last executing test programs: 2m37.403964781s ago: executing program 3 (id=3020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x5, 0xf, 0x76, 0x0, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x7, 0x5, 0x4}, &(0x7f00000003c0)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 2m37.105242547s ago: executing program 3 (id=3022): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2m36.876418473s ago: executing program 3 (id=3024): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001e00010000000000e0ffffff0100000003000007000000000800080000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=0x0) sendmmsg(r2, &(0x7f0000002900)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)="807b69f8c7db9ad259646e630a2093d64a8b76bf9b30d6fc6364d3e765d445744a458f50b92e9cd1b748ade0f2e658920bd8da642236010bcb1cecdae6b6e3c8feae4cbbdbf98f2462a3d6655fc6a36c3dd9d1039b7d7537d5acfbe2989262e147d1", 0x62}, {&(0x7f0000000380)="a20c8ec2739a4ba9073fff7204b7e00e135489f301c3bbe039", 0x19}, {&(0x7f0000000580)="9a1296d2c550b806568863d8b3", 0xd}, {&(0x7f00000005c0)="360c98db241670038da113adccbf132d9adecc8afe321d8d", 0x18}], 0x4}}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'macvlan0\x00'}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)="3ca41ae8a572dc42a2d05a2c737a5c250a938269ec6bd7c6ec31fbd357111221a60d494a3be2bd8a8ccfa2816bfb09ce267aa99008", 0x35}, {&(0x7f0000000700)="712fdf53fcf9acc2740f8cf9a105bd6c10fd08626ccdf06225dde3b372438f8b5de1e30cd2c554bdecc3a63c0eb4b10374b7c07b6fb7b57922739684fe801dc3dcfcf7c868b8ef78c1018e3067b7572ab93307a19ee0085384c886b9369ae5c2c4b40b86e995c7746a0a53", 0x6b}, {&(0x7f00000007c0)="49c799cb2af72e72b5ac94fc413780e464c74555ddc62d50975482fe721f93f02e8cf5c29862334ecced0a66d2631c77d14a88b3ef2f44919ee4d4eb503d00c2f9103b5961d628e5381055bbc13ee6b3ebc614cae3c97b7ac29e292e2756e161e311eb59906ecc38c7892d9200c51880c3", 0x71}, {&(0x7f0000000840)}, {&(0x7f0000000880)="d6654aa5e452c51e7521e1e582eeafd055f28735a208a1865d379a0601269cea02c94d9e8fe22326a569c6520a1e1db12cbc893cb5237929c11394522e2b065b4280a40de2a128b0445e0cac7b63776a507bec8b56a66004efc879d4501b4f4df278d68af24ce3dd5f7ce1100ef6d43699df2211fe9b29ea4f258f0b50f05e3b284288ceeec04d94d16c3e26321715a77d6c11ffe1caee3ae56eac2b6db290cb74e7fff2244dfa661cb51c0ff336d0ac85e3a22c5c63955594fbf9a8e19c7f191616cb9c5721ae5dac9b34ed5e184ef5e7fedcbea5efebbb76f9cebc373cfa698ac67fe18eb2dbe0f242ad3aae", 0xed}], 0x5, &(0x7f0000000a00)=[{0x10, 0x10c, 0x194f417e}, {0x50, 0x103, 0xd, "ca16df63647782a17d81b27d2ee935e5256e87959b7c8f681f21146e929fb97ac51fbab3b5426c063611f56fe459e396fc7975198a96fc62f9"}], 0x60}}, {{&(0x7f0000000ac0)=@nfc={0x27, r4, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)="554977d1864b56c09e503383542fdacbed11ef62f2cde35c53329df83d2fa7bb368c13b35d2c2c8a6766b2a13391245dca1f0a3fe9dbfc3a58d5a61dd8a3ebe9e263ece9224781ed097288a84b7a83e0911807bb9e889bfea4a3bb8cca4cadbfb52db0833b5f21699b9322105848426e5fe8f9e502e4bc5b68", 0x79}, {&(0x7f0000000bc0)="fe5d043e939ae72f6a6d1e375b7b22c533bf44ba8803187443dd680ffc331500a22699c2df9aab1148bf75af4e3bf6a3454a5cb3c17e050ea7f615677669d1ef7ef0e345217ed05ebd80b49fbedae35255468b7f8e8f02842e2f050b2f64394c51453df582560ae4e5c35e858f8b2e1db649b0c55bb5f1714875e6020d6f8b556b03b56af1cd2c581e0f7a04a7c50276273f7b5d80567014bb8814a45e2e3356a9fa98a01df82f0d141f8a6c980856", 0xaf}, {&(0x7f0000000c80)="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", 0xfe}], 0x3, &(0x7f0000000dc0)=[{0x100, 0x115, 0xfffffff7, "a61f022702f79fbbc0579bc70837082796956eda833b6fb2943c0a27ac79e29b505d4ae441c1ad360306868dd45fa8aa7f149b6076e476e00202a8d694baf0ac9a7c141dd6a8c9ddb97b3aebee0810ea2a8702ca8680a09fd1e9e989baaaa3026789a3d5cdae1556ea6fbf7ccc5e90b2281498af300579d137d871bcc764aef8e461f603f6d7c01b45718a4cc970d46eb6b5ed435f45799a059839c0eb5dd837cc561aae327e4be9882539e580a2afa312c07e7803113cd2b2ea6dbdf9a66cc31015964f4910b0b442b43a0256556e9e73f94b05d144f8e049c14bfe328ecd55af6baa22e60959a9d62147894e367408"}, {0x50, 0x102, 0x3, "555c33bfafefa0ee5dee8213eb2478f77d01951110c80d5c68b3ec5dac912c08cd82ca16a7937d0299234574099b0bb24c852c543ee412789c"}, {0xa0, 0x10d, 0x800, "dc01290e330194dca6ed172133422dc346c3bc7b5658e40d81f8c81be7bc865318c57cfff2fb91c623207c244072805a1f098950103a8ce0949120837fd4445a4f1eaebf8f1421a588ac2a11d87ad607eddd5a7b683fc0ddde2a05d52bf602f928de5cdea2c4f4d878a892188a8f46a78838b63ae5609c7f986083048e03a92178c03e10f3d9cd8c75bad3b32d"}, {0x1010, 0xff, 0x80, "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"}, {0x110, 0x0, 0xe, "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"}], 0x1310}}, {{&(0x7f0000002100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002180)="df63aca43ffcfaa2b4", 0x9}, {&(0x7f00000021c0)="540445a8a646e9175733454167c77bf681cca442129c53ce202e04e5413287d703fb2d1c82871bd350082c6ff8cf8c8a1a05f9c103dc576471666d60c3d3e432aaa4334c1a9058280ece6ce3bf71adb271da26c8d95f9cb51dddcaf64c297e6558b9fd6b0861eb6d59485f00c71a0a361e55b38fe1f2a544c310f41216bf0c9b8188657f6717b6", 0x87}, {&(0x7f0000002280)="d33ace4526bedc9d4d9ab134ccb24427450e06affe829561f6cbdaad6d3c587f091d914db00d631b26f48227ec828c356dfdf08b15b1b463bd660c4b", 0x3c}, {&(0x7f00000022c0)="c801", 0x2}, {&(0x7f0000002300)="37290454026d4785cc1dc6fdad271b109cb806970bf7dde8c6beb94aa2c609d9a8607eebc7ea3acb6fb58b42955853a8f1566736e051d4ef710a00f20d45a4917941045485bcc9665ff58c69324c5dccb469e1830135ebecc32a64672b10e012e2c390d2c4c238928a7dd1bf6c58dea151532ed914e50fb92c75e9e547d4fc30c348ca14a871153bcdcc05c0abed52106ef8cb5d7b5fd3a0f01c1fc67afe14b1e87e58b516ae20da85956c43d9e768dc9f289410cb561b7ed4f3e63c7ce96fdde4df7ac1c6b1931296eeebf7fca30dac53af15295cbb0accba236328d1", 0xdd}, {&(0x7f0000002400)="0aedbaed4807a99671c1c4e40cf8dbaa94fdcecad5e511adb0dd626524bc03b5cfa44bd33f308cb2e459a33222015d317ed01e59070eb13c", 0x38}, {&(0x7f0000002440)="2bb01ab964b8dd47272eeb11021dccae390d40cab617b806be770c69dbf05d08e17365ee6f52ff6c6a3382947071606778ea68d7f206d2e162eaa80a913b58b5234380e35d3c034ac6328c8169431b88ee2921bb1396e75694a3da0dc9b9a115171e628b73bf282484e2f449bb5e6b71e387fc07ecb8184d10bd4eb8fe5324004b0212b5cd06f0c46f9f8efc276e104a23abbb319c88eb7985d298353badd59e99b3d2b7f467b92d8ed1cf3273e3455a539d40bd540f8f84ad0de041eb3ba5", 0xbf}], 0x7, &(0x7f0000002580)=[{0xe8, 0x113, 0x2, "002e1f1de0e09e63a7b75951699504ca0924e5d412e5e0b3538259b6d8b6f174ed56773a7b0f51502db053a648423fb796766df14783f05a6d6bf3b8427eefa2470439b6c9b8e64d3f3ef309997e3f754bb8579f8d7bc37ad42db3f934565e7c9375de63f00420066329d140cda5b5742869ab72460e1c0a27e4cf312dd7af0156634a5f917f15429a56bd10754827fc662ab532fa637415d31e7fdea57d7f45e4aa70710b7cc9275e04d6b6e3bac55f5e7f292b8d812dbd6cd2cd87b517f4e08e32975fdf6936e774c5a58b7abf51d37775348cce1460"}, {0xa8, 0x112, 0x2aa, "74084895934273e0885fe9cd2ba2289970819dd9a42c1f231c0eb8416568452dcb84b22a22059cc4d60bc2a19e7b2d33cec95ff618bd66792bee2a710ee30b4eb1b10d75c31ed87535acaad8b16a3fe7185fefcb12f362e6b9df312bae931a7a9e9a330584ca26fd85fda153ca18bc9beed4a6a13b87469da00b40035a58b0324922789244a912c5a7e534c0e2b731e119"}, {0xb8, 0x10b, 0x9, "4a6b08a3c4de3a642ef3816d8bf76e2c077e04c3495d5d6ac942cf129214d636746a7fe9111c7ad44a2be9b996db8726580f5fe15d7b359291876a27551b2dd749e7001e94530f1f567bd719f070aa03d2b37bbc1b6c81aea75226f5bedad9c1a097efa064fcb7ae611855d4e561ce96b26e7c0533306c1a7637bc9ce7cb5ab0b39e2f852999eaea617bd7226f33b88c677bfbfbd174779ac29398eb441b0dc54a375fd057b4"}, {0x20, 0x111, 0x7, "c2b5c342186b3b0395ed"}, {0x100, 0x10f, 0x101, "73781fd4a3d2f484ee84894e2f35fd5fbd42750041a306d4a281e9369d7c8d374d5995d9af32a5d64a27402dc3182ad6cc149e60eb7b985a211659f2adf06a10d51c2d49a2a0326995cf143cb28b931f4ca657e736005d2e3f7366bd48bdaa979c9c5ed2db4e5108608f8d13f8faac8cf0a887445f3f18136efd05bc00630164de5f63d2540fddca439683bb2d0e3a9e7af4ef88a8afc9f2c60e4d3144fad15e07d86cb7c76e1cbb400476d39153147acfd52d3fbed2542a467806247af8ce5a8e70f02c1b77624629dad9df2cb1b3e606bdb7e930ee1650c1eb23c65a6531b9e83d3f4d0e573d179283f9d7057331"}], 0x368}}], 0x4, 0x3607daa907f9317) getsockopt(r2, 0xffffffff, 0x20, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r6, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x81) 2m36.641257182s ago: executing program 3 (id=3027): unshare(0x6020400) r0 = gettid() socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(0x3) 2m36.637911475s ago: executing program 4 (id=3028): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@remote, @empty}, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x358, 0x0, 0x148, 0x0, 0x148, 0x358, 0x240, 0x240, 0x358, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0xff0000ff, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x3, 0xed, 0x7}}}, @common=@inet=@policy={{}, {[{@ipv6=@empty, [0xffffffff, 0x0, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff, 0x0, 0xffffff00, 0xffffffff], 0x4d2, 0x3507, 0x2c, 0x0, 0x4, 0x3}, {@ipv6=@remote, [0xff, 0xffffff00, 0xff], @ipv4=@multicast2, [0xff000000, 0xffffff00], 0x4d5, 0x3501, 0x6c, 0x0, 0x12, 0xb}, {@ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], @ipv4=@rand_addr=0x64010100, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], 0x4d5, 0x0, 0x5c, 0x0, 0x0, 0x13}, {@ipv6=@loopback, [0xff000000, 0x0, 0xffffffff, 0xff000000], @ipv6=@private0, [0xff, 0x0, 0xff000000, 0xffffff00], 0x4d3, 0x3504, 0xff, 0x0, 0x0, 0x19}], 0xe, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xfffffffffffffffb, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffe, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe5a) socket(0x15, 0x4, 0x2ed) 2m36.401845423s ago: executing program 4 (id=3029): r0 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x300, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400049c", @ANYRES16=r8, @ANYBLOB="010100000000000000000400000030000180140003000000000000000000000000000000000006000200000000000600040000000000060001000a000000"], 0x44}}, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0xfc}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000140)=0x100, 0x4) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x12, 0x58010, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x3}, 0x14) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000008c0)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m35.913861444s ago: executing program 3 (id=3032): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r7, 0x3}, 0x20) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) 2m35.85097342s ago: executing program 4 (id=3034): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m35.814552805s ago: executing program 3 (id=3035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r1 = socket$inet(0x2, 0x3, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000017c0)={0x44, r4, 0xe7816804f9787cab, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xaf0fc36, 0x8}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40002084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x11}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x77}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x60}}, 0x4000) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r15, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 2m35.566715077s ago: executing program 4 (id=3037): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r2, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x1, 0xc1, 0x4, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x6, 0x1c02, 0xb, 0xfda, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m35.294295028s ago: executing program 4 (id=3040): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0xe7, @local, 0x2}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) 2m35.190381331s ago: executing program 4 (id=3042): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_icmp(0x2, 0x2, 0x1) close(r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff78caa98e268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0xfffff145}, 0x50) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a59"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r12 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r12, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r13 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r13, 0x28, 0x8, &(0x7f0000000100), 0x12d) r14 = socket(0x25, 0x2, 0x4) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000c80)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="726db791bafd", 0xfb, 0xc, [0x3, 0x6, 0x30, 0x0, 0x3d, 0x25, 0x33, 0xe, 0x25, 0x21, 0x8, 0x1a, 0x11, 0x3e, 0xe, 0x1c], 0xd8097b845b6362be, 0x7fff, 0x81c2}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0x0, 'veth0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xff, 0x1, 0x23}, 0x0, 0x90, 0x100, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x9, 0x7, 0x1, 0x0, "48216799ab9105d00359d1ce01011afa1bfde0be7c59d525cdfe22bf4dc22d4fcfc4e6d3aeff6c7a36a93c90724b612ff051a29c74fdb46547365a2b1c007cf9"}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 1m56.556971436s ago: executing program 32 (id=3035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) r1 = socket$inet(0x2, 0x3, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000017c0)={0x44, r4, 0xe7816804f9787cab, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xaf0fc36, 0x8}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40002084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x11}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x77}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x60}}, 0x4000) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r15, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1m56.556203752s ago: executing program 33 (id=3042): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_icmp(0x2, 0x2, 0x1) close(r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff78caa98e268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0xfffff145}, 0x50) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a59"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r12 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r12, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r13 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r13, 0x28, 0x8, &(0x7f0000000100), 0x12d) r14 = socket(0x25, 0x2, 0x4) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000c80)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="726db791bafd", 0xfb, 0xc, [0x3, 0x6, 0x30, 0x0, 0x3d, 0x25, 0x33, 0xe, 0x25, 0x21, 0x8, 0x1a, 0x11, 0x3e, 0xe, 0x1c], 0xd8097b845b6362be, 0x7fff, 0x81c2}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0x0, 'veth0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xff, 0x1, 0x23}, 0x0, 0x90, 0x100, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x9, 0x7, 0x1, 0x0, "48216799ab9105d00359d1ce01011afa1bfde0be7c59d525cdfe22bf4dc22d4fcfc4e6d3aeff6c7a36a93c90724b612ff051a29c74fdb46547365a2b1c007cf9"}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 2.383516904s ago: executing program 6 (id=4205): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000), 0x8) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000), 0x8) sendmmsg$sock(r1, &(0x7f0000002c00)=[{{&(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x67eb9c35, 0x5, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x64, 0x0, 0xff, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0xff}, {@remote, 0x1b453e88}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@local, 0x1}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x67eb9c35, 0x5, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x64, 0x0, 0xff, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0xff}, {@remote, 0x1b453e88}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@local, 0x1}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x18000200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4020) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x3, 0x2}, 0xc) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000180)=0x7fffffff, &(0x7f00000001c0)=0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2", 0x21}], 0x2}, 0x24000008) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600000425bd7800fddbdf25022015fd", @ANYBLOB="72a88318fc23d4c2d79e621e977f1151ac88628ecbbfb192218f11bddc01511e22e5fa0aa2a5503f5d97000b5efdef258037c830198fbe358160d095b0a58c27719bec814c959095ac3f6df1611baac0e4607788a9b68de61d2f148b428e45e2377795baf136efa72870558dbff822a73b186da7dd03ff254a2a8fcd1f8e360acf089babc374c019ed1b0af84f188ed868008588f5c848fb7f44", @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r10, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @local}, 0x8) 2.25506772s ago: executing program 6 (id=4207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @from_mac=@broadcast, @broadcast, @initial, {0x2, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffdee, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x400}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6", 0x71}], 0x1}}], 0x1, 0x480e0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b04000000000000000002000000180004801400018009000100686173ff0f000000040002800900010073797a30000000000900020073797a3200000000140000000100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 2.208219327s ago: executing program 5 (id=4209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x2, 0x3}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100800000000000000045556d8dc73a6470c5b77529367c63d55132c7d6a15af3"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.997501433s ago: executing program 5 (id=4211): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000f70700"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x2, 0xfdf00002}, {0x16, 0x0, 0x6}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x1, [0x100]}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffc0}}}, &(0x7f0000000380)=0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.912687536s ago: executing program 6 (id=4212): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800", @ANYRES16=r5, @ANYBLOB="010000000000ffffffff3900000004000d80"], 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r3, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r8, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000240)=0x4) 1.521869636s ago: executing program 5 (id=4216): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x6f, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x0, 0xc, 0x12, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x3, 0xfff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x101, 0x2f, 0x6d3d, 0x80, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0xf}, 0x50) 1.328870602s ago: executing program 5 (id=4218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x82}, 0x4048) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x7, 0x6, 0x801, 0x0, 0x0, {0x4, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010101010000000000000000000000000c001980080002002e04000004a420a2ea159a9e000280"], 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010101010000000000000000000000000c001980080002002e04000004a420a2ea159a9e000280"], 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000004) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000004) 1.261865846s ago: executing program 6 (id=4219): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e22, 0x61e5, @loopback, 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x20, 0x4) sendmsg$inet6(r2, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000000)='&', 0x2a000}], 0x1}, 0x85) sendmmsg$inet6(r2, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="14e359050339d9451a0e66b38575bfc055047a98e8f035b98c99dff954dcac3c680b32d45b619d54ef3908d2f2e1560b0989cd1e7eabc74113b8ffc7f6e5fe66cc78d6c83097a0247ff1ceb85440c24d409bf80b37cf9f2b3aacd4fea8c392fb26ed4ed28f124e3857ee464ef8c462be7bcadadf099ed6e1c8cf218e64ee397aa4aa56bf66eb3084effc2fdc6a5a9e4305da2c2c06d593877cfd134b7f00e8866dd5253cf019fa71108fcf5cbb9e8f7ddcb0727639cc4381c04fc9c69c0541a6834dcfa659f328b4440ec96636214155b85647fc60a073c1cad8f71d602837411488f9b71ea84c5b5689524325be000fdf35d895f0baaa2abd659e50a5f724526f46b7b272ff27e5fc292e00b0137e776248317356f2cc8e1acdd97ca6786623ad13b0757c3c1a43971dbfff3254d1772057dd3c4dcbdd6d1b77c9a82eebe02fd667ae7e8f8b72efa58c3fac3e7db8538471060f95dba29706bfba00da69012d6559ab35eb167612f4c1533ec11046c342b4666d3d3f60cc501524cb9dbaceabac74c74816183ce9e5c227fe940ff8dc4029001f247b175129c608bfadf6cdb90949e75ae98142c0e88a688401ff4295ac6dc546aa00dc280ef439d25b03f17c4655cfac64582fb37184978678e7101517d7dccdef0b54d59b2a35b8a4d0ba79d6522c9a3738edfc2cb1948a352facc59cbee99b9e5d663bd9f09c8b111093c35d9079525768ca8c5e52c400bb628bb40ef9f885aa646170070f32e35a520f686db6426719a1de097624a3817a2efacdc05005ce3e2f4fd058b1602361818f55dbb36349ecc411cba1fe80dcaac2382093296897ed979c093b58b59382e204cc37de770a496f21bda66d7240759a2a5731dff1942620d003acd3bba81a6e4cafcf7589c2ceda93500658e716adf4c6d834799345f4de5a4fa1e4891de39276c55517f130b6c59f9642f87e5dff70430e5401551f2a88ac7d6cbd89114894fa6983fa405558f939341654433196bec16d472034d94a3a3af8829313fb75b262b4c06d9742b8209044d2ca06a0124314c053037f326fcabf69f940fd138b1db61a9ac2fbd9b499ce77caa84d5829a08d6f74d006b31f9aea8bdc27196105fd090e01dda05279d218a67fd17669059ba7c8beb5b2a2088c63a9e16d4103a9b2700f56ba0824778b8aa55aabf586e161916e8ab449540396efce31404e26d4ce15a7664adbda97147d9832695966a6015a67156951cdfc15fd3b8a7fe919b8dcbdd86ae2556ed0416467216cd3edfdebe66d06adb1d78dac48aec8d00115018d249c3fe3f722d066cdffdce091c89a9ce6fb365c27860c595da556fdf858c6019da96700374036a19ba13fc0fb4b218f583d1eea687d94b9c68a493a20e1ec65696de20e694bf1862320bbaa91a70b6e8fa3ddc08cbcbed071b90ada8ab496e0fd1e093a5e68b3b28ba8f462c5ff12ceb362886008a6da91c1dd6b037aa85b1b1cd4c5447c6a0c4e4e5b1074ae9249151320e5deaa8f5dcda7b3d0b5891a39c0147e1aea50e9daf688905b75f8773356770dce3f55a781ddc66395f73606967425eeff0406a0bcce234d20f6400a895f8323a15fd0853ff98585a8654db3b8b669c71d57d06a6fdb1f74602e006348b3a97d2870b0939d1f12bd19828f346f8d41c1206af79d9b9e78eaad49acabd739aeb8c5a77be4ba6d6f0857917413aa9f691dd9ad6771f62d160312c83d6df3f158cf8959945e6106a54875fa6915ba6e3e28b3a7ac3658270acce23050cdd6b23e9ee775545d294cd6c50545c7753a8233e5bacef143815d66b4b188378a24daef52205e5a88f15f30f8657e730d930d37365dc8b5619f13c5d832af3411671d8863f5f91dc7a54747d1ef23702444abcad38e7d2163b0ee127a7ed7559c5d4d8068829a1cc0b49a6081d158898494e97012cfca190a405054900be24f5fa623e499bf06b7253ba65900753a574608936e850141b14a57579f05561ece524e607e277dcff9d9f6d38500e2a232aa16b8c2ff383194281f27c56c680e08709500fccb7569befb348a6da92afc70807aede11403a08212f93806a272b0f81b1504067f862a7b6386f469a182fbe2f649b0c9c3b1dec7649fc56ec6b448e86601a0dc44d5657f3ae2a0d6d39ce445525bfa4f7d82df9825c4f74bb2a6960d6212217d6a42e255fd9dde02bcb1aae1fe8bc2835652579f902a8d016fb860c9959dec4b5520c6454a1b669e0f1353902177d18b6a725f450f4ec867027b80cb7c93d44ea7931b39df3322a81c54088bec7d5b6c8aa3e003d0733f4254e496579c52484cf872d870f49b022dc094868bab7bc3f8a9dd3b71c4748a02697423cca05c1bb45363acd10e18ff0b70bae039081263de9912cdb9d4d07f63e076da1966018dc5903f8dd81505e68b5a639e149ee5bbeffbcf7c0a7ac957d88e9f6b06f9e0fd118273d326c10b7fbeaf08bf64b0d17ecc24d65795ea3ea668cacf835f2aa9f32ef23362726584b1828749447c57f34262fcaecd031bd85b8a841c498f1d8b09b31525fdc353923400a3431aaab8017b3e5618a9534b2bb3e11485ef18d5f0e4910cafe6b50096cfd6766a22768304db14fefdcdfc9e722532813f632066d4b66f72e0c6bc6f5b248d6c4743f606fec6b90976845eba3c9ad65aa58c93b0c66cad8ce9fd69f530a337a8d258a4eba98a7eaac12839100860da606fc998f2c80327eda3fa03160bbc5bf18de548104c26ee42d1840f81fd2a798a47107c975693cb60342e8e6d6e30003439005fae50719f945a589719655a76963db3febbc2ca54ae0287a2462123574dc8f7b10f8c4e8212c4241d7e19ab8415ced611b31150a64af4d0318cbec3a74a6c022e75e36bf26623c78a918c491deb9551b51257ef0dd8666dc837a54604b5808dca0a0b6d1eb6b6a710bd8b99d772543c36bfbc08fac581930cda3f9454641067e56185baa743ea774b54c604968bbe52887724e020ea637c07df3e48f8cf6585b67c612333f25179eb8166a6d6330354a508277c31fbebcc82fb983f578804878a1e7349c2ffe3888d93833113f0099ced41d7f5e09f7006725476a66fedb300ea10c3546e994de80951df73bed7725861dbe49ace825e0a6443a3a547ce93d3fcf9f2c21e6e4137ff01adb185e5cb919cb1f69c6a126dcb4c331b931b0b1dc85e7a7ebb7432ea734c17d0238dcc7194980e2a41a2e6be9533367d251b3ef507df2416efeab817ada5010b22a41d2586682f03a8fc31f4fcdd907718a4818aa9ef9acd47ebdd5471e7928e7ed4a4208786aa071cf0928adc691c3c4a49df31b8ec073e892cd11d177e4b80a85e24e870928e55b3acdba55cdcd006488bdfcf3aa97bb986ddcfb76797e03ac9cd1518f5a34286143959ef15cc7eb5664a1a4ead0ca78465d349a43f17adaf7a54dc771c5c7a02045672e69989246359a77d137f20f21cecf3de6d6da5e47aa927af51d466bec633c64f5f0a5864756de0051a695e60a29ea34507bcc4a0dd7affed5a2684c365a04e076caa2c2fa5e559583d6f7d463c75472b3ba6db5493f5f48ad4b5bb277da5a8172ded8a57d32c151bb1baa5e4351983736ace173160f7af634f729e35b8e2501ee7a51b14320c57de1e8434b8a1a33d578a8b1543ebeeafe1348864b26522f5ed65f7b709b6e6cb9d9bd29613f98a2eb4b7a85a82c7c15f17b6436cfe58e4d320a14fa33c0f27f2cb2616e575fa471ad0a230ee691a23342130844d016bc75e443c809e3d263f7e4da2e3ffaeafa5cbef01ffd358178cd99e56846cc9af7e2b54dcb019574204df64445c7ee235aa4741e932ee4f29f9e465d09bf644d33cd6575a744de32d73788c350750c8e2f92518c84a8bbe0b4ca1e35abf7185dcd3998f1189b85de034020374e445f70d289f3290fa3eaf60b8d662f42bb1553b1c14b832aefb52fa03e3a78abec57e7bec3ff500363e69cb9103877413958a7f039be17dcf11bbd6a7c542364b6b91f7d6519255e6a7c9c5b7f1226fba362a550cb5aa22d6be30d606f9ccaa9302e36dd954df60b10f882c44b23d3134e1c1549c70ed4aebded8a7e300541e956882ee429debce4750af5eb34518528f45e81df6790ecd7fc16681bea5beca201f1b4856a5b3b523132dbcfbe39fd5298e07ca9f3755cc6a1b0fa2606c0b57438cab53dc4f496c5bfc9affa128c7d4d6ebd396e285ed9dc602f498b5d9b3a07917b0cab10c8ebef25487adfa889181d84ad6dc1b53152e95c941255567ef906767f5ebaf1d3ece283768d834117a1fd15f48fb639a86cc191ea2090736e9e2141dcd412efa8126d79376fb22b3347bf17d8bb2423c9eff589bb4d6ab971ef0d27338282248a29e4270ef36d5941f69ba0ed13145debd3d82154cae1f0f2e92ec0073a09d38f151fe2b5226ca91cd8265ba808916f081cdeb09e2b5425f63f7d71816dad80fdbbb621c3fcf56464fc6bdca20653e608591e95b83bbb691639d8648e78b5b4d0399e2c2ac55319fd9472fd3843d3e440aaa6d2cc91388987f726c3c8792f954eefe27ece3d10177224ec341e58f27fdf1980f970bc1f26d4fdeba4be51bb0b3281e8c2f1c18ccd60938ed7b827828f5480e5d307bc72b482b748187f97ca70a541501ede1cefef4be74fd3117741704f9efe87f796cb79955d79eb394f243a484b9ba68479ced6d0685d959f00a188655f673bbc0e974aee83cccb95f85d85b04e98b17a701778ef2de6258500cc2b25a2c57a0502438d90904aeb21bf9d1786fb77b3276048582045943413b8fb4556b9f4d50265609721b8c48e4366dc80cf1b80b54d474b9cad3768d61971976ba8dabcd1df3e694997c9b324ec1f7b6d1b66b38b2203aadd8011ed4b19df3410570da581399b34efd496d4912405d911da5bbbaf6590dc5c5c9b3532d912303e79edadcff94c6d15696b7b6462f272d13cb38e9bef6be070abfdf23a369dc94be80a7dff2b1dbbd8aa12a5808c3d91ddbab6c218aec76aacb1d5402895198b3fdd6be311190413a094b0101a885f3c4607054eb827f1b947f6d2bc2714a777831424abbaf00fc75a10d809c8a23a216a745484bfb68bb710630c086a3957ad9ee899ab3cc3dfd68671f59455844ff2900818263bf788435b3f9db63f7ae7f94574488d61e3b7d3b6e64197711836a8a367b4333c34c48093eee0c09d49678a9670c4a54c02b7f0cd7bba6eac58aba621858cf1bbd53c87bb40337a9047f07d6740e39818461404adc6aed1e47513a2b33576e05ab3a64441c80af28ca9b574e13ea90c59dab9c6c29bda0cc69086933dea200f61bcfeb0c211d5381d7ab6e88b2a4b4936c7aac506aa845270b2fc42a9758636a8c47e27b97d1d0fddc46011d27861998eb9e740e293d8a918a1b4beca2fbfeab15e291b95c580e43e638acf0b5f880ecf6437188e45d2877a88cfa2aa050cf7ad8c8cdd37fdafbfb1f024c975fb5a278c6c294049c7bb247801f3d852d038a87949a3bf126db1d8b5ccc5c0422ef6902dd2b301d8b8a978ef8e9f2241810fff11dba29ea42f33e72681b9bf1df2deefef3acc1f7f17bbac6695a6fd3ae509761fbc2a30effb51dff3ad14c6dbc45af6f6be18ca284b8b2e9c5fd5180452b8a6cf789e6c24f36ae2f5ad6068f96d3a4bf2c0143d75fa9c8935e38646340ccf6e599126566409f4a0264837e23c08a701ee902648589bc4fa243cf623f3f1edd67b4a7278551897cf7c4fe71ca9a71b077043f96e0c5041be33e3ad81fc2e3", 0x1000}, {&(0x7f0000000140)="f9633ad8dd91b722ae1e328b7cd8fd40dbb4e750140f54730d66bfbbede13fe3b54b7c47c381cce18420b8aa4830c22cb3855774a93204bff91f2842cbd72d653c6c6021f17e3b9919d33b5cec359c17d6d5453c28dcc6105090bc7577daeb82f8c0af8bb74c09d86f61236763ccaff21a2fcbf8c390c8960a3242362778e967af1ec728b1025e5ce3335d5d4803649ef82b0a2e58fb76443afb4dee3fa86fe8ef173f9b5f1ba9984592a8c4ce02a8a875c5552768adbfb3c5613d0bd906670c740a82c56cb29c2ad7e2cb708a20b710191e3d21e689108c1fe6967c90a52d72b27d1888c16653214ba6d64e79a062c9f4f1", 0xf2}, {&(0x7f0000000000)="a8c349ff2aa42109765cb16983b360742ce67f9689eb0a53a8ddbb8e658df779a9fbbf8ce1fdd58c73f4cd2be8d505a396e700e196186470814eba8f05b624", 0x3f}], 0x4}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7675}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000300)="375a984a7fa990329e4b6cc2ffbd4146b5f664d12ff380a40cb42ff496d399027436dda577bfedaea5f3beafcae2a291f8d8a03eacfcb3bb42daf9827d99696061e8d098ffdae952e64ce45843a03e1e3c5742869a180da2c933ee14938a69aab9c4bf2062d160074965db16db4f", 0x6e}, {0x0}, {0x0}], 0x3, &(0x7f0000000a40)=[@hoplimit={{0x14, 0x29, 0x34, 0xc}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@ra={0x5, 0x2, 0x200}, @ra, @ra={0x5, 0x2, 0x22}]}}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x32, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x1f, [0x6]}}, @pad1, @generic={0xfe, 0x79, "130833eb36f51b3da85b55da05572095ddf6820241c8c17c4258bfd2080129b2faa9d7100886f05be3a368b4c03da23a4a39e1f09fa6ae6ecca6f254a0a221570e360f6d28a5e6d46f9fedb1949332dda93c518b8cc9e816c2b8f17b5698a6b15afbb9c3397b0ed6dff757e388ae786404740bc62b76d3fd72"}, @hao={0xc9, 0x10, @mcast2}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x6c, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x10}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x198}}], 0x2, 0x40004) 1.147213995s ago: executing program 2 (id=4221): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) 1.02576449s ago: executing program 5 (id=4223): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdc00, 0x800}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e29, 0x3, @empty, 0x106}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 1.025407557s ago: executing program 2 (id=4224): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8) 976.671425ms ago: executing program 0 (id=4225): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f0000000280), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x15}, 0x8000) 963.800173ms ago: executing program 2 (id=4226): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000002c0)=0x9, 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000080, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x8919, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket(0xa, 0x2, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x21, 0x0, &(0x7f0000003c00)) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x9, 0xfffffff9}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x9b, 0x0, 0x0, 0xfffffce0}, 0x28) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 857.511745ms ago: executing program 1 (id=4227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000001e00dd3814e559a804f20dce8d2a0000000000e6", @ANYRESHEX=r1, @ANYBLOB="000002", @ANYRESOCT=r0, @ANYBLOB="d38731b696f6bebb950a25cc04fb3f93271bc63a959fb31975a06cbbf6c5917b809e7419656ab4993742df3f7e75cedd963c00fe46912e772bb2fe7b6ccd9d50b329866c93177d77ab9b95736796e82d99668f1a8e9ae54184934aef6b819fccc6ca6fb42c0a9758de07eb267e81691d86eb8c78690e4b4efdf6f6c2c3f7b21b226bc8e31091b21b0804ca6c90d29530be4247c9495fa4f18780"], 0x1c}, 0x1, 0x0, 0x0, 0x20000901}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket$inet(0x2, 0x3, 0xff) shutdown(r4, 0x1) sendto$inet(r0, 0x0, 0xfffffffd, 0x4040810, &(0x7f0000000180)={0x2, 0x4e1d, @remote}, 0x10) socket(0x40000000015, 0x805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x380000, @mcast1, 0x100}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) bpf$MAP_CREATE(0x0, &(0x7f00000195c0)=ANY=[@ANYBLOB="1900000004000000080000000800000092100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="006c7144622af40000000000000000008000000000000000000000bbda5be8c861b5746f36b1b8d5f8a310a295d278680fb60c17be21dc441064a08804b3a8ce66b6127d8937763d12039aa29168b6820649383d17fd6a31ef7dfc211cfd3f571c9d9605d209415e110e2f3e8f2072a2ce9ebc1fea524aa39b9a97dc7ab43fa015c6164bcd6b894e5e5ee9aec8c97fcd6244a20d5aad3c769d72bb9ed7043a97540772a2eb13fcf7b5ef166f0338ef6cdc8b252c705530778bf066314607091b4ddbbf70bf9f3a156367352abaf5fcfa1f91de55645662f8074e6a"], 0x48) r6 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r8, 0xd0, 0x30, 0x403, 0x6}, &(0x7f0000000140)=0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 849.668702ms ago: executing program 2 (id=4228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 835.905718ms ago: executing program 0 (id=4229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c220000270601080000000e000002000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) r2 = socket(0x1d, 0x2, 0x6) bind$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x119306243b7dfd66, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r5 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x42) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$packet(r3, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b222030455901000000f7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abd", 0x84, 0x8c1, &(0x7f00000000c0)={0x11, 0x86de, r6, 0x1, 0x4, 0x6, @broadcast}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "024000dc00"}}}]}, 0x48}}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0000000001010400000000000f000000000000000001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000001000016000180080001000000000008001200e000000208000740000000000800034000000000"], 0x6c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r13, 0x5411, &(0x7f0000000200)) 747.389292ms ago: executing program 1 (id=4230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x409, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4, 0x5}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0c007d80040002"], 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x2000a010) 597.633468ms ago: executing program 0 (id=4231): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x1e8, 0x140, 0xffffffff, 0x0, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x2, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xd, 0x4}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @multicast1, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x7, @empty, @private=0xa010102, @icmp_id=0x65, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) (async) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, &(0x7f0000000340)) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r3, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0xfff, 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x4, 0x1ff, 0x18, @mcast1, @mcast2, 0x1, 0x700, 0x8001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000a80)={'syztnl2\x00', r8, 0x8000, 0x40, 0x8, 0x4, {{0x3b, 0x4, 0x1, 0x34, 0xec, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0xb, [{@local, 0x5}, {@remote, 0x2}, {@multicast2, 0x8}, {@multicast1, 0x10}, {@remote, 0xe}, {@broadcast, 0x10001}, {@empty, 0x80000000}]}, @end, @timestamp={0x44, 0x14, 0xc5, 0x0, 0x2, [0x7, 0x7, 0x9, 0x9]}, @lsrr={0x83, 0x2b, 0xf3, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @empty, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}]}, @ssrr={0x89, 0x3, 0x67}, @timestamp={0x44, 0xc, 0x94, 0x0, 0x2, [0x9, 0x9]}, @generic={0x7, 0x2}, @cipso={0x86, 0x2e, 0x1, [{0x1, 0x5, "ab4766"}, {0x6, 0x3, "a8"}, {0x5, 0x8, "f5b12ca89089"}, {0x1, 0x12, "3bbf86d58d328dee5395f83022e4d71d"}, {0x6, 0x6, "845d227a"}]}, @rr={0x7, 0x1b, 0xa3, [@remote, @empty, @multicast2, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) unshare(0x20400) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x1b, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0xa, 0x5a7fadebe5837acc, 0x50, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x87, &(0x7f0000000900)=""/135, 0x40f00, 0x44, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x10, 0xa, 0x68b}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[r6, r6, r6, r6], &(0x7f0000000d00)=[{0x2, 0x5, 0x5, 0xc}, {0x3, 0x2, 0xf, 0x1}], 0x10, 0x3}, 0x94) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r12, 0x104, 0x3, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @loopback}, {0x306, @random="629201c468de"}, 0x10, {0x2, 0x4e21, @remote}, 'pimreg0\x00'}) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB="2b00000100000ce255846ed85d18bb1faa6001428c5200000000000003aec0b4f2f42e8a5242676941073545c0e1efbbb97b08c4ce62362297fce035a97e428b62494ca8d99d9301f7275a1c8fb1121e0d28d96250a9d4f4905cb034a32f57a020994d6c4c6dfc5dce0f61844d1019c7e807c0c60c06939d5092bf7f25fc44f3b5a3a17345214ce44eea3c64796594a9b81a600cfdc7c879b6094b083ac1c785a8fc584fbf12a952809980b1aedf8cde37d9ef26cbe22b09b6b7c595", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) 596.496011ms ago: executing program 2 (id=4232): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e23, @multicast1}}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c0000000001010400000000000000000200000024066fd41e4bfa79d45200018014000180080001007f000001080002f6df0000020c00020000002400028014000180080001007f000059150b4088787667af13341e00010c00028005000168a8af3cba71c89e884a02030000000000000000000800074000000000080005800400018058655dfdee434f86a581f6ca"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61157300000000006113770000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf6700000000000035060200c0ff3f006706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x400, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0x100000000) (async) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000200)={'virt_wifi0\x00', 0x8001}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="5409000000000000fdff06800800018004000c8008000d0809000000"], 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 567.889319ms ago: executing program 1 (id=4233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, 0x1401, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}}, 0x4000001) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x84, 0x0, &(0x7f0000001080)) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 489.313336ms ago: executing program 0 (id=4234): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x2a, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x100000000, 0x4) socket(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) (async, rerun: 32) close(r5) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r11, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)='\'', 0x1}, {&(0x7f00000001c0)="46cd05222515898389a60e11cc801e5aff300f", 0x13}], 0x2}, 0x4) 414.589993ms ago: executing program 1 (id=4235): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) setsockopt$WPAN_SECURITY(r1, 0x0, 0x21, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r6, &(0x7f0000000140)="3e77c944ed059fedac5f2ed037cedc3e5f5065f1ea604acad8d7fd56c8c3ea41ab84563eb84ab005a4e81b4f380c7f6eb641dd99ca339845034f263deddb364609ec84d323a7d0400125732169c767ac511515604bff04c2b873afe725ad36633109d855a6637840a02efe82a3cd48dddd0f895996f4e9f9dc8322f5fb6d5221518b5dc87cc84449b7320552442a5a99d5c2783b44c3f5bddd629cd2d0d81117d3c7576cd673ad133d68a9f9998f20903742551a49ee986c2dd6505c57552e0e05d5dc48c0e8f76f639df1", 0xcb, 0x24006801, &(0x7f00000000c0)={0x1a, 0x118, 0x0, 0xfb, 0x7, 0x8, @broadcast}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="34000000120001000001000000000000100000000c0000000000000014"], 0x34}], 0x1}, 0x0) 408.849934ms ago: executing program 2 (id=4236): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x7, &(0x7f0000000100)={[0xfff]}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xff64, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000079104800000000001f00000000000000950000000000ff00a62bab50ff9e464f3643b0c4a20574a7870f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 345.454605ms ago: executing program 6 (id=4237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000009b00000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000eb83a31df0fea788aaa34bdbab00000000000001fc010000000000eb1b51500000000001007bf453d59451082fb24dddbe7dfeeaa4585f06cc6210cd55e211392f0b9027cd61ed06f01f9d03e514a955e7dcc760298af6e34a0d799cc54ad3ada124187b1c7f1972d46485dde3fbcff578a0de09d45e0000000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000810000000000000009000000000000000001000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x700, 0x42600000, 0x4, {{0x15, 0x4, 0x1, 0x13, 0x54, 0x66, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x34, 0x45, 0x1, 0x4, [{@local, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xffff8000}, {@loopback, 0x9}, {@empty, 0x8}, {@local, 0x7}, {@multicast1, 0x8}]}, @rr={0x7, 0x7, 0xc8, [@local]}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@delchain={0x3698, 0x65, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0xb}, {0xffff, 0xfff2}, {0x3, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x2}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x1}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0x0, 0xff]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x40, 0x79}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x35f4, 0x2, [@TCA_BASIC_ACT={0x304, 0x3, [@m_gact={0x140, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5b, 0xffffffffffffffff, 0x0, 0x7}}]}, {0xf9, 0x6, "fa318f775271731b846b3d3d88f89dfc98c08b5667e0b3b5c1479e0915577da1793cf819191afa94263065e319b3ee412054e1ca1a40c004d62a4f5e3c404019db70ed87b9cfb860bd0d8a29e6e23e114ccb17aa48d65c70f6c092ae3bd5609fa8649fcf92653ded2cec2b4f1518683eef8037c62b93bd655b62eb019dcb65b3ceafe37d7acda94251388c871f343f7c10ab46c8c9d29abcc93812abeaa7db691f771b33a033030b605d04a29c2e21b3dfad2e7a0d112260e381c13aac76c9a4b3cb06d9ac0b6315e0df79efd77cbb9406b0782b031266f9c2e5e72773072739ba56471cd56107079ea9653b310a715fc7be906eb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x1c0, 0x19, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x7, 0x87, 0x3}, @private=0xa010101, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x5, 0x6, 0x6}, @multicast2, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x6, 0x81, 0x2}, @local, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x403, 0x7, 0x3ff}, @multicast1, @private=0xa010102, 0x0, 0x1}}]}, {0xf5, 0x6, "eda9a60589da4e116dc6957ea5fb917bf1638f61d11a972b6d1f74fa4056372ad1c5bb58e7ff467e71dcc66cb7c8de51cb378f798456a73f7cd6d9702337aad785fa040c17b202631b9d04943606c025e9df6f7d65a3bfb39c4331de01d62f3b22e55155fd8070c076a33552fc6dd68d048d4e289aac3a43e96c6070f3fb9601b9b518e9d37559dd5b272d09a239e2663f5d6bc2b1f6fa8ac8f6c9560a75f2f73786726cf12f3cdf9cdbdc3a3c649f0278d1112add271fe8fb4819dec6761a7da3d86058bce0bb8d374f14e523c19959f864c47ee910bec56aaff4bb1b28e350586ef662fe2b57c6b504504d648280b9b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0xc, 0x5, 0x5, 0x6, 0x4, 0x2ec2, 0x0, 0xffffffff, 0x6, 0xffffffff, 0x9, 0x1, 0x9, 0x7, 0x80, 0xc, 0x8, 0x1ff, 0x6, 0x8, 0x0, 0xfffffffd, 0x1, 0x9, 0x5, 0x62, 0xfffffffd, 0x40, 0xf5, 0x4, 0x6, 0x1, 0x6, 0x7fff, 0x6, 0x9, 0x405b, 0xfffffff8, 0x0, 0x0, 0x1, 0x80, 0xb, 0xb, 0x6, 0x80d0, 0x2, 0x4, 0xffffff79, 0x2, 0x8, 0x65, 0x7, 0x3, 0xdb0c, 0x100, 0x0, 0x4, 0x5b527c12, 0xb9, 0x5, 0x0, 0x8, 0x0, 0xffff, 0x47, 0xe, 0xdb07, 0x9, 0xfffffffb, 0x1, 0xc7, 0x90, 0x2, 0x5, 0x1, 0x4, 0x2, 0x4, 0x6, 0x7, 0x8, 0x8, 0x7, 0x0, 0x5, 0x9, 0x5, 0x7, 0x8, 0x6df, 0x5, 0x6, 0xfffff9e9, 0x9, 0x800, 0x8, 0x7, 0x2, 0x7, 0x2, 0x8, 0x7, 0xa5, 0x8001, 0xa, 0x9fb6, 0x0, 0x0, 0xce02, 0xc, 0x80000001, 0x4, 0x1, 0x7341, 0x0, 0xef, 0x4, 0xd8cc, 0x0, 0x1, 0x7f, 0x7, 0x3, 0xc, 0x5, 0x4c, 0x2, 0x54d, 0x3, 0xb5c, 0x47, 0xfffffff9, 0x9, 0x5, 0x1, 0x2, 0x80, 0x1, 0xc99, 0xffffff28, 0x5, 0x0, 0x3ff, 0x7, 0x1, 0x1000, 0xf, 0x8000, 0x0, 0x9, 0x80000001, 0x6, 0x10, 0x1, 0x7, 0x9, 0x1, 0x4, 0x5, 0x0, 0x5, 0x8, 0x3, 0xfffffffa, 0x8, 0xe, 0xfffffff9, 0x7f, 0xff, 0x3081, 0x3, 0x97, 0x3, 0x0, 0x6, 0x2, 0x9, 0x8, 0x2, 0x2, 0x5, 0x6aa, 0x1, 0x8, 0x80000001, 0x10000, 0x1, 0x1, 0x101, 0x7, 0x4, 0x9, 0xdc3, 0xf, 0x7fff, 0x0, 0x101, 0x4, 0x7, 0x6, 0x7, 0x8, 0x5, 0xf, 0x4, 0x41776f1a, 0x3, 0x10000, 0x7, 0x2, 0x2, 0x9, 0x80000001, 0x200, 0x1000, 0x7ff, 0x9, 0x6, 0xb2, 0x9, 0x8, 0x2, 0x800, 0xfffffffa, 0x1, 0x6, 0x6, 0x7fff, 0x2, 0x7, 0x67b, 0xa, 0x401, 0x4, 0x7, 0x4, 0x100000, 0xe, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0x3, 0xcaa, 0x3, 0xfffffa2d, 0x9, 0x100, 0x9, 0xfffffcd6, 0x25190e35]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_BASIC_ACT={0x241c, 0x3, [@m_csum={0xc0, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x78ed, 0x7800000, 0x1, 0x4, 0xe34}, 0x1}}]}, {0x75, 0x6, "c34b6ac42ffb8a9eaebb8ddc96b3a2524200635c09e19f55c357b0b1646db773c0d47ae85a4c0710c702d63d9ea85a6cfb522da90ee66391617ed8e04bc36df65f02834dd56cc1075ac92e9eec0353255c3779f1afb9596d14380f5847b5d1e7a866ae999e419c3af171381928d97c47c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x78, 0xd, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x20, 0x6, "8927d8015c20b04f4408d2648b954eaf9946a765809ab30266ee7229"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x120, 0xa, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2038, 0x10, 0x5}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x8, 0xfffffffc}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x81, 0x4, 0x2, 0x6}, 0xf000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x6, 0xcde, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xf3, 0x10000000, 0x8, 0x1}, 0x1}}]}, {0x62, 0x6, "e8b463ee1cf68aa355785cbfe12e0a2e468cac09c00d2ba8c981a02166fbe2f5247239bad6b79dee0b449c9f5ecb29686b1a20329fe1531b5dd248ba81709421ce3e89a8c70fbba51ca3f811ed1ef32bbd2d3430cc8f7c3c8e5210489381"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xa782705afe07a08e, 0x2}}}}, @m_mirred={0x1150, 0x6, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3c, 0x9, 0x0, 0x7, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x1, 0x5, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xaf, 0x3, 0x7, 0x7ff, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x5, 0x4, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7fff, 0x2, 0x7, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x3, 0x9, 0x101}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x10, 0x4, 0x64a}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x7f, 0x891d2b91da64ed2f, 0x1, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400000, 0x1ff, 0x10000000, 0x9, 0x5}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x1070, 0x7, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xf}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xa, 0x8, 0x10000000, 0x6, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x686, 0x7f, 0x8}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_POLICE={0x8a8, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xd6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x5, 0x800, 0x0, 0x9dbb, {0x4, 0x0, 0x6, 0x5, 0x5, 0x1}, {0x2, 0x2, 0x5, 0x4, 0xf7, 0x7}, 0xc7, 0x7, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x8, 0x8c, 0xa, 0x10, 0x8, 0xeacd, 0x8, 0xfffffff7, 0x6, 0x2, 0x3, 0x0, 0x902, 0x2, 0x6, 0x1, 0x9, 0x0, 0x3, 0x96, 0xb, 0xfffffffc, 0xfff, 0x3, 0x6, 0xd, 0x22, 0xffffffff, 0xf0c, 0x2, 0x3, 0x2, 0x80000000, 0x347, 0x1, 0x152, 0x9, 0x2e018e8e, 0xd, 0x8, 0x156e, 0x401, 0x1, 0x7, 0x4, 0x6, 0x2, 0x3, 0x6, 0x6, 0x8, 0x7fffffff, 0x80, 0x9, 0x6, 0x380, 0x6, 0x7, 0x7, 0x1, 0x81, 0x2, 0x5, 0x10001, 0x9, 0x3, 0x8, 0xfffffffb, 0x80000000, 0x4, 0x5ca, 0x80000001, 0x0, 0x3, 0x2, 0x328000, 0x2, 0xfff, 0x9, 0x8, 0x7, 0x3, 0x3, 0x8000, 0x8001, 0x200, 0x7ff, 0x3, 0x7, 0x33615d09, 0x7, 0x5, 0xf, 0x0, 0xbb3, 0x7, 0x2, 0x0, 0xa6e, 0xfffffff6, 0x0, 0x8, 0x585, 0xa, 0x3, 0x9, 0x0, 0x8, 0x6, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x552, 0x100, 0x700000, 0x8, 0xa, 0x9, 0x5, 0x0, 0xc, 0x7, 0x0, 0x4, 0x8, 0x0, 0x9, 0x8, 0x81, 0xfffffe00, 0x5, 0x3, 0x3, 0x6, 0x40, 0x1, 0xfffffff5, 0xa93b, 0x9, 0x1, 0x8d, 0x9, 0x7, 0x1, 0xfffffffa, 0x8, 0x4, 0x5e1, 0x0, 0x4, 0x4, 0x2, 0xe56d, 0x1, 0x8, 0x3, 0x1, 0xffffff80, 0x7cb0, 0x5, 0x80, 0x5, 0x5, 0xf6, 0x3, 0xfffffffa, 0x1, 0xf1, 0x7ff, 0x2, 0x8, 0x29, 0x2, 0x4, 0x2, 0x0, 0x6, 0x8, 0x0, 0xc, 0x2, 0x401, 0x7f, 0x10001, 0x5, 0x3, 0x0, 0x7, 0x507, 0x6, 0x8, 0x400, 0x1, 0x9, 0x8, 0x0, 0x6, 0x1000, 0xfffff001, 0x7, 0x9, 0x3, 0x2, 0x8, 0x100, 0x1, 0xc82, 0x8, 0x3, 0x5, 0x6, 0x2, 0x0, 0x1, 0x4, 0xc44, 0x8, 0x1, 0xffffffff, 0x4, 0xe, 0xffff, 0xfb, 0x800, 0x4, 0x0, 0x80000000, 0x2, 0xd3, 0x7, 0xfffffffd, 0x50f, 0x9, 0x5, 0x1, 0x7fffffff, 0x101, 0x80000000, 0x9, 0x56, 0x1, 0x1, 0x8, 0x0, 0x0, 0x4, 0x7, 0x7, 0x5, 0xa, 0xe0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x735, 0x3, 0xd, 0x2, 0x7, {0x1, 0x1, 0x5, 0x2, 0x1, 0x4}, {0x0, 0x2, 0x71b6, 0x9, 0x9, 0x6}, 0xfc0, 0x2, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10, 0x7, 0xffff, 0xfffffff8, 0x4f, 0x7, 0x9, 0x77, 0x8, 0x7f, 0x6, 0x3800000, 0x400, 0x1, 0x0, 0x8, 0xaf57, 0xe0, 0x14, 0x3, 0x4, 0xfffffff3, 0x4, 0x8, 0x7, 0x2, 0x9, 0x81, 0x401, 0xfffffff9, 0x7, 0x7, 0x4, 0x6, 0xfffffffb, 0x1, 0x7, 0xb205, 0x1, 0x5, 0x10000, 0x9, 0x8, 0x0, 0x2, 0x7fff, 0xffff, 0x1, 0x1, 0x8, 0x1, 0x8, 0x1000, 0x9e, 0x7, 0x9750, 0x2, 0xffff, 0xc09, 0xfbe, 0x1, 0xfffffff9, 0x7, 0x9, 0xfff, 0x9, 0x9, 0x9, 0x7, 0x9, 0x0, 0x1, 0x1, 0x3, 0xd, 0x6, 0x8001, 0x4, 0x8, 0x0, 0x20000, 0x3ff, 0x5, 0x5, 0x9, 0x6, 0x2, 0x9, 0xffff, 0x9, 0x6, 0xd, 0xd58d45b, 0x1, 0x7, 0x10, 0xadc8, 0x97fe, 0x2, 0x7, 0xc7d, 0x1000, 0x5, 0x0, 0xe, 0x1ff, 0xee3, 0x1, 0x1, 0x8000, 0xfffffff8, 0x4, 0x2, 0xff1, 0x5, 0x3, 0x4, 0x5, 0x1, 0x2, 0x1, 0xffff, 0xfffffff9, 0x6, 0x1, 0x2, 0x643, 0xfffffff9, 0x0, 0x89cb, 0x0, 0x3, 0xfffffffe, 0x6, 0xd57, 0x40, 0x2, 0x2, 0x366a5a65, 0x1000, 0x5, 0x8000, 0x3, 0x4, 0x200, 0x4d9, 0x3, 0x5, 0xffffff7f, 0x4, 0x1, 0x4, 0x3, 0x5, 0x3, 0x101, 0x8, 0x4, 0x0, 0xf, 0x10000, 0x6, 0x1b, 0x80000000, 0x7, 0x7, 0x400, 0x7, 0xc, 0x8, 0x14000000, 0xfff, 0x9, 0x3, 0xc, 0x0, 0x1, 0xfc, 0x53, 0x4, 0x3, 0x1, 0x9, 0x9, 0x5, 0xc, 0x4, 0x38f, 0x367e675, 0x7ff, 0x9, 0x400, 0xf6d, 0x5667, 0xffff, 0x9, 0x0, 0x3, 0x0, 0x8, 0x81, 0x198e, 0x3, 0xfff, 0x5, 0x1, 0x6, 0xdfc3, 0x9, 0x80000001, 0x1, 0x6, 0x9, 0x3ff, 0x4, 0x1439, 0x3, 0x0, 0x9, 0x80000001, 0x2, 0x2, 0x5, 0x3, 0x8, 0x1, 0x0, 0x7, 0x6, 0xbad0, 0x5, 0xffff, 0x100, 0x84fcdf52, 0xa96, 0x4, 0x564d, 0xc3, 0x5, 0xb, 0x5, 0x0, 0x7, 0x9561, 0x9, 0x7, 0x40, 0x5, 0xfff, 0x6f, 0x3, 0x6, 0x83, 0x5, 0x7]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xe}}, @TCA_BASIC_POLICE={0x88, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0xc, 0x4395, 0x1, {0x1, 0x2, 0x7, 0x8, 0x5, 0x57d2}, {0x1, 0x0, 0xffff, 0x3, 0x800, 0x7fffffff}, 0x2, 0x2, 0x80}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2c7, 0x1, 0xb47a569, 0x2, 0x1, {0x9d, 0x2, 0x2, 0x4a21, 0x9, 0x2}, {0xfa, 0x2, 0x364b, 0x8, 0x3ff, 0x7}, 0x800, 0x0, 0xffffff97}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_BASIC_EMATCHES={0x17c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x120, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xdb54}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "05d7f5f1f191708c5547dbf270513713e84ce0d639e9f66252e77333c83aaa39947c031fda64450831bd5998a0579d3fac480f6c72a2fc15cf43c41f513c5efd8dd83a87ec3101bc08b60a7d5f1605ee7179252135a0ff2ddb259c19b3b4f01f3161ea9927eb21d4b13d2cc2401dafe5f5cbd2188ed283539ddd9d45c6ab67ab2eef661c75e0c58c72df4c9f4831897b315ca20fb96da47870d74a7c301bc54fac302d353b808b83c2eb23e20381b9031eac091b14859208631dfa5d4ead0a63db3d1af6cc9489bcf0456752027f847da7f618f36dfe80fa63905e67c56e4b"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x3ff}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0xe9, 0x1}, {0x2, 0xfe}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x1}, {0xe3cb, 0x2, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x8}, {0x2, 0x4, 0x5}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x16}}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x2}}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}]}, 0x3698}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r10], 0x60}, 0x1, 0x400000000000000}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r14, 0x107, 0x13, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={r15, 0xb796, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={r15, 0xb796, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r15, 0x15}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r15, 0x15}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r16, 0x7, 0x2, 0x9}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r16, 0x7, 0x2, 0x9}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0xf, @local, 0x6}]}, &(0x7f0000000180)=0x10) 258.706877ms ago: executing program 1 (id=4238): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x99000000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000004000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="e3d6299c0ab13f00d099ec11d75a49f69a46560ebaef3890e734447eeef05246e848c9186f7b829d4cebc6650d98723527a98c41c89c7ffcac1433e08b9e395390b5380e5fea3ea95d07b5e2d4fd62ceaabdfdcfd29edec82afa75df78343189b942432ae364e33b030b9e3555a2d90be44638475edd176da1f46e858251d23d0366ec3213bfb94bf0c69671c7e3ee90cdd8e5170d4b590ce5f5f95f478f6c899c9b5f3fa541dea4e263eb5d76454abf005f7f0a8b013ff3cbec13f736186e0870575e27549e9bd808575d6043", 0xcd}, {&(0x7f0000000300)="0647d3b2a3aacd927d16b85bbc157015b5b9829dcb0f0e9762276cffa180f832b2d70fa907ee4fbf5bae21238c463c971ef82d80d80aaa8f6802c2635f2f81fc05210951ddd7f2a3ab80c6e2e68e9ec02282a85a3abd61f771f2bb1f31c63e7010b58b7b63f146a6c6fbd7f17a403494d40aa61a58e4cecb4993302ad4337864c2d7e38f5498c447b254e78857f58161362e500e43d61c871d986b6a4fff3283e1184b2eca11cb6812981b5ccda34eb3ac4d12c7f8aba2c0b5514c6641a31f04eb36e0b4513567ce77a1f875570c948effec26bc", 0xd4}], 0x2, 0x10, 0x200) close(0x3) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 235.459423ms ago: executing program 0 (id=4239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000", @ANYRESOCT=r0, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x50810}, 0x8040) 159.410207ms ago: executing program 6 (id=4240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1403, 0x200, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2080}, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0xca6e, 0x2, 0xd, 0x7f}, {0x10, 0x10, 0x7, 0x3000}, {0x8872, 0xff, 0x6, 0x401}, {0x5, 0xf, 0x1, 0x800}, {0x1ff, 0xac, 0xb1, 0x7f}, {0x53f9, 0xa, 0x7, 0x9}, {0xfffd, 0xc8, 0xa5, 0x5}, {0x4, 0xd, 0xdf, 0x52d}]}) 106.510876ms ago: executing program 0 (id=4241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) accept4(r2, 0x0, &(0x7f00000000c0), 0x800) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x1e4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1ac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x900000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49bd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c21239e}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x997}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x524}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x828}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbff3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdc}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7e3}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 47.618442ms ago: executing program 5 (id=4242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 1 (id=4243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x409, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4, 0x5}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0c007d80040002"], 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x2000a010) kernel console output (not intermixed with test programs): ng attributes in process `syz.2.2335'. [ 319.813395][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 319.823452][T14139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2335'. [ 319.858228][T14136] team2: entered promiscuous mode [ 319.864459][T14136] team2: entered allmulticast mode [ 319.874480][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2335'. [ 320.031432][T14149] vlan2: entered promiscuous mode [ 320.037169][T14149] geneve1: entered promiscuous mode [ 320.044491][T14149] vlan2: entered allmulticast mode [ 320.049790][T14149] geneve1: entered allmulticast mode [ 320.085256][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'. [ 320.098949][T14151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2340'. [ 320.187257][T14159] netlink: 'syz.4.2342': attribute type 1 has an invalid length. [ 320.268833][T14165] bond_slave_0: entered promiscuous mode [ 320.275144][T14165] bond_slave_1: entered promiscuous mode [ 320.286546][T14158] openvswitch: netlink: IP tunnel dst address not specified [ 320.319210][T14165] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 320.335489][T14165] bond7: (slave macvlan2): Enslaving as a backup interface with an up link [ 320.362703][T14159] bond12: (slave gretap5): making interface the new active one [ 320.371391][T14159] bond12: (slave gretap5): Enslaving as an active interface with an up link [ 320.506667][T14171] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 320.543354][T14171] bond3: entered promiscuous mode [ 320.553292][T14171] bond3: entered allmulticast mode [ 320.562721][T14171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.647548][T14171] macvlan3: entered promiscuous mode [ 320.658449][T14171] macvlan3: entered allmulticast mode [ 320.739862][T14177] bond11 (unregistering): Released all slaves [ 321.238378][T14213] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 321.640487][T14235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.687616][T14235] x_tables: duplicate underflow at hook 3 [ 321.797286][T14242] netlink: 'syz.3.2367': attribute type 11 has an invalid length. [ 321.802541][T14240] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 321.806745][T14244] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 321.837846][T14242] netlink: 'syz.3.2367': attribute type 11 has an invalid length. [ 321.849543][T14238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.870889][T14240] bridge_slave_1: left allmulticast mode [ 321.888181][T14240] bridge_slave_1: left promiscuous mode [ 321.896795][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.912359][T14240] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 321.997231][T14253] netlink: 'syz.4.2370': attribute type 10 has an invalid length. [ 322.056513][T14249] bond9 (unregistering): Released all slaves [ 322.846707][T14302] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 322.913973][T14303] bond9: (slave gretap0): Device is not bonding slave [ 322.920978][T14303] bond9: option active_slave: invalid value (gretap0) [ 322.935867][T14303] bond9 (unregistering): Released all slaves [ 323.039323][T14302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.110237][T14310] bond4: (slave geneve3): making interface the new active one [ 323.133630][T14310] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 323.288103][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.315666][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.338215][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.366474][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.118484][T14379] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 324.212661][T14391] __nla_validate_parse: 19 callbacks suppressed [ 324.212687][T14391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2410'. [ 324.237225][T14390] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 324.243274][T14391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2410'. [ 324.378258][T14399] bond8: option mode: unable to set because the bond device has slaves [ 324.460542][T14407] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2416'. [ 325.306200][T14450] xt_hashlimit: size too large, truncated to 1048576 [ 325.377873][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 325.727919][T14472] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 325.762450][T14474] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 325.982686][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 325.997174][T14486] mpoa:mpoad_close: () going down [ 326.085886][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 326.263269][T14499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2443'. [ 326.807664][T14539] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 326.863349][T14539] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 327.249925][T14556] sit0: entered promiscuous mode [ 327.278097][T14556] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 327.316624][T14556] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2459'. [ 327.508360][T14562] netlink: 'syz.3.2461': attribute type 29 has an invalid length. [ 327.559092][T14562] netlink: 'syz.3.2461': attribute type 29 has an invalid length. [ 327.581057][T14562] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2461'. [ 327.959986][T14586] gre0: entered allmulticast mode [ 328.061907][T14593] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 328.740485][T14615] netlink: 'syz.0.2478': attribute type 29 has an invalid length. [ 328.765225][T14615] netlink: 'syz.0.2478': attribute type 29 has an invalid length. [ 328.775220][T14615] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2478'. [ 329.638813][T14656] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 329.739428][T14656] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 329.781477][T14664] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 329.790697][T14664] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2494'. [ 329.804088][T14660] netlink: zone id is out of range [ 329.809355][T14660] netlink: zone id is out of range [ 329.863708][T14667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.874964][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 329.876288][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 329.886926][T14660] netlink: zone id is out of range [ 329.905833][T14675] dvmrp8: entered allmulticast mode [ 329.923779][T14675] dvmrp8: left allmulticast mode [ 329.928969][T14660] netlink: zone id is out of range [ 329.947492][T14660] netlink: zone id is out of range [ 329.954288][T14660] netlink: zone id is out of range [ 329.959693][T14660] netlink: zone id is out of range [ 329.972706][T14672] netlink: 'syz.2.2495': attribute type 3 has an invalid length. [ 329.980563][T14672] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2495'. [ 329.980783][T14660] netlink: zone id is out of range [ 329.996343][T14660] netlink: zone id is out of range [ 330.002538][T14660] netlink: zone id is out of range [ 330.032747][T14678] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2496'. [ 330.055180][T14678] netlink: 'syz.3.2496': attribute type 5 has an invalid length. [ 330.333721][T14691] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2502'. [ 330.344032][T14693] netlink: 'syz.0.2503': attribute type 11 has an invalid length. [ 330.344069][T14693] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2503'. [ 330.416630][T14691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2502'. [ 330.529171][T14700] netlink: 'syz.3.2506': attribute type 2 has an invalid length. [ 330.651841][T14711] netlink: 'syz.3.2509': attribute type 3 has an invalid length. [ 330.662986][T14711] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 330.818033][T14718] sctp: [Deprecated]: syz.2.2512 (pid 14718) Use of int in maxseg socket option. [ 330.818033][T14718] Use struct sctp_assoc_value instead [ 330.837943][T14720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2513'. [ 330.889591][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 331.079029][ T8758] IPVS: starting estimator thread 0... [ 331.168822][T14739] FAULT_INJECTION: forcing a failure. [ 331.168822][T14739] name failslab, interval 1, probability 0, space 0, times 0 [ 331.189287][T14739] CPU: 0 UID: 0 PID: 14739 Comm: syz.1.2519 Not tainted syzkaller #0 PREEMPT(full) [ 331.189316][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 331.189328][T14739] Call Trace: [ 331.189335][T14739] [ 331.189344][T14739] dump_stack_lvl+0xe8/0x150 [ 331.189376][T14739] should_fail_ex+0x412/0x560 [ 331.189405][T14739] should_failslab+0xa8/0x100 [ 331.189428][T14739] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 331.189455][T14739] ? __alloc_skb+0x193/0x390 [ 331.189477][T14739] ? __alloc_skb+0x1d7/0x390 [ 331.189496][T14739] ? __local_bh_enable_ip+0xd0/0x130 [ 331.189516][T14739] ? __alloc_skb+0x193/0x390 [ 331.189539][T14739] __alloc_skb+0x1d7/0x390 [ 331.189566][T14739] netlink_sendmsg+0x5d4/0xb40 [ 331.189597][T14739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.189621][T14739] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.189647][T14739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.189670][T14739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.189698][T14739] ____sys_sendmsg+0xa68/0xad0 [ 331.189723][T14739] ? __might_fault+0xaf/0x130 [ 331.189756][T14739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.189792][T14739] ? import_iovec+0x73/0xa0 [ 331.189821][T14739] ___sys_sendmsg+0x2a5/0x360 [ 331.189842][T14739] ? __lock_acquire+0x6b5/0x2cf0 [ 331.189873][T14739] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.189933][T14739] ? __fget_files+0x2a/0x420 [ 331.189953][T14739] ? __fget_files+0x3a0/0x420 [ 331.189985][T14739] __x64_sys_sendmsg+0x1bd/0x2a0 [ 331.190013][T14739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.190049][T14739] ? __pfx_ksys_write+0x10/0x10 [ 331.190090][T14739] do_syscall_64+0xe2/0xf80 [ 331.190110][T14739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.190128][T14739] ? trace_irq_disable+0x37/0x100 [ 331.190145][T14739] ? clear_bhb_loop+0x60/0xb0 [ 331.190168][T14739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.190185][T14739] RIP: 0033:0x7fcc0ef9aeb9 [ 331.190203][T14739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.190219][T14739] RSP: 002b:00007fcc0fe00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.190240][T14739] RAX: ffffffffffffffda RBX: 00007fcc0f215fa0 RCX: 00007fcc0ef9aeb9 [ 331.190253][T14739] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 331.190266][T14739] RBP: 00007fcc0fe00090 R08: 0000000000000000 R09: 0000000000000000 [ 331.190278][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.190290][T14739] R13: 00007fcc0f216038 R14: 00007fcc0f215fa0 R15: 00007ffca2638998 [ 331.190324][T14739] [ 331.458178][T14731] IPVS: using max 27 ests per chain, 64800 per kthread [ 331.771001][T14753] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 332.565576][T14797] 8021q: VLANs not supported on ip6tnl0 [ 332.579828][T14788] syzkaller0: entered promiscuous mode [ 332.613568][T14788] syzkaller0: entered allmulticast mode [ 333.024024][T14819] syzkaller0: entered allmulticast mode [ 334.423720][T14888] netlink: 'syz.2.2558': attribute type 6 has an invalid length. [ 334.433929][T14888] netlink: 'syz.2.2558': attribute type 6 has an invalid length. [ 334.615873][T14898] netlink: 'syz.4.2561': attribute type 4 has an invalid length. [ 334.616185][T14894] xt_hashlimit: size too large, truncated to 1048576 [ 334.662443][T14898] `: renamed from bond0 (while UP) [ 334.699316][T14898] netlink: 'syz.4.2561': attribute type 1 has an invalid length. [ 334.737406][T14898] netlink: 'syz.4.2561': attribute type 1 has an invalid length. [ 334.786347][T14898] netlink: 'syz.4.2561': attribute type 1 has an invalid length. [ 334.815554][T14898] netlink: 'syz.4.2561': attribute type 2 has an invalid length. [ 334.853494][T14898] __nla_validate_parse: 16 callbacks suppressed [ 334.853518][T14898] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2561'. [ 334.949967][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 334.960069][T14911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.998420][T14911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.280467][ T30] audit: type=1107 audit(1770349429.647:2): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 335.281092][T14926] net_ratelimit: 136 callbacks suppressed [ 335.281111][T14926] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 335.436292][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2570'. [ 335.447884][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2570'. [ 335.469291][T14931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2569'. [ 335.609163][T14936] netlink: 'syz.2.2572': attribute type 83 has an invalid length. [ 335.610951][T14938] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 335.724893][T14948] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2576'. [ 336.158308][T14974] bridge0: Caught tx_queue_len zero misconfig [ 336.291139][T14978] vlan3: entered allmulticast mode [ 336.307332][T14978] hsr0: entered allmulticast mode [ 336.317399][T14978] hsr_slave_0: entered allmulticast mode [ 336.357966][T14978] hsr_slave_1: entered allmulticast mode [ 336.427115][T14995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2588'. [ 336.597422][T15007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2592'. [ 336.621369][T15007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2592'. [ 336.633279][T15007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2592'. [ 336.871014][T15024] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 336.958640][T13355] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.974332][T13355] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.991423][T13355] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.000757][T13355] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.992704][T15090] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 338.500862][T15123] pim6reg: entered allmulticast mode [ 338.827711][T15144] netlink: 'syz.4.2634': attribute type 39 has an invalid length. [ 339.315038][T15168] netlink: 'syz.0.2643': attribute type 3 has an invalid length. [ 339.354426][T15169] xt_hashlimit: size too large, truncated to 1048576 [ 339.403910][T15177] syzkaller0: entered promiscuous mode [ 339.464180][T15177] syzkaller0: entered allmulticast mode [ 339.494694][T15178] ip6_vti0: mtu less than device minimum [ 339.543379][T15177] openvswitch: netlink: IP tunnel dst address not specified [ 339.899108][T15201] validate_nla: 1 callbacks suppressed [ 339.899129][T15201] netlink: 'syz.4.2649': attribute type 1 has an invalid length. [ 340.001109][T15201] bond0: entered promiscuous mode [ 340.044941][T15201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.135181][T15210] bond0: (slave bridge3): making interface the new active one [ 340.144060][T15210] bridge3: entered promiscuous mode [ 340.153996][T15218] __nla_validate_parse: 13 callbacks suppressed [ 340.154015][T15218] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2653'. [ 340.156196][T15210] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 340.180003][T15218] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.255748][T15224] netlink: 'syz.1.2654': attribute type 29 has an invalid length. [ 340.266636][T15226] netlink: 'syz.1.2654': attribute type 29 has an invalid length. [ 340.317943][T15224] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2654'. [ 340.373542][T15232] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 340.475294][T15237] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2658'. [ 340.508892][T15238] netlink: 'syz.3.2657': attribute type 2 has an invalid length. [ 340.518068][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2657'. [ 340.557432][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 340.814633][T15256] xt_hashlimit: size too large, truncated to 1048576 [ 340.845597][T15259] x_tables: duplicate underflow at hook 2 [ 341.219870][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2670'. [ 341.260574][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2670'. [ 341.272944][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 341.352960][T15286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2669'. [ 341.492697][T15291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2676'. [ 341.605569][T15289] wg1 speed is unknown, defaulting to 1000 [ 341.775993][T15307] gre0: Caught tx_queue_len zero misconfig [ 342.165735][T15335] xt_CT: No such helper "syz1" [ 342.269480][T15340] xt_nat: multiple ranges no longer supported [ 342.769985][T15370] nbd: illegal input index 2958377 [ 342.780411][T15370] SET target dimension over the limit! [ 342.878469][T15374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.955765][T15378] lo: left promiscuous mode [ 342.967856][T15378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.186882][T15388] syzkaller0: entered promiscuous mode [ 343.194727][T15388] syzkaller0: entered allmulticast mode [ 343.517910][T15407] netlink: 'syz.0.2712': attribute type 11 has an invalid length. [ 343.576397][T15409] xt_CT: No such helper "snmp_trap" [ 344.133353][T15442] netlink: 'syz.1.2721': attribute type 10 has an invalid length. [ 344.168550][T15442] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.186301][T15442] bridge_slave_1: left allmulticast mode [ 344.207450][T15442] bridge_slave_1: left promiscuous mode [ 344.228902][T15442] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.242311][T15442] bridge_slave_1: entered promiscuous mode [ 344.248854][T15442] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 344.409952][T15455] netlink: 'syz.1.2725': attribute type 1 has an invalid length. [ 344.740053][ T8756] IPVS: starting estimator thread 0... [ 344.766324][T15478] netlink: 'syz.4.2734': attribute type 30 has an invalid length. [ 344.830307][T15478] bond13: option arp_missed_max: invalid value (0) [ 344.837172][T15476] IPVS: using max 26 ests per chain, 62400 per kthread [ 344.858218][T15489] netlink: 'syz.4.2734': attribute type 24 has an invalid length. [ 344.888730][T15478] bond13: option arp_missed_max: allowed values 1 - 255 [ 344.920549][T15478] bond13 (unregistering): Released all slaves [ 345.108962][T15496] xt_HMARK: spi-set and port-set can't be combined [ 345.184043][T15503] __nla_validate_parse: 12 callbacks suppressed [ 345.184062][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2740'. [ 345.187968][T15504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2738'. [ 345.353344][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'. [ 345.593691][T15523] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 345.883761][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 346.058129][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2756'. [ 346.079720][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2756'. [ 346.240426][T15559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'. [ 346.452458][T15572] netlink: 'syz.0.2762': attribute type 9 has an invalid length. [ 346.568222][T15579] netlink: 'syz.0.2765': attribute type 15 has an invalid length. [ 346.578940][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 346.608859][T15579] netlink: 'syz.0.2765': attribute type 15 has an invalid length. [ 346.617166][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 346.810540][T15588] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2769'. [ 348.175701][T15661] bond0: entered promiscuous mode [ 348.199909][T15661] bond_slave_0: entered promiscuous mode [ 348.210904][T15661] bond_slave_1: entered promiscuous mode [ 348.228976][T15661] bond0: left promiscuous mode [ 348.243940][T15661] bond_slave_0: left promiscuous mode [ 348.258875][T15661] bond_slave_1: left promiscuous mode [ 348.595064][T15676] netlink: 'syz.4.2798': attribute type 29 has an invalid length. [ 348.610621][T15676] netlink: 'syz.4.2798': attribute type 29 has an invalid length. [ 349.076842][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.141705][T15714] netem: change failed [ 350.349909][T15775] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 350.366057][T15774] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 350.456289][T15775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.498619][T15778] vlan3: entered promiscuous mode [ 350.504409][T15778] bond4: entered promiscuous mode [ 350.509600][T15778] vlan3: entered allmulticast mode [ 350.515569][T15778] bond4: entered allmulticast mode [ 350.536773][T15783] bond4: (slave bridge6): making interface the new active one [ 350.545143][T15783] bridge6: entered promiscuous mode [ 350.552721][T15783] bridge6: entered allmulticast mode [ 350.563657][T15783] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 350.594870][T15784] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 350.692891][T15784] __nla_validate_parse: 39 callbacks suppressed [ 350.692914][T15784] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2831'. [ 350.715503][T15784] netlink: ct family unspecified [ 350.748669][T15793] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 350.797427][T15793] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 351.160770][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.174722][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.185433][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.197299][T15820] team_slave_0: entered promiscuous mode [ 351.197444][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.216697][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.224280][T15819] team_slave_0: left promiscuous mode [ 351.250696][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.262017][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.270556][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.280892][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.290453][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.500068][T15816] wg1 speed is unknown, defaulting to 1000 [ 351.504187][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 351.545112][T15808] bridge_slave_0: left allmulticast mode [ 351.550993][T15808] bridge_slave_0: left promiscuous mode [ 351.573142][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.894252][T15834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2845'. [ 351.909671][T15834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2845'. [ 352.201505][T15816] chnl_net:caif_netlink_parms(): no params data found [ 352.341084][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.350345][T15816] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.367779][T15816] bridge_slave_0: entered allmulticast mode [ 352.383238][T15816] bridge_slave_0: entered promiscuous mode [ 352.403524][T15816] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.425482][T15816] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.434050][T15816] bridge_slave_1: entered allmulticast mode [ 352.443149][T15816] bridge_slave_1: entered promiscuous mode [ 352.493941][T15816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.508239][T15816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.564848][T15816] team0: Port device team_slave_0 added [ 352.585054][T15816] team0: Port device team_slave_1 added [ 352.680110][T15816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.687984][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.714951][T15816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.728434][T15816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.736000][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.763949][T15816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.856966][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2851'. [ 352.867681][T15862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2851'. [ 352.868561][T15816] hsr_slave_0: entered promiscuous mode [ 352.886346][T15816] hsr_slave_1: entered promiscuous mode [ 352.892471][T15838] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 352.900920][T15816] debugfs: 'hsr0' already exists in 'hsr' [ 352.930259][T15816] Cannot create hsr debugfs directory [ 353.101017][T15869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2853'. [ 353.130852][T15874] netlink: 'syz.0.2855': attribute type 1 has an invalid length. [ 353.160255][T15874] netlink: 'syz.0.2855': attribute type 3 has an invalid length. [ 353.191206][T15874] netlink: 'syz.0.2855': attribute type 7 has an invalid length. [ 353.228690][T15874] netlink: 'syz.0.2855': attribute type 8 has an invalid length. [ 353.268986][T15874] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2855'. [ 353.290924][T15874] NCSI netlink: No device for ifindex 131092 [ 353.317011][ T5841] Bluetooth: hci5: command tx timeout [ 353.412789][T15889] netlink: 'syz.0.2858': attribute type 32 has an invalid length. [ 353.522336][T15816] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.532969][T15816] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.572408][ T70] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 353.606137][T15816] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.617629][T15816] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.690988][T15816] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.702986][T15816] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.080129][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 354.344955][ T30] audit: type=1804 audit(1770349448.707:3): pid=15905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2862" name="/newroot/582/cgroup.controllers" dev="tmpfs" ino=2959 res=1 errno=0 [ 354.386845][ T30] audit: type=1800 audit(1770349448.737:4): pid=15905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2862" name="cgroup.controllers" dev="tmpfs" ino=2959 res=0 errno=0 [ 354.505697][T15909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.682784][T15914] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2866'. [ 355.391712][ T5841] Bluetooth: hci5: command tx timeout [ 356.312420][T15895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.324574][T15816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.420990][T15816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.482704][T15816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.548135][T15816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.579868][T15923] netlink: 'syz.1.2869': attribute type 2 has an invalid length. [ 356.921002][T15816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.084220][T15958] netlink: 'syz.0.2877': attribute type 6 has an invalid length. [ 357.101145][T15816] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.108847][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'. [ 357.129709][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.136933][T13355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.217567][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.224827][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.473839][ T5841] Bluetooth: hci5: command tx timeout [ 357.517224][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 357.665126][T15986] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 357.834799][T15816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.016996][T16001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.026081][T16001] team0: Device macvlan2 is already an upper device of the team interface [ 358.046864][T16010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2888'. [ 358.084723][T16011] ipt_REJECT: TCP_RESET invalid for non-tcp [ 358.102115][T15999] nbd: must specify an index to disconnect [ 358.312703][T16021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2894'. [ 358.348966][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 358.373563][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 358.447764][T16032] xt_hashlimit: size too large, truncated to 1048576 [ 358.665463][T16043] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 358.733161][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2898'. [ 358.869248][T15816] veth0_vlan: entered promiscuous mode [ 358.910573][T15816] veth1_vlan: entered promiscuous mode [ 359.005937][T15816] veth0_macvtap: entered promiscuous mode [ 359.037011][T15816] veth1_macvtap: entered promiscuous mode [ 359.106940][T15816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.149822][T15816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.189289][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.214469][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.263501][T16066] netlink: 'syz.1.2905': attribute type 11 has an invalid length. [ 359.303523][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.322754][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.436232][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 359.487498][T16075] bond9: entered promiscuous mode [ 359.493246][T16075] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.500467][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2909'. [ 359.504740][T16075] netlink: 'syz.1.2908': attribute type 21 has an invalid length. [ 359.537017][T16075] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.544880][T16075] bond9: (slave xfrm2): The slave device specified does not support setting the MAC address [ 359.559040][T16075] bond9: (slave xfrm2): Error -95 calling set_mac_address [ 359.561851][ T5841] Bluetooth: hci5: command tx timeout [ 359.574663][T16083] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2908'. [ 359.623596][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.656688][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.771469][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.801294][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.595342][T16113] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 381.633419][T16110] syzkaller0: entered promiscuous mode [ 381.651618][T16110] syzkaller0: entered allmulticast mode [ 381.820186][T16124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2921'. [ 381.933265][T16131] netlink: 'syz.4.2922': attribute type 2 has an invalid length. [ 381.942139][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 381.991853][T16134] netlink: 'syz.2.2920': attribute type 5 has an invalid length. [ 381.999662][T16134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2920'. [ 382.004942][T16131] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2922'. [ 382.019567][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2923'. [ 382.078906][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'. [ 382.365280][T16161] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 382.406869][T16161] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 382.421335][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 382.693478][T16172] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2933'. [ 382.777311][T16180] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 382.929435][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.942542][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.958498][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.968171][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.980039][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.069966][T16192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 383.140909][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 383.190172][T16190] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 383.225993][T16190] bond10 (unregistering): Released all slaves [ 383.502630][T16185] wg1 speed is unknown, defaulting to 1000 [ 384.046778][T16233] vlan2: entered allmulticast mode [ 384.065844][T16233] geneve1: entered allmulticast mode [ 384.126336][T16225] "syz.3.2949" (16225) uses obsolete ecb(arc4) skcipher [ 384.351119][T16185] chnl_net:caif_netlink_parms(): no params data found [ 384.517190][T16265] netlink: 'syz.3.2960': attribute type 8 has an invalid length. [ 384.618979][T13355] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 384.680473][T16185] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.688404][T16185] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.697025][T16185] bridge_slave_0: entered allmulticast mode [ 384.707312][T16185] bridge_slave_0: entered promiscuous mode [ 384.719868][T16185] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.738202][T16185] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.746500][T16185] bridge_slave_1: entered allmulticast mode [ 384.755915][T16185] bridge_slave_1: entered promiscuous mode [ 384.788534][T16185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.802259][T16185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.834507][T16185] team0: Port device team_slave_0 added [ 384.844003][T16185] team0: Port device team_slave_1 added [ 384.871128][T16185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.878735][T16185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.905889][T16185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.919415][T16185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.926956][T16185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.954805][T16185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.004226][T16185] hsr_slave_0: entered promiscuous mode [ 385.011234][T16185] hsr_slave_1: entered promiscuous mode [ 385.018323][T16185] debugfs: 'hsr0' already exists in 'hsr' [ 385.024545][T16185] Cannot create hsr debugfs directory [ 385.072389][ T5841] Bluetooth: hci4: command tx timeout [ 385.167791][T16185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.179713][T16185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.191135][T16185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.265610][T16185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.276562][T16185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.288912][T16185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.357819][T16185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.368546][T16185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.380021][T16185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 385.459168][T16185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.470018][T16185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.483236][T16185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 387.152330][ T5841] Bluetooth: hci4: command tx timeout [ 387.392936][T16269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.502277][T16283] SET target dimension over the limit! [ 387.544078][T16185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.616589][T16185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.703030][T16185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.761233][T16185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.825443][T16296] __nla_validate_parse: 3 callbacks suppressed [ 387.825465][T16296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 387.977575][T16289] can: request_module (can-proto-0) failed. [ 388.080227][T16319] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 388.089047][T16319] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2972'. [ 388.153334][T16323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2972'. [ 388.456136][T16348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2974'. [ 388.536692][T16348] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2974'. [ 388.589467][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 388.604889][T16320] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 388.620616][T16320] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2972'. [ 388.674010][T16185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.726507][T16185] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.779788][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.787121][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.886356][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.888059][T16364] xt_hashlimit: size too large, truncated to 1048576 [ 388.893580][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.238834][ T5841] Bluetooth: hci4: command tx timeout [ 389.418979][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2982'. [ 389.673196][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2987'. [ 389.751399][T16185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.877029][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 390.160888][T16185] veth0_vlan: entered promiscuous mode [ 390.179404][T16185] veth1_vlan: entered promiscuous mode [ 390.232005][T16423] xt_hashlimit: size too large, truncated to 1048576 [ 390.308742][T16185] veth0_macvtap: entered promiscuous mode [ 390.351400][T16185] veth1_macvtap: entered promiscuous mode [ 390.403233][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 390.463713][T16185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.497397][T16185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.574133][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.596151][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.632601][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.662500][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.313329][ T5841] Bluetooth: hci4: command tx timeout [ 393.103666][T16434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.192387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.200264][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.369756][T16496] syzkaller1: entered promiscuous mode [ 393.382914][T16496] syzkaller1: entered allmulticast mode [ 393.399730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.410871][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.451183][T16494] __nla_validate_parse: 1 callbacks suppressed [ 393.451204][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 393.467928][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 393.495248][T16497] syzkaller1: left promiscuous mode [ 393.500509][T16497] syzkaller1: left allmulticast mode [ 394.470274][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.481268][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.492851][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.496096][T16544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.517911][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.535084][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.579967][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.683619][T16541] wg1 speed is unknown, defaulting to 1000 [ 394.852745][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'. [ 394.908205][T16553] tipc: Enabled bearer , priority 10 [ 395.612029][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 395.621017][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 395.690117][T16578] netlink: 'syz.1.3031': attribute type 12 has an invalid length. [ 395.709413][T16578] netlink: 'syz.1.3031': attribute type 11 has an invalid length. [ 395.776073][T16582] netlink: 'syz.0.3033': attribute type 1 has an invalid length. [ 395.803217][T16582] netlink: 'syz.0.3033': attribute type 2 has an invalid length. [ 395.842629][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3034'. [ 395.852043][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3034'. [ 395.867247][T16541] chnl_net:caif_netlink_parms(): no params data found [ 395.916265][T16588] erspan0: entered promiscuous mode [ 395.933479][T16588] gretap0: entered promiscuous mode [ 395.939642][T16588] debugfs: 'hsr1' already exists in 'hsr' [ 395.946126][T16588] Cannot create hsr debugfs directory [ 396.131393][T16589] xt_CT: No such helper "snmp_trap" [ 396.257673][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3039'. [ 396.268996][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3039'. [ 396.291103][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.311928][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.322165][T16541] bridge_slave_0: entered allmulticast mode [ 396.329606][T16541] bridge_slave_0: entered promiscuous mode [ 396.364824][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.382525][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.390106][T16541] bridge_slave_1: entered allmulticast mode [ 396.425955][T16541] bridge_slave_1: entered promiscuous mode [ 396.488117][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.502722][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.594223][ T5841] Bluetooth: hci0: command tx timeout [ 396.606329][T16621] pimreg: entered allmulticast mode [ 396.699853][T16541] team0: Port device team_slave_0 added [ 396.720217][T16541] team0: Port device team_slave_1 added [ 396.782092][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.789364][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.828419][T16616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.829866][T16630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3046'. [ 396.853498][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.866383][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.873389][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.899687][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.918050][T16630] erspan0: entered promiscuous mode [ 396.926174][T16630] gretap0: entered promiscuous mode [ 396.934966][T16630] debugfs: 'hsr1' already exists in 'hsr' [ 396.940850][T16630] Cannot create hsr debugfs directory [ 397.099911][T16541] hsr_slave_0: entered promiscuous mode [ 397.107980][T16541] hsr_slave_1: entered promiscuous mode [ 397.115931][T16541] debugfs: 'hsr0' already exists in 'hsr' [ 397.122505][T16541] Cannot create hsr debugfs directory [ 397.209426][T16633] netlink: 'syz.0.3047': attribute type 2 has an invalid length. [ 397.233998][T16633] : entered promiscuous mode [ 397.336095][T16541] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.346405][T16541] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.404101][T16541] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.414562][T16541] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.447866][T16541] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.458145][T16541] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.528614][T16541] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.539679][T16541] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 397.663793][T16541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.674499][T16541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.685766][T16541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.696682][T16541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.774337][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.796373][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.809568][T13358] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.816818][T13358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.835869][T13358] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.843064][T13358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.979695][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 398.103323][T16654] vcan0: tx address claim with different name [ 398.137343][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.228165][T16658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 398.243874][T16658] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.253126][T16658] gretap1: entered promiscuous mode [ 398.258803][T16658] gretap1: entered allmulticast mode [ 398.288837][T16541] veth0_vlan: entered promiscuous mode [ 398.308783][T16541] veth1_vlan: entered promiscuous mode [ 398.365126][T16541] veth0_macvtap: entered promiscuous mode [ 398.399727][T16541] veth1_macvtap: entered promiscuous mode [ 398.552305][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.568072][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.613167][T13358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.630872][T13358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.662406][T13358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.686377][ T5841] Bluetooth: hci0: command tx timeout [ 398.686377][T13358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.704599][T16669] __nla_validate_parse: 4 callbacks suppressed [ 398.704618][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 398.810855][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.821170][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.922810][T13358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.931061][T13358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.147613][T16688] netlink: 'syz.1.3061': attribute type 30 has an invalid length. [ 399.247776][T16692] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3062'. [ 399.374603][T16697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3064'. [ 400.202580][T16723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.302399][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3078'. [ 400.311405][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3078'. [ 400.377023][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 400.633907][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3083'. [ 400.663712][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3083'. [ 400.802445][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.816438][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.828384][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.838757][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.850023][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.929764][T16747] wg1 speed is unknown, defaulting to 1000 [ 401.086879][T16747] chnl_net:caif_netlink_parms(): no params data found [ 401.140688][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 401.215651][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.224198][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.232764][T16747] bridge_slave_0: entered allmulticast mode [ 401.241064][T16747] bridge_slave_0: entered promiscuous mode [ 401.249932][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.257554][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.265843][T16747] bridge_slave_1: entered allmulticast mode [ 401.274091][T16747] bridge_slave_1: entered promiscuous mode [ 401.306180][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.319258][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.352547][T16747] team0: Port device team_slave_0 added [ 401.360601][T16747] team0: Port device team_slave_1 added [ 401.388079][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.396025][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.422671][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.436492][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.444129][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.470882][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.519402][T16747] hsr_slave_0: entered promiscuous mode [ 401.526544][T16747] hsr_slave_1: entered promiscuous mode [ 401.534167][T16747] debugfs: 'hsr0' already exists in 'hsr' [ 401.540031][T16747] Cannot create hsr debugfs directory [ 401.721232][T16747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.741986][T16747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.838779][T16766] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 401.842334][T16747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.857728][T16747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.880567][T16766] team0: Device veth0_macvtap failed to register rx_handler [ 401.955572][T16747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.966792][T16747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.054914][T16747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.056720][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 402.067663][T16747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.305877][T16747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.329895][T16747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.393664][T16747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.411375][T16747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.512159][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 402.641249][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.660800][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.685511][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.692835][T13355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.704051][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.711291][T13355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.912968][ T5841] Bluetooth: hci1: command tx timeout [ 403.110259][T16747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.225260][T16747] veth0_vlan: entered promiscuous mode [ 403.231307][T16809] syzkaller0: entered promiscuous mode [ 403.238202][T16809] syzkaller0: entered allmulticast mode [ 403.249041][T16809] 0: reclassify loop, rule prio 0, protocol 800 [ 403.315544][T16747] veth1_vlan: entered promiscuous mode [ 403.400457][T16747] veth0_macvtap: entered promiscuous mode [ 403.427965][T16747] veth1_macvtap: entered promiscuous mode [ 403.456671][T16747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.497085][T16747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.539463][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.566327][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.578069][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.588547][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.716239][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.726630][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.800383][T13355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.811792][T13355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.155958][T16846] netlink: 'syz.1.3110': attribute type 25 has an invalid length. [ 404.165731][T16846] __nla_validate_parse: 5 callbacks suppressed [ 404.165745][T16846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3110'. [ 404.257735][ T8756] IPVS: starting estimator thread 0... [ 404.324729][T16854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 404.353552][T16851] IPVS: using max 28 ests per chain, 67200 per kthread [ 404.516412][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3117'. [ 404.534265][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3117'. [ 404.708595][T16870] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3120'. [ 404.738481][T16873] FAULT_INJECTION: forcing a failure. [ 404.738481][T16873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.760474][T16873] CPU: 1 UID: 0 PID: 16873 Comm: syz.0.3121 Not tainted syzkaller #0 PREEMPT(full) [ 404.760500][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 404.760512][T16873] Call Trace: [ 404.760521][T16873] [ 404.760530][T16873] dump_stack_lvl+0xe8/0x150 [ 404.760562][T16873] should_fail_ex+0x412/0x560 [ 404.760593][T16873] _copy_from_user+0x2d/0xb0 [ 404.760624][T16873] kstrtouint_from_user+0xd6/0x180 [ 404.760653][T16873] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 404.760698][T16873] proc_fail_nth_write+0x8e/0x210 [ 404.760726][T16873] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.760767][T16873] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.760798][T16873] vfs_write+0x29a/0xb90 [ 404.760837][T16873] ? __pfx_vfs_write+0x10/0x10 [ 404.760868][T16873] ? __fget_files+0x2a/0x420 [ 404.760894][T16873] ? __fget_files+0x3a0/0x420 [ 404.760914][T16873] ? __fget_files+0x2a/0x420 [ 404.760947][T16873] ksys_write+0x150/0x270 [ 404.760979][T16873] ? __pfx_ksys_write+0x10/0x10 [ 404.761021][T16873] do_syscall_64+0xe2/0xf80 [ 404.761042][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.761061][T16873] ? trace_irq_disable+0x37/0x100 [ 404.761079][T16873] ? clear_bhb_loop+0x60/0xb0 [ 404.761104][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.761123][T16873] RIP: 0033:0x7f3397f5b78e [ 404.761150][T16873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.761167][T16873] RSP: 002b:00007f33961f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.761189][T16873] RAX: ffffffffffffffda RBX: 00007f33961f66c0 RCX: 00007f3397f5b78e [ 404.761204][T16873] RDX: 0000000000000001 RSI: 00007f33961f60a0 RDI: 0000000000000004 [ 404.761216][T16873] RBP: 00007f33961f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.761227][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.761239][T16873] R13: 00007f3398216038 R14: 00007f3398215fa0 R15: 00007fff66d452e8 [ 404.761275][T16873] [ 405.015364][ T5841] Bluetooth: hci1: command tx timeout [ 405.184650][T16883] syzkaller0: entered promiscuous mode [ 405.190188][T16883] syzkaller0: entered allmulticast mode [ 405.506242][T16900] bond1: entered promiscuous mode [ 405.511813][T16900] bond1: entered allmulticast mode [ 405.517521][T16900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.690105][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 405.700658][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 405.713293][T16917] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3136'. [ 405.726401][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.726440][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 405.749290][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 405.774568][T16917] bond1: (slave ip6_vti0): Device is not bonding slave [ 405.781470][T16917] bond1: option active_slave: invalid value (ip6_vti0) [ 405.790400][T16917] bond1 (unregistering): Released all slaves [ 405.808351][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.821769][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.832773][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.446421][T16950] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 406.506130][T16950] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.985194][T16975] sctp: [Deprecated]: syz.0.3156 (pid 16975) Use of int in maxseg socket option. [ 406.985194][T16975] Use struct sctp_assoc_value instead [ 407.071884][ T5841] Bluetooth: hci1: command tx timeout [ 407.183432][T16985] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 407.463315][T16998] netlink: 'syz.2.3164': attribute type 13 has an invalid length. [ 407.479694][T16998] netlink: 'syz.2.3164': attribute type 58 has an invalid length. [ 407.500231][T16998] netlink: 'syz.2.3164': attribute type 4 has an invalid length. [ 407.582987][T17003] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 407.768935][T17014] netlink: 'syz.2.3169': attribute type 1 has an invalid length. [ 407.779743][T17014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.844893][T17016] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 407.859589][T17016] bond1 (unregistering): Released all slaves [ 408.027316][T17024] Bluetooth: MGMT ver 1.23 [ 408.108034][T17028] syzkaller0: entered promiscuous mode [ 408.114914][T17028] syzkaller0: entered allmulticast mode [ 409.151855][ T5841] Bluetooth: hci1: command tx timeout [ 435.099734][T17035] __nla_validate_parse: 8 callbacks suppressed [ 435.099755][T17035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'. [ 435.152671][ T30] audit: type=1804 audit(1770349529.507:5): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3177" name="/newroot/54/cgroup.controllers" dev="tmpfs" ino=295 res=1 errno=0 [ 435.179903][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.222138][ T30] audit: type=1800 audit(1770349529.507:6): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3177" name="cgroup.controllers" dev="tmpfs" ino=295 res=0 errno=0 [ 435.257909][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.267602][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.276592][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.284504][ T30] audit: type=1800 audit(1770349529.507:7): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3177" name="cgroup.controllers" dev="tmpfs" ino=295 res=0 errno=0 [ 435.302104][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.314804][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.365806][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.376336][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 435.391151][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 435.444077][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.455028][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.459208][T17044] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3176'. [ 435.515579][T17041] wg1 speed is unknown, defaulting to 1000 [ 435.544884][T17045] wg1 speed is unknown, defaulting to 1000 [ 435.658445][T17060] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3182'. [ 436.079294][T17041] chnl_net:caif_netlink_parms(): no params data found [ 436.167635][T17045] chnl_net:caif_netlink_parms(): no params data found [ 436.203544][T17086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.489487][T17041] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.505666][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.533785][T17041] bridge_slave_0: entered allmulticast mode [ 436.546586][T17041] bridge_slave_0: entered promiscuous mode [ 436.560567][T17045] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.570040][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.578347][T17045] bridge_slave_0: entered allmulticast mode [ 436.595983][T17045] bridge_slave_0: entered promiscuous mode [ 436.608330][T17096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3191'. [ 436.626208][T17045] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.634354][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.644446][T17045] bridge_slave_1: entered allmulticast mode [ 436.676360][T17045] bridge_slave_1: entered promiscuous mode [ 436.695299][T17041] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.724422][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.738807][T17041] bridge_slave_1: entered allmulticast mode [ 436.753692][T17041] bridge_slave_1: entered promiscuous mode [ 436.890855][T17045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.905276][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.919734][T17045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.943602][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.023655][T17045] team0: Port device team_slave_0 added [ 437.067639][T17045] team0: Port device team_slave_1 added [ 437.094834][T17041] team0: Port device team_slave_0 added [ 437.129695][T17041] team0: Port device team_slave_1 added [ 437.138164][T17045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.138874][T17121] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3198'. [ 437.145666][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.145697][T17045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.176338][T17045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.223339][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.252793][T17045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.307103][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.332297][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.363770][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.384474][T17127] netlink: 'syz.2.3200': attribute type 10 has an invalid length. [ 437.395273][ T52] Bluetooth: hci3: command tx timeout [ 437.400039][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.408761][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.446138][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.505517][T17127] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 437.515994][T17127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.552244][ T52] Bluetooth: hci6: command tx timeout [ 437.592495][T17045] hsr_slave_0: entered promiscuous mode [ 437.599304][T17045] hsr_slave_1: entered promiscuous mode [ 437.606377][T17045] debugfs: 'hsr0' already exists in 'hsr' [ 437.612456][T17045] Cannot create hsr debugfs directory [ 437.760635][T17041] hsr_slave_0: entered promiscuous mode [ 437.781416][T17041] hsr_slave_1: entered promiscuous mode [ 437.805126][T17041] debugfs: 'hsr0' already exists in 'hsr' [ 437.811022][T17041] Cannot create hsr debugfs directory [ 437.818273][T17143] netlink: 'syz.2.3205': attribute type 1 has an invalid length. [ 437.838851][T17144] netlink: 'syz.0.3206': attribute type 4 has an invalid length. [ 437.895240][T17144] netlink: 'syz.0.3206': attribute type 4 has an invalid length. [ 437.954632][T17143] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 437.966689][T17143] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 438.011178][T17148] gretap1: entered promiscuous mode [ 438.027471][T17148] bond2: (slave gretap1): making interface the new active one [ 438.038185][T17148] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 438.109310][T17150] macvlan2: entered promiscuous mode [ 438.116175][T17150] macvlan2: entered allmulticast mode [ 438.127372][T17150] bond2: entered promiscuous mode [ 438.134587][T17150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.146523][T17150] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 438.161259][T17150] bond2: left promiscuous mode [ 438.556395][T17177] ip6_vti0: entered promiscuous mode [ 438.565196][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 438.575887][T17179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.866193][T17041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.880062][T17041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.895231][T17041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.922152][T17041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.983133][T17045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.996692][T17045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.011256][T17045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.024371][T17045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 439.126158][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.150554][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.164668][T11287] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.172090][T11287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.190086][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.197357][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.252946][T17045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.293618][T17045] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.327072][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.334317][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.369799][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.377042][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.429417][T17045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.447662][T17045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.472629][ T52] Bluetooth: hci3: command tx timeout [ 439.530889][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.631929][ T52] Bluetooth: hci6: command tx timeout [ 439.746626][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.891393][T17041] veth0_vlan: entered promiscuous mode [ 439.905369][T17041] veth1_vlan: entered promiscuous mode [ 439.947583][T17041] veth0_macvtap: entered promiscuous mode [ 439.965128][T17041] veth1_macvtap: entered promiscuous mode [ 439.990407][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.013204][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.027775][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.073439][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.087700][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.098906][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.239978][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.246047][T17045] veth0_vlan: entered promiscuous mode [ 440.251547][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.282588][T17045] veth1_vlan: entered promiscuous mode [ 440.318453][T11287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.328693][T11287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.347396][T17045] veth0_macvtap: entered promiscuous mode [ 440.379567][T17045] veth1_macvtap: entered promiscuous mode [ 440.403911][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.425988][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.465232][T11287] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.480586][T11287] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.495039][T11287] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.520743][T11287] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.657850][T13355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.673642][T13355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.714497][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.724397][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.552447][ T52] Bluetooth: hci3: command tx timeout [ 441.722331][ T52] Bluetooth: hci6: command tx timeout [ 443.631758][ T52] Bluetooth: hci3: command tx timeout [ 443.791895][ T52] Bluetooth: hci6: command tx timeout [ 445.712078][ T52] Bluetooth: hci3: command tx timeout [ 447.802035][ T52] Bluetooth: hci3: command tx timeout [ 461.241797][ T8756] page_pool_release_retry() stalled pool shutdown: id 66, 1 inflight 60 sec [ 464.496688][T17268] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 464.522112][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3228'. [ 464.564673][T17266] netlink: 'syz.6.3227': attribute type 4 has an invalid length. [ 464.826842][T17286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3230'. [ 465.079824][T17296] xt_bpf: check failed: parse error [ 465.151160][T17299] bond3: option resend_igmp: invalid value (32767) [ 465.161589][T17299] bond3: option resend_igmp: allowed values 0 - 255 [ 465.174134][T17299] bond3 (unregistering): Released all slaves [ 465.271957][T17311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3236'. [ 465.302801][T17311] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3236'. [ 465.375873][T17311] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3236'. [ 465.395910][T17312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3236'. [ 465.413456][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'. [ 465.645624][T17331] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3243'. [ 465.705612][T17322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 465.720923][T17333] block nbd2: not configured, cannot reconfigure [ 465.747679][T17329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3241'. [ 465.779490][T17329] xfrm1: entered promiscuous mode [ 465.821643][T17329] xfrm1: entered allmulticast mode [ 465.861409][T17329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3241'. [ 466.027201][ T70] team0: left allmulticast mode [ 466.053584][ T70] team_slave_0: left allmulticast mode [ 466.069463][ T70] team_slave_1: left allmulticast mode [ 466.092157][ T70] team0: left promiscuous mode [ 466.097073][ T70] team_slave_0: left promiscuous mode [ 466.148763][ T70] team_slave_1: left promiscuous mode [ 466.175371][ T70] bridge0: port 3(team0) entered disabled state [ 466.254393][T17355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.262087][T17355] IPv6: NLM_F_CREATE should be set when creating new route [ 466.274266][ T70] bridge_slave_1: left promiscuous mode [ 466.280100][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.295654][ T70] bridge_slave_0: left allmulticast mode [ 466.314115][T17355] delete_channel: no stack [ 466.320615][ T70] bridge_slave_0: left promiscuous mode [ 466.338095][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.830051][ T70] erspan0 (unregistering): left promiscuous mode [ 466.853646][ T70] gretap0 (unregistering): left promiscuous mode [ 466.909464][ T70] bond4 (unregistering): (slave geneve3): Releasing active interface [ 467.350073][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.363921][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.377889][ T70] bond0 (unregistering): Released all slaves [ 467.488318][ T70] bond1 (unregistering): left allmulticast mode [ 467.494953][ T70] bond1 (unregistering): left promiscuous mode [ 467.514519][ T70] team0: Port device macvlan2 removed [ 467.524859][ T70] bond1 (unregistering): Released all slaves [ 467.636357][ T70] bond2 (unregistering): Released all slaves [ 467.752886][ T70] bond3 (unregistering): Released all slaves [ 467.867197][ T70] bond4 (unregistering): Released all slaves [ 467.901703][ T45] wg1 speed is unknown, defaulting to 1000 [ 467.910346][ T45] syz2: Port: 1 Link DOWN [ 468.126740][T17388] netlink: 'syz.5.3255': attribute type 4 has an invalid length. [ 468.245306][ T70] : left promiscuous mode [ 468.402008][ T70] tipc: Disabling bearer [ 468.438928][ T70] tipc: Left network mode [ 468.483615][T17404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 468.514913][ T70] IPVS: stopping backup sync thread 15232 ... [ 468.725740][T17419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 468.732746][T17419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 468.773831][T17419] IPVS: length: 239 != 24 [ 469.610594][T17449] __nla_validate_parse: 6 callbacks suppressed [ 469.610692][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3274'. [ 469.622768][ T70] hsr_slave_0: left promiscuous mode [ 469.664770][ T70] hsr_slave_1: left promiscuous mode [ 469.671124][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.679851][T17449] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3274'. [ 469.695994][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'. [ 469.721659][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.786731][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.803264][T17455] xt_hashlimit: max too large, truncated to 1048576 [ 469.816724][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.897019][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 469.927739][ T70] veth1_macvtap: left promiscuous mode [ 469.952793][ T70] veth0_macvtap: left promiscuous mode [ 469.976115][ T70] veth1_vlan: left promiscuous mode [ 470.206521][T17482] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3283'. [ 470.336449][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3281'. [ 470.855648][ T70] team0 (unregistering): Port device team_slave_1 removed [ 470.910378][ T70] team0 (unregistering): Port device team_slave_0 removed [ 471.762821][T17490] macvlan2: entered promiscuous mode [ 471.771444][T17490] macvlan2: entered allmulticast mode [ 471.887541][T17497] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3286'. [ 471.936210][T17498] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3287'. [ 471.957154][T17499] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3286'. [ 471.984090][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3287'. [ 472.019098][T17499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.028264][T17501] vlan2: entered allmulticast mode [ 472.029296][T17497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.043804][T17501] hsr0: entered allmulticast mode [ 472.071603][T17501] hsr_slave_0: entered allmulticast mode [ 472.077784][T17501] hsr_slave_1: entered allmulticast mode [ 472.087734][T17499] tipc: Failed to remove unknown binding: 66,0,0/0:2845981154/2845981155 [ 472.096890][T17508] tipc: Failed to remove unknown binding: 66,0,0/0:2845981154/2845981155 [ 472.113657][T17497] tipc: Failed to remove unknown binding: 66,0,0/0:2845981154/2845981155 [ 472.346020][T17520] netlink: 'syz.2.3292': attribute type 4 has an invalid length. [ 472.398154][T17522] netlink: 'syz.2.3292': attribute type 4 has an invalid length. [ 472.776527][ T70] IPVS: stop unused estimator thread 0... [ 472.882581][T17537] xt_CT: No such helper "pptp" [ 473.237149][T17563] vlan0: entered allmulticast mode [ 473.253765][T17563] macsec0: entered allmulticast mode [ 473.259132][T17563] veth1_macvtap: entered allmulticast mode [ 473.542050][T17587] delete_channel: no stack [ 473.774826][T17595] openvswitch: netlink: Message has 4 unknown bytes. [ 474.345039][T17619] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 474.706749][T17635] netlink: 'syz.0.3331': attribute type 21 has an invalid length. [ 474.767386][T17635] __nla_validate_parse: 7 callbacks suppressed [ 474.767408][T17635] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3331'. [ 475.003775][T17646] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 475.048222][T17646] bond1 (unregistering): Released all slaves [ 475.455468][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3343'. [ 475.467560][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3343'. [ 475.514346][T17673] erspan0: entered promiscuous mode [ 475.521019][T17673] gretap0: entered promiscuous mode [ 475.530689][T17673] debugfs: 'hsr1' already exists in 'hsr' [ 475.536952][T17673] Cannot create hsr debugfs directory [ 475.790902][T17685] veth1_macvtap: entered allmulticast mode [ 476.342761][T17719] IPv6: addrconf: prefix option has invalid lifetime [ 476.343785][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3353'. [ 476.360719][T17713] tipc: Can't bind to reserved service type 1 [ 476.367749][T17713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3352'. [ 476.423626][T17721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3356'. [ 476.471680][T17721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3356'. [ 476.578426][T17728] netlink: 'syz.0.3358': attribute type 1 has an invalid length. [ 476.628135][T17728] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3358'. [ 476.639284][T17728] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3358'. [ 476.660237][T17728] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3358'. [ 476.935676][T17748] netlink: 'syz.0.3366': attribute type 83 has an invalid length. [ 477.000355][T17749] netlink: 'syz.1.3365': attribute type 11 has an invalid length. [ 477.274237][T17772] erspan0: entered promiscuous mode [ 477.291804][T17772] gretap0: entered promiscuous mode [ 477.297971][T17772] debugfs: 'hsr1' already exists in 'hsr' [ 477.341958][T17772] Cannot create hsr debugfs directory [ 477.740534][T17799] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20003 [ 478.023931][T17811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.053636][T17813] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 478.080876][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.106980][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.116438][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.122285][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 478.140402][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.151183][T17821] openvswitch: netlink: Key type 31 is not supported [ 478.156762][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.167690][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.177703][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.186836][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.215009][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.237342][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.250158][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.281167][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.290486][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.334505][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.343873][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.354698][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.364873][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.395671][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.439439][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.463805][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.478826][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.491098][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.505016][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.516598][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.526490][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.552155][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.560820][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.597610][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.608308][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.640690][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.661005][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.698408][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.741887][T17811] bond1: option mode: unable to set because the bond device has slaves [ 478.769040][T17811] bond1: option mode: unable to set because the bond device has slaves [ 479.814639][T17900] __nla_validate_parse: 43 callbacks suppressed [ 479.814661][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'. [ 480.016322][T17900] bond1: entered promiscuous mode [ 480.021582][T17914] xt_hashlimit: size too large, truncated to 1048576 [ 480.021623][T17900] bond1: entered allmulticast mode [ 480.065633][T17900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.106910][T17900] macvlan2: entered promiscuous mode [ 480.157339][T17900] macvlan2: entered allmulticast mode [ 480.217553][T17900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.403523][T17897] macvlan2: entered promiscuous mode [ 480.424305][T17897] macvlan2: entered allmulticast mode [ 480.456653][T17897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.601984][T17900] macvlan2: entered promiscuous mode [ 480.616363][T17900] macvlan2: entered allmulticast mode [ 480.641946][T17900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 481.394088][T17970] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3430'. [ 481.418595][T17969] netlink: 'syz.5.3429': attribute type 4 has an invalid length. [ 481.574655][T17978] openvswitch: netlink: IPv4 tunnel dst address is zero [ 481.943435][T18000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3440'. [ 481.962208][T18000] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 482.017850][T18005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3442'. [ 482.042898][T18005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3442'. [ 482.453515][T18028] syzkaller1: entered promiscuous mode [ 482.477992][T18028] syzkaller1: entered allmulticast mode [ 482.502608][T18033] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 482.635568][T18037] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3456'. [ 482.644787][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3455'. [ 482.663728][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3455'. [ 482.841018][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 482.884985][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 482.919877][T18052] erspan0: entered promiscuous mode [ 482.955430][T18052] gretap0: entered promiscuous mode [ 483.009361][T18052] debugfs: 'hsr1' already exists in 'hsr' [ 483.040554][T18052] Cannot create hsr debugfs directory [ 483.324121][T18076] dvmrp6: entered allmulticast mode [ 483.779034][T18113] netlink: 'syz.5.3477': attribute type 64 has an invalid length. [ 483.810634][T18103] mac80211_hwsim hwsim43 ÿ: renamed from wlan1 (while UP) [ 483.939366][T18118] x_tables: duplicate underflow at hook 3 [ 484.131108][T18125] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 484.162923][T18125] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 484.675009][T18160] netlink: 'syz.1.3492': attribute type 29 has an invalid length. [ 484.684335][T18157] netlink: 'syz.5.3490': attribute type 19 has an invalid length. [ 484.714759][T18160] netlink: 'syz.1.3492': attribute type 29 has an invalid length. [ 484.881188][T18169] tap0: tun_chr_ioctl cmd 1074025676 [ 484.905603][T18169] tap0: owner set to 0 [ 484.922228][T18172] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 485.138638][T18183] netlink: 'syz.2.3499': attribute type 75 has an invalid length. [ 485.427667][T18200] sctp: [Deprecated]: syz.1.3503 (pid 18200) Use of int in maxseg socket option. [ 485.427667][T18200] Use struct sctp_assoc_value instead [ 485.444487][T18187] __nla_validate_parse: 12 callbacks suppressed [ 485.444509][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3500'. [ 485.472537][T18200] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 485.489829][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3500'. [ 485.779852][T18216] netlink: 'syz.6.3510': attribute type 1 has an invalid length. [ 485.876538][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3510'. [ 485.888646][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3510'. [ 485.910822][T18224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3512'. [ 485.943510][T18224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3512'. [ 486.056582][T18231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3515'. [ 486.165403][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3517'. [ 486.193131][T18231] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 486.220409][T18231] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 486.232990][T18231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 486.472854][T18249] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3520'. [ 486.536700][T18253] netlink: 'syz.2.3522': attribute type 12 has an invalid length. [ 486.810743][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3525'. [ 487.140512][T18287] netlink: 'syz.1.3532': attribute type 7 has an invalid length. [ 487.365081][T18298] netlink: zone id is out of range [ 487.396023][T18298] netlink: zone id is out of range [ 487.417489][T18298] netlink: zone id is out of range [ 487.440207][T18298] netlink: zone id is out of range [ 487.458086][T18298] netlink: zone id is out of range [ 487.465085][T18298] netlink: zone id is out of range [ 487.470547][T18298] netlink: zone id is out of range [ 487.476739][T18298] netlink: zone id is out of range [ 487.485530][T18298] netlink: zone id is out of range [ 487.523847][T18298] netlink: zone id is out of range [ 488.926114][T18370] netlink: 'syz.0.3550': attribute type 9 has an invalid length. [ 489.279628][T18386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.417504][T18386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.192436][T18426] netlink: 'syz.1.3562': attribute type 1 has an invalid length. [ 490.211181][T18422] syzkaller0: entered promiscuous mode [ 490.216921][T18422] syzkaller0: entered allmulticast mode [ 490.269422][T18426] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 490.307607][T18430] syzkaller0: entered promiscuous mode [ 490.379831][T18430] syzkaller0: entered allmulticast mode [ 491.539467][T18489] __nla_validate_parse: 11 callbacks suppressed [ 491.539489][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'. [ 491.775021][T18489] macvtap1: entered promiscuous mode [ 491.780556][T18489] vlan0: entered promiscuous mode [ 491.788175][T18489] macvtap1: entered allmulticast mode [ 491.794773][T18489] vlan0: entered allmulticast mode [ 491.799933][T18489] veth0_vlan: entered allmulticast mode [ 491.834159][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3582'. [ 494.727784][T18525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3587'. [ 494.770608][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 495.147639][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3596'. [ 495.526097][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 495.549649][T18572] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 495.609785][T18572] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.3603'. [ 495.628746][T18571] bond4: entered promiscuous mode [ 495.675873][T18571] bond4: entered allmulticast mode [ 495.712449][T18571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.946814][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3609'. [ 495.959788][T18594] netlink: 'syz.6.3612': attribute type 3 has an invalid length. [ 495.978211][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3609'. [ 496.498472][T18627] syzkaller1: entered promiscuous mode [ 496.546899][T18627] syzkaller1: entered allmulticast mode [ 496.600930][T18635] netlink: 'syz.1.3619': attribute type 3 has an invalid length. [ 496.616178][T18635] netlink: 'syz.1.3619': attribute type 3 has an invalid length. [ 496.621632][T18638] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3621'. [ 496.631887][T18639] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3621'. [ 496.783681][T18638] 8021q: VLANs not supported on sit0 [ 496.836817][T18640] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 496.868612][T18640] bond2 (unregistering): Released all slaves [ 496.903703][T18646] netlink: 'syz.0.3623': attribute type 10 has an invalid length. [ 497.061887][T18639] 8021q: VLANs not supported on sit0 [ 497.153721][T18635] syzkaller0: entered promiscuous mode [ 497.159255][T18635] syzkaller0: entered allmulticast mode [ 499.211822][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 499.240166][T18673] netlink: 'syz.1.3630': attribute type 1 has an invalid length. [ 499.275179][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 499.469218][T18690] net_ratelimit: 98 callbacks suppressed [ 499.469240][T18690] openvswitch: netlink: Key type 48 is out of range max 32 [ 499.653945][T18690] syzkaller0: entered promiscuous mode [ 499.660026][T18690] syzkaller0: entered allmulticast mode [ 499.828460][T18705] netlink: 'syz.5.3638': attribute type 1 has an invalid length. [ 501.796194][T18747] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3649'. [ 502.189926][T18761] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3653'. [ 502.254900][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3656'. [ 502.338064][T18769] syzkaller0: entered promiscuous mode [ 502.343967][T18779] netlink: 'syz.2.3658': attribute type 83 has an invalid length. [ 502.371647][T18769] syzkaller0: entered allmulticast mode [ 502.449610][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3661'. [ 502.469974][T18782] netlink: 'syz.6.3661': attribute type 5 has an invalid length. [ 502.610278][T18791] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3664'. [ 502.851851][T18802] netlink: 'syz.2.3668': attribute type 1 has an invalid length. [ 502.926226][T18804] tipc: Failed to remove unknown binding: 66,1,1/0:516305816/516305818 [ 502.935281][T18804] tipc: Failed to remove unknown binding: 66,1,1/0:516305816/516305818 [ 503.043079][T18808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3668'. [ 504.459589][T18802] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 504.460891][T18805] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 504.564221][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3673'. [ 504.591069][T18820] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 504.606022][T18818] netlink: 'syz.5.3673': attribute type 10 has an invalid length. [ 504.711639][T18818] veth0_vlan: left promiscuous mode [ 504.718111][T18818] veth0_vlan: entered promiscuous mode [ 504.750057][T18818] team0: Device veth0_vlan failed to register rx_handler [ 504.786994][T18834] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3677'. [ 505.027188][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3681'. [ 505.244017][T18858] netlink: 'syz.2.3685': attribute type 7 has an invalid length. [ 505.280824][T18854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3684'. [ 505.292603][T18854] batadv0: entered promiscuous mode [ 505.305045][T18854] batadv0: entered allmulticast mode [ 505.898357][T18897] geneve2: entered promiscuous mode [ 505.904508][T18897] geneve2: entered allmulticast mode [ 506.239914][T18907] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 506.287664][T18912] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 506.768212][T18929] netlink: 'syz.0.3707': attribute type 11 has an invalid length. [ 506.791587][T18929] netlink: 'syz.0.3707': attribute type 11 has an invalid length. [ 506.814228][T18941] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 506.818263][T18929] __nla_validate_parse: 8 callbacks suppressed [ 506.818344][T18929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3707'. [ 507.043312][ T1158] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 507.266368][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3715'. [ 508.832886][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 509.726862][T18936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.987759][T18974] netlink: 'syz.6.3719': attribute type 5 has an invalid length. [ 510.017291][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 510.030854][T18980] netlink: 'syz.0.3721': attribute type 11 has an invalid length. [ 510.070474][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 510.075158][T18986] !: renamed from dummy0 (while UP) [ 510.091610][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 510.092988][T18984] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.3722'. [ 510.100605][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3718'. [ 510.132801][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 510.152286][T18988] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.3722'. [ 510.193045][T18988] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 510.211921][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3718'. [ 510.213153][T18984] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 510.529306][T19007] netlink: 'syz.5.3724': attribute type 1 has an invalid length. [ 510.768002][T19009] bond2: entered promiscuous mode [ 510.786736][T19009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.828863][T19021] bond2: (slave xfrm2): refused to change device type [ 511.259654][ T1158] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 511.569697][T13358] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.582818][T13358] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.625220][T13358] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.652329][T13358] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.680396][T19075] IPv6: addrconf: prefix option has invalid lifetime [ 511.699358][T19076] erspan0: entered promiscuous mode [ 511.706765][T19076] gretap0: entered promiscuous mode [ 511.716915][T19076] debugfs: 'hsr1' already exists in 'hsr' [ 511.723805][T19076] Cannot create hsr debugfs directory [ 514.016493][T19048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.572899][T19111] __nla_validate_parse: 17 callbacks suppressed [ 514.572931][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3750'. [ 515.137432][T11288] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 515.529002][T19158] sock: sock_set_timeout: `syz.0.3761' (pid 19158) tries to set negative timeout [ 515.560200][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3762'. [ 515.716723][T19165] pim6reg527: entered allmulticast mode [ 516.199989][T19189] openvswitch: netlink: Key type 151 is out of range max 32 [ 517.880035][T19144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.900972][T19192] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3770'. [ 518.383994][T19221] sch_fq: defrate 4294967295 ignored. [ 518.736609][T19239] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3782'. [ 518.885988][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 519.068925][T19256] netlink: 'syz.2.3787': attribute type 1 has an invalid length. [ 519.142812][T19256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.167061][T19261] bond3: (slave geneve3): making interface the new active one [ 519.187474][T19261] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 519.198629][T19264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3789'. [ 519.346913][T19269] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3791'. [ 519.599615][T19279] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 519.758758][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3798'. [ 519.774444][T19279] bond4: entered promiscuous mode [ 519.779533][T19279] bond4: entered allmulticast mode [ 519.786092][T19279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.798261][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3797'. [ 519.891733][T19294] bond2: (slave veth3): Enslaving as an active interface with a down link [ 520.086460][T19307] x_tables: duplicate underflow at hook 2 [ 520.086662][T19292] bond2: (slave veth5): Enslaving as an active interface with a down link [ 520.292854][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 520.323644][T19314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3806'. [ 520.691425][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3812'. [ 520.723134][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3811'. [ 520.796980][T19347] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 520.842636][T19337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3812'. [ 520.871947][T19347] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 521.234950][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3822'. [ 521.254673][T19365] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3822'. [ 521.293707][T19369] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3824'. [ 521.522239][T19381] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 521.713355][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.092981][T19407] syzkaller0: entered promiscuous mode [ 522.119965][T19407] syzkaller0: entered allmulticast mode [ 522.528724][T19428] sctp: [Deprecated]: syz.0.3841 (pid 19428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.528724][T19428] Use struct sctp_sack_info instead [ 522.685075][T19434] netlink: 'syz.1.3843': attribute type 2 has an invalid length. [ 523.435592][T19461] netlink: 'syz.1.3854': attribute type 2 has an invalid length. [ 523.772863][T19490] netlink: 'syz.1.3863': attribute type 6 has an invalid length. [ 523.895926][T19485] netlink: 'syz.5.3862': attribute type 14 has an invalid length. [ 523.936792][T19491] netlink: 'syz.5.3862': attribute type 5 has an invalid length. [ 523.952291][T19485] netlink: 'syz.5.3862': attribute type 14 has an invalid length. [ 523.997459][T19500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 524.192661][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 524.470760][T19518] syzkaller1: entered promiscuous mode [ 524.508163][T19518] syzkaller1: entered allmulticast mode [ 524.597419][T19518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.668300][T19525] netlink: 'syz.5.3874': attribute type 4 has an invalid length. [ 525.316085][T19565] netlink: 'syz.5.3887': attribute type 1 has an invalid length. [ 525.356729][T19569] __nla_validate_parse: 29 callbacks suppressed [ 525.356750][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3888'. [ 525.421395][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3886'. [ 525.452426][T19571] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3887'. [ 525.551025][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3890'. [ 525.578099][T19578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3890'. [ 525.634754][T19582] netlink: 'syz.2.3893': attribute type 8 has an invalid length. [ 525.869625][T19594] netlink: 'syz.5.3895': attribute type 1 has an invalid length. [ 525.884953][T19594] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3895'. [ 526.297564][T19614] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 526.319671][T19614] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3902'. [ 526.342603][T19614] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3902'. [ 526.505298][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3907'. [ 526.532864][T19635] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3907'. [ 526.619909][T19631] bond5: (slave veth5): Enslaving as an active interface with a down link [ 526.650471][T19642] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 526.670199][T19621] bond5: (slave veth7): Enslaving as an active interface with a down link [ 526.867855][T19648] C: renamed from lo (while UP) [ 526.890499][T19648] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 527.077696][T19658] netlink: 'syz.2.3915': attribute type 4 has an invalid length. [ 527.530438][T19678] pim6reg: entered allmulticast mode [ 527.566808][T19676] netlink: 'syz.5.3922': attribute type 3 has an invalid length. [ 527.664615][T19684] sctp: [Deprecated]: syz.5.3922 (pid 19684) Use of int in maxseg socket option. [ 527.664615][T19684] Use struct sctp_assoc_value instead [ 527.960873][T19704] netem: incorrect ge model size [ 527.971705][T19704] netem: change failed [ 528.475310][T19728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.488635][T19728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.716089][T19728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.743945][T19728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.805327][T19744] team0: Device gtp0 is up. Set it down before adding it as a team port [ 528.843205][T19750] netlink: 'syz.2.3942': attribute type 3 has an invalid length. [ 528.969265][T19728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.994408][T19728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.194202][T19728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.264656][T19728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.435745][T19776] bond3: entered promiscuous mode [ 529.441257][T19776] bond3: entered allmulticast mode [ 529.449716][T19776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.736397][T13358] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.755490][T13358] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.810677][T13358] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.847365][T13358] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.005615][T13358] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.028241][T13358] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.054197][T13358] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.089079][T13358] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.380651][T19826] __nla_validate_parse: 15 callbacks suppressed [ 530.380675][T19826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3959'. [ 530.422388][T19826] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3959'. [ 530.519538][T19837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3961'. [ 530.722949][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 530.787145][T19851] netlink: 'syz.5.3964': attribute type 21 has an invalid length. [ 530.795132][T19851] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3964'. [ 530.897954][T19866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3967'. [ 531.161113][T19884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3970'. [ 531.383804][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3974'. [ 531.463537][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 531.766160][T19919] xt_l2tp: invalid flags combination: 8 [ 532.157550][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3990'. [ 532.951966][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036eadc00: rx timeout, send abort [ 532.962822][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803064e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 533.130646][T19998] block nbd1: Unsupported socket: should be TCP or UNIX. [ 533.384477][T20011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 533.461868][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036eadc00: abort rx timeout. Force session deactivation [ 533.575311][T20021] tipc: Started in network mode [ 533.580247][T20021] tipc: Node identity 42412153f1a7, cluster identity 4711 [ 533.592036][T20021] tipc: Enabled bearer , priority 0 [ 533.609141][T20021] syzkaller0: entered promiscuous mode [ 533.627818][T20021] syzkaller0: entered allmulticast mode [ 533.694373][T20021] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 533.721270][T20021] tipc: Resetting bearer [ 534.010243][T20053] xt_HMARK: spi-set and port-set can't be combined [ 534.024809][T20019] tipc: Resetting bearer [ 534.045084][T20019] tipc: Disabling bearer [ 534.181359][T20059] netlink: 'syz.6.4025': attribute type 1 has an invalid length. [ 534.189726][T20059] netlink: 'syz.6.4025': attribute type 1 has an invalid length. [ 534.210751][T20061] netlink: 'syz.6.4025': attribute type 1 has an invalid length. [ 534.233627][T20061] netlink: 'syz.6.4025': attribute type 1 has an invalid length. [ 534.378864][T20068] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 535.106243][T20103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.113661][T20103] IPv6: NLM_F_CREATE should be set when creating new route [ 535.121054][T20103] IPv6: NLM_F_CREATE should be set when creating new route [ 535.128391][T20103] IPv6: NLM_F_CREATE should be set when creating new route [ 535.988683][T20154] xt_l2tp: v2 doesn't support IP mode [ 536.005202][T20154] __nla_validate_parse: 18 callbacks suppressed [ 536.005222][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 536.075128][T20159] netlink: 'syz.5.4053': attribute type 1 has an invalid length. [ 536.119388][T20159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 536.293697][T20159] bond6: (slave gretap1): making interface the new active one [ 536.308902][T20159] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 536.386460][T20168] bond7: entered promiscuous mode [ 536.406429][T20168] bond7: entered allmulticast mode [ 536.421399][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'. [ 536.441980][T20168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 536.601311][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880482d4000: rx timeout, send abort [ 536.610088][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ad17c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 536.830249][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4058'. [ 536.844808][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4060'. [ 537.109758][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880482d4000: abort rx timeout. Force session deactivation [ 537.447372][T20230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4069'. [ 537.471331][T20225] erspan0: entered promiscuous mode [ 537.527326][T20225] erspan0: entered allmulticast mode [ 537.773058][T20247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4073'. [ 537.796399][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 537.805927][T20225] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4068'. [ 538.075245][T20258] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 538.172459][T20258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.221373][T20266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4080'. [ 538.243651][T20264] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4079'. [ 538.381106][T20268] pimreg: entered allmulticast mode [ 538.934407][T20304] netlink: 'syz.2.4093': attribute type 10 has an invalid length. [ 539.248537][T20323] netlink: 'syz.0.4099': attribute type 2 has an invalid length. [ 539.527101][T20332] batadv1: entered allmulticast mode [ 539.825093][T20356] netlink: 'syz.1.4109': attribute type 12 has an invalid length. [ 539.994972][T20356] bond5: option primary_reselect: invalid value (255) [ 540.038543][T20356] bond5 (unregistering): Released all slaves [ 540.631136][T20390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.863412][T20400] x_tables: duplicate underflow at hook 1 [ 543.521928][T20423] __nla_validate_parse: 9 callbacks suppressed [ 543.521949][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4128'. [ 543.670205][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4129'. [ 544.661783][T20468] netlink: 'syz.5.4142': attribute type 1 has an invalid length. [ 544.828066][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'. [ 544.874864][T20468] 8021q: adding VLAN 0 to HW filter on device bond8 [ 545.080523][T20482] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4145'. [ 545.157670][T20488] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4145'. [ 545.179576][T20490] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4148'. [ 545.619196][T20505] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 545.633603][T20505] bond6: entered promiscuous mode [ 545.638678][T20505] bond6: entered allmulticast mode [ 545.644700][T20505] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.710913][T20507] netlink: 'syz.2.4153': attribute type 4 has an invalid length. [ 545.794393][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067915800: rx timeout, send abort [ 545.803991][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067915800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 546.071176][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4157'. [ 546.249891][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4159'. [ 546.284455][T20529] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4160'. [ 546.374937][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4159'. [ 546.811064][T20553] macvtap1: entered promiscuous mode [ 546.825653][T20553] vlan0: entered promiscuous mode [ 546.853168][T20553] macvtap1: entered allmulticast mode [ 546.881672][T20553] vlan0: entered allmulticast mode [ 546.887055][T20553] veth0_vlan: entered allmulticast mode [ 547.596925][T20594] dvmrp0: entered allmulticast mode [ 548.508484][T20633] netlink: 'syz.6.4194': attribute type 2 has an invalid length. [ 548.712140][T20635] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 549.104411][T20659] __nla_validate_parse: 13 callbacks suppressed [ 549.104432][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4202'. [ 549.167688][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4202'. [ 549.476869][T20679] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4207'. [ 549.495590][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4209'. [ 549.506765][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4209'. [ 549.708987][T20687] netlink: 'syz.5.4211': attribute type 39 has an invalid length. [ 549.852547][T20689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4212'. [ 549.872355][T20689] bridge_slave_1: left allmulticast mode [ 549.878378][T20689] bridge_slave_1: left promiscuous mode [ 549.902284][T20689] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.954346][T20689] bridge_slave_0: left allmulticast mode [ 549.994035][T20689] bridge_slave_0: left promiscuous mode [ 550.000104][T20689] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.087470][T20697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4215'. [ 550.153184][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 550.168187][T20701] tc_dump_action: action bad kind [ 550.391643][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'. [ 550.431290][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'. [ 550.525320][T20720] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 551.343673][T20768] ip6_vti0: left promiscuous mode [ 551.374938][T20768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.471367][T20768] netlink: 'syz.1.4238': attribute type 11 has an invalid length. [ 551.552293][ T31] INFO: task syz.4.3042:16617 blocked for more than 143 seconds. [ 551.566544][ T31] Not tainted syzkaller #0 [ 551.581245][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.601216][ T31] task:syz.4.3042 state:D stack:24728 pid:16617 tgid:16613 ppid:15816 task_flags:0x400140 flags:0x00080002 [ 551.614493][ T31] Call Trace: [ 551.617972][ T31] [ 551.624350][ T31] __schedule+0x14ea/0x5050 [ 551.629079][ T31] ? __pfx___schedule+0x10/0x10 [ 551.635336][ T31] ? schedule+0x90/0x360 [ 551.639804][ T31] schedule+0x164/0x360 [ 551.644412][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.650999][ T31] __mutex_lock+0x7fe/0x1300 [ 551.656384][ T31] ? __mutex_lock+0x5ac/0x1300 [ 551.661277][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 551.667280][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.672875][ T31] ? __nlmsg_put+0xef/0x1b0 [ 551.677451][ T31] ? genlmsg_put+0x137/0x2e0 [ 551.682579][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 551.688383][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 551.694236][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 551.701153][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 551.707519][ T31] ? __asan_memcpy+0x40/0x70 [ 551.712340][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 551.718470][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 551.724201][ T31] genl_rcv_msg+0x61c/0x7a0 [ 551.728918][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.734781][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 551.741072][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 551.746631][ T31] netlink_rcv_skb+0x232/0x4b0 [ 551.752340][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.757421][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.763377][ T31] ? genl_rcv+0x19/0x40 [ 551.767579][ T31] ? down_read+0x272/0x2e0 [ 551.772172][ T31] ? genl_rcv+0xd/0x40 [ 551.776274][ T31] genl_rcv+0x28/0x40 [ 551.780274][ T31] netlink_unicast+0x80f/0x9b0 [ 551.785236][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 551.790613][ T31] ? __alloc_skb+0x193/0x390 [ 551.795671][ T31] ? netlink_sendmsg+0x650/0xb40 [ 551.800675][ T31] ? skb_put+0x11b/0x210 [ 551.805078][ T31] netlink_sendmsg+0x813/0xb40 [ 551.809879][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.815376][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.820362][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.826057][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.831849][ T31] ____sys_sendmsg+0xa68/0xad0 [ 551.836674][ T31] ? __might_fault+0xaf/0x130 [ 551.841891][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.847323][ T31] ? import_iovec+0x73/0xa0 [ 551.855523][ T31] ___sys_sendmsg+0x2a5/0x360 [ 551.860261][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 551.865521][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.870819][ T31] ? futex_wait+0x29a/0x380 [ 551.876296][ T31] ? __fget_files+0x2a/0x420 [ 551.880924][ T31] ? __fget_files+0x3a0/0x420 [ 551.887242][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 551.892322][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.897963][ T31] ? rcu_is_watching+0x15/0xb0 [ 551.903464][ T31] do_syscall_64+0xe2/0xf80 [ 551.908010][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.914359][ T31] ? trace_irq_disable+0x37/0x100 [ 551.919432][ T31] ? clear_bhb_loop+0x60/0xb0 [ 551.924188][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.930194][ T31] RIP: 0033:0x7ff0bb79aeb9 [ 551.934742][ T31] RSP: 002b:00007ff0bc61e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.943553][ T31] RAX: ffffffffffffffda RBX: 00007ff0bba16090 RCX: 00007ff0bb79aeb9 [ 551.952461][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 000000000000000d [ 551.961179][ T31] RBP: 00007ff0bb808c1f R08: 0000000000000000 R09: 0000000000000000 [ 551.969724][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.978273][ T31] R13: 00007ff0bba16128 R14: 00007ff0bba16090 R15: 00007ffc2a6d2578 [ 551.986685][ T31] [ 551.989785][ T31] [ 551.989785][ T31] Showing all locks held in the system: [ 551.999030][ T31] 1 lock held by khungtaskd/31: [ 552.005891][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 552.016569][ T31] 3 locks held by kworker/u8:2/36: [ 552.022550][ T31] #0: ffff88814d1b3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 552.037227][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 552.060217][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 552.093214][ T31] 3 locks held by kworker/1:1/45: [ 552.098333][ T31] 2 locks held by getty/5585: [ 552.103381][ T31] #0: ffff88814e49b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 552.113600][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 552.124085][ T31] 2 locks held by syz.3.3035/16585: [ 552.129296][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.138818][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 552.149692][ T31] 2 locks held by syz.4.3042/16617: [ 552.155240][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.164542][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 552.175097][ T31] 1 lock held by syz.6.4240/20775: [ 552.180231][ T31] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 552.189551][ T31] 2 locks held by syz.1.4243/20784: [ 552.198530][ T31] #0: ffff888029a520d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 552.209516][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 552.221242][ T31] 2 locks held by syz.1.4243/20785: [ 552.226640][ T31] #0: ffffffff8ff0f180 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 552.236268][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 552.245805][ T31] 2 locks held by syz.1.4243/20786: [ 552.251028][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.260168][ T31] #1: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 552.270534][ T31] [ 552.276966][ T31] ============================================= [ 552.276966][ T31] [ 552.285799][ T31] NMI backtrace for cpu 0 [ 552.285818][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.285840][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 552.285851][ T31] Call Trace: [ 552.285859][ T31] [ 552.285866][ T31] dump_stack_lvl+0xe8/0x150 [ 552.285896][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 552.285922][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.285953][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 552.285983][ T31] sys_info+0x135/0x170 [ 552.286005][ T31] watchdog+0xf90/0xfe0 [ 552.286032][ T31] ? watchdog+0x209/0xfe0 [ 552.286057][ T31] kthread+0x726/0x8b0 [ 552.286079][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.286098][ T31] ? __pfx_kthread+0x10/0x10 [ 552.286121][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.286138][ T31] ? __pfx_kthread+0x10/0x10 [ 552.286160][ T31] ret_from_fork+0x51b/0xa40 [ 552.286181][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 552.286197][ T31] ? __switch_to+0xc82/0x1410 [ 552.286227][ T31] ? __pfx_kthread+0x10/0x10 [ 552.286249][ T31] ret_from_fork_asm+0x1a/0x30 [ 552.286292][ T31] [ 552.286299][ T31] Sending NMI from CPU 0 to CPUs 1: [ 552.414587][ C1] NMI backtrace for cpu 1 [ 552.414605][ C1] CPU: 1 UID: 0 PID: 16185 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 552.414623][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 552.414632][ C1] RIP: 0010:__lock_acquire+0x817/0x2cf0 [ 552.414659][ C1] Code: 29 49 ff c7 49 63 86 28 0b 00 00 49 83 c5 28 49 39 c7 7c d3 e9 b4 00 00 00 48 c7 c7 d0 89 42 8e 4c 89 fe e8 db cd 3c 03 eb c3 <89> e8 25 ff 1f 00 00 c1 ed 03 81 e5 00 60 00 00 09 c5 48 89 d8 48 [ 552.414673][ C1] RSP: 0018:ffffc900042cee58 EFLAGS: 00000046 [ 552.414688][ C1] RAX: 0000000000000000 RBX: 69e42b04fd89913f RCX: 0000000000000000 [ 552.414699][ C1] RDX: 0000000000000008 RSI: ffff888053cc8b58 RDI: ffff888053cc8000 [ 552.414709][ C1] RBP: 0000000000020007 R08: ffffffff81ae269d R09: ffffffff8e55a360 [ 552.414720][ C1] R10: ffffc900042cf118 R11: ffffffff81afb170 R12: ffff888053cc8b58 [ 552.414731][ C1] R13: ffff888053cc8b58 R14: ffff888053cc8000 R15: 0000000000000001 [ 552.414742][ C1] FS: 000055557b07c500(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 552.414756][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.414766][ C1] CR2: 00007f33981e6358 CR3: 0000000047526000 CR4: 00000000003526f0 [ 552.414782][ C1] Call Trace: [ 552.414789][ C1] [ 552.414799][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.414821][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.414838][ C1] ? is_module_text_address+0x1d/0x1e0 [ 552.414857][ C1] lock_acquire+0x106/0x330 [ 552.414876][ C1] ? is_module_text_address+0x1d/0x1e0 [ 552.414896][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.414911][ C1] ? unwind_next_frame+0x1aaf/0x23c0 [ 552.414926][ C1] ? is_module_text_address+0x1d/0x1e0 [ 552.414945][ C1] is_module_text_address+0x39/0x1e0 [ 552.414971][ C1] ? is_module_text_address+0x1d/0x1e0 [ 552.414995][ C1] kernel_text_address+0x94/0xe0 [ 552.415015][ C1] __kernel_text_address+0xd/0x30 [ 552.415032][ C1] unwind_get_return_address+0x4d/0x90 [ 552.415048][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.415067][ C1] arch_stack_walk+0xfb/0x150 [ 552.415088][ C1] stack_trace_save+0xa9/0x100 [ 552.415106][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 552.415128][ C1] save_stack+0x122/0x230 [ 552.415150][ C1] ? __pfx_save_stack+0x10/0x10 [ 552.415170][ C1] ? __free_frozen_pages+0xbf8/0xd70 [ 552.415184][ C1] ? __kasan_populate_vmalloc+0x137/0x1d0 [ 552.415203][ C1] ? alloc_vmap_area+0xdbc/0x14a0 [ 552.415223][ C1] ? __get_vm_area_node+0x1f8/0x300 [ 552.415242][ C1] ? __vmalloc_node_range_noprof+0x372/0x1730 [ 552.415256][ C1] ? vzalloc_noprof+0xb2/0xe0 [ 552.415269][ C1] ? alloc_counters+0x64/0x5d0 [ 552.415286][ C1] ? do_ip6t_get_ctl+0xabd/0x1230 [ 552.415302][ C1] ? nf_getsockopt+0x26e/0x290 [ 552.415320][ C1] ? ipv6_getsockopt+0x1fd/0x2b0 [ 552.415340][ C1] ? do_sock_getsockopt+0x2d3/0x3f0 [ 552.415357][ C1] ? __x64_sys_getsockopt+0x1a4/0x240 [ 552.415374][ C1] ? do_syscall_64+0xe2/0xf80 [ 552.415389][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.415405][ C1] ? page_ext_put+0x97/0xc0 [ 552.415427][ C1] __reset_page_owner+0x71/0x1f0 [ 552.415448][ C1] __free_frozen_pages+0xbf8/0xd70 [ 552.415467][ C1] __kasan_populate_vmalloc+0x137/0x1d0 [ 552.415489][ C1] alloc_vmap_area+0xdbc/0x14a0 [ 552.415517][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 552.415536][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 552.415553][ C1] ? __get_vm_area_node+0x13f/0x300 [ 552.415573][ C1] ? alloc_counters+0x64/0x5d0 [ 552.415590][ C1] __get_vm_area_node+0x1f8/0x300 [ 552.415612][ C1] __vmalloc_node_range_noprof+0x372/0x1730 [ 552.415627][ C1] ? alloc_counters+0x64/0x5d0 [ 552.415646][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 552.415664][ C1] ? rcu_is_watching+0x15/0xb0 [ 552.415679][ C1] ? trace_contention_end+0x39/0x100 [ 552.415700][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 552.415714][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 552.415733][ C1] ? xt_find_table_lock+0x54/0x3e0 [ 552.415755][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 552.415772][ C1] ? net_generic+0x1e/0x240 [ 552.415790][ C1] ? alloc_counters+0x64/0x5d0 [ 552.415807][ C1] vzalloc_noprof+0xb2/0xe0 [ 552.415821][ C1] ? alloc_counters+0x64/0x5d0 [ 552.415839][ C1] alloc_counters+0x64/0x5d0 [ 552.415858][ C1] ? xt_find_table_lock+0x35e/0x3e0 [ 552.415881][ C1] do_ip6t_get_ctl+0xabd/0x1230 [ 552.415901][ C1] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 552.415922][ C1] ? __mutex_trylock_common+0x158/0x260 [ 552.415938][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 552.415955][ C1] ? rcu_is_watching+0x15/0xb0 [ 552.415977][ C1] ? trace_contention_end+0x39/0x100 [ 552.415995][ C1] ? nf_getsockopt+0x224/0x290 [ 552.416015][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 552.416032][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 552.416048][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.416066][ C1] ? __might_fault+0xaf/0x130 [ 552.416090][ C1] nf_getsockopt+0x26e/0x290 [ 552.416111][ C1] ipv6_getsockopt+0x1fd/0x2b0 [ 552.416131][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 552.416152][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 552.416167][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 552.416183][ C1] do_sock_getsockopt+0x2d3/0x3f0 [ 552.416203][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 552.416221][ C1] ? fd_install+0x94/0x3d0 [ 552.416240][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 552.416262][ C1] do_syscall_64+0xe2/0xf80 [ 552.416277][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.416290][ C1] ? trace_irq_disable+0x37/0x100 [ 552.416305][ C1] ? clear_bhb_loop+0x60/0xb0 [ 552.416322][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.416336][ C1] RIP: 0033:0x7f3397f9c6aa [ 552.416349][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 58 9a fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 552.416362][ C1] RSP: 002b:00007fff66d44f58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 552.416378][ C1] RAX: ffffffffffffffda RBX: 00007fff66d44fe0 RCX: 00007f3397f9c6aa [ 552.416389][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 552.416399][ C1] RBP: 0000000000000003 R08: 00007fff66d44f7c R09: 0000000000000000 [ 552.416409][ C1] R10: 00007fff66d44fe0 R11: 0000000000000212 R12: 00007f33981e2ca0 [ 552.416419][ C1] R13: 00007fff66d44f7c R14: 0000000000000000 R15: 00007f33981e4e60 [ 552.416436][ C1] [ 553.063278][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 553.070239][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.079360][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 553.089417][ T31] Call Trace: [ 553.092785][ T31] [ 553.095725][ T31] vpanic+0x1e0/0x670 [ 553.099739][ T31] panic+0xc5/0xd0 [ 553.103467][ T31] ? __pfx_panic+0x10/0x10 [ 553.107884][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 553.113259][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 553.119512][ T31] watchdog+0xfda/0xfe0 [ 553.123687][ T31] ? watchdog+0x209/0xfe0 [ 553.128051][ T31] kthread+0x726/0x8b0 [ 553.132142][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.136910][ T31] ? __pfx_kthread+0x10/0x10 [ 553.141500][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.146868][ T31] ? __pfx_kthread+0x10/0x10 [ 553.151467][ T31] ret_from_fork+0x51b/0xa40 [ 553.156060][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 553.161178][ T31] ? __switch_to+0xc82/0x1410 [ 553.165861][ T31] ? __pfx_kthread+0x10/0x10 [ 553.170446][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.175225][ T31] [ 553.178727][ T31] Kernel Offset: disabled [ 553.183048][ T31] Rebooting in 86400 seconds..