last executing test programs: 1m44.783299264s ago: executing program 4 (id=506): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000800)=0x1ee, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000240)="810fe052") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x10b, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="070600000000000000002d000000f4b895f37c01124eccdc9d1da28fcca1869a5741014d89eed6062b49529b733d670a46694adcc8faf8e23ac5e613b590be8faa9e99879fe64db7daa28fe9213730bce45248ea0dbd04610482d582be3f6302e532f46470c0e0b161060f78c28d"], 0x14}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0001e000000120010000009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61e45cea781c9e9b26806f68dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9ddc3e6e1f7c5f7b4c5e69c1dd72"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="f35e39bd8db545424ed5c60aad19c407e8a75719c88882cb5bad0d34714f6cf696a490e0"], 0x40}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x2c, 0x66, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {0xc, 0xa}, {0xfff5, 0x2}}, [{0x8, 0xb, 0x40f6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56459, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x300, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r6, {0x1001f, 0xb}, {0xd, 0xa}, {0xd, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008065}, 0x8080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', r6, 0x1, 0x1, 0x4, 0x1000, {{0x17, 0x4, 0x3, 0x3d, 0x5c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0x2, [{@broadcast, 0x4}, {@empty, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x2, [{@empty, 0xd}]}, @timestamp_addr={0x44, 0xc, 0x3f, 0x1, 0x4, [{@empty, 0x4f6}]}, @ra={0x94, 0xffffffffffffff88}, @timestamp={0x44, 0x8, 0xd7, 0x0, 0xc, [0x3]}, @generic={0x86, 0xf, "7b4379eb50e5a8b4514f4fbc9d"}, @noop]}}}}}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000540)={0x1f, 0x0, @none}, &(0x7f0000000580)=0xe, 0x80000) connect$pppl2tp(r12, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x0, 0x2, 0x4, 0x3, {0xa, 0x4e21, 0x6, @private0, 0x4}}}, 0x3a) 1m44.418679279s ago: executing program 4 (id=513): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) (async) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) r2 = accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @netrom, @bcast, @null, @bcast, @bcast, @remote, @rose]}, &(0x7f0000000000)=0x48, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0xfffff000) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m44.267113903s ago: executing program 4 (id=515): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc) 1m44.089145559s ago: executing program 4 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02230003006e4874646576730000000000003c0016803800018028010100000000004446a021683a05193b487c1affff08000000000000000000e5ffffffffffffff00"/81], 0x70}}, 0x24040800) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4) 1m43.745845853s ago: executing program 4 (id=523): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) accept4(r0, 0x0, 0x0, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r1, 0x952de000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x10}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0xc, 0xfffffffe}}]}}}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f0000000100)=0x80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310300000000000020000800000008000300", @ANYRES32=r12, @ANYBLOB="08000600bdb1ddd498e89984c364dc"], 0x24}}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x8000) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf25020000001400090000000000000000000000ffff0a01010105000400570000000400050008000b00", @ANYRES32=r9, @ANYBLOB="0500040003000000050004000200008dab0d4053918bf3c80008000800e000000105000300320000009c7ad8659ffe8b205fc194ec92e605c50bdee8b8652a299e4fd9152fad7b10b8e546269b622c02d55278de9de31e16fe3c58433c06f4a8d5079257d4c207dab5090a89c860cfd8d854aca7c3ad25ddbf918fd3aad6afe302b80561aebe3615494ee0be7931000528d865dd4938fced332f61000000000000000000000000771378ef80680d9cab591cadc786bc4e84783149a1c2d2456755a892da8f6133318d8f2fa3e9981d56eab5c99008090423515f8ec412892570c9"], 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000000) 1m43.449904173s ago: executing program 4 (id=527): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000001540)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @udp={0x2, 0x6, "639eff", 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[@routing={0x2, 0x0, 0x0, 0xe}], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x52) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2668, r6, 0x6, &(0x7f0000000280)=[0x1], &(0x7f00000003c0)=[{0x1, 0x4, 0xc}, {0x4, 0x3, 0x1, 0x1}, {0x0, 0x4, 0x4, 0x8}, {0x1, 0x4, 0x9, 0xb}, {0x5, 0x3, 0x1, 0x5}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0xd}, 0x94) 1m28.442203203s ago: executing program 32 (id=527): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000001540)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @udp={0x2, 0x6, "639eff", 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[@routing={0x2, 0x0, 0x0, 0xe}], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x52) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2668, r6, 0x6, &(0x7f0000000280)=[0x1], &(0x7f00000003c0)=[{0x1, 0x4, 0xc}, {0x4, 0x3, 0x1, 0x1}, {0x0, 0x4, 0x4, 0x8}, {0x1, 0x4, 0x9, 0xb}, {0x5, 0x3, 0x1, 0x5}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0xd}, 0x94) 2.349381587s ago: executing program 5 (id=1536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112be000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x4, 0xe321, 0x0) 2.167650647s ago: executing program 5 (id=1539): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000000c0)={0x4}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x8000, 0x0, {0x5}}, 0x14}}, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1d, 0x2, 0x8000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.946000033s ago: executing program 5 (id=1542): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004b1149f520fd7976843528e6d73b773c8cbebcc6c5372b9123006f10ca7c7b85a0231590243acaa9d5e3668b46087e88f0adc18e1d3b1b97c303efeeed90fc6e43460450ee4cc699c52f26609d5b48e90e89e871d53e71faa4b33f477ab5c9aeeb26306448cbcba146b5754c760fe19bd975e851b295778aa401e100acb5d8333ef7c51178b0a990deffa301bc4d2ad0a35a3a485856c0d392891fb972498c59cc4ba0"], 0x31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000e6180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x78}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfd1) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) r8 = socket$inet6(0xa, 0x1, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@broadcast, 0x4, 0xa, 0x0, 0x2, 0xa, 0x547b31180522e04c, 0xb0, 0x0, 0x0, 0xee01}, {0x0, 0x7, 0x0, 0x0, 0x7}, {0x1000, 0x3, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010101}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3500, 0x0, 0x2}}, 0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000280)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x7f, r7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_extract_tcp_res(&(0x7f00000000c0), 0x8, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r7, 0x25, 0x1c, @void}, 0x33) pselect6(0x40, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x800000008, 0x0, 0x0, 0x8}, 0x0, 0x0) setsockopt(r4, 0x84, 0x82, &(0x7f0000000480)="1a00000002000000", 0x8) 1.723340973s ago: executing program 2 (id=1546): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2f, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r3, 0x0, r2, &(0x7f0000000080), 0x6, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x25, 0x3, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r0, 0x2f, 0x2004, 0x0, @value=r4, @void, @void, @void, r1}, 0x20) 1.670546339s ago: executing program 2 (id=1548): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x9, 0xfffd, 0x4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r7, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0) 1.305706913s ago: executing program 0 (id=1552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x2}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010004b0400000700000000007a000000e4dbb8a34277c99146de3a6df8b31c7417c30cb4ad9b9062b416465a5822f62c641b1c0d09a26d456ba6461c92185c6611185424513555f809f831a61242b10d9fddaa5c7e7f2838289687c4fa985c324421311408c5247e698fe70246a0ca27c2fd78dd6038206b72b0b82f2d5eab402c8d", @ANYRES32=0x0, @ANYBLOB="0000000033080a001c0012800b00010062726964676500000c0002800800310000000000"], 0x3c}}, 0x80) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuset.effective_mems\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008700000000000000a6000000ffffff8595"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0x0, "4d836a7deb8d7b3b5be6afc7cd1e33aece8ed2326e9f735011007aefa2f22d83", 0x1b1, 0x3, 0x3, 0xfffffff7}, 0x3c) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000300)=""/128, &(0x7f0000000580)=0x80) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000000040), 0x4) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "7f"}, @sadb_x_sec_ctx={0x1, 0x18, 0x10, 0xc3}]}, 0x88}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000706010200000002dce80308000640000007d505000100070000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) 1.280695691s ago: executing program 3 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_procfs$namespace(0x0, 0x0) getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001580)={0x0}, &(0x7f0000001540)=0x3b986ea783ecdbed) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001740)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000001840)=0xe8) r5 = getgid() gettid() r6 = getgid() r7 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000002ec0), 0x80000) r8 = socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003400)={0x0, 0x0}, &(0x7f0000003440)=0xc) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003480)) getgid() r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r10) r11 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r11, r10, 0x0, 0x0, 0x0}, 0x30) r12 = getgid() r13 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003b40)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000001500)=0xe8) r15 = getgid() r16 = gettid() r17 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000040c0)={0x0}, &(0x7f0000004100)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004140)={0x0, 0x0, 0x0}, &(0x7f0000004180)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="4bd57e6dc58bb592ea36069b40f9076078655bf699123558c21f6ae0878ea28d54f2729a21ad28383ccfdf95a10b63b5421e8281fb6dd2efc62dd0778d1a821d59db2227a1c9b70f31cb518f9bede777a16675a88deda6ae07c0b8b1955d150c247723d2f92c0913089cc1660f9f20da1730126dabb2b4ca43d1", 0x7a}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000180)="2a8a548042dbafe766e65005cfce0a7ce47b4d4a45eaa5b8354de62f666ec401c5926dedd79aeab5c51b117aab6f370c0e5a45cb30ab14755120776695403d9df3a59830f90c1d9a651fba52287a2cc5488523cf2916e5", 0x57}, {&(0x7f00000012c0)="31b37ff93c2b9eddaab09c15fe8160109292d16ad8184a3ffea478364aac3058b2a8df38a88cc588499a61b6bbd66af84f9328e14473dd009b74d5230d27a7ff8609e98ceae74d0832dd75453ef03d338f36cf24e4520c53dfa5949042618a60be9379beb50255418c5a538e6af45fb1b9d3977e201096ca8ecfcbb6342871389d5f976cd06e", 0x86}], 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000080000000320713700a7b860002000000", @ANYRES64=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES64=r19, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x1}}, {{&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001a00)="924d323372b7677c98150b6106b95bbccb1cb7f4839ca765d45a7c4ba8bbecbcaf7bdad24d900364c06ab16dc2486547de4102bceadde266bb924c87405e221b2c", 0x41}, {&(0x7f0000001a80)="8d37dba1e3e251006dff7b", 0xb}], 0x125e, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b00)="a4aeee7daba81c0009568d222846db3a9ec9bbe91bdcafafcdbd50130e9134537bd306213ff9db2a594833cd23e3654a4833f6b739dae2d405c5c40402756925fedd9f855ca4d294c79b16e199325121a40daae673e1d6d0351dd5d379b0415421b9588d7aac6fa279343eac215e189009c149", 0x73}, {&(0x7f0000001b80)="3daadfddc880bcd0b7ebd4508c2ade96879d0b5c63d7609090013fed5e59c21948680bc4540f63ad48a905df17a7b76943821c9df87b726a5a9982f4cda795d8c5d8c0ad8fcaee34b4a6df18c696fd952c37cc837fcc581afc139d3ddfa9e7efab6dcfdb813861a6fc93e637938e7794700d60044d10bf4e05a335742ffd72c4b3023d3d897d8cb6eb7e1317bfb3e6455a353d5eefc5476502c327b7731b8b256e4b5f5e74381b9a3ac0093b532ae0e9a2e78f4dd040098a988dc966d2f476c04ab911c91499ca6f08437958acb36db482daa38e88eff99c1f0c11ed9717d33f5a5be70cec4558ff2f60704a1a7e0667", 0xf0}, {&(0x7f0000001380)="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", 0x162}, {&(0x7f0000001d00)="a2975a3e1a87aa3c394df4040a5666d372d7c71e37c06cc4907fdf1e29bbdecf5106d2235f3bc0caf80a80ec3593b17adcfa2adb1bdf2666b6c24ba5f826b9a5ba21939717f2376fd48ad09e39ded2e4c3c420c3b0ab7e1374229765f7bb", 0x5e}], 0x4, 0x0, 0x0, 0x20002881}}, {{&(0x7f0000001dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e80), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1c010000000000000100000002000000", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x1}}, {{&(0x7f0000002f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003000)="c1476625d9cbd0a10abcea477999e6b85becd772e2f5d36fc7341f1cdd720bdb81720e132077df7e94fb1edeeb62d8602eb2c9ca2a337b1ece0ba538c8b03e8c075378db4d1ba9ed3bde682f59ca4700d11ef79377339dd83a157c4837c57f6aa923e2edbab3f66877e52c24d2258035298ee9b2e493100ee8397b604199cddea728f726bb6666dfec413520bb891f4b8edfb1a36f318bd2f897815fd26d2d70183f789445012250b7cc7c1dafac60022e8b618e44f4498bc4fd4138a098c61bdd30a323ea36925bba9fe7b3060195450fa4351a2d6cfc5f9d71f0f046446a5dcbdb7ab8571367d5ba645cd7051a6b70a86a94b8f28106da", 0xf8}, {&(0x7f0000003100)="35a4904c7be53829fa4571713b8753177c8da2de0a0659d1da0e16e942b3eb922c157615ae6af790ed7187af3ff8d892f40b5f919a558323498f85d7e1e26caee73e53b9a8bcb91bbb0e7d5c9aebf4ffeddf0238bfc3ae618ced9a0bd820dd06245ec8233d8556684a8eb03594f7647a10ac557034e07de045ab781dc16afb7312157dfd232b90bdb276de1881a236dea9a88c913987e5b8ebf0a51908dd76b1e08d46f39a82b5e73519d21907165cacae4437965bdeaa2f21c66fb2a43b6539729c20015d7e8130f540fe8e8edf06135a9e98be1b310fa7c714f22b41ad3a4f273fd2c7", 0xe4}, {&(0x7f0000003200)="0907768e2c499e7e6de19095f2fbfa3f114346741df8fd15aab9778e6fbe484628a71ad2d31e75586d208b51d6b094fb69c198fc75bfc07d343ef0a83a25d54a559878f3fa3af6cce5b77684e358db6b9fb00c54851cbd756aee594350032059426637aa072cd0ae7ba9db92ca95ee13beaa3e6898176a54fb964a47faf90629d33b58be3b16950b24640245807e295cc84a40621ffdc916815783b831f2a7ef9001bc8af6b1bc89da5e75eede2cd5f45ae7e5f2fce68c486ea75ae719988c00c105079a9355e746a50babd547c4b97a495e68b6aa541d93a4e374c3a240", 0xde}, {&(0x7f0000003300)="e9d5bdd72a8a67890c981d552aec67331488510d76c85a6755f36b7766442835622d7bd11883e25a0ab05f1d56df40827838016024e11fde404fbe050b3b72d4574569c5d5c47a325966d8919d4aa9d56c9b645d981bb7900eb9526db3e1381f53f72a58305ea8303b4086ed4ac90b648205745298ace7bd2bfbe0e1ae345523f7c3732a3f801a4c6f08c4b3f96eb51135e73d85bc1ab5", 0x97}], 0x4, &(0x7f00000034c0), 0x0, 0x40090}}, {{&(0x7f0000003580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003600)="bee881cceec0878f6b81209d99d1c04fce2bf8e0a7ab58e21b61f002bdaa6df19c15bd346c3e56595b9058a3c3609817cba85889bd628782e132dc3978da9ad7ab035f318f2a38afb6a15805de4d0ab5cfc7be160114ba827d7a14c8fa82b97b7785eecac60df90d36338c67eb0bb8cf1538491e1ac7a769ef63e545f62f0df6caa709495a05458bfbcefd3d49380fcc3ce81f6847ea8e351d25b320a6048ec467af1f6b24aced89021a7c93aa91abbbde3102bfa8e7f2b475874f074ed41ad1bbebd24b5774a0a94d511428fa004f5fafd4ae05975366185beebf713e63d3257ca3fe98336fd87eac005ceef8b4c37dde832a329671", 0xf6}, {&(0x7f0000003700)="1f487d902956b2aae6ef191c8f2e4428ad68508e3e109925160dce557567b95682b454c6becbad508f6b4cb45412f0479d345b308460f2df9bd161f392adadbc6bbfab92a14ead7be816883a955e0fdb10627bb5599413b024b231b62dbb77c30d976148ee4eee94f3ec7246cec0613d7b00000000000000", 0x78}, {&(0x7f0000003780)="10054ab0addce67b8308964749f249eed9729dd34bc6893b1fdc1513f88658d06fa3074aa6083e9a47797ccd759502de6692d48294b9f3a7064060cc0ed54a634725f3d34427303b20533c4f540e542c42b60849931d675651b8e073bbae057e3af1810e2cd49b2224906d9463511cd5fb1108fde88b61964c00bed976a65ea5eaf54c8063b1c13cd8962a58dccedff7709c1a54f2f8e7de89f41482870576173b23e3ceb169adffc8e3f286d5d0b1c5e6", 0xb1}, {&(0x7f0000003840)="6af3f5f14f6d7025a84cde5825819bd2ca92d0614fc3343bc28b0c6da8153c03ced3be9dd47b2c349b1c", 0x2a}, {&(0x7f0000003880)="acce739e12207b74055052fb32f0a0f23ebc27f8e4ab3132093e1c1a8dd4941e9ec35fa3f2e9c2e43bb1fe52385d37ef665fa540067faadb1b1f62efa27c075160f47f0528000215bab4c01758b8e7faa852bdebfe0e1de8522f4b9434ac04f2201452fca982ee29c0bcd751fda0117141332a06d18e1c46d92352889d2d6ff3ea1ff8ad78635e855eafab1ac5f76084", 0x90}, {&(0x7f0000003940)="dd2a11e45b335caa7d83ba64bf894725229bab089adac4268896128351d87f4f9adf456bce83520989df8d88de63508fdc41ff36b3a3c6d06d5a50ce8cdbcd311fc592a7ff1742a25a84d548194d730e192a6433552292ecc9a7e411c8feff48d22681c816134012bfecbea2def65eb42216504fc62b2dd61a8a360e", 0x7c}, {&(0x7f00000039c0)="f6200663aeb9849e7569080046155af713a9ac3872effdb78fab86d988e9308f0bfcd84e1946442d9199249a51c99d131c1000b2124b2ac99a4a062ab79caf6fcf8f68a4b65baacd64e5c98a6e15b52016cb8260560c3641c43f81a6f2e63763163900e251ae8bfd37001caeb016bcf1e106ed4c1124dd206d44d28b07e191bd6bbf36b3833a9b72a732729567038bc922851bc4595ed801d240806120f6940bdcde1543b249faa6d3fbd3fa5aa845acc376cb1b66bf0ad3a618de0bd03ee7ade3ad439850ef9416827e73d88abf0ee9f906bbe8b6386daca6f3775ad05a214a5b9a7bc0b03414fb0993274ccf07157e", 0xf0}], 0x7, &(0x7f0000003c80)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0x20}}, {{&(0x7f0000003cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003d40)="7507a4ab86ea7fbc72ab4c685c13465b1aa6683462ca469a37235143e9fcf65dec5462f138bd04379ac272c539a6c1a0e17a04863d6bd9837a7737c768c183a6125a0a3513bb28bb2ca1a33562f50cf47026156280eb9cb24a0841f788e8e65537ec3e7b2d6b40e82ae3acab68b25637e09e73f621509e985cccbad96b0c1ce77a0b249a332964b92f3b4039c0e77303f901bc73fe3133ab57", 0x99}, {&(0x7f0000003e00)="ddda610f413d8969a20e635724409ffd18eee6f05136f353f6c190a4038561a4da64bdab649368d024d0ee9d34be1d4836ab11a490cbead00f3c339deffefab5c29d3bae57ed8f9f97a6a3cc1812b9ad5d69c22e38ada3cea4ca7f3916a4c917ae2793390d96ce2cb0f475c26d17c52156e3b18cb25d01e594a6ad8e6af385f3215dba91b3", 0x85}, {&(0x7f0000003ec0)="a297d25d519b4f6e1e8671339190fd5fbf5246bb8a5ea4b97bc86f6bd5d43b211d638199f899f7595353930d33f18a6f3bb6634edf1a613577add9976a69c363477e2286002894eb39c771958b845933e1bf0c9186992473be76a593005e03d47b11710052caaa9fa49b9b56e5173a1adbeb54aa4f762517b176284f245e6f803526f8527160d6dd049a8a1291ccca47dd06c0964d4c38ed57ab8c8253943b179ea92848d44d02a703559990dfcec877dd", 0xb1}, {&(0x7f0000003f80)="48b7befe0153ede09706cd1ec0c6ac2c66077329c41d54003f3cadda9ad3fdffa90f4d57076dc5d89e963a0a52c718524b2896d0bda36abb3b619de90100ebf2d923a96e402e18abbf9cebe36740886703b15dc127996d2a112ceff555625af218f72da180adcaca528394fed46428187716a6b83127d4e09c451ef1593cfedfcb51175509deec0814d89c1159ba73d5fa2b82bd49be09f33ed39d252d8d185aaa516b7ee830245de9ee7691f0e6f6a653f95e5d198016870e05e540405594ec77899212612742aeb1ef4d4ed503a7814cf2ab870dbd6b99753ac1ef6cd1d9435bb3585fc5ebefc2ffd048f8b21eeeeb79f9f8a19fade26d21c7", 0xfa}], 0x4, &(0x7f00000041c0)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r12}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee00, r20}}}], 0x40, 0x4008115}}], 0x7, 0x20000014) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x5c, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}}, 0x0) 1.228555937s ago: executing program 1 (id=1554): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1404, 0x10, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0xc045) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x8000, 0x8, 0x0, 0x2, {{0x10, 0x4, 0x1, 0x1e, 0x40, 0x64, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x2b, 0xcc, [@remote, @local, @empty, @private=0xa010101, @remote, @private=0xa010102, @local, @empty, @rand_addr=0x64010102, @loopback]}]}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x62}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', r6, 0x4, 0x1, 0xe, 0x784, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8, 0xd, 0x2}}) sendmmsg$inet(r2, &(0x7f0000001400)=[{{&(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000003c0)="1092086ed29b5de7defef349e7794844a50a9493776cd3e4e22f4566fd03b7b91935dbc5ef9107550130c59a7dc8fd790b4f4cae895c3d2712513d30462b5836ecaeb98d2f4d84d0d6e12fc5993225da2bd95232ea879b55a15cd2d62e07e24137f08898cfb92defeea95cf071a389862791a5712707602dbfbaceed80ab142ca7df9f9a517ffe34419266782e1667a14b9463f5b1215a7a704460336e9438ce19d8576eac1eb850008942cf701cf2966d6c43", 0xb3}, {&(0x7f0000000480)="c5dc1750bbae455f7f9ad048a10ba2651e793aff843c1cdee6ea76e07826", 0x1e}, {&(0x7f00000004c0)="3b2cfc090de35959d5c60afb0594fdaaf9659132200591be8e1443f6f20925d884bfc047818dba61b999a5fa40a382e46994dedb5e6aa305e4c7524d9b493305e756961cb9b069fcec99c5f7b10d43c546057fcc9e439fe1cce95cb1dcb9634429e68266712e8e1864363f129fadcad2768a583785248cbbb38c1c1193f660d0cee59853c23db7e82a9418563bd95d5db2556fa5410f72c8b69dd66741e85c896ba07ca19cf5984d41c62d330300ebff288baa04466b0dbcc465f0bbaa2bfbf28f98", 0xc2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="e90014a44925e377c17932330b387d59b8dbbe5bc75a2770391e46e74633064e6e1886a7361c418f332a517c19b9b3c8d4", 0x31}, {&(0x7f0000000640)="2a814a7511148f4df9f0e88842dca3b25c9effbe819823a70725f8bd71c06f190207bf", 0x23}, {&(0x7f0000000680)="17a77ac079de7dbd71cbfa2472344344c57b95252e1048b0e8604613810229faf2201def74f9e20bb7ae87963745e159080d53f488f24c4dfe8f09571c746cffcf6e58ffc94d85a2c57abc0403b67f9f5276ea1c59da19c4a34b0f58690e4287874e4c0a933fcb45948ae42f5447aecdd9e23a3c86fc8e3429accea7ad4240e19ad6a345c62ce1eb789c57d2efb28b9c65161e", 0x93}, {&(0x7f0000000740)="589113dbbc5f3d13117ac9da4b71c344a973", 0x12}, {&(0x7f00000014c0)="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"/293, 0x125}], 0x9, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x90}}, {{&(0x7f0000000bc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="12e65b3901ef6e57bd0034cc04d5a5ddc44bf60db5aeec853eb48ac6480e90d96be52c566d0811ad3b2f4e84f2472091d66b830231597b0f5fcbaafd64c338be8025c0d8ec1ef1c78ef21e2dd088ee4cc6dfe5a8904c3371585e2bdb5161d9b26cc717c93afb2cd59e82a5cc2f6fdae26d20a8f806e571f0dad1b2ef0bac402746c8718748e2b7b42ed71674837c4c945d50b7ccb3a1a772d6681e7e3e18e05fa0dc17f68861e5c67b3ac809837e1e66bfe9c06eb1", 0xb5}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e40)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000e80)="8e36caa84b917c6dce02eb19c2963ac51928d510bcad969b56aa5ad4a81712640857092df1e518a7fbcc27adb090be1579bafc0230fdc9b73db50c84505014573a77b18a93e1c409d2777a00441e93e6", 0x50}, {&(0x7f0000000f00)="f87d8ba7829eeec9eb6d87d00873557467a56e636b72a8e25d230c4ae3022ff0a5b9e3e56440bafc80c6fbdfc459a343a7449e46120d6b3d3386e272158f73cfbb49dc422c8058f2a8e53edf1a65886675f64b9c403935a496b166f6d91419fa475a84d7a2397cd63bc78a3649f1a191a6063cc16c29fd1c", 0x78}, {&(0x7f0000000f80)="40635769cf53e7301fc4abe45ee9618fcf6ee15a9071e7aeedc14d741d87d1de8c81c640ee11326252366ca307624e72709910c3b700f035e60fcf96fd4b05ea055dd4817eeb3922fcff6f005c66282161", 0x51}, {&(0x7f0000001000)}, {&(0x7f0000001040)="3dd2577343c84b9c370a3192d8dff879b7c5fe508c195b1e08eee9f1ca1bd5b59cc4e18178b1385aeed3b92469e68c6c01016d01d85decf01fef45d56204b81fc4531809e6d081a09b5fe67df7d1c1fb02bf1a38264a89d0fa7469614047d1045abffd5ac81ce2464235a8cddd22620e03880681bf50674bf5a8ed8ee4c98ac9de0e7b76cc2ef41987285c35c64a996485338e87c9c09068c4a532e9451fd055863558ceb249308a0a5f57db0169d812f027a58ddcd5d31e13e2927047c011b1744e1dcbcfb9a94e87293ea11c31", 0xce}, {&(0x7f0000001140)="384ba519868625a7ca3599d2ebe1d6b2b7f7e76f6ba938890ccc489e972b8803dd64827adcabfb7fd3643ef29b1e1de49c6ef245dfc6d295daeff910af8715355145858cbdead6e931464bff2d7cffb916b457c6554c172d52699361e2e5d69915edd6bbd0600e693f61efef12321de96fd070edf21f832be5096eab72c065b65fa9c364ba7998b300683e8624c2a713aabbe760d3fa198f10ed235d4377cece11fdb2674d6c325a9a701f7f67b643d30c5b7efbbf9586dfdbfe4506dc46157160ad6a40b89b7ce9909bb1aa2def08c8f0a6376926e49cb2a7", 0xd9}, {&(0x7f0000001240)="ebd9b33aea7613cb33102b6acfb9fb1ea9ad7758033511cb105bb59028720540030aeef3a0cf76bd789fe72ea18ec60892287bf119728149b037ed1b80df4f931a4565ae55f173bdaa33336ed3fd6dda449e68497007619fbe4efd3be32bce0d46824f3ca94753502e4155a203bb4a8a81963602f69ebaa2148ec8626af78639115fdf52f083575f28a4bf87c6632c4b61d21bbca9e583d306d64b14c614e36eda4b541ae9dfd0cc531b41e511a8865bba41fe380dd3ec8caf57b0a3e492411d7f9d7a6c11fa4700bbf203087901b83e33f81493af927564a0", 0xd9}, {&(0x7f0000001340)="14beda060b", 0x5}], 0x8}}], 0x3, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x200}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r8, 0x5, 0x3, [0x4, 0x5, 0xee]}, 0xe) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000140)={{r9}, 0x1, &(0x7f00000000c0)=[0x0], 0xa, 0x1}) 1.179659497s ago: executing program 0 (id=1555): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000140)=""/30, &(0x7f0000000180)=0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) socket(0x0, 0x80000, 0x7) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1.131146988s ago: executing program 1 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0a976038860136919c39f9fc024e5659"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000054) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x90}}, 0x0) 1.053526719s ago: executing program 3 (id=1557): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="1401000027000100000000000000000003"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="1401000027000100000000000000000003"], 0x114}], 0x1}, 0x0) 1.035519389s ago: executing program 3 (id=1558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x80) 891.886128ms ago: executing program 0 (id=1559): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) tee(r0, r3, 0x8f5, 0x100000000000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 777.69951ms ago: executing program 1 (id=1560): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000001d40)=0x421, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x28, 0x4, 0x800, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x4}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r12, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r14, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='&'], 0x10) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x55, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81}, @map_fd={0x18, 0x6}, @alu={0x4, 0x1, 0x2, 0xa, 0x1, 0x1, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xe908, 0xf4, &(0x7f0000000340)=""/244, 0x41100, 0x46, '\x00', r5, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x8, 0xe, 0x1, 0x5}, 0x10, r6, r7, 0x3, &(0x7f00000009c0)=[r8, r9, r10, r11, r12, r13, 0xffffffffffffffff, 0xffffffffffffffff, r15], &(0x7f0000000a00)=[{0x3, 0x4, 0x1, 0x4}, {0x1, 0x2, 0xf, 0xa}, {0x5, 0x2, 0x1, 0x6}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="2000eeffffffffffffff000046a2a78309ab9d49fb54b5b754fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) 776.649968ms ago: executing program 3 (id=1561): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000011140102040000000000000008004a0001000000080003000100000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r4, 0x5}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x5, 0x8}, &(0x7f0000000080)=0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r9, 0xd58}, 0x8) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 770.684205ms ago: executing program 2 (id=1562): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40481c0}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40481c0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r5, 0x0, 0x5, 0x5, 0x5}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffe0}, {0xfff1, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) 748.421547ms ago: executing program 5 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r4, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000240)={0x0, 0x0, "64529b944d3cafe6437efa568d624ab3"}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @multicast2}, {0x1, @remote}, 0x2a, {0x2, 0x4e20, @multicast2}, 'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r1, @ANYBLOB="08000300ec"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 565.798091ms ago: executing program 0 (id=1564): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x1000, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}) 564.831519ms ago: executing program 3 (id=1565): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r2, 0x72b}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00001600", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf250a00000005002f0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff46) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, r9, 0x0, 0x40029}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7020000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000c60c11b454a0980001000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fbffffffffffffff000000000000000000000000fcffffffffffffff0000000000000000000000000001"], 0x90) r10 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r10, 0x110, 0x6, 0x0, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) 518.969272ms ago: executing program 2 (id=1566): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) ppoll(&(0x7f0000000080)=[{r0, 0x4200}], 0x1, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x50, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x15, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 487.510653ms ago: executing program 5 (id=1567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x2, 0xfffffffd}, 0x10) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0000272d"], 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x7, 0x1, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) 485.569831ms ago: executing program 1 (id=1568): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x10) 297.62448ms ago: executing program 5 (id=1569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r3], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r8, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="7d2b4393", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r11, &(0x7f0000000000), 0xffffff98) splice(r10, 0x0, r9, 0x0, 0xfffffffc, 0xf) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x40080) setsockopt(r1, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) unshare(0xa020480) unshare(0x58060880) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="1e93360d1f1b6db716f3ea41670040b5c903156d7662ca50b7416383c089869e32d4836f8b848d3f87f3eb9c3077f5088303f2087a727c3a999f4ea24f79b4986510baf75191bf0f4e9cea89a664120093b85e287d7cf8f96dac63157a63aac797c45d497757d8c3391b7955c4931e48a73f7beeccc8f00477b3627fac10c261d7145dee5cd7e0b6", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=r0], 0xd4}}, 0x4000010) r12 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r12, 0x1) 297.115466ms ago: executing program 0 (id=1570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r4) socket$kcm(0x10, 0x2, 0x10) socketpair(0x21, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000780)={'ipvlan0\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000240)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7406ff4fb4d63e1e98a8e422ce5bd778"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) connect$inet6(r9, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d7429bd7000ffdbdf250abb450008000300", @ANYRES32=r10, @ANYBLOB="10005080050002000500000004000600"], 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0x5) accept4(r11, 0x0, 0x0, 0x0) 247.820953ms ago: executing program 2 (id=1571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x28}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000340)=""/69, &(0x7f0000000080)=0x45) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x28}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) (async) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000340)=""/69, &(0x7f0000000080)=0x45) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$alg(r0, 0x0, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) 200.158887ms ago: executing program 1 (id=1572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x94, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x7, @private0}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r4, 0x8, 0x528, 0x9}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 133.498686ms ago: executing program 3 (id=1573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r3, &(0x7f00000001c0)="9855d6d868ef11c67c427dd233989275718a00eec6ea096b36b8ca870df785f207b1f9206b2260b651ebde9b9f6946f00c7ec68568c1bebea39452e529a8264feaa28ea958ad733baf5278d02de0494812e58aedc639ad64b7188580e20b52eac8a315b81067517ee35fa8318c", 0x6d, 0x20040000, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24040000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)="37ecb4049d141778caba0df5ebd42badf331740e3f62715fab744babc01c34c9eba2b6b379cbb55581ad2e1a950e026825ea981f2d15f6cbe49d33975776b13f388cdab2ac84134e655f4c5051d9236ed88d715e309ba417b8a9136638f6c9b2fe76239f91aeca6f3e8ac55a69bbcff57391599eece5b3fab42194c0dbf7fa85b1d345f814f033b8c1512fa7711c0320082c841971dd198c1a36c07eeda16c3ccb80549b8bb9f3e25abcf48a0876353bdf9dc4d2c14dbbe7eff0702591133003012ab5faddd358c861182b12322cb7", 0xcf}, {&(0x7f0000000580)="37ea08d6b2fc33b92592369558db00d1654e73d1aa2a0154c96c516ec735aa56cb5cf075ee2b8a44ec4b4f1541684ed65bb37da1ca8a5fff8331117ec0f514170c3e1286e0a2b7dcee7f5017809c8b58a9024b98f6802d55ab78684c159ad5e4cf269aa713a47b2368d5905b16a1c3db07cafc82449308250cedc04f2c077969c03399ec5558624d3334f7c4ef44bf6ad94367faf26fc09784334d7d2e62590131b976e03214a477b137c82fe9d0d77c0a80e536b0fffeec", 0xb8}, {&(0x7f0000000440)="bb10a2ae626bd7c346ce11", 0xb}], 0x3) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r6, 0x0) (async, rerun: 64) getpeername$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x40f00, 0x1d, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) (rerun: 64) 97.253198ms ago: executing program 1 (id=1574): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000005c0)=""/253, &(0x7f0000000140)=0xfd) (async) ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r6, 0xe4}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) 96.383098ms ago: executing program 2 (id=1575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x230, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1e8, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1cc, 0x1, [@m_simple={0x180, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x149, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x48, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x19, 0x6, "df76640d30b6ba21699aad3d084f7f7fa20bd027b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 0s ago: executing program 0 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. [ 72.883776][ T5849] cgroup: Unknown subsys name 'net' [ 73.051698][ T5849] cgroup: Unknown subsys name 'cpuset' [ 73.060556][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.463625][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.788164][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.791550][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.804140][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.804251][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.812539][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.826510][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.826582][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.842512][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.850912][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.858987][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.866949][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.879678][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.886784][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.894736][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.896433][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.904574][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.910206][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.924721][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.942135][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.949870][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.970901][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.979735][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.000754][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.009654][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.020900][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.572808][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 79.621980][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 79.873314][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 79.889105][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 79.921560][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 79.939649][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.946963][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.954587][ T5874] bridge_slave_0: entered allmulticast mode [ 79.961861][ T5874] bridge_slave_0: entered promiscuous mode [ 80.017707][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.025002][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.032964][ T5874] bridge_slave_1: entered allmulticast mode [ 80.040868][ T5874] bridge_slave_1: entered promiscuous mode [ 80.125859][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.133462][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.141117][ T5870] bridge_slave_0: entered allmulticast mode [ 80.149033][ T5870] bridge_slave_0: entered promiscuous mode [ 80.173876][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.184243][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.192102][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.199557][ T5870] bridge_slave_1: entered allmulticast mode [ 80.206479][ T5870] bridge_slave_1: entered promiscuous mode [ 80.229589][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.341807][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.355060][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.404293][ T5874] team0: Port device team_slave_0 added [ 80.424556][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.433038][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.440946][ T5867] bridge_slave_0: entered allmulticast mode [ 80.448109][ T5867] bridge_slave_0: entered promiscuous mode [ 80.455417][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.463239][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.470636][ T5861] bridge_slave_0: entered allmulticast mode [ 80.477577][ T5861] bridge_slave_0: entered promiscuous mode [ 80.484702][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.492894][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.500158][ T5862] bridge_slave_0: entered allmulticast mode [ 80.507103][ T5862] bridge_slave_0: entered promiscuous mode [ 80.515928][ T5874] team0: Port device team_slave_1 added [ 80.547514][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.554978][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.562473][ T5867] bridge_slave_1: entered allmulticast mode [ 80.570218][ T5867] bridge_slave_1: entered promiscuous mode [ 80.576774][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.584253][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.591926][ T5861] bridge_slave_1: entered allmulticast mode [ 80.599896][ T5861] bridge_slave_1: entered promiscuous mode [ 80.606544][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.613985][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.621346][ T5862] bridge_slave_1: entered allmulticast mode [ 80.628716][ T5862] bridge_slave_1: entered promiscuous mode [ 80.650807][ T5870] team0: Port device team_slave_0 added [ 80.657583][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.664755][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.690728][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.704303][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.711892][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.738330][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.784476][ T5870] team0: Port device team_slave_1 added [ 80.864211][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.871371][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.898530][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.912473][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.922933][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.929979][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.956407][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.970535][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.982377][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.994572][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.998912][ T51] Bluetooth: hci3: command tx timeout [ 81.003766][ T5881] Bluetooth: hci0: command tx timeout [ 81.009580][ T51] Bluetooth: hci1: command tx timeout [ 81.017391][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.053571][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.077907][ T51] Bluetooth: hci4: command tx timeout [ 81.078579][ T5881] Bluetooth: hci2: command tx timeout [ 81.158973][ T5867] team0: Port device team_slave_0 added [ 81.187804][ T5861] team0: Port device team_slave_0 added [ 81.200806][ T5874] hsr_slave_0: entered promiscuous mode [ 81.207179][ T5874] hsr_slave_1: entered promiscuous mode [ 81.215478][ T5862] team0: Port device team_slave_0 added [ 81.223297][ T5867] team0: Port device team_slave_1 added [ 81.246522][ T5870] hsr_slave_0: entered promiscuous mode [ 81.253178][ T5870] hsr_slave_1: entered promiscuous mode [ 81.259608][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 81.265410][ T5870] Cannot create hsr debugfs directory [ 81.272972][ T5861] team0: Port device team_slave_1 added [ 81.307828][ T5862] team0: Port device team_slave_1 added [ 81.327506][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.334578][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.360921][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.375293][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.383042][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.409208][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.446080][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.453287][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.479808][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.511868][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.518903][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.546011][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.566953][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.574568][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.600747][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.613454][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.620484][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.646411][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.815303][ T5867] hsr_slave_0: entered promiscuous mode [ 81.823402][ T5867] hsr_slave_1: entered promiscuous mode [ 81.833798][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 81.839857][ T5867] Cannot create hsr debugfs directory [ 81.956666][ T5862] hsr_slave_0: entered promiscuous mode [ 81.964152][ T5862] hsr_slave_1: entered promiscuous mode [ 81.971473][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 81.977245][ T5862] Cannot create hsr debugfs directory [ 81.998757][ T5861] hsr_slave_0: entered promiscuous mode [ 82.005559][ T5861] hsr_slave_1: entered promiscuous mode [ 82.012190][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 82.018275][ T5861] Cannot create hsr debugfs directory [ 82.504551][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.534896][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.545442][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.563257][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.626273][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.637450][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.651922][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.686154][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.754466][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.765882][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.793734][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.804066][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.878324][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.895456][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.924957][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.935048][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.059725][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.070623][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.078464][ T5881] Bluetooth: hci0: command tx timeout [ 83.078474][ T5182] Bluetooth: hci3: command tx timeout [ 83.089227][ T5182] Bluetooth: hci1: command tx timeout [ 83.100030][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.117599][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.140311][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.157959][ T5881] Bluetooth: hci2: command tx timeout [ 83.168406][ T5881] Bluetooth: hci4: command tx timeout [ 83.181953][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.264215][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.282862][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.290183][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.302882][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.337623][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.344821][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.396106][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.403346][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.414234][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.421498][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.444338][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.473525][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.516910][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.533003][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.568421][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.575585][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.599426][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.615404][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.622602][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.635601][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.665727][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.692724][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.699864][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.724026][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.731227][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.766040][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.773259][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.795538][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.802738][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.846767][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.275234][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.357379][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.435573][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.476463][ T5870] veth0_vlan: entered promiscuous mode [ 84.555981][ T5870] veth1_vlan: entered promiscuous mode [ 84.591694][ T5867] veth0_vlan: entered promiscuous mode [ 84.631257][ T5867] veth1_vlan: entered promiscuous mode [ 84.683336][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.740086][ T5870] veth0_macvtap: entered promiscuous mode [ 84.755710][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.785344][ T5870] veth1_macvtap: entered promiscuous mode [ 84.829230][ T5867] veth0_macvtap: entered promiscuous mode [ 84.882084][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.894683][ T5867] veth1_macvtap: entered promiscuous mode [ 84.904297][ T5861] veth0_vlan: entered promiscuous mode [ 84.931286][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.953715][ T5862] veth0_vlan: entered promiscuous mode [ 84.974125][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.986635][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.022921][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.032592][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.043069][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.053401][ T5861] veth1_vlan: entered promiscuous mode [ 85.061271][ T5862] veth1_vlan: entered promiscuous mode [ 85.081494][ T5874] veth0_vlan: entered promiscuous mode [ 85.087369][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119837][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.143856][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.153504][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.162484][ T5881] Bluetooth: hci0: command tx timeout [ 85.166234][ T5874] veth1_vlan: entered promiscuous mode [ 85.173715][ T5881] Bluetooth: hci1: command tx timeout [ 85.174745][ T5182] Bluetooth: hci3: command tx timeout [ 85.203897][ T2977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.239381][ T5182] Bluetooth: hci4: command tx timeout [ 85.241579][ T5881] Bluetooth: hci2: command tx timeout [ 85.274937][ T5861] veth0_macvtap: entered promiscuous mode [ 85.312477][ T5861] veth1_macvtap: entered promiscuous mode [ 85.322424][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.331459][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.363037][ T5874] veth0_macvtap: entered promiscuous mode [ 85.382484][ T5862] veth0_macvtap: entered promiscuous mode [ 85.425952][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.426485][ T5862] veth1_macvtap: entered promiscuous mode [ 85.434593][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.461480][ T5874] veth1_macvtap: entered promiscuous mode [ 85.516132][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.530185][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.543188][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.553361][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.577255][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.595497][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.619384][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.619774][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.656884][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.665950][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680797][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.716222][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.736676][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.770907][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.780915][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.790291][ T2977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.799449][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.807289][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.865900][ T5984] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 85.876423][ T2977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.888646][ T2977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.905082][ T2977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.914534][ T2977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.954497][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.153166][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.188276][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.244981][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.270245][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.307593][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 86.344855][ T5990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 86.421923][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.450645][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.475375][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.493876][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.513629][ T5990] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.535490][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.552070][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.578443][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.598756][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.756134][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.777689][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.804065][ T6007] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.840099][ T24] cfg80211: failed to load regulatory.db [ 86.845985][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.923656][ T6013] veth0: entered promiscuous mode [ 86.974028][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 87.128331][ T6020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 87.238652][ T5881] Bluetooth: hci3: command tx timeout [ 87.239985][ T51] Bluetooth: hci0: command tx timeout [ 87.250028][ T5182] Bluetooth: hci1: command tx timeout [ 87.319452][ T51] Bluetooth: hci2: command tx timeout [ 87.325019][ T5182] Bluetooth: hci4: command tx timeout [ 87.626174][ T6045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.850503][ T6057] warning: `syz.4.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.919089][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 88.252705][ T6076] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 88.397373][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'. [ 88.411956][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 88.447564][ T6094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.516786][ T6087] veth1: entered promiscuous mode [ 88.567030][ T6085] sctp: failed to load transform for md5: -2 [ 88.582616][ T6089] netlink: 'syz.2.32': attribute type 12 has an invalid length. [ 88.593210][ T6089] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 88.623494][ T6089] netlink: 'syz.2.32': attribute type 2 has an invalid length. [ 132.922536][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929481][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.423194][ T6141] __nla_validate_parse: 3 callbacks suppressed [ 141.423211][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 141.450553][ T6143] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 141.525040][ T6142] netlink: 312 bytes leftover after parsing attributes in process `syz.1.41'. [ 141.767376][ T6157] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 141.797685][ T6162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.088975][ T6176] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.109403][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.118346][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.255226][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 142.653685][ T6210] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 142.654714][ T6200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.693523][ T6215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.858486][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 142.972511][ T6201] tipc: Started in network mode [ 142.977903][ T6201] tipc: Node identity ac14142f, cluster identity 4711 [ 142.985142][ T6201] tipc: New replicast peer: 0.0.0.0 [ 143.011555][ T6201] tipc: Enabled bearer , priority 10 [ 143.064343][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 143.079097][ T6201] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 143.132446][ T6239] team0: Device vti0 is of different type [ 143.144764][ T6237] Zero length message leads to an empty skb [ 143.155868][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 143.359836][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.458688][ T6246] netlink: 32 bytes leftover after parsing attributes in process `syz.1.69'. [ 143.483879][ T6247] netlink: 100 bytes leftover after parsing attributes in process `syz.2.71'. [ 143.583813][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 143.741053][ T6249] netlink: 'syz.0.72': attribute type 11 has an invalid length. [ 143.786652][ T6249] netlink: 'syz.0.72': attribute type 11 has an invalid length. [ 143.831829][ T6249] netlink: 152 bytes leftover after parsing attributes in process `syz.0.72'. [ 143.902197][ T6267] team0: Device vti0 is of different type [ 144.153396][ T5925] tipc: Node number set to 2886997039 [ 144.247328][ T6280] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 144.280992][ T6281] netlink: 'syz.4.81': attribute type 8 has an invalid length. [ 144.305718][ T6284] netlink: 'syz.4.81': attribute type 8 has an invalid length. [ 144.343585][ T6280] veth0: entered promiscuous mode [ 144.387173][ T6280] veth0 (unregistering): left promiscuous mode [ 144.502978][ T6276] tipc: Started in network mode [ 144.527940][ T6276] tipc: Node identity , cluster identity 4711 [ 144.534374][ T6276] tipc: Failed to obtain node identity [ 144.555102][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 144.672320][ T6301] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 144.738694][ T6301] team0: Device veth1_macvtap failed to register rx_handler [ 144.766867][ T6305] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 144.852718][ T6305] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 144.920691][ T6305] netlink: 'syz.0.87': attribute type 2 has an invalid length. [ 145.054615][ T6320] netlink: 'syz.3.91': attribute type 5 has an invalid length. [ 145.606758][ T6331] syzkaller0: entered promiscuous mode [ 145.636528][ T6331] syzkaller0: entered allmulticast mode [ 145.705948][ T6308] netlink: 'syz.1.88': attribute type 7 has an invalid length. [ 146.884101][ T6364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.064655][ T6369] validate_nla: 2 callbacks suppressed [ 147.064672][ T6369] netlink: 'syz.2.104': attribute type 11 has an invalid length. [ 147.107849][ T6369] __nla_validate_parse: 9 callbacks suppressed [ 147.107865][ T6369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.104'. [ 147.147545][ T6375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.159050][ T6374] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 147.166729][ T6374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.106'. [ 147.876478][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 147.897570][ T6416] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 148.052083][ T6421] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.118'. [ 148.479083][ T6438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.554028][ T6434] svc: failed to register nfsdv3 RPC service (errno 111). [ 148.587495][ T6434] svc: failed to register nfsaclv3 RPC service (errno 111). [ 149.087192][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 149.211892][ T6485] netlink: 96 bytes leftover after parsing attributes in process `syz.4.128'. [ 149.298047][ T6485] vlan2: entered allmulticast mode [ 149.303305][ T6485] gretap0: entered allmulticast mode [ 149.535287][ T6503] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 149.599288][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 149.618680][ T6505] dvmrp1: entered allmulticast mode [ 149.683867][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.774955][ T6507] unknown channel width for channel at 909000KHz? [ 149.829555][ T6522] netlink: 88 bytes leftover after parsing attributes in process `syz.3.141'. [ 149.865492][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 149.879473][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 149.967426][ T6526] nft_compat: unsupported protocol 0 [ 150.399919][ T6550] trusted_key: syz.0.150 sent an empty control message without MSG_MORE. [ 150.874641][ T6566] netlink: 'syz.4.154': attribute type 39 has an invalid length. [ 151.550045][ T6609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.696891][ T6619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.854367][ T6631] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 151.891746][ T6631] netlink: 'syz.4.170': attribute type 4 has an invalid length. [ 151.940734][ T6634] Bluetooth: MGMT ver 1.23 [ 151.961136][ T6634] Bluetooth: MGMT ver 1.23 [ 152.028921][ T6639] tipc: Started in network mode [ 152.055818][ T6639] tipc: Node identity 0694caf73cb3, cluster identity 4711 [ 152.075097][ T6639] tipc: Enabled bearer , priority 0 [ 152.103042][ T6639] syzkaller0: entered promiscuous mode [ 152.122241][ T6639] syzkaller0: entered allmulticast mode [ 152.162359][ T6639] tipc: Resetting bearer [ 152.182157][ T6638] tipc: Resetting bearer [ 152.223717][ T6638] tipc: Disabling bearer [ 152.433079][ T6655] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 152.441054][ T6655] __nla_validate_parse: 8 callbacks suppressed [ 152.441070][ T6655] netlink: 136 bytes leftover after parsing attributes in process `syz.0.178'. [ 152.462135][ T6655] netlink: 'syz.0.178': attribute type 2 has an invalid length. [ 152.471223][ T6655] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 152.604485][ T6662] netlink: 187428 bytes leftover after parsing attributes in process `syz.3.181'. [ 152.618918][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 152.632441][ T6664] sctp: [Deprecated]: syz.1.183 (pid 6664) Use of int in maxseg socket option. [ 152.632441][ T6664] Use struct sctp_assoc_value instead [ 152.957661][ T6683] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.188'. [ 152.975143][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.982938][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.293297][ T6700] netlink: 'syz.4.194': attribute type 8 has an invalid length. [ 153.294991][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054818000: rx timeout, send abort [ 153.310653][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888054818000: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 153.512446][ T6707] netlink: 'syz.2.198': attribute type 39 has an invalid length. [ 153.593974][ T6715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.196'. [ 153.603717][ T6715] netlink: 'syz.4.196': attribute type 10 has an invalid length. [ 153.680845][ T6719] raw_sendmsg: syz.3.199 forgot to set AF_INET. Fix it! [ 153.848953][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 154.091281][ T6743] netlink: 80 bytes leftover after parsing attributes in process `syz.3.207'. [ 154.183526][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 154.195501][ T6747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.209'. [ 154.214256][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 154.246402][ T6750] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 154.262328][ T6750] netlink: 'syz.2.210': attribute type 3 has an invalid length. [ 154.648349][ T6768] veth0_to_team: entered promiscuous mode [ 154.663274][ T6768] veth0_to_team: entered allmulticast mode [ 154.947227][ T6781] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 154.975243][ T6784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.982781][ T6784] IPv6: NLM_F_CREATE should be set when creating new route [ 155.037005][ T6781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.045458][ T6782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.114785][ T6781] veth3: entered promiscuous mode [ 155.131863][ T6797] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 155.132557][ T6786] netlink: 'syz.2.222': attribute type 8 has an invalid length. [ 155.155411][ T6781] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 155.472313][ T6812] ip6erspan0: entered promiscuous mode [ 155.838323][ T6829] Illegal XDP return value 1828051525 on prog (id 178) dev N/A, expect packet loss! [ 156.793502][ T6843] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 156.834437][ T6843] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 156.845196][ T6843] gretap1: entered promiscuous mode [ 156.864146][ T6843] gretap1: entered allmulticast mode [ 157.070665][ T6857] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 157.803429][ T6904] __nla_validate_parse: 12 callbacks suppressed [ 157.803446][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 157.951675][ T6915] syzkaller0: refused to change device tx_queue_len [ 158.038456][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 158.065155][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 158.066673][ T6919] ipvlan2: entered promiscuous mode [ 158.205078][ T6929] validate_nla: 1 callbacks suppressed [ 158.205095][ T6929] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 158.359486][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 158.396430][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 158.476820][ T6939] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 158.502959][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 158.531122][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 158.558445][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 158.893266][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 158.918191][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 159.003225][ T6976] xfrm1: entered promiscuous mode [ 159.035476][ T6976] xfrm1: entered allmulticast mode [ 159.146354][ T6988] netlink: 'syz.4.280': attribute type 11 has an invalid length. [ 159.572426][ T7012] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 159.606199][ T7004] nbd: device at index 64 is going down [ 159.809101][ T7023] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 159.828989][ T7025] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 159.913232][ T7026] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 159.947171][ T7026] netlink: 'syz.2.289': attribute type 2 has an invalid length. [ 159.959097][ T7034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.013464][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.344600][ T7048] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 160.414260][ T7048] team0: Device gtp0 is of different type [ 160.745877][ T7070] netlink: 'syz.4.300': attribute type 3 has an invalid length. [ 160.754080][ T7070] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 160.788655][ T7070] pim6reg1: entered promiscuous mode [ 160.794108][ T7070] pim6reg1: entered allmulticast mode [ 161.307835][ T7092] unknown channel width for channel at 909000KHz? [ 161.720583][ T7117] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 161.978230][ T7128] pimreg: entered allmulticast mode [ 162.009268][ T7128] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 162.182691][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.371482][ T7142] IPv6: sit1: Disabled Multicast RS [ 162.411613][ T7142] sit1: entered allmulticast mode [ 162.854578][ T7144] syzkaller0: entered promiscuous mode [ 162.862559][ T7144] syzkaller0: entered allmulticast mode [ 162.995532][ T7166] __nla_validate_parse: 15 callbacks suppressed [ 162.995551][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 164.621927][ T7166] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 164.637168][ T7172] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 164.650758][ T7172] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 165.380658][ T7203] IPv6: sit1: Disabled Multicast RS [ 165.413933][ T7203] sit1: entered allmulticast mode [ 165.455255][ T7205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.342'. [ 165.492940][ T7205] netlink: 43 bytes leftover after parsing attributes in process `syz.0.342'. [ 165.517161][ T7205] netlink: 'syz.0.342': attribute type 6 has an invalid length. [ 165.563264][ T7205] netlink: 'syz.0.342': attribute type 5 has an invalid length. [ 165.595211][ T7205] netlink: 43 bytes leftover after parsing attributes in process `syz.0.342'. [ 166.080388][ T7235] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 166.175679][ T7235] netlink: 224 bytes leftover after parsing attributes in process `syz.3.351'. [ 166.255374][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 166.363346][ T7247] tipc: Enabling of bearer rejected, already enabled [ 166.451087][ T7247] veth9: entered promiscuous mode [ 166.456261][ T7247] veth9: entered allmulticast mode [ 166.480899][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 166.660799][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.357'. [ 167.004342][ T5182] block nbd0: Receive control failed (result -32) [ 167.275792][ T7279] netlink: 'syz.2.365': attribute type 29 has an invalid length. [ 167.449723][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 167.470250][ T7289] tc_dump_action: action bad kind [ 167.708784][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 168.187882][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 168.226073][ T7315] netlink: 'syz.3.377': attribute type 2 has an invalid length. [ 168.466943][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 168.509868][ T7328] netlink: 'syz.3.383': attribute type 19 has an invalid length. [ 168.533915][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 168.633604][ T7333] macvlan0: entered promiscuous mode [ 168.641006][ T7333] macvlan0: entered allmulticast mode [ 168.845681][ T30] audit: type=1107 audit(1755326786.184:2): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.910604][ T7338] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 169.226503][ T7339] syzkaller1: entered promiscuous mode [ 169.235126][ T7339] syzkaller1: entered allmulticast mode [ 169.633222][ T7376] syzkaller0: entered promiscuous mode [ 169.647970][ T7376] syzkaller0: entered allmulticast mode [ 170.214191][ T7388] netlink: 'syz.1.400': attribute type 33 has an invalid length. [ 170.246092][ T7385] openvswitch: netlink: IPv6 tunnel dst address is zero [ 170.320133][ T7388] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20003 [ 170.757513][ T7410] netlink: 'syz.1.408': attribute type 11 has an invalid length. [ 171.024274][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 171.094960][ T7420] bridge_slave_1: left allmulticast mode [ 171.154013][ T7420] bridge_slave_1: left promiscuous mode [ 171.162004][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 171.188296][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.204015][ T7420] bridge_slave_0: left allmulticast mode [ 171.215972][ T7420] bridge_slave_0: left promiscuous mode [ 171.228904][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.251299][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 171.388858][ T7424] : entered promiscuous mode [ 171.498749][ T7431] ip_vti0: entered promiscuous mode [ 171.504015][ T7431] ip_vti0: entered allmulticast mode [ 171.693133][ T7439] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 172.167162][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 172.289193][ T7463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.292991][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055afb000: rx timeout, send abort [ 172.330615][ T2977] tipc: Subscription rejected, illegal request [ 172.396866][ T7469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.408728][ T7469] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 172.424486][ T7469] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 172.735343][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 172.752930][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 172.792372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c14e800: rx timeout, send abort [ 172.804082][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055afb000: abort rx timeout. Force session deactivation [ 172.835507][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807c14e800: connection exists (fe ff). last cmd: 20 [ 172.947771][ T7496] netlink: 'syz.3.435': attribute type 8 has an invalid length. [ 173.085465][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f358800: rx timeout, send abort [ 173.183625][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 173.329649][ T7513] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 173.519863][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 173.593889][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f358800: abort rx timeout. Force session deactivation [ 173.721694][ T7522] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 173.742112][ T5868] IPVS: starting estimator thread 0... [ 173.811797][ T7526] netlink: 52 bytes leftover after parsing attributes in process `syz.0.443'. [ 173.862272][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 173.918613][ T7531] IPVS: using max 26 ests per chain, 62400 per kthread [ 173.998005][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 174.330847][ T7554] netlink: 10 bytes leftover after parsing attributes in process `syz.2.453'. [ 174.615057][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 174.697227][ T7554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.453'. [ 174.921729][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 175.309218][ T7594] netlink: 184 bytes leftover after parsing attributes in process `syz.3.463'. [ 175.436291][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.460'. [ 176.193935][ T7628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.467371][ T7660] netlink: 'syz.2.481': attribute type 13 has an invalid length. [ 176.663624][ T7672] sctp: [Deprecated]: syz.4.484 (pid 7672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.663624][ T7672] Use struct sctp_sack_info instead [ 176.710903][ T7671] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 176.750075][ T7674] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 176.886684][ T7685] netlink: 'syz.0.486': attribute type 24 has an invalid length. [ 176.921989][ T7687] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 177.115935][ T7700] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 177.166652][ T7700] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 177.636101][ T7733] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 177.798604][ T7736] sctp: [Deprecated]: syz.3.501 (pid 7736) Use of int in maxseg socket option. [ 177.798604][ T7736] Use struct sctp_assoc_value instead [ 177.866915][ T7736] sctp: [Deprecated]: syz.3.501 (pid 7736) Use of int in maxseg socket option. [ 177.866915][ T7736] Use struct sctp_assoc_value instead [ 177.894182][ T7736] sctp: [Deprecated]: syz.3.501 (pid 7736) Use of int in maxseg socket option. [ 177.894182][ T7736] Use struct sctp_assoc_value instead [ 178.174301][ T7754] gtp0: entered promiscuous mode [ 178.182129][ T7754] gtp0: entered allmulticast mode [ 178.195172][ T7759] netlink: 'syz.0.507': attribute type 12 has an invalid length. [ 178.386532][ T7766] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 178.501108][ T7773] gretap1: entered promiscuous mode [ 178.529424][ T7776] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 178.680589][ T7776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.726928][ T7785] __nla_validate_parse: 10 callbacks suppressed [ 178.726946][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 178.803382][ T7785] netlink: 244 bytes leftover after parsing attributes in process `syz.3.516'. [ 178.822075][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 178.834734][ T7782] bond4: (slave veth3): Enslaving as an active interface with a down link [ 178.838006][ T7787] netlink: 80 bytes leftover after parsing attributes in process `syz.4.517'. [ 178.879253][ T7783] bond4: (slave veth0_to_bond): making interface the new active one [ 178.893896][ T7783] veth0_to_bond: entered promiscuous mode [ 178.902696][ T7783] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 179.088764][ T30] audit: type=1800 audit(1755326796.414:3): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.523" name="memory.events" dev="tmpfs" ino=499 res=0 errno=0 [ 179.129114][ T7808] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 179.154922][ T7808] netlink: 'syz.4.523': attribute type 10 has an invalid length. [ 179.180941][ T7808] team0: Device hsr_slave_0 failed to register rx_handler [ 179.316401][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 179.502980][ T7832] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.633198][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'. [ 179.692082][ T7838] tipc: Started in network mode [ 179.697176][ T7838] tipc: Node identity fe2b11e739c4, cluster identity 4711 [ 179.706348][ T7838] tipc: Enabled bearer , priority 0 [ 179.722929][ T7836] syz.3.532 (7836) used greatest stack depth: 17640 bytes left [ 179.770611][ T7841] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 179.784977][ T7841] tipc: Resetting bearer [ 179.949884][ T7837] tipc: Disabling bearer [ 180.520066][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 180.659354][ T7882] netlink: 244 bytes leftover after parsing attributes in process `syz.0.546'. [ 180.743883][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 180.783528][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 180.864985][ T7888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.820119][ T7890] bond2 (unregistering): Released all slaves [ 181.842459][ T7905] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 182.037449][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.216977][ T7924] C: renamed from lo (while UP) [ 182.253391][ T7924] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 182.544997][ T7940] veth3: entered allmulticast mode [ 182.551250][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.564284][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.574618][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.582697][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.982287][ T7958] netlink: 'syz.3.571': attribute type 11 has an invalid length. [ 183.069158][ T6469] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 183.801346][ T7970] validate_nla: 2 callbacks suppressed [ 183.801363][ T7970] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 183.828902][ T7970] __nla_validate_parse: 3 callbacks suppressed [ 183.828920][ T7970] netlink: 232 bytes leftover after parsing attributes in process `syz.1.574'. [ 183.898980][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 183.992946][ T7979] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.122690][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 184.471172][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 184.620603][ T7987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.820635][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 185.225622][ T8044] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 185.240242][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 185.306223][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.595'. [ 185.320761][ T8046] netlink: 'syz.2.595': attribute type 2 has an invalid length. [ 185.406503][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 185.417884][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 185.427322][ T8051] netlink: 'syz.2.596': attribute type 18 has an invalid length. [ 185.456725][ T2913] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.465991][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 185.475294][ T2913] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.485652][ T2913] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.498630][ T8051] netlink: 'syz.2.596': attribute type 18 has an invalid length. [ 185.513091][ T8051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.520399][ T8051] IPv6: NLM_F_CREATE should be set when creating new route [ 185.528870][ T8056] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 185.547086][ T2913] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.639832][ T30] audit: type=1800 audit(1755326803.974:4): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.612" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 187.087859][ T8117] nbd1: detected capacity change from 0 to 127 [ 187.229591][ T5182] block nbd1: Receive control failed (result -104) [ 188.216711][ T8180] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 188.494819][ T8194] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.545185][ T8159] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 188.555993][ T8164] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 188.880428][ T8210] team0 (unregistering): Port device team_slave_0 removed [ 188.893546][ T8210] team0 (unregistering): Port device team_slave_1 removed [ 188.946832][ T8211] __nla_validate_parse: 12 callbacks suppressed [ 188.946849][ T8211] netlink: 11 bytes leftover after parsing attributes in process `syz.0.644'. [ 188.972413][ T8211] netlink: 11 bytes leftover after parsing attributes in process `syz.0.644'. [ 189.138678][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'. [ 189.292912][ T8237] netlink: 244 bytes leftover after parsing attributes in process `syz.2.652'. [ 189.319062][ T8237] openvswitch: netlink: Flow actions attr not present in new flow. [ 189.417329][ T8245] tipc: Invalid UDP bearer configuration [ 189.417402][ T8245] tipc: Enabling of bearer rejected, failed to enable media [ 189.620000][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 189.807944][ T5182] Bluetooth: hci3: command 0x0401 tx timeout [ 189.934830][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'. [ 189.944293][ T8279] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 189.980742][ T8197] veth0_to_bond: left promiscuous mode [ 190.022441][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'. [ 190.031953][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'. [ 190.894694][ T8306] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 190.999150][ T8313] netlink: 'syz.3.672': attribute type 1 has an invalid length. [ 191.017135][ T8313] netlink: 224 bytes leftover after parsing attributes in process `syz.3.672'. [ 191.533828][ T8342] netlink: 72 bytes leftover after parsing attributes in process `syz.3.682'. [ 191.548366][ T8342] pim6reg1: entered promiscuous mode [ 191.553941][ T8342] pim6reg1: entered allmulticast mode [ 191.808663][ T6009] IPVS: starting estimator thread 0... [ 191.878353][ T5182] Bluetooth: hci3: command 0x0401 tx timeout [ 191.936663][ T8354] IPVS: using max 28 ests per chain, 67200 per kthread [ 191.987818][ T8360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.074646][ T8367] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 192.141728][ T8360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.243800][ T8370] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 192.289061][ T8373] veth3: entered promiscuous mode [ 192.335496][ T8373] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 193.743958][ T8445] netlink: 'syz.2.714': attribute type 4 has an invalid length. [ 193.795577][ T8449] netlink: 'syz.2.714': attribute type 4 has an invalid length. [ 193.897001][ T8452] bridge_slave_0: left allmulticast mode [ 193.904841][ T8452] bridge_slave_0: left promiscuous mode [ 193.912230][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.946921][ T8452] bridge_slave_1: left allmulticast mode [ 193.953167][ T8452] bridge_slave_1: left promiscuous mode [ 193.959356][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.973888][ T8452] bond0: (slave bond_slave_0): Releasing backup interface [ 193.987514][ T8452] bond0: (slave bond_slave_1): Releasing backup interface [ 194.015059][ T8452] team0: Port device team_slave_0 removed [ 194.029700][ T8452] team0: Port device team_slave_1 removed [ 194.036064][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.050251][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.143179][ T8457] __nla_validate_parse: 8 callbacks suppressed [ 194.143198][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.718'. [ 194.213671][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 194.370827][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.888207][ T8502] netlink: 72 bytes leftover after parsing attributes in process `syz.0.729'. [ 194.898970][ T8504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.730'. [ 194.933528][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 194.973776][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.986096][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.995060][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.005035][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.013961][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.146829][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 195.303929][ T8522] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 195.321778][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.735'. [ 195.349912][ T8522] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.505502][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 195.584301][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.591693][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.599150][ T8505] bridge_slave_0: entered allmulticast mode [ 195.640741][ T8505] bridge_slave_0: entered promiscuous mode [ 195.670790][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.694059][ T8535] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.697645][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.710854][ T8505] bridge_slave_1: entered allmulticast mode [ 195.731215][ T8505] bridge_slave_1: entered promiscuous mode [ 195.850536][ T30] audit: type=1804 audit(1755326813.184:5): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.739" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=724 res=1 errno=0 [ 195.895835][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.924080][ T30] audit: type=1800 audit(1755326813.184:6): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.739" name="cgroup.controllers" dev="tmpfs" ino=724 res=0 errno=0 [ 195.974261][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.119145][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 196.144994][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 196.168050][ T8559] netlink: 'syz.3.744': attribute type 15 has an invalid length. [ 196.205353][ T8505] team0: Port device team_slave_0 added [ 196.233613][ T8505] team0: Port device team_slave_1 added [ 196.333393][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.363395][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.428785][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.458616][ T8574] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 196.461371][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.486355][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.543111][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.577081][ T8577] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.797797][ T8591] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'. [ 196.804756][ T8505] hsr_slave_0: entered promiscuous mode [ 196.827269][ T8505] hsr_slave_1: entered promiscuous mode [ 196.857430][ T8505] debugfs: 'hsr0' already exists in 'hsr' [ 196.877474][ T8505] Cannot create hsr debugfs directory [ 197.082076][ T5182] Bluetooth: hci5: command tx timeout [ 197.454993][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.883243][ T8505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.929984][ T8505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.946799][ T8505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.960628][ T8505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.190632][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.246794][ T8671] netlink: 'syz.3.777': attribute type 3 has an invalid length. [ 198.269963][ T8672] vlan2: entered allmulticast mode [ 198.275133][ T8672] bridge0: entered allmulticast mode [ 198.282475][ T8672] bridge5: port 1(vlan2) entered blocking state [ 198.290690][ T8672] bridge5: port 1(vlan2) entered disabled state [ 198.300315][ T8672] vlan2: entered promiscuous mode [ 198.305381][ T8672] bridge0: entered promiscuous mode [ 198.463124][ T8676] ip_vti0: left promiscuous mode [ 198.474021][ T8676] ip_vti0: left allmulticast mode [ 198.620144][ T8686] can: request_module (can-proto-4) failed. [ 199.132718][ T8676] gretap1: left promiscuous mode [ 199.145839][ T8676] gretap1: left allmulticast mode [ 199.159199][ T5182] Bluetooth: hci5: command tx timeout [ 199.305627][ T56] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.333025][ T56] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.362706][ T56] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.375811][ T56] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.408730][ T56] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.455626][ T56] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.495046][ T56] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.508821][ T56] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.532758][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.567364][ T8712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.624783][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.632008][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.693103][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.700320][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.921451][ T8734] __nla_validate_parse: 42 callbacks suppressed [ 199.921471][ T8734] netlink: 348 bytes leftover after parsing attributes in process `syz.1.791'. [ 199.944359][ T8727] syzkaller0: entered promiscuous mode [ 199.950382][ T8727] syzkaller0: entered allmulticast mode [ 201.218564][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.241068][ T5871] Bluetooth: hci5: command tx timeout [ 201.505434][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 201.533819][ T8772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.801'. [ 201.559495][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 201.573895][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 201.580614][ T5871] Bluetooth: hci3: command 0x0401 tx timeout [ 201.707254][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 201.750803][ T8776] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 202.032808][ T8505] veth0_vlan: entered promiscuous mode [ 202.080544][ T8799] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 202.097172][ T8505] veth1_vlan: entered promiscuous mode [ 202.123035][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.811'. [ 202.146538][ T8805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.168908][ T8803] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.219644][ T8505] veth0_macvtap: entered promiscuous mode [ 202.252015][ T8505] veth1_macvtap: entered promiscuous mode [ 202.275623][ T8805] can: request_module (can-proto-0) failed. [ 202.323426][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.352118][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.405056][ T8197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.500873][ T2913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.514168][ T2913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.525677][ T2913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.715241][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.751291][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.821767][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.844709][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.152461][ T8846] veth0_to_team: entered promiscuous mode [ 203.171036][ T8846] veth0_to_team: entered allmulticast mode [ 203.199880][ T8846] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 203.318401][ T5881] Bluetooth: hci5: command tx timeout [ 203.367448][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 203.401007][ T8853] netlink: 'syz.1.825': attribute type 7 has an invalid length. [ 203.443938][ T8853] : entered promiscuous mode [ 203.458167][ T8862] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 203.693367][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 203.750096][ T8875] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 204.479641][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.838'. [ 204.796686][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 205.042618][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 205.081042][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.105446][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.172249][ T8929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.199606][ T8940] ipvlan2: entered promiscuous mode [ 205.216499][ T8940] bridge0: port 3(ipvlan2) entered blocking state [ 205.241037][ T8940] bridge0: port 3(ipvlan2) entered disabled state [ 205.278659][ T8940] ipvlan2: entered allmulticast mode [ 205.288182][ T8940] bridge0: entered allmulticast mode [ 205.329052][ T8940] ipvlan2: left allmulticast mode [ 205.372298][ T8940] bridge0: left allmulticast mode [ 205.439353][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 205.515089][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 206.185563][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.5.861'. [ 206.253403][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 206.283012][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 206.304413][ T8996] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 206.318296][ T8996] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 206.423339][ T8997] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 206.466082][ T9007] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 206.583556][ T9013] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 206.619163][ T9011] bond2: (slave gretap1): making interface the new active one [ 206.630449][ T9011] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 206.688921][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 206.774319][ T9014] bond2: (slave gretap1): making interface the new active one [ 206.811840][ T9014] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 206.822372][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 206.835961][ T9015] syzkaller1: entered promiscuous mode [ 206.853070][ T9015] syzkaller1: entered allmulticast mode [ 207.020187][ T9034] netlink: 64 bytes leftover after parsing attributes in process `syz.3.870'. [ 207.046341][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'. [ 207.598086][ T9060] openvswitch: netlink: Flow key attribute not present in set flow. [ 208.149296][ T9087] syzkaller0: entered promiscuous mode [ 208.155045][ T9087] syzkaller0: entered allmulticast mode [ 208.199369][ T9093] tipc: Enabled bearer , priority 0 [ 208.331622][ T9105] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 209.395327][ T9093] syzkaller0: entered allmulticast mode [ 209.475107][ T9092] tipc: Disabling bearer [ 209.599769][ T9114] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 209.930399][ T9139] tipc: New replicast peer: 255.255.255.255 [ 209.963084][ T9139] tipc: Enabled bearer , priority 10 [ 210.243717][ T9155] __nla_validate_parse: 5 callbacks suppressed [ 210.243736][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 210.359479][ T51] Bluetooth: hci0: command tx timeout [ 210.396939][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 210.459162][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 210.505767][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 210.552646][ T9171] netlink: 284 bytes leftover after parsing attributes in process `syz.1.908'. [ 211.078838][ T5939] tipc: Node number set to 3354333671 [ 211.180252][ T9179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.363160][ T9196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.370505][ T9196] IPv6: NLM_F_CREATE should be set when creating new route [ 211.417042][ T9179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.491338][ T9201] tipc: Enabled bearer , priority 0 [ 211.512097][ T9201] syzkaller0: entered promiscuous mode [ 211.517608][ T9201] syzkaller0: entered allmulticast mode [ 211.579563][ T9179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.602270][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 211.653952][ T9201] tipc: Resetting bearer [ 211.768881][ T9198] tipc: Resetting bearer [ 211.797888][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.823901][ T9224] tipc: Can't bind to reserved service type 1 [ 211.842470][ T9198] tipc: Disabling bearer [ 211.993943][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.050158][ T9229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.923'. [ 212.077449][ T9232] netlink: 'syz.2.924': attribute type 6 has an invalid length. [ 212.082821][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.128120][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.166916][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.299277][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 212.350424][ T9241] netlink: 'syz.3.928': attribute type 4 has an invalid length. [ 212.467991][ T9231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.596309][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 212.625356][ T9255] netlink: 13 bytes leftover after parsing attributes in process `syz.3.934'. [ 212.644750][ T9255] netlink: 'syz.3.934': attribute type 7 has an invalid length. [ 212.972332][ T9276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.144358][ T9284] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 213.178715][ T9284] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 213.308873][ T9291] veth0: entered promiscuous mode [ 213.432932][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.464675][ T9298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.477591][ T9304] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 213.805554][ T9316] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 213.840050][ T9319] netlink: 'syz.0.955': attribute type 4 has an invalid length. [ 213.870938][ T9319] `: renamed from bond0 (while UP) [ 214.002779][ T9323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.100493][ T9289] veth0: left promiscuous mode [ 214.401792][ T9350] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 214.849098][ T9383] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 214.911506][ T9389] tipc: Enabled bearer , priority 0 [ 214.919977][ T9389] syzkaller0: entered promiscuous mode [ 214.925629][ T9389] syzkaller0: entered allmulticast mode [ 214.961663][ T9389] tipc: Resetting bearer [ 214.976173][ T9389] netlink: 'syz.0.977': attribute type 24 has an invalid length. [ 214.995394][ T9388] tipc: Resetting bearer [ 215.024683][ T9388] tipc: Disabling bearer [ 215.215012][ T9395] pimreg: entered allmulticast mode [ 215.835831][ T9442] tipc: Enabling of bearer rejected, failed to enable media [ 215.982931][ T9450] __nla_validate_parse: 13 callbacks suppressed [ 215.982949][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'. [ 216.093071][ T9455] ip6gre1: entered allmulticast mode [ 216.120223][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'. [ 216.996782][ T9500] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 217.167731][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'. [ 217.419331][ T55] block nbd1: Possible stuck request ffff8880252d5080: control (read@0,1024B). Runtime 30 seconds [ 217.438949][ T55] block nbd1: Possible stuck request ffff8880252d5240: control (read@1024,1024B). Runtime 30 seconds [ 217.449975][ T55] block nbd1: Possible stuck request ffff8880252d5400: control (read@2048,1024B). Runtime 30 seconds [ 217.461842][ T55] block nbd1: Possible stuck request ffff8880252d55c0: control (read@3072,1024B). Runtime 30 seconds [ 217.741023][ T9539] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1018'. [ 217.804671][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1018'. [ 217.830444][ T9549] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 217.840873][ T9542] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1018'. [ 217.892253][ T9548] netlink: zone id is out of range [ 217.901273][ T9548] netlink: zone id is out of range [ 217.908679][ T9548] netlink: zone id is out of range [ 217.919456][ T9548] netlink: zone id is out of range [ 217.927250][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 217.940897][ T9548] netlink: zone id is out of range [ 217.970191][ T9550] syzkaller0: entered promiscuous mode [ 217.987190][ T9550] syzkaller0: entered allmulticast mode [ 218.007938][ T9548] netlink: zone id is out of range [ 218.046491][ T9548] netlink: zone id is out of range [ 218.074766][ T9548] netlink: zone id is out of range [ 218.094944][ T9548] netlink: zone id is out of range [ 218.109610][ T9548] netlink: zone id is out of range [ 218.114911][ T9548] netlink: zone id is out of range [ 218.131658][ T9548] netlink: zone id is out of range [ 218.172886][ T9548] netlink: zone id is out of range [ 218.206913][ T9548] netlink: zone id is out of range [ 218.230610][ T9548] netlink: zone id is out of range [ 218.235551][ T9578] netlink: 'syz.2.1028': attribute type 11 has an invalid length. [ 218.236422][ T9579] netlink: 'syz.5.1026': attribute type 11 has an invalid length. [ 218.336883][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1026'. [ 218.370050][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1026'. [ 218.417253][ T9583] netlink: 'syz.3.1029': attribute type 12 has an invalid length. [ 218.446955][ T9583] netlink: 'syz.3.1029': attribute type 29 has an invalid length. [ 218.468367][ T9583] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1029'. [ 218.792175][ T9601] bridge5: entered allmulticast mode [ 218.952581][ T9624] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 219.438665][ T9643] IPv6: sit1: Disabled Multicast RS [ 219.444990][ T9643] sit1: entered allmulticast mode [ 219.703093][ T9647] syzkaller0: entered promiscuous mode [ 219.755723][ T9647] syzkaller0: entered allmulticast mode [ 221.468121][ T9698] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 221.601721][ T9710] __nla_validate_parse: 4 callbacks suppressed [ 221.601739][ T9710] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1055'. [ 221.712789][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 221.751287][ T9719] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 221.988762][ T9729] syzkaller0: entered promiscuous mode [ 222.004303][ T9729] syzkaller0: entered allmulticast mode [ 222.213108][ T9747] FAULT_INJECTION: forcing a failure. [ 222.213108][ T9747] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 222.238219][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.2.1070 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 222.238244][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.238261][ T9747] Call Trace: [ 222.238269][ T9747] [ 222.238277][ T9747] dump_stack_lvl+0x189/0x250 [ 222.238303][ T9747] ? __pfx____ratelimit+0x10/0x10 [ 222.238325][ T9747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.238344][ T9747] ? __pfx__printk+0x10/0x10 [ 222.238366][ T9747] ? __might_fault+0xb0/0x130 [ 222.238401][ T9747] should_fail_ex+0x414/0x560 [ 222.238427][ T9747] _copy_from_user+0x2d/0xb0 [ 222.238447][ T9747] ___sys_sendmsg+0x158/0x2a0 [ 222.238469][ T9747] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.238524][ T9747] ? __fget_files+0x2a/0x420 [ 222.238538][ T9747] ? __fget_files+0x3a0/0x420 [ 222.238563][ T9747] __x64_sys_sendmsg+0x19b/0x260 [ 222.238583][ T9747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.238616][ T9747] ? __pfx_ksys_write+0x10/0x10 [ 222.238635][ T9747] ? rcu_is_watching+0x15/0xb0 [ 222.238658][ T9747] ? do_syscall_64+0xbe/0x3b0 [ 222.238684][ T9747] do_syscall_64+0xfa/0x3b0 [ 222.238705][ T9747] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.238726][ T9747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.238742][ T9747] ? clear_bhb_loop+0x60/0xb0 [ 222.238763][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.238780][ T9747] RIP: 0033:0x7f925758ebe9 [ 222.238799][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.238812][ T9747] RSP: 002b:00007f92557f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.238834][ T9747] RAX: ffffffffffffffda RBX: 00007f92577b5fa0 RCX: 00007f925758ebe9 [ 222.238847][ T9747] RDX: 0000000000004000 RSI: 0000200000001c00 RDI: 0000000000000003 [ 222.238858][ T9747] RBP: 00007f92557f6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.238868][ T9747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.238879][ T9747] R13: 00007f92577b6038 R14: 00007f92577b5fa0 R15: 00007ffc75cddfe8 [ 222.238908][ T9747] [ 222.672211][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 222.810585][ T9763] bond6: entered promiscuous mode [ 222.856170][ T9763] bond6: entered allmulticast mode [ 222.864278][ T9763] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.983015][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 223.198489][ T9763] bond6 (unregistering): Released all slaves [ 223.397904][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'. [ 223.413963][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 223.436163][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 223.461237][ T9807] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1089'. [ 223.471521][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 223.474195][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 223.491892][ T9807] tipc: Enabling of bearer rejected, failed to enable media [ 223.833606][ T9830] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 224.294612][ T9868] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 224.336555][ T9868] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 224.554820][ T9891] pimreg: entered allmulticast mode [ 224.906216][ T9915] netlink: 'syz.3.1119': attribute type 13 has an invalid length. [ 225.846198][ T9964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.886761][ T9974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.940284][ T9922] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 225.950982][ T5868] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 225.962889][ T9974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.007462][ T9980] netlink: 'syz.0.1137': attribute type 10 has an invalid length. [ 226.007731][ T5868] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 226.065430][ T49] wlan1: authenticated [ 226.094109][ T49] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 226.172669][ T9980] `: (slave geneve1): Enslaving as an active interface with an up link [ 226.185595][ T9992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.189429][ T8197] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 226.244798][ T9989] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 226.261904][ T8197] wlan1: associated [ 226.575127][ T49] nci: nci_rx_work: unknown MT 0x6 [ 226.742981][T10004] syzkaller0: entered promiscuous mode [ 226.750393][T10004] syzkaller0: entered allmulticast mode [ 227.530561][T10041] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 227.542800][T10041] __nla_validate_parse: 14 callbacks suppressed [ 227.542817][T10041] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1154'. [ 227.578978][T10039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.724059][T10045] syz_tun: entered allmulticast mode [ 227.840974][T10051] syz_tun: left allmulticast mode [ 228.332073][T10085] tunl0: entered promiscuous mode [ 228.353623][T10085] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 228.400034][T10085] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1167'. [ 230.117924][ T5881] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 247.478508][ T55] block nbd1: Possible stuck request ffff8880252d5080: control (read@0,1024B). Runtime 60 seconds [ 247.489446][ T55] block nbd1: Possible stuck request ffff8880252d5240: control (read@1024,1024B). Runtime 60 seconds [ 247.500636][ T55] block nbd1: Possible stuck request ffff8880252d5400: control (read@2048,1024B). Runtime 60 seconds [ 247.511571][ T55] block nbd1: Possible stuck request ffff8880252d55c0: control (read@3072,1024B). Runtime 60 seconds [ 249.543660][ T5232] udevd[5232]: worker [6137] /devices/virtual/block/nbd1 is taking a long time [ 254.994782][T10102] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1171'. [ 254.996292][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 255.056618][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 255.284179][T10113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1176'. [ 255.564124][T10129] macvlan2: entered promiscuous mode [ 255.586645][T10129] macvlan2: entered allmulticast mode [ 255.803112][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.896442][T10147] net_ratelimit: 4 callbacks suppressed [ 255.896460][T10147] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 256.326595][T10169] bridge1: entered promiscuous mode [ 256.334234][T10169] bridge1: entered allmulticast mode [ 256.504802][T10178] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1197'. [ 256.587513][T10178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1197'. [ 256.612631][T10188] netlink: 'syz.0.1199': attribute type 23 has an invalid length. [ 256.662568][T10188] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 256.772580][T10195] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 256.796605][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1203'. [ 256.813790][T10195] netlink: 'syz.1.1201': attribute type 2 has an invalid length. [ 256.824370][T10195] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 256.842400][T10195] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1201'. [ 256.965856][T10215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.057325][T10223] sctp: [Deprecated]: syz.1.1209 (pid 10223) Use of int in max_burst socket option deprecated. [ 257.057325][T10223] Use struct sctp_assoc_value instead [ 257.563185][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 257.583926][T10238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1214'. [ 257.606417][T10238] tipc: Invalid UDP bearer configuration [ 257.606472][T10238] tipc: Enabling of bearer rejected, failed to enable media [ 257.627562][T10238] macvlan0: entered promiscuous mode [ 257.634568][T10238] macvlan0: entered allmulticast mode [ 257.852005][T10251] netlink: 'syz.5.1219': attribute type 1 has an invalid length. [ 257.946619][T10251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.992015][T10258] vlan2: entered allmulticast mode [ 257.992049][T10263] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 257.997365][T10258] veth1: entered allmulticast mode [ 258.010859][T10257] nftables ruleset with unbound set [ 258.014668][T10258] bond1: (slave vlan2): making interface the new active one [ 258.025431][T10258] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 258.177336][T10271] sit0: entered promiscuous mode [ 258.199642][T10271] netlink: 'syz.5.1224': attribute type 1 has an invalid length. [ 258.809248][T10302] netlink: 'syz.5.1236': attribute type 12 has an invalid length. [ 258.866015][T10307] netlink: 'syz.5.1236': attribute type 12 has an invalid length. [ 258.867243][T10305] netlink: 'syz.2.1238': attribute type 23 has an invalid length. [ 259.672312][T10351] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 259.791564][T10361] bond3: (slave bridge2): making interface the new active one [ 259.800775][T10361] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 260.192666][T10389] veth0_to_bond: entered allmulticast mode [ 260.295027][T10396] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 260.307417][T10389] __nla_validate_parse: 17 callbacks suppressed [ 260.307433][T10389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1263'. [ 261.203016][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 261.330392][T10442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1281'. [ 261.572623][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 261.623723][T10458] validate_nla: 41 callbacks suppressed [ 261.623741][T10458] netlink: 'syz.0.1284': attribute type 9 has an invalid length. [ 261.682365][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 261.748836][T10461] netlink: 'syz.0.1284': attribute type 9 has an invalid length. [ 261.945134][T10468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.952449][T10468] IPv6: NLM_F_CREATE should be set when creating new route [ 261.987190][T10480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1290'. [ 262.004618][T10483] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1287'. [ 262.039353][T10474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.453053][T10502] tipc: Enabled bearer , priority 0 [ 262.481170][T10505] syzkaller0: entered promiscuous mode [ 262.513179][T10505] syzkaller0: entered allmulticast mode [ 262.549540][T10513] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 262.590492][T10513] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 262.625306][T10513] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 262.642279][T10519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1298'. [ 262.652364][T10519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 262.663201][T10519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1298'. [ 262.677538][T10505] tipc: Resetting bearer [ 262.729098][T10505] tipc: Disabling bearer [ 264.422836][T10535] vlan3: entered allmulticast mode [ 264.428071][T10535] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 264.561363][T10554] NCSI netlink: No device for ifindex 0 [ 264.738726][T10566] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 264.787013][T10562] veth0_to_team: left promiscuous mode [ 264.881668][T10562] veth3: left promiscuous mode [ 264.887601][T10562] veth9: left promiscuous mode [ 264.904340][T10562] macvlan2: left promiscuous mode [ 264.964278][T10566] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 265.005793][ T2913] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.015443][ T2913] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.028392][ T2913] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.041129][ T2913] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.067363][T10576] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 265.169046][T10582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.201097][T10586] openvswitch: netlink: Actions may not be safe on all matching packets [ 265.235224][T10586] hsr_slave_0: left promiscuous mode [ 265.264496][T10586] hsr_slave_1: left promiscuous mode [ 265.481437][T10603] netlink: 'syz.1.1325': attribute type 11 has an invalid length. [ 265.655131][T10612] veth0: entered promiscuous mode [ 265.706492][T10617] netlink: 'syz.3.1328': attribute type 21 has an invalid length. [ 265.718785][T10617] __nla_validate_parse: 11 callbacks suppressed [ 265.718803][T10617] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1328'. [ 265.724099][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1327'. [ 265.845588][ T30] audit: type=1107 audit(1755326883.184:7): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 265.845588][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 265.873464][ T30] audit: type=1107 audit(1755326883.184:8): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 265.873464][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 265.903375][T10612] bond1: (slave vlan2): Releasing active interface [ 265.904657][ T30] audit: type=1107 audit(1755326883.184:9): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 265.904657][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 265.941363][ T30] audit: type=1107 audit(1755326883.184:10): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 265.941363][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 265.973790][ T30] audit: type=1107 audit(1755326883.184:11): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 265.973790][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 266.000233][ T30] audit: type=1107 audit(1755326883.184:12): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 266.000233][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 266.026894][ T30] audit: type=1107 audit(1755326883.184:13): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 266.026894][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 266.060016][ T30] audit: type=1107 audit(1755326883.184:14): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 266.060016][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 266.105475][ T30] audit: type=1107 audit(1755326883.184:15): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 266.105475][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 266.285697][ T30] audit: type=1107 audit(1755326883.184:16): pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?ؒzYC `Dv3kqi2l\ߨ=jX(LXUHjO%AʯDC!s" [ 266.285697][ T30] #e.U|s03 PR]{ҳ\S׬H #KeS?f' [ 266.403805][T10637] IPVS: Error joining to the multicast group [ 266.489129][T10648] pim6reg1: entered promiscuous mode [ 266.494758][T10648] pim6reg1: entered allmulticast mode [ 266.660252][T10659] tipc: Enabled bearer , priority 0 [ 266.667980][T10660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1339'. [ 266.683918][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1337'. [ 266.701604][T10659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1339'. [ 266.716309][T10661] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.741711][T10661] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 266.758672][T10661] gretap1: entered promiscuous mode [ 266.767580][T10661] gretap1: entered allmulticast mode [ 266.794715][T10659] syzkaller0: entered promiscuous mode [ 266.800439][T10659] syzkaller0: entered allmulticast mode [ 266.855514][T10660] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 266.982101][T10659] tipc: Resetting bearer [ 267.004016][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1342'. [ 267.039518][T10659] tipc: Disabling bearer [ 267.090215][T10670] "syz.2.1341" (10670) uses obsolete ecb(arc4) skcipher [ 267.131349][T10674] tipc: Started in network mode [ 267.136393][T10674] tipc: Node identity 1269e169401a, cluster identity 4711 [ 267.144065][T10674] tipc: Enabled bearer , priority 0 [ 267.157568][T10674] syzkaller0: entered promiscuous mode [ 267.171917][T10674] syzkaller0: entered allmulticast mode [ 267.190065][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1343'. [ 267.211049][T10674] tipc: Resetting bearer [ 267.225968][T10673] tipc: Resetting bearer [ 267.265982][T10673] tipc: Disabling bearer [ 267.298798][T10686] sctp: [Deprecated]: syz.0.1346 (pid 10686) Use of int in maxseg socket option. [ 267.298798][T10686] Use struct sctp_assoc_value instead [ 267.468048][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'. [ 267.644044][T10706] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1353'. [ 267.805685][T10717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1353'. [ 267.957593][T10728] netlink: 'syz.0.1358': attribute type 5 has an invalid length. [ 268.505738][T10770] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.516002][T10743] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.523796][T10743] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.549264][T10771] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 268.689499][T10743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.702381][T10743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.801902][T10769] tipc: Started in network mode [ 268.822830][T10769] tipc: Node identity 4a16997ce21, cluster identity 4711 [ 268.859742][T10769] tipc: Enabled bearer , priority 0 [ 268.901970][T10782] netlink: 'syz.3.1370': attribute type 24 has an invalid length. [ 268.907747][ T56] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.932462][ T56] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.969264][ T56] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.992417][T10769] tipc: Disabling bearer [ 269.087726][ T56] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.730790][T10820] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 270.568754][T10861] pim6reg1: entered promiscuous mode [ 270.583365][T10861] pim6reg1: entered allmulticast mode [ 270.744159][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.929137][T10880] __nla_validate_parse: 139 callbacks suppressed [ 270.929157][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 271.228332][T10900] bond0: (slave bond_slave_1): Releasing backup interface [ 271.302835][T10908] tipc: Enabled bearer , priority 0 [ 271.325438][T10908] tipc: Resetting bearer [ 271.455499][T10901] tipc: Disabling bearer [ 271.680960][T10933] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1414'. [ 272.487522][T10976] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 272.583273][T10976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.755395][T10993] netlink: 'syz.1.1430': attribute type 33 has an invalid length. [ 272.961439][T11007] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 273.012039][T11007] openvswitch: netlink: Tunnel attr 173 out of range max 16 [ 273.085055][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.092667][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.133930][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.163956][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.180027][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'. [ 273.207836][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'. [ 273.280395][T11018] gretap0: entered promiscuous mode [ 273.300784][T11018] gretap0: left promiscuous mode [ 273.435206][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1442'. [ 273.594611][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 273.709675][T11044] team1: entered promiscuous mode [ 273.728729][T11044] team1: entered allmulticast mode [ 273.759840][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1446'. [ 273.877130][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 273.893634][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'. [ 274.007468][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.035201][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.076202][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.115038][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.325309][T11035] lec:lec_atm_close: lec0: Shut down! [ 274.651212][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 275.388736][T11123] syz.1.1465: vmalloc error: size 538968064, failed to allocated page array size 1052672, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.409494][T11123] CPU: 0 UID: 0 PID: 11123 Comm: syz.1.1465 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 275.409518][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.409538][T11123] Call Trace: [ 275.409545][T11123] [ 275.409553][T11123] dump_stack_lvl+0x189/0x250 [ 275.409578][T11123] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 275.409603][T11123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.409621][T11123] ? __pfx__printk+0x10/0x10 [ 275.409643][T11123] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.409662][T11123] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.409690][T11123] warn_alloc+0x214/0x310 [ 275.409721][T11123] ? __pfx_warn_alloc+0x10/0x10 [ 275.409754][T11123] ? __get_vm_area_node+0x28f/0x300 [ 275.409777][T11123] ? hash_netportnet_create+0x354/0xf90 [ 275.409806][T11123] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 275.409862][T11123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.409892][T11123] ? rcu_is_watching+0x15/0xb0 [ 275.409911][T11123] ? hash_netportnet_create+0x354/0xf90 [ 275.409933][T11123] ? hash_netportnet_create+0x354/0xf90 [ 275.409954][T11123] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 275.409977][T11123] ? hash_netportnet_create+0x354/0xf90 [ 275.410001][T11123] ? hash_netportnet_create+0x2fa/0xf90 [ 275.410029][T11123] hash_netportnet_create+0x354/0xf90 [ 275.410061][T11123] ? __nla_parse+0x40/0x60 [ 275.410085][T11123] ? __pfx_hash_netportnet_create+0x10/0x10 [ 275.410111][T11123] ip_set_create+0xa97/0x1940 [ 275.410130][T11123] ? ip_set_create+0x4a2/0x1940 [ 275.410165][T11123] ? __pfx_ip_set_create+0x10/0x10 [ 275.410223][T11123] nfnetlink_rcv_msg+0xb4d/0x1130 [ 275.410245][T11123] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 275.410286][T11123] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 275.410304][T11123] ? kasan_save_free_info+0x46/0x50 [ 275.410383][T11123] netlink_rcv_skb+0x208/0x470 [ 275.410407][T11123] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 275.410430][T11123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.410465][T11123] ? bpf_lsm_capable+0x9/0x20 [ 275.410485][T11123] ? security_capable+0x7e/0x2e0 [ 275.410517][T11123] nfnetlink_rcv+0x26a/0x2520 [ 275.410542][T11123] ? __dev_queue_xmit+0x1d79/0x3b50 [ 275.410572][T11123] ? __dev_queue_xmit+0x27b/0x3b50 [ 275.410605][T11123] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 275.410625][T11123] ? __pfx___dev_queue_xmit+0x10/0x10 [ 275.410659][T11123] ? ref_tracker_free+0x63a/0x7d0 [ 275.410682][T11123] ? __asan_memcpy+0x40/0x70 [ 275.410701][T11123] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.410741][T11123] ? skb_clone+0x246/0x3a0 [ 275.410763][T11123] ? __netlink_deliver_tap+0x807/0x850 [ 275.410785][T11123] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.410815][T11123] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.410846][T11123] netlink_unicast+0x82c/0x9e0 [ 275.410877][T11123] ? __pfx_netlink_unicast+0x10/0x10 [ 275.410900][T11123] ? netlink_sendmsg+0x642/0xb30 [ 275.410920][T11123] ? skb_put+0x11b/0x210 [ 275.410940][T11123] netlink_sendmsg+0x805/0xb30 [ 275.410988][T11123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.411015][T11123] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.411041][T11123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.411058][T11123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.411082][T11123] __sock_sendmsg+0x219/0x270 [ 275.411108][T11123] ____sys_sendmsg+0x505/0x830 [ 275.411132][T11123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.411160][T11123] ? import_iovec+0x74/0xa0 [ 275.411183][T11123] ___sys_sendmsg+0x21f/0x2a0 [ 275.411203][T11123] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.411262][T11123] ? __fget_files+0x2a/0x420 [ 275.411276][T11123] ? __fget_files+0x3a0/0x420 [ 275.411303][T11123] __x64_sys_sendmsg+0x19b/0x260 [ 275.411324][T11123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.411354][T11123] ? rcu_is_watching+0x15/0xb0 [ 275.411381][T11123] ? do_syscall_64+0xbe/0x3b0 [ 275.411409][T11123] do_syscall_64+0xfa/0x3b0 [ 275.411433][T11123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.411454][T11123] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.411470][T11123] ? clear_bhb_loop+0x60/0xb0 [ 275.411491][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.411507][T11123] RIP: 0033:0x7fced818ebe9 [ 275.411524][T11123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.411537][T11123] RSP: 002b:00007fced63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.411555][T11123] RAX: ffffffffffffffda RBX: 00007fced83b5fa0 RCX: 00007fced818ebe9 [ 275.411567][T11123] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 275.411578][T11123] RBP: 00007fced8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 275.411588][T11123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.411598][T11123] R13: 00007fced83b6038 R14: 00007fced83b5fa0 R15: 00007ffefbe7bb68 [ 275.411629][T11123] [ 275.411671][T11123] Mem-Info: [ 275.899693][T11123] active_anon:4953 inactive_anon:0 isolated_anon:0 [ 275.899693][T11123] active_file:3095 inactive_file:39894 isolated_file:0 [ 275.899693][T11123] unevictable:768 dirty:81 writeback:0 [ 275.899693][T11123] slab_reclaimable:11740 slab_unreclaimable:106890 [ 275.899693][T11123] mapped:34529 shmem:1365 pagetables:1442 [ 275.899693][T11123] sec_pagetables:0 bounce:0 [ 275.899693][T11123] kernel_misc_reclaimable:0 [ 275.899693][T11123] free:1288250 free_pcp:17885 free_cma:0 [ 275.952843][T11123] Node 0 active_anon:19812kB inactive_anon:0kB active_file:12380kB inactive_file:159372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138116kB dirty:324kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12624kB pagetables:5632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.990983][T11123] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.043643][T11123] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.081522][T11123] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 276.087464][T11123] Node 0 DMA32 free:1257568kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19700kB inactive_anon:0kB active_file:12380kB inactive_file:157800kB unevictable:1536kB writepending:324kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:51440kB local_pcp:23140kB free_cma:0kB [ 276.164620][T11123] lowmem_reserve[]: 0 0 1 1 1 [ 276.170515][T11123] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 276.217169][T11123] lowmem_reserve[]: 0 0 0 0 0 [ 276.222353][T11123] Node 1 Normal free:3879780kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21120kB local_pcp:9344kB free_cma:0kB [ 276.253929][T11123] lowmem_reserve[]: 0 0 0 0 0 [ 276.265243][T11123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.286034][T11123] Node 0 DMA32: 652*4kB (UME) 468*8kB (UME) 251*16kB (UM) 83*32kB (UME) 262*64kB (UME) 458*128kB (UM) 349*256kB (UME) 235*512kB (UM) 141*1024kB (UME) 8*2048kB (UM) 195*4096kB (UM) = 1257568kB [ 276.324628][T11123] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 276.355538][T11123] Node 1 Normal: 241*4kB (UME) 54*8kB (UME) 47*16kB (UME) 122*32kB (UME) 37*64kB (UME) 9*128kB (UME) 4*256kB (UM) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 943*4096kB (M) = 3879780kB [ 276.405011][T11123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.427052][T11123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.490517][T11123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.515977][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.542794][T11123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.597935][T11123] 44403 total pagecache pages [ 276.605208][T11123] 0 pages in swap cache [ 276.615171][T11123] Free swap = 124996kB [ 276.620190][T11123] Total swap = 124996kB [ 276.635507][T11123] 2097051 pages RAM [ 276.645629][T11123] 0 pages HighMem/MovableOnly [ 276.666236][T11123] 425656 pages reserved [ 276.695181][T11123] 0 pages cma reserved [ 276.778998][T11173] netlink: 'syz.2.1480': attribute type 3 has an invalid length. [ 276.788501][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1479'. [ 277.021015][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1483'. [ 277.248181][T11200] netlink: 'syz.0.1488': attribute type 6 has an invalid length. [ 277.314317][T11200] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1488'. [ 277.403046][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'. [ 277.568044][ T55] block nbd1: Possible stuck request ffff8880252d5080: control (read@0,1024B). Runtime 90 seconds [ 277.578843][ T55] block nbd1: Possible stuck request ffff8880252d5240: control (read@1024,1024B). Runtime 90 seconds [ 277.590306][ T55] block nbd1: Possible stuck request ffff8880252d5400: control (read@2048,1024B). Runtime 90 seconds [ 277.601286][ T55] block nbd1: Possible stuck request ffff8880252d55c0: control (read@3072,1024B). Runtime 90 seconds [ 278.151462][T11286] netlink: 'syz.5.1496': attribute type 13 has an invalid length. [ 278.481976][T11286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.658507][T11309] openvswitch: netlink: Missing valid actions attribute. [ 278.689052][T11309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.954627][T11325] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1507'. [ 279.094247][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 279.268039][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 279.504736][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 279.788282][T11367] wg1: entered promiscuous mode [ 279.793199][T11367] wg1: entered allmulticast mode [ 280.085653][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1528'. [ 280.092126][T11389] netlink: 'syz.3.1529': attribute type 2 has an invalid length. [ 280.859884][T11434] nbd2: detected capacity change from 0 to 127 [ 280.943427][ T5881] block nbd2: Receive control failed (result -104) [ 281.112706][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 281.179333][T11456] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 281.184161][T11449] sctp: [Deprecated]: syz.5.1542 (pid 11449) Use of int in max_burst socket option. [ 281.184161][T11449] Use struct sctp_assoc_value instead [ 281.197844][T11456] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 281.226900][T11453] netlink: 'syz.3.1545': attribute type 21 has an invalid length. [ 281.266149][T11453] netlink: 'syz.3.1545': attribute type 5 has an invalid length. [ 281.307120][T11464] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.324207][T11464] team0: Cannot enslave team device to itself [ 281.535647][T11476] netlink: 'syz.3.1553': attribute type 2 has an invalid length. [ 281.586618][T11476] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 281.653132][T11478] vlan3: entered promiscuous mode [ 281.874022][T11491] netlink: zone id is out of range [ 281.879668][T11491] netlink: zone id is out of range [ 281.885185][T11491] netlink: zone id is out of range [ 281.890888][T11491] netlink: zone id is out of range [ 281.908291][T11491] netlink: zone id is out of range [ 281.913594][T11491] netlink: zone id is out of range [ 281.921677][T11491] netlink: zone id is out of range [ 281.932254][T11491] netlink: zone id is out of range [ 281.962145][T11491] netlink: zone id is out of range [ 281.990256][T11491] netlink: zone id is out of range [ 282.101509][T11500] __nla_validate_parse: 8 callbacks suppressed [ 282.101527][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 282.101541][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 282.335971][T11516] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1566'. [ 282.356124][T11516] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1566'. [ 282.388220][T11514] syzkaller1: entered promiscuous mode [ 282.394421][T11514] syzkaller1: entered allmulticast mode [ 282.641974][T11539] "syz.3.1573" (11539) uses obsolete ecb(arc4) skcipher [ 282.724013][T11548] [ 282.726385][T11548] ====================================================== [ 282.733405][T11548] WARNING: possible circular locking dependency detected [ 282.740443][T11548] 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 Not tainted [ 282.747565][T11548] ------------------------------------------------------ [ 282.754598][T11548] syz.2.1575/11548 is trying to acquire lock: [ 282.760669][T11548] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 282.770090][T11548] [ 282.770090][T11548] but task is already holding lock: [ 282.777449][T11548] ffff88804f48c370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 282.786755][T11548] [ 282.786755][T11548] which lock already depends on the new lock. [ 282.786755][T11548] [ 282.797142][T11548] [ 282.797142][T11548] the existing dependency chain (in reverse order) is: [ 282.806143][T11548] [ 282.806143][T11548] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 282.814123][T11548] lock_acquire+0x120/0x360 [ 282.819141][T11548] _raw_spin_lock_bh+0x36/0x50 [ 282.824417][T11548] nr_rt_device_down+0x12a/0x720 [ 282.829872][T11548] nr_device_event+0x137/0x150 [ 282.835141][T11548] notifier_call_chain+0x1b6/0x3e0 [ 282.840767][T11548] __dev_notify_flags+0x18d/0x2e0 [ 282.846296][T11548] netif_change_flags+0xe8/0x1a0 [ 282.851737][T11548] dev_change_flags+0x130/0x260 [ 282.857098][T11548] dev_ioctl+0x7b4/0x1150 [ 282.861939][T11548] sock_do_ioctl+0x22c/0x300 [ 282.867035][T11548] sock_ioctl+0x576/0x790 [ 282.871870][T11548] __se_sys_ioctl+0xf9/0x170 [ 282.876971][T11548] do_syscall_64+0xfa/0x3b0 [ 282.881987][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.888391][T11548] [ 282.888391][T11548] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 282.896230][T11548] lock_acquire+0x120/0x360 [ 282.901255][T11548] _raw_spin_lock_bh+0x36/0x50 [ 282.906543][T11548] nr_rt_device_down+0xa9/0x720 [ 282.911908][T11548] nr_device_event+0x137/0x150 [ 282.917190][T11548] notifier_call_chain+0x1b6/0x3e0 [ 282.922824][T11548] __dev_notify_flags+0x18d/0x2e0 [ 282.928371][T11548] netif_change_flags+0xe8/0x1a0 [ 282.933814][T11548] dev_change_flags+0x130/0x260 [ 282.939179][T11548] dev_ioctl+0x7b4/0x1150 [ 282.944015][T11548] sock_do_ioctl+0x22c/0x300 [ 282.949108][T11548] sock_ioctl+0x576/0x790 [ 282.953942][T11548] __se_sys_ioctl+0xf9/0x170 [ 282.959038][T11548] do_syscall_64+0xfa/0x3b0 [ 282.964050][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.970449][T11548] [ 282.970449][T11548] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 282.978345][T11548] validate_chain+0xb9b/0x2140 [ 282.983661][T11548] __lock_acquire+0xab9/0xd20 [ 282.988850][T11548] lock_acquire+0x120/0x360 [ 282.993864][T11548] _raw_spin_lock_bh+0x36/0x50 [ 282.999146][T11548] nr_remove_neigh+0x25/0xe0 [ 283.004250][T11548] nr_add_node+0x1d9f/0x2570 [ 283.009352][T11548] nr_rt_ioctl+0xc12/0xd50 [ 283.014281][T11548] sock_do_ioctl+0xd9/0x300 [ 283.019297][T11548] sock_ioctl+0x576/0x790 [ 283.024136][T11548] __se_sys_ioctl+0xf9/0x170 [ 283.029233][T11548] do_syscall_64+0xfa/0x3b0 [ 283.034246][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.040658][T11548] [ 283.040658][T11548] other info that might help us debug this: [ 283.040658][T11548] [ 283.050883][T11548] Chain exists of: [ 283.050883][T11548] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 283.050883][T11548] [ 283.064695][T11548] Possible unsafe locking scenario: [ 283.064695][T11548] [ 283.072127][T11548] CPU0 CPU1 [ 283.077476][T11548] ---- ---- [ 283.082828][T11548] lock(&nr_node->node_lock); [ 283.087581][T11548] lock(nr_node_list_lock); [ 283.094675][T11548] lock(&nr_node->node_lock); [ 283.101943][T11548] lock(nr_neigh_list_lock); [ 283.106607][T11548] [ 283.106607][T11548] *** DEADLOCK *** [ 283.106607][T11548] [ 283.114732][T11548] 1 lock held by syz.2.1575/11548: [ 283.119824][T11548] #0: ffff88804f48c370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 283.129661][T11548] [ 283.129661][T11548] stack backtrace: [ 283.135545][T11548] CPU: 1 UID: 0 PID: 11548 Comm: syz.2.1575 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 283.135566][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.135576][T11548] Call Trace: [ 283.135584][T11548] [ 283.135593][T11548] dump_stack_lvl+0x189/0x250 [ 283.135614][T11548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.135629][T11548] ? __pfx__printk+0x10/0x10 [ 283.135646][T11548] ? stack_trace_save+0x9c/0xe0 [ 283.135666][T11548] print_circular_bug+0x2ee/0x310 [ 283.135682][T11548] check_noncircular+0x134/0x160 [ 283.135699][T11548] validate_chain+0xb9b/0x2140 [ 283.135721][T11548] __lock_acquire+0xab9/0xd20 [ 283.135741][T11548] ? nr_remove_neigh+0x25/0xe0 [ 283.135757][T11548] lock_acquire+0x120/0x360 [ 283.135775][T11548] ? nr_remove_neigh+0x25/0xe0 [ 283.135792][T11548] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.135808][T11548] ? nr_remove_neigh+0x25/0xe0 [ 283.135824][T11548] _raw_spin_lock_bh+0x36/0x50 [ 283.135839][T11548] ? nr_remove_neigh+0x25/0xe0 [ 283.135855][T11548] nr_remove_neigh+0x25/0xe0 [ 283.135871][T11548] nr_add_node+0x1d9f/0x2570 [ 283.135887][T11548] ? __asan_memcpy+0x40/0x70 [ 283.135902][T11548] ? nr_call_to_digi+0x126/0x1b0 [ 283.135918][T11548] nr_rt_ioctl+0xc12/0xd50 [ 283.135935][T11548] ? kasan_quarantine_put+0xdd/0x220 [ 283.135950][T11548] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 283.135969][T11548] ? apparmor_capable+0x137/0x1b0 [ 283.135986][T11548] ? capable+0x89/0xe0 [ 283.136000][T11548] ? nr_ioctl+0x1b1/0x3b0 [ 283.136013][T11548] sock_do_ioctl+0xd9/0x300 [ 283.136029][T11548] ? __pfx_sock_do_ioctl+0x10/0x10 [ 283.136044][T11548] ? __lock_acquire+0xab9/0xd20 [ 283.136066][T11548] sock_ioctl+0x576/0x790 [ 283.136082][T11548] ? __pfx_sock_ioctl+0x10/0x10 [ 283.136096][T11548] ? __fget_files+0x2a/0x420 [ 283.136108][T11548] ? __fget_files+0x3a0/0x420 [ 283.136119][T11548] ? __fget_files+0x2a/0x420 [ 283.136130][T11548] ? bpf_lsm_file_ioctl+0x9/0x20 [ 283.136147][T11548] ? __pfx_sock_ioctl+0x10/0x10 [ 283.136161][T11548] __se_sys_ioctl+0xf9/0x170 [ 283.136177][T11548] do_syscall_64+0xfa/0x3b0 [ 283.136196][T11548] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.136212][T11548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.136226][T11548] ? clear_bhb_loop+0x60/0xb0 [ 283.136240][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.136253][T11548] RIP: 0033:0x7f925758ebe9 [ 283.136269][T11548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.136281][T11548] RSP: 002b:00007f92557f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.136296][T11548] RAX: ffffffffffffffda RBX: 00007f92577b5fa0 RCX: 00007f925758ebe9 [ 283.136312][T11548] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000005 [ 283.136322][T11548] RBP: 00007f9257611e19 R08: 0000000000000000 R09: 0000000000000000 [ 283.136330][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.136339][T11548] R13: 00007f92577b6038 R14: 00007f92577b5fa0 R15: 00007ffc75cddfe8 [ 283.136353][T11548]