribute type 1 has an invalid length. [ 457.835798][T21316] vlan0: entered promiscuous mode [ 457.849324][T21316] vlan0: entered allmulticast mode [ 457.861260][T21316] veth0_vlan: entered allmulticast mode [ 458.017641][T21327] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 458.742849][T21364] tipc: Enabling of bearer rejected, failed to enable media [ 458.772822][T21365] sctp: [Deprecated]: syz.6.4406 (pid 21365) Use of int in max_burst socket option deprecated. [ 458.772822][T21365] Use struct sctp_assoc_value instead [ 458.971841][T21378] netlink: 'syz.1.4411': attribute type 24 has an invalid length. [ 459.055274][T21382] bond6: invalid ARP target 0.0.0.0 specified for addition [ 459.078690][T21382] bond6: option arp_ip_target: invalid value (0) [ 459.095869][T21382] bond6 (unregistering): Released all slaves [ 459.222097][T21382] __nla_validate_parse: 73 callbacks suppressed [ 459.222118][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'. [ 459.341276][T21402] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 459.352257][T21399] dvmrp0: entered allmulticast mode [ 459.547780][T21419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4421'. [ 459.843731][T21427] netlink: 'syz.5.4426': attribute type 32 has an invalid length. [ 459.973342][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'. [ 460.434955][T21454] syzkaller0: entered promiscuous mode [ 460.458315][T21454] syzkaller0: entered allmulticast mode [ 460.498985][T21472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4438'. [ 460.886532][T21487] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4442'. [ 460.925378][T21489] tipc: Enabling of bearer rejected, failed to enable media [ 460.957062][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4443'. [ 460.980907][T21491] netlink: 'syz.2.4444': attribute type 10 has an invalid length. [ 461.027977][T21491] netlink: 'syz.2.4444': attribute type 17 has an invalid length. [ 461.081990][T21491] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 461.834203][T21546] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 461.853703][T21546] bond1 (unregistering): Released all slaves [ 462.120746][T21558] tipc: Enabled bearer , priority 0 [ 462.129314][T21558] syzkaller0: entered promiscuous mode [ 462.142632][T21558] syzkaller0: entered allmulticast mode [ 462.172809][T21557] tipc: Resetting bearer [ 462.196200][T21557] tipc: Disabling bearer [ 462.331822][T21564] netlink: 'syz.6.4464': attribute type 5 has an invalid length. [ 462.348256][T21564] netlink: 'syz.6.4464': attribute type 83 has an invalid length. [ 462.375843][T21564] xt_limit: Overflow, try lower: 271964/0 [ 462.607155][T21574] tipc: Enabled bearer , priority 0 [ 462.618232][T21574] syzkaller0: entered promiscuous mode [ 462.625190][T21574] syzkaller0: entered allmulticast mode [ 462.641581][T21573] tipc: Resetting bearer [ 462.671838][T21573] tipc: Disabling bearer [ 462.880060][T21582] tipc: New replicast peer: 0.0.0.0 [ 462.888455][T21582] tipc: Enabled bearer , priority 10 [ 463.019938][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4472'. [ 463.150824][T21566] Bluetooth: hci1: Opcode 0x0c20 failed: -4 [ 463.253355][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4474'. [ 463.534621][T21606] syzkaller1: entered promiscuous mode [ 463.542428][T21606] syzkaller1: entered allmulticast mode [ 464.020422][T10646] tipc: Node number set to 3359673139 [ 464.076523][T21626] netlink: 576 bytes leftover after parsing attributes in process `syz.5.4484'. [ 464.232378][T21636] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4487'. [ 464.323816][T21643] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4490'. [ 464.368201][ T5850] Bluetooth: hci1: command 0x0c20 tx timeout [ 464.502927][T21648] "syz.1.4491" (21648) uses obsolete ecb(arc4) skcipher [ 464.521647][T21659] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4493'. [ 464.976121][T21687] netlink: 'syz.1.4504': attribute type 1 has an invalid length. [ 464.985609][T21687] netlink: 'syz.1.4504': attribute type 2 has an invalid length. [ 465.224661][T21706] netlink: 'syz.1.4508': attribute type 1 has an invalid length. [ 465.265952][T21706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 465.342191][T21719] IPVS: length: 147 != 8 [ 465.540802][T21734] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 465.553130][T21734] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 465.892821][T21751] netlink: 'syz.1.4518': attribute type 21 has an invalid length. [ 466.325409][T21766] batman_adv: batadv0: Interface deactivated: dummy0 [ 466.358897][T21766] batman_adv: batadv0: Removing interface: dummy0 [ 466.416625][T21766] bridge_slave_0: left allmulticast mode [ 466.433379][T21766] bridge_slave_0: left promiscuous mode [ 466.454162][T21766] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.479246][T21769] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4524'. [ 466.511438][T21766] bond0: (slave bond_slave_0): Releasing backup interface [ 466.522581][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 466.538418][T21766] bond0: (slave bond_slave_1): Releasing backup interface [ 466.550403][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 466.563676][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 466.573527][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 466.583244][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 466.644751][T21766] team0: Port device team_slave_0 removed [ 466.700233][T21766] team0: Port device team_slave_1 removed [ 466.707421][T21766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.715271][T21766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.779260][T21766] bond3: (slave bond4): Releasing backup interface [ 466.815218][T21766] bond5: (slave bridge4): Releasing active interface [ 466.896062][T21780] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4526'. [ 467.514284][T21818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4534'. [ 467.524026][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4534'. [ 467.546425][T21817] veth1_vlan: Device is already in use. [ 467.703599][T21824] netlink: 368 bytes leftover after parsing attributes in process `syz.6.4537'. [ 467.728478][T20065] IPVS: ip_vs_send_async error -101 [ 467.933644][T21833] tc_dump_action: action bad kind [ 468.060022][T21843] team0: Device geneve2 is up. Set it down before adding it as a team port [ 468.457539][T21865] netlink: 'syz.2.4550': attribute type 23 has an invalid length. [ 468.554615][T21853] hsr_slave_0 (unregistering): left promiscuous mode [ 468.688438][ T5850] Bluetooth: hci7: command tx timeout [ 468.705254][T21855] syzkaller1: entered promiscuous mode [ 468.713423][T21855] syzkaller1: entered allmulticast mode [ 469.497474][T21902] __nla_validate_parse: 8 callbacks suppressed [ 469.497493][T21902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4559'. [ 469.520773][T21771] chnl_net:caif_netlink_parms(): no params data found [ 469.619363][T21912] netlink: 'syz.2.4559': attribute type 16 has an invalid length. [ 469.641982][T21912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4559'. [ 469.800487][T21921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4565'. [ 469.830173][T21771] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.847385][T21771] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.863722][T21771] bridge_slave_0: entered allmulticast mode [ 469.882075][T21771] bridge_slave_0: entered promiscuous mode [ 469.891901][T21771] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.901364][T21771] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.909487][T21771] bridge_slave_1: entered allmulticast mode [ 469.917942][T21771] bridge_slave_1: entered promiscuous mode [ 469.930085][T21923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4566'. [ 469.981236][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4567'. [ 470.001435][T21925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.021646][T21771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.039072][T21771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.107282][T21771] team0: Port device team_slave_0 added [ 470.113937][T21932] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4569'. [ 470.134908][T21771] team0: Port device team_slave_1 added [ 470.194951][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4568'. [ 470.221464][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 470.297147][T21771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.314080][T21771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.315364][T21946] netlink: 'syz.6.4573': attribute type 1 has an invalid length. [ 470.358913][T21771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.372167][T21947] netlink: 'syz.1.4572': attribute type 2 has an invalid length. [ 470.384177][T21771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.391489][T21771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.418537][T21947] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4572'. [ 470.450664][T21950] netlink: 'syz.6.4573': attribute type 1 has an invalid length. [ 470.459091][T21771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.496292][T21949] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 470.580755][T21965] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4576'. [ 470.606392][T21965] netlink: 'syz.1.4576': attribute type 4 has an invalid length. [ 470.624372][T21965] netlink: 'syz.1.4576': attribute type 6 has an invalid length. [ 470.660890][T21965] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 470.768901][ T5850] Bluetooth: hci7: command tx timeout [ 470.834025][T21771] hsr_slave_0: entered promiscuous mode [ 470.851288][T20065] IPVS: ip_vs_send_async error -101 [ 470.874666][T21771] hsr_slave_1: entered promiscuous mode [ 470.910486][T21771] debugfs: 'hsr0' already exists in 'hsr' [ 470.916435][T21771] Cannot create hsr debugfs directory [ 471.484028][T21771] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 471.520376][T21771] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 471.541171][T21771] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 471.584429][T21771] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 471.949928][T21771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.074199][T21771] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.111229][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.118551][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.175718][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.183121][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.415336][ C0] Unknown status report in ack skb [ 472.437091][T22069] syzkaller1: entered promiscuous mode [ 472.449831][T22069] syzkaller1: entered allmulticast mode [ 472.752663][T22089] netlink: zone id is out of range [ 472.767854][T22089] netlink: zone id is out of range [ 472.775485][T22089] netlink: zone id is out of range [ 472.797941][T22089] netlink: zone id is out of range [ 472.803228][T22089] netlink: zone id is out of range [ 472.813400][T22089] netlink: zone id is out of range [ 472.824629][T22089] netlink: zone id is out of range [ 472.837872][T22089] netlink: zone id is out of range [ 472.843026][T22089] netlink: zone id is out of range [ 472.857844][ T5850] Bluetooth: hci7: command tx timeout [ 472.922893][T22100] netlink: 'syz.6.4612': attribute type 11 has an invalid length. [ 472.923083][T21771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.096535][T22110] netlink: 'syz.2.4615': attribute type 29 has an invalid length. [ 473.564239][T21771] veth0_vlan: entered promiscuous mode [ 473.599353][T21771] veth1_vlan: entered promiscuous mode [ 473.739935][T21771] veth0_macvtap: entered promiscuous mode [ 473.762113][T21771] veth1_macvtap: entered promiscuous mode [ 473.836896][T21771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.882560][T21771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.931175][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.951878][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.035610][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.057600][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.085124][T22168] netlink: 'syz.6.4635': attribute type 1 has an invalid length. [ 474.199198][T22168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.212875][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.225305][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.235269][T22168] veth3: entered promiscuous mode [ 474.255320][T22177] vlan2: entered allmulticast mode [ 474.260857][T22177] gretap0: entered allmulticast mode [ 474.364524][T22169] syzkaller0: entered allmulticast mode [ 474.373902][ T9484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.385198][ T9484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.874384][T22190] netlink: 'syz.1.4640': attribute type 1 has an invalid length. [ 474.883502][T22190] __nla_validate_parse: 17 callbacks suppressed [ 474.883521][T22190] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4640'. [ 474.934020][ T5862] Bluetooth: hci7: command tx timeout [ 475.466968][T22201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4642'. [ 476.370030][T22206] net_ratelimit: 54 callbacks suppressed [ 476.370049][T22206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.641853][T22236] vxcan1: tx address claim with different name [ 476.666829][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4647'. [ 476.697842][T22240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4647'. [ 476.738640][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4647'. [ 476.748100][T22240] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4647'. [ 476.775118][T22240] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4647'. [ 476.995045][T22251] sock: sock_timestamping_bind_phc: sock not bind to device [ 477.008922][ T5862] Bluetooth: hci7: command 0x0411 tx timeout [ 477.244477][T22264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4658'. [ 477.272440][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 477.289335][T22265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 477.335613][T22268] netlink: 'syz.1.4660': attribute type 1 has an invalid length. [ 477.343488][T22268] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4660'. [ 477.354463][T22268] netlink: 'syz.1.4660': attribute type 1 has an invalid length. [ 477.367153][T22271] netlink: 'syz.5.4661': attribute type 9 has an invalid length. [ 477.385657][T22271] netlink: 'syz.5.4661': attribute type 9 has an invalid length. [ 477.464654][T22279] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 2, id = 0 [ 477.611921][T22288] syz_tun: entered allmulticast mode [ 477.631466][T22287] syz_tun: left allmulticast mode [ 477.792768][T22297] netlink: 'syz.5.4669': attribute type 10 has an invalid length. [ 477.814684][T22297] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 478.129383][ T5850] Bluetooth: hci0: command 0x0401 tx timeout [ 478.360289][T22330] netlink: 'syz.2.4679': attribute type 1 has an invalid length. [ 479.067132][T22379] veth0: entered promiscuous mode [ 479.287459][T22390] tipc: Enabled bearer , priority 0 [ 479.306750][T22390] syzkaller0: entered promiscuous mode [ 479.337775][T22390] syzkaller0: entered allmulticast mode [ 479.396997][T22390] tipc: Resetting bearer [ 479.416367][T22389] tipc: Resetting bearer [ 479.458757][T22389] tipc: Disabling bearer [ 479.517384][T22402] bond7 (unregistering): Released all slaves [ 479.551218][T22400] netlink: 'syz.6.4701': attribute type 12 has an invalid length. [ 479.874460][T22423] ip6erspan0: entered promiscuous mode [ 479.901713][T22429] __nla_validate_parse: 19 callbacks suppressed [ 479.901746][T22429] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4707'. [ 479.929284][T22425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4705'. [ 479.931459][T22429] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4707'. [ 479.950678][T22429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4707'. [ 479.984387][T22430] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.015375][T22430] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.072522][T22439] netlink: 'syz.5.4708': attribute type 1 has an invalid length. [ 480.083599][T22439] netlink: 'syz.5.4708': attribute type 1 has an invalid length. [ 480.084809][T22430] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.112445][T22430] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.243518][T22430] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.254586][T22430] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.322485][T22445] macvtap1: entered allmulticast mode [ 480.330680][T22445] veth0_macvtap: entered allmulticast mode [ 480.353617][T22430] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.384279][T22430] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.455347][T22458] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4715'. [ 480.524197][ T3496] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.540549][ T3496] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.593420][ T3496] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.613300][ T3496] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.663493][T22463] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 480.684308][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4716'. [ 480.695583][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4716'. [ 480.700619][T22463] bond4 (unregistering): Released all slaves [ 480.813863][ T3496] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.832434][ T3496] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.857379][ T3496] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.870107][ T3496] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.891726][T22465] netlink: 'syz.5.4716': attribute type 3 has an invalid length. [ 481.131680][T22481] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4718'. [ 481.169297][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4721'. [ 481.377237][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4723'. [ 481.695299][T22507] 8021q: VLANs not supported on ip6_vti0 [ 482.162431][T22531] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.244813][T22536] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.254724][T22536] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.271662][T22536] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 482.340743][T22542] 8021q: VLANs not supported on lo [ 482.670051][T22563] validate_nla: 1 callbacks suppressed [ 482.670070][T22563] netlink: 'syz.2.4745': attribute type 1 has an invalid length. [ 482.732452][T22570] netlink: 'syz.6.4747': attribute type 11 has an invalid length. [ 483.247987][ T5850] Bluetooth: hci1: command 0x0c20 tx timeout [ 483.510934][T22625] bond8 (unregistering): Released all slaves [ 483.600063][T22623] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 483.653921][T22636] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 483.715470][T22636] 8021q: adding VLAN 0 to HW filter on device bond8 [ 483.790858][T22635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.222697][T22744] __nla_validate_parse: 10 callbacks suppressed [ 485.222718][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4798'. [ 485.324991][T22753] syzkaller0: create flow: hash 2649134989 index 1 [ 485.334719][ T36] syzkaller0: tun_net_xmit 76 [ 485.340968][ T36] syzkaller0: tun_net_xmit 48 [ 485.350353][T22744] netlink: 'syz.6.4798': attribute type 1 has an invalid length. [ 485.359631][ T8801] syzkaller0: tun_net_xmit 76 [ 485.394511][T22744] bond2: invalid ARP target 0.0.0.0 specified for addition [ 485.402183][T22744] bond2: option arp_ip_target: invalid value (0) [ 485.411839][T22744] bond2 (unregistering): Released all slaves [ 485.418950][ T8801] syzkaller0: tun_net_xmit 76 [ 485.524223][T22742] syzkaller0: delete flow: hash 2649134989 index 1 [ 487.488474][T22783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4806'. [ 488.002963][T22817] IPv6: sit2: Disabled Multicast RS [ 488.047100][T22817] sit2: entered allmulticast mode [ 488.395093][T22852] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 488.413020][T22850] tipc: Enabled bearer , priority 0 [ 488.513226][T22850] tipc: Disabling bearer [ 488.565228][T22860] netlink: 'syz.2.4828': attribute type 1 has an invalid length. [ 488.575057][T22860] netlink: 'syz.2.4828': attribute type 1 has an invalid length. [ 488.586734][T22860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4828'. [ 488.609401][T22860] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4828'. [ 488.845581][T22881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4834'. [ 488.881352][T22881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4834'. [ 488.910472][T22888] tipc: Enabling of bearer rejected, failed to enable media [ 488.928139][T22881] netlink: 'syz.5.4834': attribute type 15 has an invalid length. [ 488.930452][T22889] tipc: Enabling of bearer rejected, failed to enable media [ 489.174987][T22896] netlink: 'syz.7.4838': attribute type 10 has an invalid length. [ 489.205735][T22896] team0: Device ipvlan1 failed to register rx_handler [ 489.231817][T22905] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 489.267889][T22905] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4840'. [ 489.345046][T22908] netlink: 'syz.5.4841': attribute type 1 has an invalid length. [ 489.471784][T22908] bond4: (slave gretap1): making interface the new active one [ 489.501753][T22908] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 489.540893][T22920] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4844'. [ 489.909933][T22945] netlink: 516 bytes leftover after parsing attributes in process `syz.5.4851'. [ 489.951813][T22951] netlink: 516 bytes leftover after parsing attributes in process `syz.5.4851'. [ 490.115487][T22962] netlink: 'syz.6.4855': attribute type 9 has an invalid length. [ 490.155907][T22964] tipc: Enabling of bearer rejected, failed to enable media [ 490.316997][T22974] netlink: 'syz.5.4859': attribute type 1 has an invalid length. [ 490.353303][T22974] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4859'. [ 490.370528][T22980] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4861'. [ 490.376900][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4859'. [ 490.420793][T22980] tunl0: entered promiscuous mode [ 490.467259][T22980] netlink: 'syz.6.4861': attribute type 3 has an invalid length. [ 490.504020][T22980] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4861'. [ 490.535261][T22989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4864'. [ 490.674352][T23000] netlink: 'syz.6.4868': attribute type 3 has an invalid length. [ 490.790850][T23011] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4868'. [ 490.874733][T23000] can: request_module (can-proto-4) failed. [ 490.921355][T23015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4872'. [ 490.965746][T23015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4872'. [ 491.049426][T23022] team0: Port device dummy0 added [ 491.124447][T23025] tipc: Started in network mode [ 491.129591][T23025] tipc: Node identity 4e12a30f1434, cluster identity 4711 [ 491.136916][T23025] tipc: Enabled bearer , priority 0 [ 491.217088][T23037] nbd: device at index 7 is going down [ 491.284001][T23025] syzkaller0: entered promiscuous mode [ 491.290773][T23025] syzkaller0: entered allmulticast mode [ 491.302169][T23025] tipc: Resetting bearer [ 491.330749][T23043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.353953][T23036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.400750][T23023] tipc: Resetting bearer [ 491.459256][T23047] netlink: 784 bytes leftover after parsing attributes in process `syz.1.4882'. [ 491.510521][T23052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.517835][T23052] IPv6: NLM_F_CREATE should be set when creating new route [ 491.525071][T23052] IPv6: NLM_F_CREATE should be set when creating new route [ 491.540493][T23052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.565905][T23054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4883'. [ 492.258050][ T24] tipc: Node number set to 1512481551 [ 493.073292][T23023] tipc: Disabling bearer [ 493.262604][T23064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.199949][T23134] validate_nla: 3 callbacks suppressed [ 494.199970][T23134] netlink: 'syz.6.4907': attribute type 1 has an invalid length. [ 494.238156][T23134] netlink: 'syz.6.4907': attribute type 3 has an invalid length. [ 494.247233][T23134] NCSI netlink: No device for ifindex 131080 [ 494.301522][T23139] netlink: 'syz.7.4910': attribute type 2 has an invalid length. [ 494.518599][T23154] openvswitch: netlink: Message has 4 unknown bytes. [ 494.642486][T23161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.387442][T23204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.391233][T23206] __nla_validate_parse: 8 callbacks suppressed [ 495.391251][T23206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4931'. [ 495.477542][T23204] netlink: 'syz.6.4929': attribute type 15 has an invalid length. [ 495.497487][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4929'. [ 495.524652][T23213] netlink: 'syz.1.4933': attribute type 1 has an invalid length. [ 495.527901][T23204] netlink: 'syz.6.4929': attribute type 15 has an invalid length. [ 495.534163][T23213] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4933'. [ 495.540642][ T9484] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.556082][T23213] netlink: 'syz.1.4933': attribute type 1 has an invalid length. [ 495.563503][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4929'. [ 495.567392][T23213] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4933'. [ 495.590264][ T9484] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.595612][T23215] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4934'. [ 495.620458][T23215] tc_dump_action: action bad kind [ 495.626607][ T9484] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.643987][ T9484] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.876902][T23228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4938'. [ 496.146257][T23259] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4946'. [ 496.155492][T23259] openvswitch: netlink: ufid size 200 bytes exceeds the range (1, 16) [ 496.166435][T23259] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 496.304877][T23263] netlink: 'syz.7.4947': attribute type 1 has an invalid length. [ 497.211003][T23263] bond2: (slave gretap1): making interface the new active one [ 497.258636][T23263] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 497.528653][T23273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4952'. [ 503.728100][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 508.263760][T23296] C: entered allmulticast mode [ 508.291674][T23296] tunl0: entered allmulticast mode [ 508.294924][T23300] netlink: 'syz.7.4960': attribute type 1 has an invalid length. [ 508.315490][T23300] netlink: 'syz.7.4960': attribute type 3 has an invalid length. [ 508.321133][T23296] gre0: entered allmulticast mode [ 508.323662][T23300] netlink: 'syz.7.4960': attribute type 235 has an invalid length. [ 508.360181][T23296] erspan0: entered allmulticast mode [ 508.368904][T23296] ip_vti0: entered allmulticast mode [ 508.376868][T23296] ip6_vti0: entered allmulticast mode [ 508.385540][T23296] sit0: entered allmulticast mode [ 508.404330][T23296] ip6tnl0: entered allmulticast mode [ 508.416820][T23296] ip6gre0: entered allmulticast mode [ 508.434515][T23296] syz_tun: entered allmulticast mode [ 508.455721][T23296] bond0: entered allmulticast mode [ 508.462382][T23296] bond_slave_0: entered allmulticast mode [ 508.473415][T23296] team0: entered allmulticast mode [ 508.479005][T23296] team_slave_0: entered allmulticast mode [ 508.485115][T23296] team_slave_1: entered allmulticast mode [ 508.492539][T23296] dummy0: entered allmulticast mode [ 508.507413][T23296] nlmon0: entered allmulticast mode [ 508.518740][T23296] caif0: entered allmulticast mode [ 508.524926][T23296] batadv0: entered allmulticast mode [ 508.536844][T23296] vxcan0: entered allmulticast mode [ 508.546251][T23296] vxcan1: entered allmulticast mode [ 508.556195][T23296] wg0: entered allmulticast mode [ 508.571184][T23296] wg1: entered allmulticast mode [ 508.582891][T23296] wg2: entered allmulticast mode [ 508.593922][T23296] veth0_to_bridge: entered allmulticast mode [ 508.607943][T23296] bridge_slave_0: entered allmulticast mode [ 508.621085][T23296] veth1_to_bridge: entered allmulticast mode [ 508.634285][T23296] bridge_slave_1: entered allmulticast mode [ 508.645017][T23296] veth0_to_bond: entered allmulticast mode [ 508.657381][T23296] veth0_to_team: entered allmulticast mode [ 508.674234][T23296] veth1_to_team: entered allmulticast mode [ 508.694694][T23296] veth1_to_batadv: entered allmulticast mode [ 508.706765][T23296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.716142][T23296] batadv_slave_1: entered allmulticast mode [ 508.728713][T23296] xfrm0: entered allmulticast mode [ 508.739199][T23296] veth0_to_hsr: entered allmulticast mode [ 508.750629][T23296] hsr_slave_0: entered allmulticast mode [ 508.758398][T23296] veth1_to_hsr: entered allmulticast mode [ 508.770702][T23296] hsr_slave_1: entered allmulticast mode [ 508.781221][T23296] hsr0: entered allmulticast mode [ 508.795526][T23296] veth1_vlan: entered allmulticast mode [ 508.817373][T23296] vlan0: left promiscuous mode [ 508.822919][T23296] vlan1: entered allmulticast mode [ 508.829687][T23296] macvlan0: entered allmulticast mode [ 508.841672][T23296] macvlan1: entered allmulticast mode [ 508.851380][T23296] ipvlan0: entered allmulticast mode [ 508.856982][T23296] ipvlan1: entered allmulticast mode [ 508.864360][T23296] veth1_macvtap: entered allmulticast mode [ 508.875734][T23296] veth0_macvtap: entered allmulticast mode [ 508.887606][T23296] macvtap0: entered allmulticast mode [ 508.898829][T23296] macsec0: entered allmulticast mode [ 508.912515][T23296] geneve0: entered allmulticast mode [ 508.929266][T23296] geneve1: entered allmulticast mode [ 508.950176][T23296] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 508.962871][T23296] vxlan0: entered allmulticast mode [ 508.970985][T23296] mac80211_hwsim hwsim37 wlan2: entered allmulticast mode [ 508.978677][T23296] ip6tnl1: entered allmulticast mode [ 508.989910][T23296] bond1: left promiscuous mode [ 508.994831][T23296] bond2: left promiscuous mode [ 509.004297][T23296] bond1: entered allmulticast mode [ 509.013110][T23296] bond2: entered allmulticast mode [ 509.024931][T23296] gretap1: left promiscuous mode [ 509.044562][T23296] ip6tnl2: entered allmulticast mode [ 509.050406][T23296] bond3: entered allmulticast mode [ 509.055812][T23296] ip6tnl3: entered allmulticast mode [ 509.061846][T23296] bond4: entered allmulticast mode [ 509.073479][T23296] gretap2: entered allmulticast mode [ 509.087492][T23296] gre1: entered allmulticast mode [ 509.125366][T23296] veth2: entered allmulticast mode [ 509.131391][T23296] veth3: entered allmulticast mode [ 509.136937][T23296] veth4: entered allmulticast mode [ 509.142579][T23296] veth5: entered allmulticast mode [ 509.149967][T23296] bond5: left promiscuous mode [ 509.154960][T23296] bond5: entered allmulticast mode [ 509.165465][T23296] wireguard0: entered allmulticast mode [ 509.171583][T23296] veth6: entered allmulticast mode [ 509.178142][T23296] veth7: entered allmulticast mode [ 509.183675][T23296] syztnl0: entered allmulticast mode [ 509.189567][T23296] bridge0: entered allmulticast mode [ 509.195663][T23296] geneve2: entered allmulticast mode [ 509.201499][T23296] veth8: entered allmulticast mode [ 509.207006][T23296] veth9: entered allmulticast mode [ 509.212794][T23296] gretap3: entered allmulticast mode [ 509.221780][T23296] bond6: entered allmulticast mode [ 509.227105][T23296] netdevsim netdevsim2 eth0: entered allmulticast mode [ 509.236111][T23296] netdevsim netdevsim2 eth1: entered allmulticast mode [ 509.244771][T23296] netdevsim netdevsim2 eth2: entered allmulticast mode [ 509.252839][T23296] netdevsim netdevsim2 eth3: entered allmulticast mode [ 509.260099][T23296] bond7: entered allmulticast mode [ 509.265533][T23296] ip6tnl4: entered allmulticast mode [ 509.271224][T23296] mac80211_hwsim hwsim30 t: entered allmulticast mode [ 509.278405][T23296] veth0_to_team.1: entered allmulticast mode [ 509.319589][ T36] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.341854][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.368523][ T36] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.392265][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.407918][ T36] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.436601][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.470068][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.479337][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.530799][T23327] tipc: Enabled bearer , priority 0 [ 509.683181][T23335] netlink: 'syz.1.4969': attribute type 1 has an invalid length. [ 509.693033][T23338] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4971'. [ 509.700198][T23316] syzkaller0: entered promiscuous mode [ 509.704245][T23335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4969'. [ 509.715128][T23316] syzkaller0: entered allmulticast mode [ 509.775929][T23316] tipc: Resetting bearer [ 509.847837][T23314] tipc: Resetting bearer [ 509.861741][T23344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4972'. [ 509.995015][T23356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4972'. [ 511.786671][T23314] tipc: Disabling bearer [ 511.850732][T23370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.928139][T23372] netlink: 'syz.7.4983': attribute type 13 has an invalid length. [ 511.944998][T23374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4981'. [ 512.168855][T23372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.538629][T23411] netlink: 'syz.1.4991': attribute type 1 has an invalid length. [ 512.542466][T23413] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4989'. [ 512.598710][T23411] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 512.788990][T23429] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4995'. [ 513.032604][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4997'. [ 513.098455][T23427] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 513.106038][T23427] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 513.264800][T23449] netlink: 'syz.2.5000': attribute type 10 has an invalid length. [ 513.275712][T23449] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 513.286044][T23449] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 513.326546][T23452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5001'. [ 513.423953][ T9] IPVS: starting estimator thread 0... [ 513.517867][T23460] IPVS: using max 27 ests per chain, 64800 per kthread [ 513.714893][ C1] Unknown status report in ack skb [ 514.038449][T23497] netlink: 'syz.7.5013': attribute type 1 has an invalid length. [ 514.046210][T23497] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5013'. [ 514.105188][T23501] netlink: 'syz.6.5016': attribute type 2 has an invalid length. [ 514.105304][T23497] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 514.171383][T23509] bridge0: port 1(syz_tun) entered blocking state [ 514.178382][T23509] bridge0: port 1(syz_tun) entered disabled state [ 514.186954][T23509] syz_tun: entered promiscuous mode [ 514.204011][T23509] netlink: 'syz.2.5017': attribute type 10 has an invalid length. [ 514.436278][T23528] syz_tun: entered allmulticast mode [ 514.469771][T23530] syzkaller1: entered promiscuous mode [ 514.475279][T23530] syzkaller1: entered allmulticast mode [ 514.603889][T23528] dvmrp1: entered allmulticast mode [ 514.611340][T23539] netlink: 'syz.1.5027': attribute type 11 has an invalid length. [ 514.617447][T23541] netlink: 'syz.5.5029': attribute type 10 has an invalid length. [ 514.628259][T23541] netlink: 'syz.5.5029': attribute type 17 has an invalid length. [ 514.667166][T23541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.671990][T23543] netlink: 'syz.1.5027': attribute type 11 has an invalid length. [ 514.715343][T23527] syz_tun: left allmulticast mode [ 515.049468][T23562] __nla_validate_parse: 2 callbacks suppressed [ 515.049487][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5036'. [ 515.059393][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5037'. [ 515.207064][T23563] tipc: Enabled bearer , priority 0 [ 515.235708][T23562] tipc: Enabling of bearer rejected, already enabled [ 515.279866][T23563] syzkaller0: entered promiscuous mode [ 515.285381][T23563] syzkaller0: entered allmulticast mode [ 515.458961][T23563] tipc: Resetting bearer [ 515.521756][T23563] tipc: Disabling bearer [ 515.627027][T23605] netlink: 'syz.2.5049': attribute type 4 has an invalid length. [ 515.638580][T23605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'. [ 516.017243][T23622] netlink: 'syz.2.5053': attribute type 21 has an invalid length. [ 516.056720][T23622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5053'. [ 516.160702][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5054'. [ 516.229621][T23633] team1: entered promiscuous mode [ 516.239559][T23633] team1: entered allmulticast mode [ 516.246883][T23630] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5054'. [ 516.260742][T23633] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5054'. [ 516.579723][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5059'. [ 516.780119][T23646] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 517.338248][T23658] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5059'. [ 517.359123][T23692] tipc: Enabled bearer , priority 0 [ 517.374390][T23692] syzkaller0: entered promiscuous mode [ 517.409508][T23692] syzkaller0: entered allmulticast mode [ 517.438484][T23692] tipc: Resetting bearer [ 517.529405][T23692] tipc: Resetting bearer [ 517.584969][ T5849] Bluetooth: hci7: command 0x0411 tx timeout [ 517.602546][T23692] tipc: Disabling bearer [ 517.691002][ T36] syzkaller0: tun_net_xmit 76 [ 517.695940][ T36] syzkaller0: tun_net_xmit 48 [ 517.722080][T14839] syzkaller0: tun_net_xmit 76 [ 517.739947][T23716] netlink: 'syz.5.5077': attribute type 1 has an invalid length. [ 517.748062][T23716] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.5077'. [ 517.759110][T23704] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 517.764958][T23704] syzkaller0: Linktype set failed because interface is up [ 517.772828][ T24] syzkaller0: tun_net_xmit 76 [ 517.787891][T23703] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 517.804279][T23703] syzkaller0: Linktype set failed because interface is up [ 519.657867][ T5849] Bluetooth: hci7: command 0x0411 tx timeout [ 519.711043][T23721] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 520.056153][T23744] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 520.733654][T23775] __nla_validate_parse: 1 callbacks suppressed [ 520.733676][T23775] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5091'. [ 520.950365][T23782] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5094'. [ 521.311621][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5098'. [ 521.752702][T23819] team0: Device wireguard1 is of different type [ 522.080579][T23845] tipc: Enabled bearer , priority 13 [ 522.090635][T23837] IPVS: set_ctl: invalid protocol: 704 0.32.0.0:256 [ 522.098920][T23837] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 522.248978][T23857] netlink: 'syz.7.5115': attribute type 1 has an invalid length. [ 522.320382][T23857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.371826][T23865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.386087][T23865] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 522.399419][T23865] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 522.522103][T23857] veth3: entered promiscuous mode [ 522.532164][T23857] bond4: (slave veth3): Enslaving as an active interface with a down link [ 522.541892][T23866] syzkaller1: entered promiscuous mode [ 522.547377][T23866] syzkaller1: entered allmulticast mode [ 522.569447][T23873] vlan2: entered allmulticast mode [ 522.574788][T23873] bond4: entered allmulticast mode [ 523.230118][T23925] vxlan0: entered promiscuous mode [ 523.253000][T23925] vxlan0: entered allmulticast mode [ 523.272175][ T9493] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.290014][ T9493] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.305352][ T9493] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.334703][ T9493] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 523.384931][T23933] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5136'. [ 523.401065][T23933] delete_channel: no stack [ 523.517558][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'. [ 523.524213][T23943] netlink: 5636 bytes leftover after parsing attributes in process `syz.5.5140'. [ 523.663584][T23948] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 523.780875][T23954] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.5144'. [ 523.790932][T23954] netlink: zone id is out of range [ 523.801613][T23954] netlink: zone id is out of range [ 523.808879][T23954] netlink: zone id is out of range [ 523.814239][T23954] netlink: zone id is out of range [ 523.822332][T23954] netlink: zone id is out of range [ 523.831313][T23954] netlink: zone id is out of range [ 523.850833][T23954] netlink: zone id is out of range [ 523.856000][T23954] netlink: zone id is out of range [ 523.916643][T23959] syzkaller0: entered allmulticast mode [ 524.233219][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5149'. [ 524.245429][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5149'. [ 524.441673][T23998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5155'. [ 526.051609][T23975] syzkaller1: entered promiscuous mode [ 526.057117][T23975] syzkaller1: entered allmulticast mode [ 526.067222][T23982] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5152'. [ 526.076890][T23982] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5152'. [ 526.086670][T23982] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5152'. [ 526.395823][T24024] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5160'. [ 526.426961][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5163'. [ 526.437712][T24024] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5160'. [ 526.437993][T24023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5162'. [ 526.448116][T24024] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5160'. [ 526.485293][T24024] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5160'. [ 526.649559][T24039] netlink: 'syz.1.5166': attribute type 10 has an invalid length. [ 526.817016][T24050] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5169'. [ 527.173518][T24064] veth0_to_bridge: left promiscuous mode [ 527.189692][T24064] veth0_to_bridge: left allmulticast mode [ 527.275455][T24064] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 527.287198][T24064] geneve2: left promiscuous mode [ 527.292499][T24064] geneve2: left allmulticast mode [ 527.320451][T24064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.329972][T24064] vlan2: left promiscuous mode [ 527.334863][T24064] bridge0: left promiscuous mode [ 527.342863][T24064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.356945][T24064] geneve3: left promiscuous mode [ 527.362140][T24064] geneve3: left allmulticast mode [ 527.369837][T24064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.379050][T24064] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.389016][T24064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.401378][T24064] bridge5: left allmulticast mode [ 527.421849][T24064] batadv0: entered promiscuous mode [ 527.431194][T24064] ip6erspan0: left promiscuous mode [ 527.438198][T24064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 527.508199][T24077] vlan2: entered allmulticast mode [ 527.513589][T24077] hsr0: entered allmulticast mode [ 527.522452][T24077] hsr_slave_0: entered allmulticast mode [ 527.529051][T24077] hsr_slave_1: entered allmulticast mode [ 527.791649][T24092] xt_HMARK: proto mask must be zero with L3 mode [ 527.959455][T24099] bond9: option miimon: invalid value (18446744073709551585) [ 527.967007][T24099] bond9: option miimon: allowed values 0 - 2147483647 [ 527.989752][T24099] bond9 (unregistering): Released all slaves [ 528.026278][T24105] can: request_module (can-proto-0) failed. [ 528.040202][T24106] can: request_module (can-proto-0) failed. [ 529.444950][ T5849] block nbd2: Receive control failed (result -32) [ 529.455521][ T5850] block nbd3: Receive control failed (result -32) [ 529.808789][ T31] INFO: task syz.4.3174:17124 blocked for more than 143 seconds. [ 529.816561][ T31] Not tainted syzkaller #0 [ 529.848214][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.870631][ T31] task:syz.4.3174 state:D stack:27256 pid:17124 tgid:17123 ppid:5854 task_flags:0x400140 flags:0x00080002 [ 529.896977][ T31] Call Trace: [ 529.920116][ T31] [ 529.924820][ T31] __schedule+0x1798/0x4cc0 [ 529.929867][ T31] ? __lock_acquire+0xab9/0xd20 [ 529.934880][ T31] ? __lock_acquire+0xab9/0xd20 [ 529.942495][ T31] ? __pfx___schedule+0x10/0x10 [ 529.948144][ T31] ? schedule+0x91/0x360 [ 529.952613][ T31] schedule+0x165/0x360 [ 529.957016][ T31] schedule_preempt_disabled+0x13/0x30 [ 529.962871][ T31] __mutex_lock+0x7e6/0x1350 [ 529.967764][ T31] ? __mutex_lock+0x5bb/0x1350 [ 529.972781][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 529.979057][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 529.984239][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 529.991146][ T31] ? __nlmsg_put+0xef/0x1b0 [ 529.995806][ T31] ? genlmsg_put+0x137/0x2e0 [ 530.002073][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 530.009286][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 530.014643][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 530.021222][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 530.026949][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 530.033445][ T31] ? stack_trace_save+0x9c/0xe0 [ 530.038851][ T31] genl_rcv_msg+0x60e/0x790 [ 530.043514][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.056277][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 530.062736][ T31] netlink_rcv_skb+0x205/0x470 [ 530.067604][ T31] ? __lock_acquire+0xab9/0xd20 [ 530.073002][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.078179][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.083759][ T31] ? down_read+0x1ad/0x2e0 [ 530.088515][ T31] genl_rcv+0x28/0x40 [ 530.092600][ T31] netlink_unicast+0x82c/0x9e0 [ 530.097563][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 530.103327][ T31] ? netlink_sendmsg+0x642/0xb30 [ 530.110217][ T31] ? skb_put+0x11b/0x210 [ 530.114680][ T31] netlink_sendmsg+0x805/0xb30 [ 530.119753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.125194][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 530.130781][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.136226][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.141696][ T31] __sock_sendmsg+0x219/0x270 [ 530.146548][ T31] ____sys_sendmsg+0x505/0x830 [ 530.151523][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.156875][ T31] ? import_iovec+0x74/0xa0 [ 530.161862][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 530.166578][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.171984][ T31] ? __fget_files+0x2a/0x420 [ 530.176603][ T31] ? __fget_files+0x3a0/0x420 [ 530.181334][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 530.186313][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.191849][ T31] ? rcu_is_watching+0x15/0xb0 [ 530.196635][ T31] ? do_syscall_64+0xbe/0x3b0 [ 530.201562][ T31] do_syscall_64+0xfa/0x3b0 [ 530.206065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.212097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.219384][ T31] ? clear_bhb_loop+0x60/0xb0 [ 530.224290][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.230458][ T31] RIP: 0033:0x7f6508b8eec9 [ 530.234875][ T31] RSP: 002b:00007f65099d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.243647][ T31] RAX: ffffffffffffffda RBX: 00007f6508de5fa0 RCX: 00007f6508b8eec9 [ 530.251806][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000006 [ 530.259929][ T31] RBP: 00007f6508c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.268060][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.276070][ T31] R13: 00007f6508de6038 R14: 00007f6508de5fa0 R15: 00007ffd3a52d368 [ 530.284232][ T31] [ 530.287337][ T31] [ 530.287337][ T31] Showing all locks held in the system: [ 530.295858][ T31] 2 locks held by ksoftirqd/0/15: [ 530.302405][ T31] #0: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 530.319182][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 530.328668][ T31] 1 lock held by khungtaskd/31: [ 530.333616][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 530.344043][ T31] 2 locks held by getty/5601: [ 530.348888][ T31] #0: ffff8880300960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 530.359231][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 530.369957][ T31] 2 locks held by syz.3.2907/16190: [ 530.375206][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 530.383556][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 530.393893][ T31] 2 locks held by syz.4.3174/17124: [ 530.399225][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 530.407434][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 530.418151][ T31] 3 locks held by syz.0.4304/21037: [ 530.423365][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 530.432032][ T31] #1: ffff88806dfeb6e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 530.442813][ T31] #2: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 530.453947][ T31] 2 locks held by syz.0.4304/21042: [ 530.459236][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 530.467474][ T31] #1: ffff88806dfeb6e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 530.477995][ T31] 2 locks held by syz.6.5210/24203: [ 530.483220][ T31] #0: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 530.492260][ T31] #1: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 530.503235][ T31] [ 530.505593][ T31] ============================================= [ 530.505593][ T31] [ 530.514324][ T31] NMI backtrace for cpu 0 [ 530.514345][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 530.514367][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.514379][ T31] Call Trace: [ 530.514387][ T31] [ 530.514395][ T31] dump_stack_lvl+0x189/0x250 [ 530.514427][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.514451][ T31] ? __pfx__printk+0x10/0x10 [ 530.514492][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 530.514522][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 530.514550][ T31] ? __pfx__printk+0x10/0x10 [ 530.514583][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 530.514605][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 530.514632][ T31] watchdog+0xf93/0xfe0 [ 530.514656][ T31] ? watchdog+0x1de/0xfe0 [ 530.514678][ T31] kthread+0x711/0x8a0 [ 530.514704][ T31] ? __pfx_watchdog+0x10/0x10 [ 530.514750][ T31] ? __pfx_kthread+0x10/0x10 [ 530.514779][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.514805][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.514830][ T31] ? __pfx_kthread+0x10/0x10 [ 530.514855][ T31] ret_from_fork+0x436/0x7d0 [ 530.514883][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 530.514911][ T31] ? __switch_to_asm+0x39/0x70 [ 530.514934][ T31] ? __switch_to_asm+0x33/0x70 [ 530.514958][ T31] ? __pfx_kthread+0x10/0x10 [ 530.514981][ T31] ret_from_fork_asm+0x1a/0x30 [ 530.515021][ T31] [ 530.515703][ T31] Sending NMI from CPU 0 to CPUs 1: [ 530.664024][ C1] NMI backtrace for cpu 1 [ 530.664044][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 530.664064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.664075][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 530.664108][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 530.664124][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 530.664140][ C1] RAX: c4d40c89b136b100 RBX: ffffffff81953917 RCX: c4d40c89b136b100 [ 530.664154][ C1] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 530.664167][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 530.664180][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5b8630 [ 530.664194][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d7b58 [ 530.664205][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 530.664220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.664233][ C1] CR2: 0000200000fc0000 CR3: 000000007dc12000 CR4: 00000000003526f0 [ 530.664248][ C1] Call Trace: [ 530.664257][ C1] [ 530.664264][ C1] default_idle+0x13/0x20 [ 530.664283][ C1] default_idle_call+0x73/0xb0 [ 530.664305][ C1] do_idle+0x1e7/0x510 [ 530.664323][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 530.664343][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.664370][ C1] ? __pfx_do_idle+0x10/0x10 [ 530.664393][ C1] ? do_idle+0x10/0x510 [ 530.664413][ C1] cpu_startup_entry+0x44/0x60 [ 530.664432][ C1] start_secondary+0x101/0x110 [ 530.664447][ C1] common_startup_64+0x13e/0x147 [ 530.664480][ C1] [ 530.665173][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 530.848014][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 530.857130][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.867281][ T31] Call Trace: [ 530.870557][ T31] [ 530.873482][ T31] dump_stack_lvl+0x99/0x250 [ 530.878159][ T31] ? __asan_memcpy+0x40/0x70 [ 530.882741][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.887976][ T31] ? __pfx__printk+0x10/0x10 [ 530.892609][ T31] vpanic+0x281/0x750 [ 530.896612][ T31] ? __pfx_vpanic+0x10/0x10 [ 530.901131][ T31] ? preempt_schedule+0xae/0xc0 [ 530.906045][ T31] ? preempt_schedule_common+0x83/0xd0 [ 530.911647][ T31] panic+0xb9/0xc0 [ 530.915404][ T31] ? __pfx_panic+0x10/0x10 [ 530.919833][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 530.925212][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 530.931494][ T31] watchdog+0xfd2/0xfe0 [ 530.935669][ T31] ? watchdog+0x1de/0xfe0 [ 530.940534][ T31] kthread+0x711/0x8a0 [ 530.944841][ T31] ? __pfx_watchdog+0x10/0x10 [ 530.949520][ T31] ? __pfx_kthread+0x10/0x10 [ 530.954107][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.959302][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.964512][ T31] ? __pfx_kthread+0x10/0x10 [ 530.969122][ T31] ret_from_fork+0x436/0x7d0 [ 530.973983][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 530.979281][ T31] ? __switch_to_asm+0x39/0x70 [ 530.984061][ T31] ? __switch_to_asm+0x33/0x70 [ 530.988827][ T31] ? __pfx_kthread+0x10/0x10 [ 530.993419][ T31] ret_from_fork_asm+0x1a/0x30 [ 530.998191][ T31] [ 531.001336][ T31] Kernel Offset: disabled [ 531.005654][ T31] Rebooting in 86400 seconds..