last executing test programs: 3m12.19633859s ago: executing program 1 (id=5634): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast2, 0x0}, &(0x7f0000000040)=0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettfilter={0x0, 0x2e, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0xfff2, 0xffe0}, {0xf, 0xfffe}, {0xb, 0xc}}, [{0x0, 0xb, 0x8c0000}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0x2}, {0x0, 0xb, 0x7fff}, {0x0, 0xb, 0xd}]}, 0x24}}, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x24064015}, 0x4040084) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$kcm(0xa, 0x3, 0x87) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m12.049232628s ago: executing program 1 (id=5637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x10, 0xa, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x7, 0x1, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0x19}, @remote, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="7801d6a6752b7fee28"], 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x4040004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x6, 0x0, 0x40, @rand_addr=' \x01\x00', @remote, 0x700, 0x10, 0x3ff, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa8, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff50000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af9800000000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m11.819853045s ago: executing program 1 (id=5642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffffff0}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0xc840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0x1014, 0x28, 0x4051d80970929f5d, 0x70bd28, 0x25dfdbfd, {}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x8582d76e0518eaa5}, 0x20) 3m11.678329896s ago: executing program 1 (id=5644): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08000280010000", 0x23) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r4, 0x3fcb7000) sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 3m11.495034339s ago: executing program 1 (id=5650): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@gettaction={0x38, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x32886eac}]}, 0x38}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) 3m11.384419327s ago: executing program 1 (id=5653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf3000000000000025000200091bfeff3d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 2m56.284670725s ago: executing program 32 (id=5653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 1m22.050590027s ago: executing program 2 (id=7377): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) 1m21.938643052s ago: executing program 2 (id=7378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 1m21.904679768s ago: executing program 2 (id=7379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r1, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f0000000040)=0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f00000000c0), 0x8) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x5d778000) getsockopt$bt_hci(r2, 0x11a, 0x5, 0x0, 0x0) (async) getsockopt$bt_hci(r2, 0x11a, 0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040044) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r0, 0x34de5000) 1m21.777519734s ago: executing program 2 (id=7380): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r4, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m21.674348376s ago: executing program 2 (id=7381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x443200, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x20}) 1m21.64851641s ago: executing program 2 (id=7382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r1}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4008094) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) listen(r0, 0x9) 1m6.701566647s ago: executing program 5 (id=7581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffe0, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000071}, 0x4890) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c1}, 0x48010) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffe0, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000071}, 0x4890) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c1}, 0x48010) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 1m6.607865849s ago: executing program 5 (id=7582): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffff34, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a001000000000000000000014000200fc"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r0], 0x2c}}, 0x4000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a6970006d616300000005000400000000000900020073797a3100000000200007800c00018008000140000000000800080000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000400)=0x1e) 1m6.591888563s ago: executing program 33 (id=7382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r1}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4008094) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) listen(r0, 0x9) 1m6.520405145s ago: executing program 5 (id=7584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000883}, 0x80) 1m6.440208158s ago: executing program 5 (id=7585): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'syzkaller1\x00', 0x7fffffff}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) 1m6.142077606s ago: executing program 5 (id=7586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240009000000000000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) close(0x4) 1m5.993814541s ago: executing program 5 (id=7588): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x7, 0x7, 0x2, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x64, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x94, 0xa, "9bf2484bba4b2f4f"}, @generic={0x89, 0x4, "f707"}, @generic={0x83, 0x5, "2463d9"}, @end, @end, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0x0, [{@remote, 0x9}]}]}}}}}) socketpair(0x27, 0x800, 0x2, &(0x7f0000000340)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f0000002480)={&(0x7f0000000380)=@can={0x1d, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="287113ce636e4fa287a61d93da236aba2fce8d25eeabcaebe985ee00d7d9e8d4fc26fc46569e3ede744342da868b918fa3f24239738f7005dd8d2752b8cd08d3d07dbb91c9e6b1f133c53a", 0x4b}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1148}, 0x40000000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86bc116e558c6ab5}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x64, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x814) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000000000000500000d000000000c000000040000000a00618cc1a11f65ca8e000000000000030000000000000003000000000000000200000000000000005f616100"], &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100000016801800018014000a00ff03000000000000dc7a08e97630c9f0f7ffffffff08000b"], 0x44}}, 0x0) 50.787697957s ago: executing program 34 (id=7588): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x7, 0x7, 0x2, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x64, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x94, 0xa, "9bf2484bba4b2f4f"}, @generic={0x89, 0x4, "f707"}, @generic={0x83, 0x5, "2463d9"}, @end, @end, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0x0, [{@remote, 0x9}]}]}}}}}) socketpair(0x27, 0x800, 0x2, &(0x7f0000000340)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f0000002480)={&(0x7f0000000380)=@can={0x1d, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="287113ce636e4fa287a61d93da236aba2fce8d25eeabcaebe985ee00d7d9e8d4fc26fc46569e3ede744342da868b918fa3f24239738f7005dd8d2752b8cd08d3d07dbb91c9e6b1f133c53a", 0x4b}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1148}, 0x40000000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86bc116e558c6ab5}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x64, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x814) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000000000000500000d000000000c000000040000000a00618cc1a11f65ca8e000000000000030000000000000003000000000000000200000000000000005f616100"], &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100000016801800018014000a00ff03000000000000dc7a08e97630c9f0f7ffffffff08000b"], 0x44}}, 0x0) 2.490301239s ago: executing program 0 (id=8570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000880)=r5, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.216033181s ago: executing program 0 (id=8578): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) 2.031664638s ago: executing program 0 (id=8581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) (async) r1 = socket$inet(0x2, 0x2000080001, 0x84) sendto$inet(r1, &(0x7f0000000000)="791a334062159a738eab03", 0xb, 0x1000, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x3b, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e20, 0x3, 'lblcr\x00', 0x10, 0x6, 0x7b}, {@multicast1, 0x4e22, 0x2000, 0x2, 0xa2e, 0x3}}, 0x44) (async) r2 = socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000540)={&(0x7f0000000240)=[{0x10000, 0x4, 0xf99, 0x34, 0xfffffff7}, {0x5, 0x4, 0x8, 0x1, 0x3}], 0x2, 0x28, 0x8}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) listen(r1, 0x4) (async) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000180)=0x6, 0x8) 1.790947503s ago: executing program 7 (id=8588): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0xff) sendto(r3, 0x0, 0x30, 0x4000800, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff07, 0x0) 1.778693224s ago: executing program 0 (id=8589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r1, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c8e3c9c, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.710435333s ago: executing program 6 (id=8590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x44040) 1.627342652s ago: executing program 7 (id=8593): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x16, 0x2, 0x27e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.553360296s ago: executing program 6 (id=8594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000000001090000000000000000021814000000fd010000000008000100ac8e19405b141400080045000a0101020c001680050004008100000006001500"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x48000, 0x93, 0x2}}]}]}}}]}, 0x64}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r10, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x32) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000400)={'sit0\x00', r5, 0x80, 0x20, 0x32f, 0xfffffff8, {{0x17, 0x4, 0x0, 0x9, 0x5c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x2, 0xc, 0xc, 0xfff]}, @ssrr={0x89, 0xb, 0x22, [@private=0xa010102, @loopback]}, @lsrr={0x83, 0x1b, 0x1c, [@loopback, @remote, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1]}, @rr={0x7, 0xb, 0x86, [@dev={0xac, 0x14, 0x14, 0x12}, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000000ac0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8800040}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa0, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008820}, 0xc4) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 1.479378301s ago: executing program 6 (id=8595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e"], 0x35c}}, 0x4000000) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x1ff}, 0x1c) (async) r1 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "2755f8bebdaf"}]}]}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x1, 0x804) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@ccm_128={{0x303}, '\x00', "c463fd384f8545dda351f3013725f452", "ad172000", "cacfdb8cad1f6b2a"}, 0x28) 1.418378723s ago: executing program 7 (id=8596): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b8, 0x1a0, 0xd0, 0x360, 0x360, 0x360, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'rose0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff], 'bridge0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x4}, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2a, 0x9, 0x6, 0xb9, 0xed4, @mcast2, @remote, @loopback, [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff0000ff], 0x2000, 0x301}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r11, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000156c493add3cfc0401b868268d110001", @ANYRES32=r11], 0x18}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.3705248s ago: executing program 0 (id=8597): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x50, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_RTT={0x8, 0x7, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 997.898298ms ago: executing program 4 (id=8601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000020000000c0007800500150000004eef050005000a000000050001000700000005000400000000000900020073797a31000000000d000300686173683a6e65740000"], 0x54}}, 0x0) 952.79577ms ago: executing program 4 (id=8603): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xfffffffc, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"bc3ec3eb3b4dc6de48dd7f11a9642b9c", 0x0, 0x0, {0x100000001, 0x4}, {0x5, 0x4771}, 0x0, [0x1, 0xb994, 0x8000, 0x10000, 0x9, 0x9, 0x4, 0x6, 0xb, 0x6, 0x7fff, 0xa209, 0x5459fa9f, 0xa, 0x0, 0x8]}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001200)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000200)={{r0}, r2, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x8000000000000000, 0x9, {0x20, 0x1, 0x101, 0x0, 0xfffffffffffffffc}, [0x3]}}, @subvolid=0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) 806.347992ms ago: executing program 4 (id=8605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) accept4(r0, &(0x7f0000000080)=@phonet, &(0x7f0000000100)=0x80, 0x0) 805.831397ms ago: executing program 3 (id=8606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x4) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) (async) 805.162223ms ago: executing program 4 (id=8607): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000ba008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0x3218, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x1d, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f00000010c0)='syzkaller\x00', 0x7, 0xf2, &(0x7f0000001100)=""/242, 0x40e00, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x0, 0xb, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001480)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, 0x1, r4, 0x1, r5], &(0x7f00000014c0)=[{0x1, 0x3, 0x1, 0xc}, {0x3, 0x3, 0x8}, {0x5, 0x4, 0x6, 0x1}, {0x2, 0x2, 0x7, 0x2}, {0x0, 0x5, 0xd, 0xc}, {0x5, 0x5, 0xa, 0xa}], 0x10, 0xcac}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = syz_open_procfs$namespace(r9, &(0x7f0000001780)='ns/ipc\x00') r13 = getpid() sendmmsg$unix(r8, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r10}}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x91, 0x7, 0x2, 0x4, @rand_addr=' \x01\x00', @mcast2, 0x20, 0xf809, 0x4, 0x2}}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20008100}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@migrate={0x134, 0x21, 0x300, 0x70bd25, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x4e23, 0x9, 0x2, 0x60, 0x20, 0x1, 0x0, r10}, 0x6e6bb6, 0x1}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x4e23, 0x1, 0x4e21, 0x8, 0x2, 0x20, 0x20, 0x0, r14, r15}, {@in=@multicast1, 0x4d5, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x777, 0x6, 0x4000000000, 0xacf5, 0x5, 0x7, 0xb, 0x8}, {0x9, 0x9, 0x9d6c, 0x4}, {0x2, 0x6, 0x401}, 0x70bd2b, 0x3500, 0x2, 0x0, 0x4a, 0xc0}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x4040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r18, &(0x7f0000000dc0)=""/134, 0x86) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r18, r16, 0x25, 0x15, @val=@iter={&(0x7f0000000280)=@map_fd=r19, 0x10}}, 0x20) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$SIOCSIFHWADDR(r20, 0x8924, &(0x7f0000000040)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 704.966275ms ago: executing program 4 (id=8608): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="ade15058f409d7db3a4a3aaa8bde4548af7582bae4d22e301bb4822bf49bda2e33995bf503361219d49684dafeb4b49e6da22ac97336c48be13525b4f3b071d6b0580b000000000000f85834b7f085aa03b599ffec0dddea1d13657a7bf8cd02634f93de0fe564e93e7feeda8526af6932d8c746e14770184afa5a8cb3c99ef39ba5557620efdd0b28e0e4566d046f6826bd97962c36a4fa6b74f04f40a9b09a37d9082f", @ANYRES64=0x0], 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x48}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0) 698.046683ms ago: executing program 0 (id=8609): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000240)={0x6, 'pim6reg1\x00', {}, 0x8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r2}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0xc}, 0x8) 561.584205ms ago: executing program 3 (id=8610): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x11) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0x7e, 0x2d, &(0x7f0000000400)="e5c828b2c6a94cc48df90a5d4e43ed3543ab9a39c484dfe7d8d83d443099187b64b4b839d327d7ce4c31f38b8cb09ff283e04ce41a016ac4ac5bb13dbfb8130c07638116ad2689f225c32ed2547b14ba01c2f0b2269122a733688670e4f87dabe49e4da024a9e66c14549c3022eed4451f9d82d90e027eab7a810e87a17a", &(0x7f0000000480)=""/45, 0x4, 0x0, 0xfa, 0x4, &(0x7f0000000740)="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", &(0x7f0000000840)="5c9655da", 0x4, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) 556.172642ms ago: executing program 3 (id=8611): r0 = socket$inet6(0x10, 0x6, 0x0) write(r0, &(0x7f00000007c0)="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", 0xfc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x729c18a2, @private1, 0x9d49}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x421, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe2}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x3, @loopback, 0x8}], 0xb0) 537.969698ms ago: executing program 6 (id=8612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 412.91463ms ago: executing program 3 (id=8613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) connect(r1, 0x0, 0x0) (async) connect(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2002, 0x0, 0xffffffffffffffff, 0x800}, 0x50) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2002, 0x0, 0xffffffffffffffff, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 411.485819ms ago: executing program 7 (id=8614): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xb, 0x4) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, "63700458b836649f2339f9a2d58b5c5139a3bb8861e0694b996c2323c701b73a6ef00b24f91e86ae87e54e711b7fda8376b50c578dbebddc01cd41db7c328f", 0x8}, 0x60) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6c, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, 0x28, 0x0, 0x0, 0x0, 0xff01, &(0x7f0000000100)='bridge0\x00', 0x100, 0x2, 0x6}) recvmmsg(r1, &(0x7f0000006c40)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/108, 0x6c}, {&(0x7f00000012c0)=""/137, 0x89}, {&(0x7f0000001380)=""/22, 0x16}, {&(0x7f00000013c0)=""/126, 0x7e}], 0x5}, 0xb}, {{&(0x7f00000014c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)=""/122, 0x7a}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x2}, 0x3}, {{&(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001740)=""/192, 0xc0}, {&(0x7f0000001800)=""/140, 0x8c}], 0x2, &(0x7f0000001900)=""/33, 0x21}, 0x7fff}, {{&(0x7f0000001940)=@isdn, 0x80, &(0x7f0000003c00)=[{0xfffffffffffffffc}, {&(0x7f00000019c0)=""/12, 0xc}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/177, 0xb1}, {&(0x7f0000002ac0)=""/61, 0x3d}, {&(0x7f0000002b00)=""/251, 0xfb}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x7, &(0x7f0000003c80)=""/252, 0xfc}, 0xf7d}, {{&(0x7f0000003d80)=@isdn, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/88, 0x58}, {&(0x7f0000003e80)=""/52, 0x34}, {&(0x7f0000003ec0)}], 0x3, &(0x7f0000003f40)=""/18, 0x12}, 0x2}, {{&(0x7f0000003f80)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @remote, @null]}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/235, 0xeb}, {&(0x7f0000005100)=""/226, 0xe2}, {&(0x7f0000005200)=""/219, 0xdb}, {&(0x7f0000005300)=""/41, 0x29}], 0x5, &(0x7f00000053c0)=""/62, 0x3e}, 0x2}, {{&(0x7f0000005400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005480)=""/78, 0x4e}, {&(0x7f0000005500)=""/75, 0x4b}, {&(0x7f0000005580)=""/92, 0x5c}, {&(0x7f0000005600)=""/204, 0xcc}, {&(0x7f0000005700)=""/212, 0xd4}, {&(0x7f0000005800)=""/8, 0x8}], 0x6}, 0x80}, {{&(0x7f00000058c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005940)=""/247, 0xf7}, {&(0x7f0000005a40)=""/204, 0xcc}, {&(0x7f0000005b40)=""/4096, 0x1000}], 0x3, &(0x7f0000006b80)=""/170, 0xaa}, 0x1}], 0x8, 0x2000, 0x0) ioctl$sock_ifreq(r3, 0x891b, &(0x7f0000006e40)={'pimreg1\x00', @ifru_mtu=0x7cca}) r4 = accept4(r0, 0x0, &(0x7f0000006e80), 0x80000) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000006f80)={&(0x7f0000006ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006f40)={&(0x7f0000006f00)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfaf4, 0x68}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1d55ca93a9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008002}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000007000)={'sit0\x00', &(0x7f0000006fc0)={@empty, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000007040)=0x1, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000007080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007140), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000007180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000007280)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007240)={&(0x7f00000071c0)={0x58, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xf, 0x34, @random="2aff15458dce09d7446536"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4100) syz_genetlink_get_family_id$nl80211(&(0x7f00000072c0), r2) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000007300), &(0x7f0000007340)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000007380)={0x0, 0x401, 0x7, 0xfffffff9}, &(0x7f00000073c0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000007400)={r8, 0x18, "4c0baf2f10be8d1bdd340158607caa24364b5e3cd70b1e3a"}, &(0x7f0000007440)=0x20) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000007ac0)={&(0x7f0000007480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007a80)={&(0x7f00000074c0)={0x59c, r6, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x48, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x508fc32605fa662b}, {0x9}, {0x2, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x6c}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x6c, 0x1}, {0x9}, {0x2}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x47a0, 0x30, 0x3, 0x6, 0x8, 0x7, 0xfff, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xc1f6, 0x3, 0x6f83, 0xfffd, 0x1ff, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x989e, 0x4, 0xfff9, 0x0, 0xf801, 0xc26, 0xac3, 0x800]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2fb0, 0xef0c, 0x2, 0x33e1, 0xfaa, 0x40, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x60, 0x2, 0xb, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9, 0x24, 0x18, 0x6c, 0xb, 0x5]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x0, 0x7, 0xfffd, 0x40, 0x1d, 0x10]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x3}, {0x7}, {0x3, 0x8}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0xe, 0x3, 0xef98, 0xf, 0x8, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa, 0x8, 0x44, 0xfffe, 0x0, 0x4, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3ff, 0x1, 0x4, 0x8, 0xf23f, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_TX_RATES={0x3f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5d9b, 0x800, 0x1, 0xfff, 0xcea, 0x1ff, 0x6, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x7, 0x0, 0x261, 0x5, 0x24, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe2fd, 0x5, 0x5, 0xf4a8, 0x6, 0x9, 0xffff, 0xaa6a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x1, 0x8, 0x7, 0x8, 0xf6, 0x1]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x7, 0x1}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x5, 0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x60, 0x36, 0x305e8baabfee1350, 0x1, 0x1b, 0x30, 0xb, 0x36, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x3e69, 0x7, 0x3, 0x1, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf, 0x9, 0x759, 0x3, 0x9, 0x1000, 0xa76]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0xaf, 0x81, 0x1ff, 0x0, 0x1000, 0x7]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x6, 0x16, 0x24, 0x3, 0x2, 0x1b, 0x2, 0x1, 0xc, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x5}, {0x6}, {0x7, 0x3}, {0x2, 0xa}, {0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x12, 0x4, 0x4, 0x24, 0x6c]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc0, 0xa, 0x4, 0x5, 0x3, 0xff, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0x7, 0x3, 0xef, 0x9, 0x7a0c, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x6c, 0x6, 0x36, 0x1b, 0x6, 0x3, 0x18, 0x24, 0x4, 0x36, 0xb, 0x30, 0xc, 0x0, 0x30, 0x5, 0x1, 0x3, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x200, 0x8000, 0x6, 0x2, 0x7, 0x4e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x48, 0x30, 0x6, 0x2, 0x6f, 0x18, 0x16, 0x60, 0x2, 0xc, 0x18, 0x48, 0x4, 0x2, 0x12, 0x1b, 0x24, 0xb, 0x3, 0x16, 0x36, 0x1b, 0x9, 0x4]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5620, 0x1, 0x8, 0x8000, 0x0, 0x3, 0xfff, 0x2]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x2}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x8}, {0x3, 0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x7}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x4}, {0x1, 0x9}, {0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x4, 0xb, 0x1b, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x40, 0xb, 0x5, 0xb24, 0x4, 0x1000, 0x71]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4243, 0x6, 0x8000, 0xf620, 0x10, 0x8, 0xf6f2, 0x2da]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x60, 0x6c, 0x9, 0xc, 0x2, 0x16, 0x48, 0x6c, 0x18, 0x6, 0x1b, 0x12, 0x6, 0x30, 0xc, 0x18, 0x48, 0x8, 0x48, 0x14, 0x60, 0x14, 0x60, 0xec, 0x3, 0x36, 0x1b]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x5, 0xc, 0x8, 0x14134b8264fdf0d4, 0x36, 0x5, 0x78, 0x18, 0x60, 0x69735e9b9706e08, 0xb, 0xb, 0x24, 0x48, 0x5, 0x6, 0x50c229fdcd039e42, 0x48, 0x1, 0x1b, 0x16, 0x0, 0x37, 0x4, 0x1, 0x16, 0x16, 0x48, 0x60, 0x1e, 0x12]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x8}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x5}, {0x2}, {0x7}, {0x3, 0xa}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x4, 0x9}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfe9e, 0x1ff, 0x3ff, 0xfffb, 0x2, 0x3a97, 0x938]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0xfff, 0x3b, 0xd71, 0xa, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x9}, {0x4}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x4}, {0x5}, {0x1, 0x3}, {0x1}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x8}]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x59c}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r9, &(0x7f0000007c00)={&(0x7f0000007b00), 0xc, &(0x7f0000007bc0)={&(0x7f0000007b40)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:klogd_var_run_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4048040) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000007c40), 0x4) recvmsg(r4, &(0x7f0000007fc0)={&(0x7f0000007c80)=@nfc_llcp, 0x80, &(0x7f0000007f00)=[{&(0x7f0000007d00)=""/187, 0xbb}, {&(0x7f0000007dc0)=""/47, 0x2f}, {&(0x7f0000007e00)=""/21, 0x15}, {&(0x7f0000007e40)=""/143, 0x8f}], 0x4, &(0x7f0000007f40)=""/102, 0x66}, 0x18130) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000080c0)={&(0x7f0000008000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008080)={&(0x7f0000008040)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000000) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bind$inet(r4, &(0x7f0000008100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 411.154489ms ago: executing program 4 (id=8615): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket(0x2a, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @local, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)='.', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdc6, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x1c}}, 0x20000005) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2f, 0x80000000, 0x0, 0x9, 0x12, 0x3, 0x3, 0xfc, 0x2, 0xff, 0x0, 0x9, 0x6, 0xff, 0x0, 0x8005}}) 297.320532ms ago: executing program 7 (id=8616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010100000000000000000700000a0908020073797a31001f671f0999954f92db33e8a7000000050001000700000070949e93cceb361310000880"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 226.695182ms ago: executing program 6 (id=8617): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x200, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2, 0xfffffffd}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xe73}, &(0x7f0000000240)=0x8) r4 = socket(0x9, 0x800, 0x1000) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000280)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0x9, 0x4) bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-aesni,sha384-arm64)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-aesni,sha384-arm64)\x00'}, 0x58) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x3, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xcf2, 0x0, 0x1, 0xeb3f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xcf2, 0x0, 0x1, 0xeb3f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x539, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x27, &(0x7f0000000400)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}, @generic={0x40, 0x2, 0x2, 0x4, 0x7e4ee555}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000540)='syzkaller\x00', 0x1f9fcf2f, 0xc7, &(0x7f0000000580)=""/199, 0x41000, 0x50, '\x00', r8, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r10, r11, r12, r13, 0x1], 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3fb, 0x300, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40c1) (async) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3fb, 0x300, 0x70bd25, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40c1) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x101, '\x00', r8, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d00)={r14, &(0x7f0000000c00)="b3e29f0a3926d3641df79ff7380caccc7b586558c6a752430deb63d3aa1d5b17e25000141e7bb895e2d1640a211ed7c12d925cd4faddba0d44344aca8c5080cbed2db9dae0811da5c509bcc7726f82636b2d57a686c4bbc0791ee87a9fe56a217d6d928e285feb7ecbb9a47070d4abf1025240b7661190f8dcb7c54d72", &(0x7f0000000c80)=""/66, 0x4}, 0x20) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000d40)=[0x4, 0xb2]) r15 = getpid() sendmsg$nl_generic(r5, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000dc0)={0x2b0, 0x23, 0x309, 0x70bd2c, 0x25dfdbfc, {0x13}, [@nested={0x1ac, 0x6, 0x0, 0x1, [@typed={0x65, 0x5f, 0x0, 0x0, @binary="8dbe3430e46ccd64f49ed1103fe8cc212ba6c09d6bd3655d424e32c9784b27c6e9e7137f5ca233dbd93175feadae3af4969d243a2f97216beb2364c582eadcc3ae60e2cf07478bb5a96cb17ac1c9ecddbfc270f8cc951000365f47237075c26e8b"}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=r15}, @typed={0x4, 0x98}, @generic="909bd27b44b6062648eb58d4a95294942204a3863154f371e0c5901b6f65646ec1a0aa8a5191ec201887cf950a52f79fcf623033fd0ab803b067717130e7e4bd92b1dd802b5852ad0f56031a7d887432739090df79acfff30c09231a3631c04ed8cca9aeb1e1bc03f4aa35c227965793db3e58fc57f16df624045638c4734bfb71fd4a68c7d730c01b6d213677f6bdfd6abd2516ae851d181d5b061d98e105e70e5473db07b23d72774f1ee17cb0394c55a1221c", @typed={0x7, 0x29, 0x0, 0x0, @str='!\x94\x00'}, @generic="b3931fd4d0448fb67feb1e9ffe7aacbf9d3f216e991e362144365cfc3b4f9b0216c7f6fde8b94449073730b1", @typed={0x46, 0xd8, 0x0, 0x0, @binary="8dcaa92591802c6bd1ac479860d6fb898b798c8888eb51f0d53cd99f96804e6e0386c02cf75eb0395235127fda92bb144864654bcbb0d59bb86d39b687c0892df8c2"}, @nested={0x4, 0xb4}]}, @nested={0xee, 0x121, 0x0, 0x1, [@generic="f840624863a077b381430888f287e819ba763e76530ed60382e3951f301a69a0380a9e7728d922d26582e10e69df627da262f98ee3ea90bbb4817b4b7a35dd20928c7045e4cdba26b5e65d2619aa3033908d55b5d4e286186d5ca839b1992d11027a1c279041c0ca1343bbdfd4d5cb11380cf867b54a9921b2934ddf3adf713c18f414c139516977c5d486862734eef6c169fd1e67d1fbe9fdd6f6ad641b38185166b5f35a957668a976db3148e6ff5689187f539243fbee34be89065bd1cfc71f9b7ac3e7cf0ec16597aa6499ab7c49dfd4c5c6c84fc0a6a34dafb8023b105dca3c872bcfb69fd0c189"]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r16, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r16, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) 118.22548ms ago: executing program 3 (id=8618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 117.312091ms ago: executing program 7 (id=8619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x1c00) (async) r1 = accept4(r0, 0x0, 0x0, 0x1c00) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x9e, 0xff, 0x41, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x8000, 0x20, 0x5, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x0, 0x9, 0x50, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7, 0x7800, 0x3a, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', r2, 0x1, 0x7800, 0x4, 0x2, {{0x32, 0x4, 0x0, 0x4, 0xc8, 0x265, 0x0, 0x5, 0x0, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x27, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x4, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @local]}, @rr={0x7, 0x7, 0x4, [@multicast2]}, @lsrr={0x83, 0xb, 0xd, [@empty, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x7, 0x3a, [@multicast1]}, @cipso={0x86, 0x5f, 0x1, [{0x7, 0x7, "7316ac8a79"}, {0xa, 0xc, "63f8e3ced2ed344782e9"}, {0x2, 0xf, "7bd9ab83c45f475fda81486c13"}, {0x6, 0xa, "cb344cc0f88c5162"}, {0x6, 0x9, "55b11aac0bf8bd"}, {0x7, 0x10, "0422542e0afeba53d6ed28b79425"}, {0x5, 0x4, "8973"}, {0x7, 0x6, "f613b792"}, {0x6, 0x3, "18"}, {0x0, 0x7, "ef71aae2f1"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x9, [{@multicast2, 0x7}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x700, 0x700, 0x7f, 0xa84f, {{0xa, 0x4, 0x2, 0x4, 0x28, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000008c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000900)=0xc) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r12], 0x18}}, 0x4090) (async) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r12], 0x18}}, 0x4090) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000ec0)={'gre0\x00', 0x0, 0x80, 0x20, 0x5, 0x2, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x68, 0x0, 0xb, 0x29, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0x1f, 0x16, [@remote, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x80}, @remote, @broadcast, @local]}, @generic={0x88, 0xe, "d0a708510442557f7ebe86fb"}, @lsrr={0x83, 0x2b, 0xa1, [@local, @empty, @local, @rand_addr=0x64010102, @local, @broadcast, @broadcast, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000a00)={@rand_addr, 0x0}, &(0x7f0000000a40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r18, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x1, 0x1, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x67, 0x0, 0xfe, 0x4, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x1c, 0xfd, 0x0, 0x0, [0x6, 0x6, 0x6, 0x4, 0x2, 0x0]}, @timestamp={0x44, 0x18, 0x8c, 0x0, 0xc, [0x7c380, 0x0, 0x0, 0x7, 0x7]}, @rr={0x7, 0x1f, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @private=0xa010100, @empty, @broadcast, @remote]}, @ra={0x94, 0x4}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x1, 0x1, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x67, 0x0, 0xfe, 0x4, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x1c, 0xfd, 0x0, 0x0, [0x6, 0x6, 0x6, 0x4, 0x2, 0x0]}, @timestamp={0x44, 0x18, 0x8c, 0x0, 0xc, [0x7c380, 0x0, 0x0, 0x7, 0x7]}, @rr={0x7, 0x1f, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @private=0xa010100, @empty, @broadcast, @remote]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'rose0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000f80)={0x178, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000f80)={0x178, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) 46.648316ms ago: executing program 6 (id=8620): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xadde, @private1}, 0x1c) (async) shutdown(r0, 0x1) 0s ago: executing program 3 (id=8621): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ctive one [ 470.461552][T29914] bridge2: entered promiscuous mode [ 470.467570][T29914] bridge2: entered allmulticast mode [ 470.476872][T29914] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 470.728980][T29960] syzkaller0: entered promiscuous mode [ 470.748692][T29960] syzkaller0: entered allmulticast mode [ 470.933085][T29981] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 470.943224][T29982] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 471.062464][T29986] ipt_REJECT: ECHOREPLY no longer supported. [ 471.347493][T30003] veth1_macvtap: left promiscuous mode [ 472.065023][T30065] syzkaller0: entered promiscuous mode [ 472.095603][T30067] netlink: 'syz.0.6667': attribute type 21 has an invalid length. [ 472.120441][T30065] syzkaller0: entered allmulticast mode [ 472.883218][T30109] netlink: 'syz.3.6677': attribute type 1 has an invalid length. [ 473.012532][T30121] x_tables: duplicate underflow at hook 1 [ 473.025076][T30113] syzkaller1: entered promiscuous mode [ 473.048899][T30113] syzkaller1: entered allmulticast mode [ 473.368113][T30138] netlink: 'syz.5.6686': attribute type 1 has an invalid length. [ 473.406753][T30138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.524661][T30153] netlink: 'syz.5.6690': attribute type 83 has an invalid length. [ 473.709699][T30162] netlink: 'syz.2.6692': attribute type 1 has an invalid length. [ 473.844232][T30171] tipc: Enabling of bearer rejected, failed to enable media [ 474.018754][T30178] bond4: Removing last ns target with arp_interval on [ 474.059879][T30181] bond0: (slave bond_slave_0): Releasing backup interface [ 474.375737][T30192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.400849][T30192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.561142][T30192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.598719][T30192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.672818][ T29] audit: type=1804 audit(1781828124.301:17): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6713" name="/newroot/151/cgroup.controllers" dev="tmpfs" ino=788 res=1 errno=0 [ 474.674431][T30223] __nla_validate_parse: 28 callbacks suppressed [ 474.674448][T30223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6714'. [ 474.733398][ T29] audit: type=1800 audit(1781828124.301:18): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6713" name="cgroup.controllers" dev="tmpfs" ino=788 res=0 errno=0 [ 474.795878][T30192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.822584][T30192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.964031][T30192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.969838][T30238] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6718'. [ 474.990135][T30192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.019036][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6720'. [ 475.063024][T30243] syzkaller0: entered promiscuous mode [ 475.068645][T30243] syzkaller0: entered allmulticast mode [ 475.129802][T30252] siw: device registration error -23 [ 475.152751][ T7473] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.165513][ T7473] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.216127][ T5900] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.228037][ T979] block nbd5: Connection timed out, retrying (0/2 alive) [ 475.236392][ T979] block nbd5: Connection timed out, retrying (0/2 alive) [ 475.244443][ T979] block nbd5: Connection timed out, retrying (0/2 alive) [ 475.249404][ T5900] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.252282][ T979] block nbd5: Connection timed out, retrying (0/2 alive) [ 475.266255][T30260] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6725'. [ 475.267952][ T979] block nbd5: Dead connection, failed to find a fallback [ 475.277712][T30259] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6725'. [ 475.294226][ T979] block nbd5: shutting down sockets [ 475.294248][ T979] blk_print_req_error: 138 callbacks suppressed [ 475.294260][ T979] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.294319][ T979] buffer_io_error: 138 callbacks suppressed [ 475.294403][ T979] Buffer I/O error on dev nbd5, logical block 3, async page read [ 475.294429][ T979] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.294483][ T979] Buffer I/O error on dev nbd5, logical block 2, async page read [ 475.294500][ T979] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.294543][ T979] Buffer I/O error on dev nbd5, logical block 1, async page read [ 475.294559][ T979] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.294602][ T979] Buffer I/O error on dev nbd5, logical block 0, async page read [ 475.295071][T15603] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.295139][T15603] Buffer I/O error on dev nbd5, logical block 0, async page read [ 475.295181][T15603] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.295241][T15603] Buffer I/O error on dev nbd5, logical block 1, async page read [ 475.295279][T15603] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.295362][T15603] Buffer I/O error on dev nbd5, logical block 2, async page read [ 475.295402][T15603] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.295502][T15603] Buffer I/O error on dev nbd5, logical block 3, async page read [ 475.295550][T15603] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.295632][T15603] Buffer I/O error on dev nbd5, logical block 0, async page read [ 475.295671][T15603] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.295729][T15603] Buffer I/O error on dev nbd5, logical block 1, async page read [ 475.297459][T15603] ldm_validate_partition_table(): Disk read failed. [ 475.308137][T15603] Dev nbd5: unable to read RDB block 0 [ 475.314971][T15603] nbd5: unable to read partition table [ 475.539038][T15603] ldm_validate_partition_table(): Disk read failed. [ 475.548432][ T5900] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.548447][T15603] Dev nbd5: unable to read RDB block 0 [ 475.575333][T15603] nbd5: unable to read partition table [ 475.605133][ T5900] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.652994][T30275] openvswitch: netlink: IP tunnel dst address not specified [ 475.676321][ T7447] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.696530][ T7447] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.727827][T30280] netlink: 'syz.5.6731': attribute type 1 has an invalid length. [ 475.839886][T30280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.879048][T30289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6732'. [ 475.921442][T30291] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 475.970974][T30277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6730'. [ 476.043741][T30281] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6730'. [ 476.089463][T30281] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6730'. [ 476.128257][T30309] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6734'. [ 476.218908][T30310] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 476.425375][T30324] netlink: 'syz.5.6740': attribute type 17 has an invalid length. [ 476.448119][T30324] gretap0: entered promiscuous mode [ 476.459113][T30324] gretap0: left promiscuous mode [ 477.308369][T30376] netlink: 'syz.5.6755': attribute type 1 has an invalid length. [ 477.534479][T30402] netlink: 'syz.3.6762': attribute type 9 has an invalid length. [ 478.426083][T30479] netlink: 'syz.3.6786': attribute type 1 has an invalid length. [ 478.474899][T30479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.490487][T30479] netlink: 'syz.3.6786': attribute type 6 has an invalid length. [ 478.787222][T30504] syzkaller0: entered promiscuous mode [ 478.799460][T30504] syzkaller0: entered allmulticast mode [ 479.358975][T30551] netlink: zone id is out of range [ 479.384422][T30551] netlink: zone id is out of range [ 479.401005][T30551] netlink: zone id is out of range [ 479.414755][T30551] netlink: zone id is out of range [ 479.434580][T30551] netlink: zone id is out of range [ 479.453400][T30551] netlink: zone id is out of range [ 479.459848][T30551] netlink: zone id is out of range [ 479.486558][T30551] netlink: zone id is out of range [ 479.504902][T30551] netlink: zone id is out of range [ 479.583353][T30554] tipc: Enabling of bearer rejected, failed to enable media [ 479.594953][T30564] netlink: 'syz.0.6809': attribute type 29 has an invalid length. [ 479.757887][T30571] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 480.178451][T30608] __nla_validate_parse: 17 callbacks suppressed [ 480.178475][T30608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6827'. [ 480.210210][T30608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6827'. [ 480.246743][T30610] netlink: 'syz.0.6828': attribute type 29 has an invalid length. [ 480.375532][T30617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6832'. [ 480.439099][T30621] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 480.457841][T30621] netlink: 'syz.0.6834': attribute type 1 has an invalid length. [ 480.558862][T30626] xfrm1: entered allmulticast mode [ 480.574920][T30629] vlan1: entered allmulticast mode [ 480.581581][T30629] veth0_vlan: entered allmulticast mode [ 480.657494][T30634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6837'. [ 480.710926][T30636] syzkaller0: entered promiscuous mode [ 480.729569][T30636] syzkaller0: entered allmulticast mode [ 480.746610][T30636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6839'. [ 480.759816][T30636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6839'. [ 480.978602][T30655] validate_nla: 1 callbacks suppressed [ 480.978623][T30655] netlink: 'syz.5.6845': attribute type 1 has an invalid length. [ 481.054523][T30661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6845'. [ 481.062972][T30655] bond6: entered promiscuous mode [ 481.069874][T30655] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.081092][T30661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6845'. [ 481.151679][T30655] bond6: (slave bridge3): making interface the new active one [ 481.161120][T30655] bridge3: entered promiscuous mode [ 481.169627][T30655] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 481.203625][T30672] syzkaller0: entered promiscuous mode [ 481.217312][T30672] syzkaller0: entered allmulticast mode [ 481.345318][T30680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6852'. [ 481.361413][T30680] net_ratelimit: 51 callbacks suppressed [ 481.361431][T30680] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 481.401747][T30682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.496371][T30691] openvswitch: netlink: Key type 218 is out of range max 32 [ 481.632294][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6861'. [ 481.828361][T30712] syzkaller0: entered promiscuous mode [ 481.845298][T30712] syzkaller0: entered allmulticast mode [ 481.918672][T30711] veth3: entered allmulticast mode [ 481.934101][T30711] bond7: (slave veth3): Enslaving as an active interface with an up link [ 481.977589][T30727] ipt_REJECT: TCP_RESET invalid for non-tcp [ 482.008693][T30727] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 482.422370][ T5623] Bluetooth: hci3: command 0x0405 tx timeout [ 482.724585][ T29] audit: type=1800 audit(1781828132.351:19): pid=30781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6883" name="memory.events" dev="tmpfs" ino=825 res=0 errno=0 [ 483.095674][T30798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.116803][T30798] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.125096][T30798] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.146471][T30798] bond5: (slave bridge_slave_0): Enslaving as an active interface with an up link [ 483.414377][T30818] ip6tnl1: entered promiscuous mode [ 483.432796][T30818] xt_socket: unknown flags 0x8 [ 483.481371][T30821] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 484.114751][T30836] syzkaller0: entered promiscuous mode [ 484.130474][T30836] syzkaller0: entered allmulticast mode [ 484.708803][T30877] netlink: 'syz.4.6914': attribute type 1 has an invalid length. [ 484.845398][T30887] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 485.008089][T30904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.069428][T30904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.097820][T30903] tipc: Enabled bearer , priority 10 [ 485.163264][T30915] 8021q: VLANs not supported on ip6_vti0 [ 485.248193][T30922] netlink: 'syz.5.6926': attribute type 1 has an invalid length. [ 485.327227][T30924] __nla_validate_parse: 19 callbacks suppressed [ 485.327262][T30924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6928'. [ 485.336921][T30930] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20004 [ 485.369437][T30924] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6928'. [ 485.392876][T30930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6931'. [ 485.394340][T30924] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 485.577492][T30943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6934'. [ 485.683052][T30953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6937'. [ 485.707982][T30953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6937'. [ 485.767608][T30952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6937'. [ 485.794150][T30952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6937'. [ 486.055601][T30988] tipc: Started in network mode [ 486.074715][T30988] tipc: Node identity ac14140f, cluster identity 4711 [ 486.091308][T30988] tipc: New replicast peer: 255.255.255.255 [ 486.098776][T30988] tipc: Enabled bearer , priority 10 [ 486.133789][T30992] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6944'. [ 486.212367][ T9972] tipc: Node number set to 3617001667 [ 486.397488][T31000] netlink: 'syz.0.6946': attribute type 5 has an invalid length. [ 486.566785][T31016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6951'. [ 487.012878][T31047] netlink: 'syz.5.6961': attribute type 11 has an invalid length. [ 487.184163][T31055] sctp: [Deprecated]: syz.5.6964 (pid 31055) Use of int in max_burst socket option. [ 487.184163][T31055] Use struct sctp_assoc_value instead [ 487.211794][ T9972] tipc: Node number set to 2886997007 [ 487.255987][T31008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.347121][T31017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.587796][T31076] pim6reg1: entered promiscuous mode [ 487.594542][T31076] pim6reg1: entered allmulticast mode [ 487.633824][T31080] netlink: 'syz.5.6971': attribute type 2 has an invalid length. [ 488.357939][T31129] netlink: 'syz.5.6982': attribute type 21 has an invalid length. [ 488.738574][T31157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.746789][T31157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.781374][T31157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.845799][T31157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.479485][T31189] netlink: 'syz.0.6998': attribute type 1 has an invalid length. [ 489.482576][T31187] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.537768][T31187] bridge_slave_0 (unregistering): left allmulticast mode [ 489.546813][T31187] bridge_slave_0 (unregistering): left promiscuous mode [ 489.557079][T31187] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.634199][T31206] netlink: 'syz.0.6998': attribute type 83 has an invalid length. [ 489.685605][T31189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.745103][T31200] bond6: (slave gretap1): making interface the new active one [ 489.762782][T31200] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 489.774713][T31202] syzkaller1: entered promiscuous mode [ 489.781075][T31202] syzkaller1: entered allmulticast mode [ 489.795198][T31216] gre0: entered promiscuous mode [ 489.805806][T31216] gre0: entered allmulticast mode [ 490.438460][T31260] __nla_validate_parse: 12 callbacks suppressed [ 490.438482][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7016'. [ 490.455623][T31259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7015'. [ 490.478542][T31259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7015'. [ 490.561345][T31266] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 490.748905][T31278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.983709][T31313] xt_time: unknown flags 0xf4 [ 491.071821][T31319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7034'. [ 491.175838][T31327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7035'. [ 491.424266][T31346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7041'. [ 491.436060][T31348] netlink: 'syz.3.7042': attribute type 1 has an invalid length. [ 491.445025][T31348] netlink: 'syz.3.7042': attribute type 7 has an invalid length. [ 491.453925][T31348] netlink: 'syz.3.7042': attribute type 8 has an invalid length. [ 491.465059][T31348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7042'. [ 491.806488][T31376] netlink: 'syz.0.7049': attribute type 83 has an invalid length. [ 491.826117][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7050'. [ 492.138382][T31398] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7055'. [ 492.295062][T31408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7057'. [ 492.640353][T31422] IPv6: NLM_F_CREATE should be specified when creating new route [ 492.702712][T31426] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 492.734035][T31428] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 493.113366][T31459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.130643][T31462] netlink: 'syz.5.7073': attribute type 1 has an invalid length. [ 493.222504][T31462] bond8: entered promiscuous mode [ 493.235955][T31462] 8021q: adding VLAN 0 to HW filter on device bond8 [ 493.615594][T31503] team_slave_1: entered promiscuous mode [ 493.654530][T31503] team0: Port device team_slave_1 removed [ 493.707571][T31510] nbd: illegal input index 2958377 [ 493.713742][T31513] erspan0: entered promiscuous mode [ 493.911260][T31527] can: request_module (can-proto-0) failed. [ 494.074858][T31538] ip6gre1: entered allmulticast mode [ 494.276221][T31560] ip6t_srh: unknown srh invflags 4000 [ 494.675912][T31591] netlink: 'syz.0.7110': attribute type 21 has an invalid length. [ 494.685673][T31591] netlink: 'syz.0.7110': attribute type 6 has an invalid length. [ 494.717231][T31595] netlink: 'syz.5.7112': attribute type 1 has an invalid length. [ 494.725341][T31596] netlink: 'syz.5.7112': attribute type 1 has an invalid length. [ 494.755650][T31599] netlink: 'syz.3.7113': attribute type 1 has an invalid length. [ 494.838924][T31599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.969478][T31607] bond3: (slave geneve2): making interface the new active one [ 494.995151][T31607] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 495.013430][ T7447] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.039661][ T7447] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.073071][ T51] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.113323][ T51] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.379381][T31647] x_tables: duplicate underflow at hook 3 [ 495.534947][T31661] IPVS: set_ctl: invalid protocol: 9 32.32.32.32:8224 [ 495.686602][T31673] siw: device registration error -23 [ 495.706748][T31677] __nla_validate_parse: 18 callbacks suppressed [ 495.706781][T31677] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7138'. [ 495.744614][T31679] syzkaller0: entered promiscuous mode [ 495.754457][T31679] syzkaller0: entered allmulticast mode [ 495.769183][T31679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7139'. [ 495.775573][T31682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7140'. [ 495.816346][T31683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7138'. [ 495.859279][T31684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7140'. [ 495.886124][T31686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.523577][T31697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7144'. [ 496.618920][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7146'. [ 496.736975][T31709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7148'. [ 496.909344][T31724] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7151'. [ 497.329702][T31756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7160'. [ 497.477271][T31767] openvswitch: netlink: Key type 53 is out of range max 32 [ 497.498696][T31767] openvswitch: netlink: Key type 53 is out of range max 32 [ 497.599139][T31777] bridge_slave_0: left promiscuous mode [ 497.664793][T31777] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 497.674232][T31777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.683143][T31784] x_tables: duplicate underflow at hook 1 [ 497.692501][T31785] x_tables: duplicate underflow at hook 1 [ 497.714917][T31777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.727471][T31777] geneve3: left promiscuous mode [ 497.743900][T31777] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 497.773583][T31781] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 497.776412][T31791] validate_nla: 4 callbacks suppressed [ 497.776430][T31791] netlink: 'syz.0.7170': attribute type 24 has an invalid length. [ 497.801606][T31781] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 497.812191][T31781] gretap1: entered promiscuous mode [ 497.827986][T31781] gretap1: entered allmulticast mode [ 497.840939][T31794] netlink: 'syz.3.7171': attribute type 1 has an invalid length. [ 497.972424][T31798] syzkaller0: entered promiscuous mode [ 497.993496][T31798] syzkaller0: entered allmulticast mode [ 498.355682][T31822] veth0: entered promiscuous mode [ 498.386999][T31831] netlink: 'syz.4.7184': attribute type 4 has an invalid length. [ 498.393885][T31829] batadv_slave_1: entered promiscuous mode [ 498.401216][T31831] IPVS: length: 8 != 1152 [ 498.424217][T31820] batadv_slave_1: left promiscuous mode [ 498.439351][T31831] netlink: 'syz.4.7184': attribute type 10 has an invalid length. [ 498.452696][T31836] netlink: 'syz.3.7185': attribute type 4 has an invalid length. [ 498.452702][T31820] veth0: left promiscuous mode [ 498.467995][T31831] team0: Port device dummy0 added [ 498.496479][T31836] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 498.523718][T31841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.542841][T31834] syzkaller1: entered promiscuous mode [ 498.552817][T31834] syzkaller1: entered allmulticast mode [ 498.784440][T31862] netlink: 'syz.0.7192': attribute type 10 has an invalid length. [ 498.853137][T31862] team0: Port device dummy0 added [ 500.239283][T31940] siw: device registration error -23 [ 500.257707][T31942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.291258][T31946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.471585][T31958] openvswitch: netlink: IP tunnel dst address not specified [ 500.527338][T31942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.826338][T31980] netlink: 'syz.4.7231': attribute type 1 has an invalid length. [ 500.858363][T31980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 500.881533][T31980] bond6: (slave geneve5): making interface the new active one [ 500.891240][T31980] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 500.903910][ T7473] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 500.957392][ T7473] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.004487][T31994] sctp: [Deprecated]: syz.3.7235 (pid 31994) Use of int in maxseg socket option. [ 501.004487][T31994] Use struct sctp_assoc_value instead [ 501.022362][ T7473] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.050940][ T7473] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.076670][ T29] audit: type=1804 audit(1781828150.701:20): pid=31998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7234" name="/newroot/227/cgroup.controllers" dev="tmpfs" ino=1176 res=1 errno=0 [ 501.153307][ T29] audit: type=1800 audit(1781828150.701:21): pid=31998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7234" name="cgroup.controllers" dev="tmpfs" ino=1176 res=0 errno=0 [ 501.235685][T32009] __nla_validate_parse: 11 callbacks suppressed [ 501.235710][T32009] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.7238'. [ 501.439039][T32023] x_tables: duplicate underflow at hook 4 [ 501.443445][T32019] bond9 (unregistering): Released all slaves [ 501.469390][ T1327] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.500872][T32027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7242'. [ 501.621586][T32027] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7242'. [ 501.645488][T32027] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7242'. [ 501.685141][T32040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7242'. [ 501.873577][T32047] syzkaller0: entered promiscuous mode [ 501.880150][T32047] syzkaller0: entered allmulticast mode [ 501.920469][T32047] gre1: entered promiscuous mode [ 501.933677][T32047] gre1: entered allmulticast mode [ 501.939017][T32056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7251'. [ 501.950551][T32056] netlink: 'syz.5.7251': attribute type 3 has an invalid length. [ 502.334703][T32071] tipc: Enabling of bearer rejected, failed to enable media [ 502.507701][T32085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7256'. [ 502.586512][T32087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7258'. [ 502.856321][T32100] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.7263'. [ 502.943930][T32111] syzkaller1: entered promiscuous mode [ 502.950694][T32111] syzkaller1: entered allmulticast mode [ 502.992511][T32113] netlink: 'syz.3.7265': attribute type 8 has an invalid length. [ 503.002837][T32113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7265'. [ 503.015029][T32113] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.022986][T32113] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.052938][T32113] netlink: 'syz.3.7265': attribute type 1 has an invalid length. [ 503.104867][T32116] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 503.118143][T32116] bond5 (unregistering): Released all slaves [ 503.659595][T32142] syzkaller1: entered promiscuous mode [ 503.666698][T32142] syzkaller1: entered allmulticast mode [ 503.926066][T32144] netlink: 'syz.5.7273': attribute type 1 has an invalid length. [ 505.410820][T32075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.584402][T32156] netlink: 'syz.0.7274': attribute type 7 has an invalid length. [ 505.599536][T32161] bridge0: port 3(syz_tun) entered blocking state [ 505.607977][T32161] bridge0: port 3(syz_tun) entered disabled state [ 505.616232][T32161] syz_tun: entered allmulticast mode [ 505.623702][T32161] syz_tun: entered promiscuous mode [ 505.629560][T32161] bridge0: port 3(syz_tun) entered blocking state [ 505.636222][T32161] bridge0: port 3(syz_tun) entered forwarding state [ 505.667791][T32156] netlink: 'syz.0.7274': attribute type 7 has an invalid length. [ 505.702854][ T5900] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.734317][ T5900] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.759451][ T5900] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.809206][ T5900] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.850925][T32166] tipc: Enabled bearer , priority 0 [ 505.880809][T32166] syzkaller0: entered promiscuous mode [ 505.907907][T32166] syzkaller0: entered allmulticast mode [ 505.964496][T32173] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 506.044974][T32166] tipc: Resetting bearer [ 506.081856][T32165] tipc: Resetting bearer [ 506.099245][T32199] netlink: 'syz.3.7288': attribute type 10 has an invalid length. [ 506.113471][T32165] tipc: Disabling bearer [ 506.197711][T32199] team0: Port device dummy0 added [ 506.321093][T32208] syzkaller0: entered promiscuous mode [ 506.336386][T32208] syzkaller0: entered allmulticast mode [ 506.354753][T32218] netlink: 'syz.3.7294': attribute type 4 has an invalid length. [ 506.367422][T32215] __nla_validate_parse: 7 callbacks suppressed [ 506.367455][T32215] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7293'. [ 506.392391][T32215] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7293'. [ 506.580904][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.671297][T32235] netlink: 1248 bytes leftover after parsing attributes in process `syz.2.7300'. [ 506.815281][T32244] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7303'. [ 506.920197][T32256] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7306'. [ 507.063436][T32263] netlink: 380 bytes leftover after parsing attributes in process `syz.4.7308'. [ 507.095473][T32265] netlink: 'syz.5.7311': attribute type 8 has an invalid length. [ 507.111668][T32265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7311'. [ 507.139763][T32265] bridge0: port 3(syz_tun) entered disabled state [ 507.150654][T32265] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.158471][T32265] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.434911][T32284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7312'. [ 507.475045][T32284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7312'. [ 507.486126][T32284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7312'. [ 507.519178][T32297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.534825][T32291] netlink: 'syz.0.7317': attribute type 21 has an invalid length. [ 507.539165][T32297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 507.552333][T32291] netlink: 'syz.0.7317': attribute type 22 has an invalid length. [ 507.558175][T32297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 507.635966][T32297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.645117][T32301] Cannot find set identified by id 65534 to match [ 507.652849][T32297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 507.652893][T32297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 507.714767][ T29] audit: type=1107 audit(1781828157.341:22): pid=32305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='״s{Sys|w^=0KF">*PvFmEK%JiPw"hiq [ 507.714767][ T29] $go7ԇߖϥ [ 507.714767][ T29] O=5~ԅȵgʹ&y]^ [ 507.714767][ T29] q.l{ljOZ@͎o#E [ 507.714767][ T29] ӠB">7y O+:,an\3ߓI' [ 507.773793][T32297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.789861][T32297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 507.804213][T32297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 507.868040][T32313] vlan2: entered promiscuous mode [ 507.882004][T32313] geneve1: entered promiscuous mode [ 507.887976][T32313] vlan2: entered allmulticast mode [ 507.893517][T32313] geneve1: entered allmulticast mode [ 507.935205][T32297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.948178][T32297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 507.959171][T32297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 508.028133][T32331] validate_nla: 3 callbacks suppressed [ 508.028146][T32331] netlink: 'syz.0.7326': attribute type 10 has an invalid length. [ 508.096539][ T5904] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.108855][ T5904] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 39490 - 0 [ 508.121627][ T5904] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 508.144501][ T7468] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.161609][ T7468] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 39490 - 0 [ 508.186685][ T7468] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 508.211819][T32336] netlink: 'syz.2.7329': attribute type 11 has an invalid length. [ 508.224645][ T5900] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.235675][ T5900] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 39490 - 0 [ 508.245036][ T5900] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 508.275152][ T5900] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 508.288839][ T5900] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 39490 - 0 [ 508.308628][ T5900] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 508.319385][T32341] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20003 [ 508.468275][T32355] netlink: 'syz.5.7334': attribute type 1 has an invalid length. [ 508.483153][T32355] netlink: 'syz.5.7334': attribute type 1 has an invalid length. [ 508.513680][T32355] netlink: 'syz.5.7334': attribute type 1 has an invalid length. [ 508.535410][T32355] netlink: 'syz.5.7334': attribute type 1 has an invalid length. [ 508.687650][T32375] xt_l2tp: unknown flags: 10 [ 508.690502][T32368] syzkaller0: entered promiscuous mode [ 508.704268][T32368] syzkaller0: entered allmulticast mode [ 509.237043][T32425] xt_hashlimit: size too large, truncated to 1048576 [ 509.312013][T32427] macsec1: entered promiscuous mode [ 509.318888][T32427] bridge2: port 1(macsec1) entered blocking state [ 509.325601][T32427] bridge2: port 1(macsec1) entered disabled state [ 509.333360][T32427] macsec1: entered allmulticast mode [ 509.338927][T32427] veth1_macvtap: entered allmulticast mode [ 509.346803][T32427] bridge2: port 1(macsec1) entered blocking state [ 509.353334][T32427] bridge2: port 1(macsec1) entered forwarding state [ 509.434609][T32434] syzkaller0: entered promiscuous mode [ 509.440126][T32434] syzkaller0: entered allmulticast mode [ 509.526618][T32439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.029850][T32473] netlink: 'syz.3.7367': attribute type 2 has an invalid length. [ 510.056958][T32438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.068030][T32473] netlink: 'syz.3.7367': attribute type 11 has an invalid length. [ 510.308062][T32497] syzkaller0: entered promiscuous mode [ 510.314326][T32497] syzkaller0: entered allmulticast mode [ 510.407587][T32504] syzkaller0: entered promiscuous mode [ 510.413370][T32504] syzkaller0: entered allmulticast mode [ 511.103643][T32555] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.114111][T32555] netlink: 'syz.2.7382': attribute type 21 has an invalid length. [ 514.306068][T32568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.496015][T32722] __nla_validate_parse: 17 callbacks suppressed [ 514.496034][T32722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7398'. [ 514.519940][T32722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7398'. [ 514.670805][T32733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7400'. [ 514.733033][T32739] netlink: 'syz.3.7401': attribute type 1 has an invalid length. [ 514.836401][T32747] netlink: 'syz.5.7403': attribute type 24 has an invalid length. [ 514.848173][T32746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7404'. [ 514.856245][T32747] netlink: 'syz.5.7403': attribute type 1 has an invalid length. [ 514.872382][T32739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.893312][T32747] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7403'. [ 514.903359][T32748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7401'. [ 514.922676][T32735] bond5: (slave ip6gretap1): making interface the new active one [ 514.932207][T32735] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 514.943678][T32746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7404'. [ 515.036549][T32756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.071647][T32759] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.7408'. [ 515.176422][ T301] netlink: 'syz.4.7414': attribute type 2 has an invalid length. [ 515.179554][ T303] vcan1: entered promiscuous mode [ 515.190854][ T303] vcan1: entered allmulticast mode [ 515.214128][ T300] vcan1: entered promiscuous mode [ 515.225492][ T300] vcan1: entered allmulticast mode [ 515.420921][ T317] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7415'. [ 515.460385][ T317] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7415'. [ 515.599546][ T336] bond7: entered promiscuous mode [ 515.608317][ T336] bond7: entered allmulticast mode [ 515.697705][ T343] bond5: (slave bridge_slave_0): Releasing backup interface [ 515.838061][ T356] sctp: [Deprecated]: syz.0.7430 (pid 356) Use of int in maxseg socket option. [ 515.838061][ T356] Use struct sctp_assoc_value instead [ 516.029622][ T371] netlink: 'syz.4.7437': attribute type 1 has an invalid length. [ 516.072083][ T371] 8021q: adding VLAN 0 to HW filter on device bond7 [ 516.121756][ T371] bond7: (slave gretap3): making interface the new active one [ 516.141466][ T371] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 516.184695][ T379] Dead loop on virtual device ip6_vti0 (net 320), fix it urgently! [ 516.413035][ T395] netlink: 'syz.4.7447': attribute type 1 has an invalid length. [ 516.488529][ T395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 516.636403][ T423] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 516.647983][ T423] bond9 (unregistering): Released all slaves [ 517.285092][ T469] sctp: [Deprecated]: syz.3.7471 (pid 469) Use of int in maxseg socket option. [ 517.285092][ T469] Use struct sctp_assoc_value instead [ 517.445366][ T3388] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.458980][ T3388] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.479381][ T3388] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.502483][ T3388] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.553962][ T489] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 518.116474][ T512] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.133681][ T512] bond11: (slave lo): Enslaving as an active interface with an up link [ 518.143570][ T512] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 518.219899][ T516] tipc: Enabling of bearer rejected, already enabled [ 518.450727][ T536] xfrm0 speed is unknown, defaulting to 1000 [ 518.541285][ T536] lo speed is unknown, defaulting to 1000 [ 518.660415][ T548] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 518.707533][ T558] vlan3: entered allmulticast mode [ 519.238104][ T602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.245542][ T602] IPv6: NLM_F_CREATE should be set when creating new route [ 519.252938][ T602] IPv6: NLM_F_CREATE should be set when creating new route [ 519.279425][ T606] netlink: 'syz.3.7498': attribute type 30 has an invalid length. [ 519.369204][ T616] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 519.408133][ T616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.046844][ T649] syzkaller0: entered promiscuous mode [ 520.054497][ T649] syzkaller0: entered allmulticast mode [ 520.194772][ T653] __nla_validate_parse: 15 callbacks suppressed [ 520.194788][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7516'. [ 520.283457][ T657] netlink: 'syz.5.7518': attribute type 39 has an invalid length. [ 520.423994][ T663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7520'. [ 520.505058][ T669] syz_tun: entered allmulticast mode [ 520.524834][ T673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.535619][ T673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.547012][ T673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.661224][ T592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.670627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.714262][ T673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.734903][ T673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.746523][ T673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.832337][ T696] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7534'. [ 521.000543][ T711] netlink: set zone limit has 4 unknown bytes [ 521.143602][ T673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.154067][ T673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.164355][ T673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 521.247057][ T673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.258382][ T673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.269015][ T673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 521.463569][ T592] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.472114][ T592] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 521.481884][ T592] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.494228][ T595] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.502780][ T595] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 521.512900][ T595] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.526927][ T595] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.535882][ T595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 521.563830][ T595] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.577364][ T595] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.588338][ T595] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 521.597862][ T595] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 523.635527][ T682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.744233][ T722] team0: No ports can be present during mode change [ 523.862877][ T738] syzkaller0: entered promiscuous mode [ 523.868564][ T738] syzkaller0: entered allmulticast mode [ 523.877242][ T738] tipc: Enabled bearer , priority 0 [ 523.885689][ T737] tipc: Resetting bearer [ 523.894066][ T737] tipc: Disabling bearer [ 524.809275][ T759] ipt_REJECT: TCP_RESET invalid for non-tcp [ 524.852416][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7562'. [ 524.862082][ T764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.869730][ T764] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7562'. [ 525.056425][ T776] 8021q: adding VLAN 0 to HW filter on device bond8 [ 525.063951][ T776] bridge0: port 3(bond8) entered blocking state [ 525.070367][ T776] bridge0: port 3(bond8) entered disabled state [ 525.077538][ T776] bond8: entered allmulticast mode [ 525.084057][ T776] bond8: entered promiscuous mode [ 525.089483][ T776] bridge0: port 3(bond8) entered blocking state [ 525.095776][ T776] bridge0: port 3(bond8) entered forwarding state [ 525.225704][ T785] team_slave_1: left promiscuous mode [ 525.233154][ T785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.244551][ T785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.304810][ T785] vlan1: left allmulticast mode [ 525.310318][ T785] veth0_vlan: left allmulticast mode [ 525.325543][ T785] macvlan0: left promiscuous mode [ 525.345427][ T785] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 525.357720][ T785] ip6gre1: left allmulticast mode [ 525.399562][ T785] bond6: left promiscuous mode [ 525.405093][ T785] bridge3: left promiscuous mode [ 525.415133][ T785] veth3: left allmulticast mode [ 525.422595][ T785] ip6tnl1: left promiscuous mode [ 525.429369][ T785] bond8: left promiscuous mode [ 525.463977][ T592] bridge0: port 3(bond8) entered disabled state [ 525.472043][ T791] sit0: entered promiscuous mode [ 525.494721][ T791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7571'. [ 525.509492][ T594] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.522761][ T594] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 525.543614][ T594] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.554129][ T594] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 525.564260][ T594] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.574608][ T594] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 525.577952][ T801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7572'. [ 525.599210][ T594] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.609766][ T594] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 525.905412][ T818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7579'. [ 525.915141][ T818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7579'. [ 525.925717][ T818] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7579'. [ 525.936108][ T818] netlink: 'syz.5.7579': attribute type 12 has an invalid length. [ 526.044445][ T822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7581'. [ 526.055434][ T822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7581'. [ 526.233153][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.241330][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.249191][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.258122][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.266219][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.398101][ T841] bond12: (slave gre0): Device is not bonding slave [ 526.412483][ T841] bond12: option active_slave: invalid value (gre0) [ 526.424204][ T841] bond12 (unregistering): Released all slaves [ 526.635689][ T836] xfrm0 speed is unknown, defaulting to 1000 [ 526.646019][ T855] netlink: 'syz.0.7587': attribute type 1 has an invalid length. [ 526.672063][ T855] netlink: 'syz.0.7587': attribute type 4 has an invalid length. [ 526.699019][ T855] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7587'. [ 526.740507][ T855] sock: sock_timestamping_bind_phc: sock not bind to device [ 526.805205][ T836] lo speed is unknown, defaulting to 1000 [ 526.827733][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7587'. [ 526.937472][ T866] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7588'. [ 527.456410][ T904] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 527.465440][ T905] openvswitch: netlink: IP tunnel dst address not specified [ 527.473415][ T904] syzkaller1: linktype set to 0 [ 527.529411][ T836] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.538587][ T836] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.547943][ T836] bridge_slave_0: entered allmulticast mode [ 527.556928][ T836] bridge_slave_0: entered promiscuous mode [ 527.571348][ T836] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.588524][ T836] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.599723][ T836] bridge_slave_1: entered allmulticast mode [ 527.611961][ T836] bridge_slave_1: entered promiscuous mode [ 527.676903][ T836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.695289][ T836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.728297][ T836] team0: Port device team_slave_0 added [ 527.738473][ T836] team0: Port device team_slave_1 added [ 527.787387][ T836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.796251][ T836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.833354][ T836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.847990][ T836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.858253][ T836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.888948][ T836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.971892][ T836] hsr_slave_0: entered promiscuous mode [ 527.980813][ T836] hsr_slave_1: entered promiscuous mode [ 527.988173][ T836] debugfs: 'hsr0' already exists in 'hsr' [ 527.995084][ T836] Cannot create hsr debugfs directory [ 528.141103][ T836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 528.154099][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.165459][ T836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 528.180340][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.192046][ T836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 528.206990][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.218336][ T836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 528.232102][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.315430][ T836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.337282][ T836] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.350431][ T5629] Bluetooth: hci0: command tx timeout [ 528.352529][ T592] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.363924][ T592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.396288][ T592] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.403926][ T592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.428038][ T949] pim6reg: entered allmulticast mode [ 528.494784][ T954] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 528.686713][ T973] netlink: 'syz.4.7609': attribute type 7 has an invalid length. [ 528.829495][ T836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.934155][ T998] netlink: 'syz.4.7615': attribute type 21 has an invalid length. [ 528.944550][ T998] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.955358][ T998] netlink: 'syz.4.7615': attribute type 1 has an invalid length. [ 529.119778][ T836] veth0_vlan: entered promiscuous mode [ 529.133684][ T836] veth1_vlan: entered promiscuous mode [ 529.169770][ T836] veth0_macvtap: entered promiscuous mode [ 529.185070][ T836] veth1_macvtap: entered promiscuous mode [ 529.218777][ T836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.231974][ T1020] tap0: tun_chr_ioctl cmd 1074025672 [ 529.237552][ T1020] tap0: ignored: set checksum disabled [ 529.248972][ T836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.268071][ T599] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.283439][ T599] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.293963][ T599] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.308023][ T599] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.463816][ T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.481543][ T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.507950][ T592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.516734][ T592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.783353][ T1055] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 529.836775][ T1063] netlink: 'syz.4.7632': attribute type 5 has an invalid length. [ 530.002629][ T1083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.004917][ T1085] netlink: 'syz.3.7635': attribute type 1 has an invalid length. [ 530.219451][ T1096] syzkaller0: entered promiscuous mode [ 530.248665][ T1096] syzkaller0: entered allmulticast mode [ 530.386875][ T1110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.420729][ T5629] Bluetooth: hci0: command tx timeout [ 530.435169][ T1111] bond0: option miimon: invalid value (18446744071829782528) [ 530.447041][ T1111] bond0: option miimon: allowed values 0 - 2147483647 [ 530.505301][ T1122] netlink: 'syz.3.7645': attribute type 11 has an invalid length. [ 530.519540][ T1122] __nla_validate_parse: 20 callbacks suppressed [ 530.519563][ T1122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7645'. [ 530.538581][ T1122] veth1_to_bond: entered allmulticast mode [ 530.543053][ T1107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.547657][ T1122] veth1_to_bond: left allmulticast mode [ 530.682503][ T1136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7648'. [ 530.706120][ T1138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7648'. [ 530.902578][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.925008][ T1158] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.937620][ T1158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.945557][ T1158] IPv6: NLM_F_CREATE should be set when creating new route [ 530.956387][ T1160] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 531.264162][ T1175] syzkaller0: entered promiscuous mode [ 531.287734][ T1175] syzkaller0: entered allmulticast mode [ 531.352401][ T1178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 531.364666][ T1178] lo: entered promiscuous mode [ 531.374149][ T1178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.416748][ T1180] netlink: 'syz.0.7660': attribute type 21 has an invalid length. [ 531.430659][ T1180] netlink: 'syz.0.7660': attribute type 6 has an invalid length. [ 531.438847][ T1180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7660'. [ 531.456809][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7662'. [ 531.499687][ T1189] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 531.522839][ T1189] xt_hashlimit: size too large, truncated to 1048576 [ 531.746371][ T1207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7668'. [ 531.846151][ T1200] team0 (unregistering): Port device team_slave_0 removed [ 531.869053][ T1214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 531.897441][ T1219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7671'. [ 531.912227][ T1200] team0 (unregistering): Port device team_slave_1 removed [ 531.934211][ T1200] team0 (unregistering): Port device dummy0 removed [ 532.017165][ T1224] netlink: 'syz.3.7673': attribute type 3 has an invalid length. [ 532.022733][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7675'. [ 532.036474][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7675'. [ 532.042396][ T1224] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7673'. [ 532.235394][ T1244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.444679][ T1264] IPVS: set_ctl: invalid protocol: 28 172.20.20.24:20004 [ 532.473784][ T1265] IPVS: set_ctl: invalid protocol: 28 172.20.20.24:20004 [ 532.501054][ T5629] Bluetooth: hci0: command tx timeout [ 533.031481][ T1289] syzkaller1: entered promiscuous mode [ 533.068110][ T1289] syzkaller1: entered allmulticast mode [ 533.124560][ T1305] xfrm0 speed is unknown, defaulting to 1000 [ 533.161948][ T1315] Bluetooth: MGMT ver 1.23 [ 533.253403][ T1320] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 533.375216][ T1305] lo speed is unknown, defaulting to 1000 [ 533.472427][ T1337] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 533.515968][ T1337] pim6reg1: entered allmulticast mode [ 533.897502][ T1365] syzkaller0: entered promiscuous mode [ 533.905463][ T1365] syzkaller0: entered allmulticast mode [ 534.539757][ T1425] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 534.580618][ T5629] Bluetooth: hci0: command tx timeout [ 535.006840][ T1438] geneve2: entered promiscuous mode [ 535.021362][ T1438] geneve2: entered allmulticast mode [ 535.054129][ T599] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.077462][ T599] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.099837][ T599] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.123501][ T599] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.191898][ T1444] GUP no longer grows the stack in syz.6.7726 (1444): 200000003000-20000000a000 (200000001000) [ 535.206086][ T1444] CPU: 1 UID: 0 PID: 1444 Comm: syz.6.7726 Not tainted syzkaller #0 PREEMPT(full) [ 535.206116][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.206130][ T1444] Call Trace: [ 535.206141][ T1444] [ 535.206149][ T1444] dump_stack_lvl+0xe8/0x150 [ 535.206177][ T1444] __get_user_pages+0x238c/0x2720 [ 535.206200][ T1444] ? __gup_longterm_locked+0xc3b/0x15c0 [ 535.206231][ T1444] __gup_longterm_locked+0xd52/0x15c0 [ 535.206252][ T1444] ? gup_fast_fallback+0xbc4/0x20d0 [ 535.206271][ T1444] ? rcu_is_watching+0x15/0xb0 [ 535.206292][ T1444] ? rcu_is_watching+0x15/0xb0 [ 535.206330][ T1444] gup_fast_fallback+0x1d82/0x20d0 [ 535.206368][ T1444] ? __pfx_gup_fast_fallback+0x10/0x10 [ 535.206385][ T1444] ? lock_release+0x4b/0x3c0 [ 535.206410][ T1444] ? __fget_files+0x2a/0x420 [ 535.206458][ T1444] ? is_valid_gup_args+0x11f/0x200 [ 535.206476][ T1444] ? get_user_pages_fast+0x4d/0xb0 [ 535.206495][ T1444] __iov_iter_get_pages_alloc+0x378/0xa40 [ 535.206626][ T1444] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 535.206659][ T1444] iov_iter_get_pages2+0x5e/0xa0 [ 535.206691][ T1444] __se_sys_vmsplice+0x7b5/0x1660 [ 535.206716][ T1444] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 535.206734][ T1444] ? __pfx_futex_wait+0x10/0x10 [ 535.206783][ T1444] ? rcu_is_watching+0x15/0xb0 [ 535.206799][ T1444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.206817][ T1444] do_syscall_64+0x174/0x580 [ 535.206841][ T1444] ? clear_bhb_loop+0x40/0x90 [ 535.206858][ T1444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.206872][ T1444] RIP: 0033:0x7fac56d9ce59 [ 535.206889][ T1444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.206903][ T1444] RSP: 002b:00007fac54ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 535.206922][ T1444] RAX: ffffffffffffffda RBX: 00007fac57015fa0 RCX: 00007fac56d9ce59 [ 535.206935][ T1444] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 535.206945][ T1444] RBP: 00007fac56e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 535.206955][ T1444] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 535.206964][ T1444] R13: 00007fac57016038 R14: 00007fac57015fa0 R15: 00007ffcf52fa638 [ 535.206983][ T1444] [ 535.579016][ T1458] __nla_validate_parse: 7 callbacks suppressed [ 535.579036][ T1458] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7730'. [ 535.579362][ T1460] netlink: 'syz.3.7731': attribute type 32 has an invalid length. [ 535.676737][ T1460] gre1: left allmulticast mode [ 535.682319][ T1460] vlan2: left allmulticast mode [ 535.687223][ T1460] geneve1: left allmulticast mode [ 535.703624][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.724756][ T1470] bridge0: entered promiscuous mode [ 535.792283][ T1482] gretap0: MTU too low for tipc bearer [ 535.800535][ T1482] tipc: Enabling of bearer rejected, failed to enable media [ 535.914710][ T1477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.928814][ T1476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.015918][ T1500] syzkaller1: entered promiscuous mode [ 536.188616][ T1520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7744'. [ 536.215533][ T1520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.366893][ T1530] syzkaller1: entered allmulticast mode [ 536.431549][ T1530] bond9: option all_slaves_active: invalid value (222) [ 536.451749][ T1530] bond9 (unregistering): Released all slaves [ 536.548099][ T1543] netlink: 240 bytes leftover after parsing attributes in process `syz.6.7751'. [ 536.774134][ T5819] hid-generic 0005:0B57:0040.0002: item fetching failed at offset 2/3 [ 536.802593][ T5819] hid-generic 0005:0B57:0040.0002: probe with driver hid-generic failed with error -22 [ 537.118107][ T1590] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 537.131212][ T592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.152231][ T592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.219038][ T1594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7761'. [ 537.233222][ T1594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7761'. [ 537.280591][ T1591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.326441][ T1599] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 537.428624][ T1611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7764'. [ 537.616554][ T1623] veth1_to_bond: entered allmulticast mode [ 537.643200][ T1623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7770'. [ 537.715926][ T1623] veth1_to_bond (unregistering): left allmulticast mode [ 537.777228][ T1623] bond0: (slave bond_slave_1): Releasing backup interface [ 537.814774][ T1635] veth1_macvtap: left promiscuous mode [ 537.822834][ T1635] macsec0: entered promiscuous mode [ 537.836184][ T1635] macsec0: entered allmulticast mode [ 537.904245][ T1635] veth1_macvtap: entered promiscuous mode [ 537.919272][ T1635] veth1_macvtap: entered allmulticast mode [ 537.954831][ T1635] macsec0: left promiscuous mode [ 537.972239][ T1635] macsec0: left allmulticast mode [ 537.984990][ T1635] veth1_macvtap: left allmulticast mode [ 538.391558][ T5623] Bluetooth: hci1: link tx timeout [ 538.398864][ T5623] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 538.410621][ T1671] openvswitch: netlink: Message has 4 unknown bytes. [ 538.412055][ T5623] Bluetooth: hci1: link tx timeout [ 538.424393][ T5623] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.604094][ T1689] netlink: 'syz.4.7788': attribute type 4 has an invalid length. [ 538.634755][ T1687] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.701766][ T1687] bridge_slave_0 (unregistering): left allmulticast mode [ 538.732347][ T1687] bridge_slave_0 (unregistering): left promiscuous mode [ 538.759617][ T1687] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.043060][ T1719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7795'. [ 539.071512][ T1725] x_tables: duplicate underflow at hook 1 [ 539.086477][ T1725] x_tables: duplicate underflow at hook 1 [ 539.086801][ T1723] netlink: 'syz.6.7793': attribute type 4 has an invalid length. [ 539.143993][ T1723] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7793'. [ 539.224405][ T1733] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 539.303678][ T5623] Bluetooth: hci1: command 0x0401 tx timeout [ 539.381507][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 539.447773][ T1744] netlink: 'syz.6.7801': attribute type 33 has an invalid length. [ 539.503971][ T1744] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 539.522979][ T1744] bond1 (unregistering): Released all slaves [ 539.742926][ T1765] netlink: 496 bytes leftover after parsing attributes in process `syz.4.7804'. [ 539.955046][ T1779] netlink: 'syz.0.7807': attribute type 11 has an invalid length. [ 540.091617][ T1784] netlink: 'syz.6.7808': attribute type 1 has an invalid length. [ 540.211340][ T1796] nbd: nbd3 already in use [ 540.216165][ T1796] block nbd3: NBD_DISCONNECT [ 540.220804][ T1796] block nbd3: Send disconnect failed -32 [ 540.231738][ T1796] block nbd3: shutting down sockets [ 540.497139][ T1821] lo: entered allmulticast mode [ 540.530682][ T1824] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 540.591559][ T1825] syzkaller0: entered promiscuous mode [ 540.638248][ T1833] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 540.638386][ T1825] syzkaller0: entered allmulticast mode [ 541.058375][ T1870] __nla_validate_parse: 3 callbacks suppressed [ 541.058394][ T1870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7823'. [ 541.082836][ T1873] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.7821'. [ 541.093938][ T1873] 0XD: renamed from gretap0 (while UP) [ 541.174500][ T1873] 0XD: entered allmulticast mode [ 541.380409][ T5629] Bluetooth: hci1: command 0x0401 tx timeout [ 541.439131][ T1890] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7828'. [ 541.535008][ T1897] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7825'. [ 541.600465][ T1902] syz.0.7832: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 541.618382][ T1902] CPU: 0 UID: 0 PID: 1902 Comm: syz.0.7832 Not tainted syzkaller #0 PREEMPT(full) [ 541.618406][ T1902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.618416][ T1902] Call Trace: [ 541.618422][ T1902] [ 541.618429][ T1902] dump_stack_lvl+0xe8/0x150 [ 541.618459][ T1902] warn_alloc+0x249/0x340 [ 541.618478][ T1902] ? __pfx_stack_trace_save+0x10/0x10 [ 541.618500][ T1902] ? __pfx_warn_alloc+0x10/0x10 [ 541.618516][ T1902] ? __kasan_kmalloc+0x93/0xb0 [ 541.618535][ T1902] ? __kmalloc_cache_noprof+0x318/0x660 [ 541.618551][ T1902] ? xskq_create+0x56/0x170 [ 541.618569][ T1902] ? xsk_init_queue+0x8a/0xe0 [ 541.618581][ T1902] ? xsk_setsockopt+0x52a/0x960 [ 541.618596][ T1902] ? do_sock_setsockopt+0x17c/0x1b0 [ 541.618615][ T1902] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 541.618633][ T1902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.618647][ T1902] __vmalloc_node_range_noprof+0x12c/0x1730 [ 541.618674][ T1902] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 541.618694][ T1902] ? __kasan_kmalloc+0x93/0xb0 [ 541.618711][ T1902] vmalloc_user_noprof+0xad/0xe0 [ 541.618729][ T1902] ? xskq_create+0xbf/0x170 [ 541.618743][ T1902] xskq_create+0xbf/0x170 [ 541.618760][ T1902] xsk_init_queue+0x8a/0xe0 [ 541.618775][ T1902] xsk_setsockopt+0x52a/0x960 [ 541.618790][ T1902] ? __pfx_xsk_setsockopt+0x10/0x10 [ 541.618805][ T1902] ? __pfx_aa_sk_perm+0x10/0x10 [ 541.618829][ T1902] ? lock_release+0x4b/0x3c0 [ 541.618846][ T1902] ? aa_sock_opt_perm+0xff/0x1a0 [ 541.618862][ T1902] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 541.618879][ T1902] ? __pfx_xsk_setsockopt+0x10/0x10 [ 541.618895][ T1902] do_sock_setsockopt+0x17c/0x1b0 [ 541.618912][ T1902] __x64_sys_setsockopt+0x13d/0x1b0 [ 541.618932][ T1902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.618944][ T1902] do_syscall_64+0x174/0x580 [ 541.618963][ T1902] ? trace_irq_disable+0x3b/0x140 [ 541.618981][ T1902] ? clear_bhb_loop+0x40/0x90 [ 541.618997][ T1902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.619011][ T1902] RIP: 0033:0x7f18a479ce59 [ 541.619026][ T1902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.619037][ T1902] RSP: 002b:00007f18a561a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 541.619054][ T1902] RAX: ffffffffffffffda RBX: 00007f18a4a15fa0 RCX: 00007f18a479ce59 [ 541.619064][ T1902] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 541.619072][ T1902] RBP: 00007f18a4832e6f R08: 0000000000000004 R09: 0000000000000000 [ 541.619081][ T1902] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.619091][ T1902] R13: 00007f18a4a16038 R14: 00007f18a4a15fa0 R15: 00007ffea510a9c8 [ 541.619105][ T1902] [ 541.619201][ T1902] Mem-Info: [ 541.673463][ T1906] syzkaller0: entered promiscuous mode [ 541.790175][ T1902] active_anon:9755 inactive_anon:0 isolated_anon:0 [ 541.790175][ T1902] active_file:3145 inactive_file:40161 isolated_file:0 [ 541.790175][ T1902] unevictable:1318 dirty:78 writeback:0 [ 541.790175][ T1902] slab_reclaimable:14173 slab_unreclaimable:149804 [ 541.790175][ T1902] mapped:39857 shmem:1857 pagetables:1595 [ 541.790175][ T1902] sec_pagetables:0 bounce:0 [ 541.790175][ T1902] kernel_misc_reclaimable:0 [ 541.790175][ T1902] free:1215192 free_pcp:23627 free_cma:0 [ 541.797107][ T1906] syzkaller0: entered allmulticast mode [ 541.819602][ T1902] Node 0 active_anon:39020kB inactive_anon:0kB active_file:12580kB inactive_file:160448kB unevictable:3736kB isolated(anon):0kB isolated(file):0kB mapped:151236kB dirty:312kB writeback:0kB shmem:5892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21360kB pagetables:6232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 542.050452][ T1902] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20392kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 542.138836][ T1902] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 542.181964][ T1902] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 542.191827][ T1902] Node 0 DMA32 free:990624kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40632kB inactive_anon:0kB active_file:12580kB inactive_file:160460kB unevictable:1608kB writepending:320kB zspages:0kB present:3129332kB managed:2552584kB mlocked:72kB bounce:0kB free_pcp:35348kB local_pcp:14672kB free_cma:0kB [ 542.234724][ T1913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7836'. [ 542.299785][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.300325][ T1902] lowmem_reserve[]: [ 542.311000][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.328848][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.340945][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.350789][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.383410][ T1902] 0 0 0 0 0 [ 542.393273][ T1902] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 542.446179][ T1913] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 542.455921][ T1902] lowmem_reserve[]: 0 0 0 0 0 [ 542.455983][ T1902] Node 1 Normal free:3812276kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59400kB local_pcp:25364kB free_cma:0kB [ 542.456039][ T1902] lowmem_reserve[]: 0 0 0 0 0 [ 542.456086][ T1902] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 542.456398][ T1902] Node 0 DMA32: 9229*4kB (UME) 7375*8kB (UM) 3407*16kB (UM) 13*32kB (UM) 5*64kB (UME) 275*128kB (UM) 646*256kB (UM) 327*512kB (UME) 256*1024kB (UME) 104*2048kB (UM) 0*4096kB = 994300kB [ 542.456531][ T1902] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 542.456643][ T1902] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 11*32kB (UM) 14*64kB (UM) 9*128kB (UM) 8*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 5*2048kB (U) 925*4096kB (UM) = 3812276kB [ 542.456801][ T1902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.456817][ T1902] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 542.456832][ T1902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.456846][ T1902] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 542.456861][ T1902] 44630 total pagecache pages [ 542.456942][ T1902] 0 pages in swap cache [ 542.456950][ T1902] Free swap = 124996kB [ 542.650237][ T1930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7839'. [ 542.656711][ T1902] Total swap = 124996kB [ 542.667558][ T1902] 2097051 pages RAM [ 542.672701][ T1902] 0 pages HighMem/MovableOnly [ 542.677749][ T1902] 427124 pages reserved [ 542.682369][ T1902] 0 pages cma reserved [ 542.840634][ T1915] xfrm0 speed is unknown, defaulting to 1000 [ 542.860329][ T1944] xt_hashlimit: invalid interval [ 542.877599][ T1947] netlink: 'syz.6.7844': attribute type 23 has an invalid length. [ 543.002570][ T1953] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7846'. [ 543.050974][ T1953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7846'. [ 543.068444][ T1915] lo speed is unknown, defaulting to 1000 [ 543.102661][ T1957] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7846'. [ 543.160915][ T1962] syz_tun: entered allmulticast mode [ 543.307523][ T1965] netlink: 'syz.6.7850': attribute type 3 has an invalid length. [ 543.318983][ T1972] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7851'. [ 543.374762][ T1972] vlan2: entered allmulticast mode [ 543.396685][ T1972] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 543.461285][ T5629] Bluetooth: hci1: command 0x0401 tx timeout [ 543.577995][ T1991] netlink: 'syz.4.7855': attribute type 11 has an invalid length. [ 543.606753][ T1998] netlink: 'syz.6.7858': attribute type 4 has an invalid length. [ 543.638615][ T1997] netlink: 'syz.6.7858': attribute type 4 has an invalid length. [ 543.679907][ T1991] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.690034][ T1991] bridge0: port 2(bridge_slave_1) entered listening state [ 543.737690][ T1991] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 543.793278][ T1999] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 543.929560][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.953850][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.963970][ T1915] bridge_slave_0: entered allmulticast mode [ 543.974234][ T1915] bridge_slave_0: entered promiscuous mode [ 544.004591][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.016442][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.027693][ T1915] bridge_slave_1: entered allmulticast mode [ 544.039498][ T1915] bridge_slave_1: entered promiscuous mode [ 544.074883][ T1915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.087477][ T1915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.115663][ T1915] team0: Port device team_slave_0 added [ 544.134558][ T1915] team0: Port device team_slave_1 added [ 544.169604][ T1915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.177876][ T1915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.209231][ T1915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.230597][ T1915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.238033][ T1915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.267393][ T1915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.318734][ T1915] hsr_slave_0: entered promiscuous mode [ 544.328566][ T1915] hsr_slave_1: entered promiscuous mode [ 544.337949][ T1915] debugfs: 'hsr0' already exists in 'hsr' [ 544.346169][ T1915] Cannot create hsr debugfs directory [ 544.420132][ T5629] Bluetooth: hci7: command tx timeout [ 544.677200][ T2036] syzkaller1: entered promiscuous mode [ 544.692468][ T2036] syzkaller1: entered allmulticast mode [ 544.731347][ T1915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.767778][ T1915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.806262][ T1915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.852903][ T1915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.895853][ T1915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.958793][ T1915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.004879][ T1915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 545.032165][ T1915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.218795][ T1915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.275914][ T1915] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.286055][ T2070] : renamed from lo [ 545.352556][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.362573][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.423846][ T1915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.435796][ T1915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.451979][ T2078] netlink: 'syz.6.7880': attribute type 21 has an invalid length. [ 545.472822][ T2084] netlink: 'syz.4.7883': attribute type 9 has an invalid length. [ 545.473635][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.485848][ T2084] netlink: 'syz.4.7883': attribute type 3 has an invalid length. [ 545.507554][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.755423][ T2098] netlink: 'syz.0.7886': attribute type 1 has an invalid length. [ 545.871504][ T2098] bond9: entered promiscuous mode [ 545.877957][ T2098] 8021q: adding VLAN 0 to HW filter on device bond9 [ 546.077836][ T2112] 8021q: adding VLAN 0 to HW filter on device bond9 [ 546.088756][ T2112] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 546.107507][ T2112] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 546.126397][ T2112] bond9: (slave vti0): making interface the new active one [ 546.136574][ T2112] vti0: entered promiscuous mode [ 546.144563][ T2112] bond9: (slave vti0): Enslaving as an active interface with an up link [ 546.189751][ T2090] __nla_validate_parse: 20 callbacks suppressed [ 546.189770][ T2090] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7884'. [ 546.239959][ T2090] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7884'. [ 546.300490][ T2090] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7884'. [ 546.390734][ T2137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7890'. [ 546.500326][ T5629] Bluetooth: hci7: command tx timeout [ 546.587672][ T2137] 8021q: adding VLAN 0 to HW filter on device bond11 [ 546.634824][ T2137] bond11 (unregistering): Released all slaves [ 546.733274][ T2158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7894'. [ 546.821934][ T1915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.919890][ T2168] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7896'. [ 547.005965][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 547.041235][ T2173] netlink: 'syz.0.7897': attribute type 5 has an invalid length. [ 547.069181][ T2173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7897'. [ 547.161096][ T2173] geneve2: entered promiscuous mode [ 547.177322][ T2173] geneve2: entered allmulticast mode [ 547.207859][ T599] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 547.233008][ T599] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 547.278977][ T2185] bond0: (slave bond_slave_1): Releasing backup interface [ 547.325822][ T2196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7903'. [ 547.340338][ T2196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7903'. [ 547.363249][ T599] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 547.381304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.391582][ T2184] vlan3: entered allmulticast mode [ 547.394116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.397989][ T2184] bond0: entered allmulticast mode [ 547.398022][ T2184] bond_slave_0: entered allmulticast mode [ 547.422158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.433234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.443483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.464395][ T599] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 547.604184][ T1915] veth0_vlan: entered promiscuous mode [ 547.693999][ T1915] veth1_vlan: entered promiscuous mode [ 547.785457][ T1915] veth0_macvtap: entered promiscuous mode [ 547.801997][ T1915] veth1_macvtap: entered promiscuous mode [ 547.833005][ T1915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.852504][ T1915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.889102][ T599] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.909796][ T599] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.922854][ T599] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.935789][ T599] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.982542][ T2226] netlink: 'syz.6.7915': attribute type 1 has an invalid length. [ 548.000100][ T2226] netlink: 'syz.6.7915': attribute type 1 has an invalid length. [ 548.011412][ T2226] netlink: 'syz.6.7915': attribute type 8 has an invalid length. [ 548.020683][ T2228] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 548.055454][ T2237] tipc: Enabled bearer , priority 0 [ 548.141341][ T2224] syzkaller0: entered promiscuous mode [ 548.148769][ T2237] netlink: 'syz.4.7913': attribute type 9 has an invalid length. [ 548.162782][ T2224] syzkaller0: entered allmulticast mode [ 548.178384][ T2224] tipc: Resetting bearer [ 548.288982][ T590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.312708][ T590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.563560][ T2223] tipc: Resetting bearer [ 548.580502][ T5638] Bluetooth: hci7: command tx timeout [ 548.704768][ T2223] tipc: Disabling bearer [ 548.757177][ T599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.767906][ T599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.970983][ T2267] netlink: 'syz.4.7924': attribute type 29 has an invalid length. [ 549.004010][ T2267] netlink: 'syz.4.7924': attribute type 29 has an invalid length. [ 549.032344][ T2267] netlink: 'syz.4.7924': attribute type 64 has an invalid length. [ 549.620478][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 550.220633][ T2362] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 550.432861][ T2378] netlink: 'syz.3.7955': attribute type 10 has an invalid length. [ 550.454403][ T2378] team0: Port device geneve1 added [ 550.733037][ T5629] Bluetooth: hci7: command tx timeout [ 551.041492][ T2407] lo speed is unknown, defaulting to 1000 [ 551.047819][ T2407] lo speed is unknown, defaulting to 1000 [ 551.054513][ T2407] lo speed is unknown, defaulting to 1000 [ 551.065376][ T2407] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 551.086149][ T2407] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 551.107194][ T2407] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 551.122151][ T2407] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 551.144363][ T2407] lo speed is unknown, defaulting to 1000 [ 551.152070][ T2407] lo speed is unknown, defaulting to 1000 [ 551.158954][ T2407] lo speed is unknown, defaulting to 1000 [ 551.166357][ T2407] lo speed is unknown, defaulting to 1000 [ 551.172930][ T2407] lo speed is unknown, defaulting to 1000 [ 551.179431][ T2407] lo speed is unknown, defaulting to 1000 [ 551.186951][ T2407] lo speed is unknown, defaulting to 1000 [ 551.194139][ T2407] lo speed is unknown, defaulting to 1000 [ 551.200654][ T2407] lo speed is unknown, defaulting to 1000 [ 551.207044][ T2407] lo speed is unknown, defaulting to 1000 [ 551.213455][ T2407] lo speed is unknown, defaulting to 1000 [ 551.220121][ T2407] lo speed is unknown, defaulting to 1000 [ 551.227156][ T2407] lo speed is unknown, defaulting to 1000 [ 553.173111][ T2357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.189195][ T2408] netlink: 'syz.6.7964': attribute type 1 has an invalid length. [ 553.276086][ T2415] __nla_validate_parse: 14 callbacks suppressed [ 553.276109][ T2415] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7966'. [ 553.428235][ T2430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7969'. [ 553.479739][ T2441] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7974'. [ 553.490804][ T2441] netlink: 'syz.7.7974': attribute type 7 has an invalid length. [ 553.498854][ T2441] netlink: 'syz.7.7974': attribute type 8 has an invalid length. [ 553.503015][ T2445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7975'. [ 553.526872][ T2441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7974'. [ 553.904825][ T2476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.955023][ T2476] bond0: (slave bond1): Enslaving as an active interface with an up link [ 554.002757][ T2475] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7983'. [ 554.046540][ T2475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7983'. [ 554.184789][ T2493] veth0_to_bridge: entered promiscuous mode [ 554.233467][ T2495] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 554.238307][ T2492] veth0_to_bridge: left promiscuous mode [ 554.531882][ T2520] netlink: 'syz.4.7993': attribute type 13 has an invalid length. [ 554.585079][ T2522] netlink: 'syz.6.7995': attribute type 1 has an invalid length. [ 554.978291][ T2535] syz_tun: entered allmulticast mode [ 555.217217][ T2542] syzkaller0: entered promiscuous mode [ 555.235194][ T2542] syzkaller0: entered allmulticast mode [ 555.249236][ T2558] openvswitch: netlink: Missing valid actions attribute. [ 555.306515][ T2558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.352645][ T2558] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8001'. [ 555.531590][ T2559] netlink: 'syz.4.8001': attribute type 10 has an invalid length. [ 555.565245][ T2559] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8001'. [ 556.039761][ T2588] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.8009'. [ 556.089077][ T2588] IPv6: NLM_F_CREATE should be specified when creating new route [ 556.174002][ T2592] ip6tnl0: Caught tx_queue_len zero misconfig [ 556.273227][ T2602] tipc: Started in network mode [ 556.288851][ T2602] tipc: Node identity 4, cluster identity 4711 [ 556.309267][ T2602] tipc: Node number set to 4 [ 556.316533][ T2602] tipc: Cannot configure node identity twice [ 556.555055][ T2621] netlink: 'syz.6.8019': attribute type 11 has an invalid length. [ 556.676412][ T2623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.718074][ T2623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.782789][ T589] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 556.803044][ T2639] syz_tun: entered allmulticast mode [ 557.468935][ T2655] syzkaller0: entered promiscuous mode [ 557.481970][ T2655] syzkaller0: entered allmulticast mode [ 558.017671][ T2703] netlink: 'syz.7.8038': attribute type 10 has an invalid length. [ 558.046251][ T2703] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.067420][ T2703] bond0: (slave team0): Enslaving as an active interface with an up link [ 558.076337][ T2715] sock: sock_timestamping_bind_phc: sock not bind to device [ 558.282501][ T2730] __nla_validate_parse: 6 callbacks suppressed [ 558.282534][ T2730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8044'. [ 558.376174][ T2736] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8047'. [ 559.012366][ T2792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8061'. [ 559.019129][ T2796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8064'. [ 559.044211][ T2792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8061'. [ 559.050993][ T2801] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8065'. [ 559.060852][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 559.075607][ T2792] vlan0: entered promiscuous mode [ 559.236591][ T2815] netlink: 'syz.0.8070': attribute type 1 has an invalid length. [ 559.265330][ T2815] bond11: entered promiscuous mode [ 559.272110][ T2815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 559.488803][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8075'. [ 559.500748][ T2839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 559.632749][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8075'. [ 559.666348][ T2839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 559.705837][ T2864] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 559.725645][ T2864] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 559.757500][ T2865] netlink: 'syz.6.8080': attribute type 1 has an invalid length. [ 559.861869][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 560.204536][ T2906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 560.216018][ T2906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.451601][ T2940] netlink: 'syz.3.8100': attribute type 10 has an invalid length. [ 560.522044][ T10] page_pool_release_retry() stalled pool shutdown: id 250, 1 inflight 60 sec [ 561.144629][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.186781][ T2995] netlink: 'syz.4.8113': attribute type 1 has an invalid length. [ 561.232133][ T2995] bond10: entered promiscuous mode [ 561.238645][ T2995] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.322248][ T2995] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.329948][ T2995] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 561.356460][ T2995] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 561.394163][ T2995] bond10: (slave vti0): making interface the new active one [ 561.419654][ T3019] netlink: 'syz.7.8121': attribute type 17 has an invalid length. [ 561.427664][ T2995] vti0: entered promiscuous mode [ 561.433429][ T2995] bond10: (slave vti0): Enslaving as an active interface with an up link [ 561.567751][ T3019] gretap0: entered promiscuous mode [ 561.576549][ T3019] gretap0: left promiscuous mode [ 561.629860][ T3025] bond12 (unregistering): Released all slaves [ 562.166539][ T3071] netlink: 'syz.6.8137': attribute type 1 has an invalid length. [ 562.213532][ T3072] xt_hashlimit: size too large, truncated to 1048576 [ 562.276211][ T3080] bond8: (slave gretap0): Device is not bonding slave [ 562.290222][ T3080] bond8: option active_slave: invalid value (gretap0) [ 562.304018][ T3080] bond8 (unregistering): Released all slaves [ 562.845069][ T3114] syzkaller0: entered promiscuous mode [ 562.871004][ T3114] syzkaller0: entered allmulticast mode [ 562.905699][ T1327] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 563.212736][ T3134] veth0: entered promiscuous mode [ 563.254830][ T3132] veth0: left promiscuous mode [ 563.365763][ T3150] 8021q: VLANs not supported on tunl0 [ 563.673748][ T3191] __nla_validate_parse: 20 callbacks suppressed [ 563.673784][ T3191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8164'. [ 563.765741][ T3191] netlink: 'syz.3.8164': attribute type 1 has an invalid length. [ 563.948656][ T3228] gretap1: entered promiscuous mode [ 563.984586][ T3228] batman_adv: batadv0: Adding interface: gretap1 [ 564.001634][ T3228] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.046851][ T3235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8169'. [ 564.058057][ T3228] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 564.107981][ T3235] hsr_slave_1 (unregistering): left promiscuous mode [ 564.218574][ T3242] Unsupported ieee802154 address type: 0 [ 564.287895][ T3244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8172'. [ 564.297365][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.315300][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.224484][ T3150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.325663][ T3252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8174'. [ 566.361976][ T3260] openvswitch: netlink: IP tunnel TTL not specified. [ 566.778914][ T3291] lo: Caught tx_queue_len zero misconfig [ 566.834332][ T573] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 566.841459][ T3291] netlink: 'syz.4.8188': attribute type 1 has an invalid length. [ 566.914863][ T3301] ipt_ECN: cannot use operation on non-tcp rule [ 566.996259][ T3310] veth0_to_team: Caught tx_queue_len zero misconfig [ 567.009917][ T9972] lo speed is unknown, defaulting to 1000 [ 567.035779][ T9972] sy2: Port: 1 Link DOWN [ 569.637747][ T3283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.839296][ T3345] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20004 [ 569.846910][ T9953] IPVS: starting estimator thread 0... [ 569.917185][ T3351] netlink: 'syz.4.8206': attribute type 1 has an invalid length. [ 569.933480][ T3353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8207'. [ 569.943444][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 569.943643][ T3348] IPVS: using max 45 ests per chain, 108000 per kthread [ 570.083288][ T3360] bond11: (slave veth5): Enslaving as an active interface with a down link [ 570.128533][ T3351] bond11: entered allmulticast mode [ 570.162603][ T3361] veth0: entered promiscuous mode [ 570.456915][ T3355] veth0: left promiscuous mode [ 570.478811][ T3399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8219'. [ 570.755624][ T3412] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8224'. [ 571.238894][ T3426] netlink: 'syz.3.8227': attribute type 1 has an invalid length. [ 571.249676][ T3428] bond0: Caught tx_queue_len zero misconfig [ 571.284053][ T3428] syzkaller0: entered promiscuous mode [ 571.300184][ T3428] syzkaller0: entered allmulticast mode [ 571.404575][ T3438] netlink: 'syz.3.8230': attribute type 4 has an invalid length. [ 571.417848][ T3442] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.8233'. [ 571.619217][ T3455] netlink: 'syz.4.8234': attribute type 2 has an invalid length. [ 571.635887][ T3447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8234'. [ 571.676598][ T3458] netlink: 'syz.0.8238': attribute type 10 has an invalid length. [ 571.688064][ T3455] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 571.702759][ T3458] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8238'. [ 571.752253][ T3462] netlink: 'syz.7.8239': attribute type 1 has an invalid length. [ 571.869325][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8241'. [ 572.077666][ T3482] sctp: [Deprecated]: syz.6.8247 (pid 3482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.077666][ T3482] Use struct sctp_sack_info instead [ 572.169692][ T3464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8234'. [ 572.181673][ T3478] lo: entered promiscuous mode [ 572.197595][ T3478] tunl0: entered promiscuous mode [ 572.248469][ T3478] gre0: entered promiscuous mode [ 572.263316][ T3478] gretap0: entered promiscuous mode [ 572.278663][ T3478] erspan0: entered promiscuous mode [ 572.291365][ T3478] ip_vti0: entered promiscuous mode [ 572.522741][ T3501] netlink: 'syz.6.8253': attribute type 1 has an invalid length. [ 572.559709][ T3504] xt_ecn: cannot match TCP bits for non-tcp packets [ 572.578114][ T3501] bond2: (slave gretap0): making interface the new active one [ 572.588690][ T3501] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 572.709836][ T3512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8256'. [ 572.723917][ T3512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8256'. [ 572.841856][ T3521] macsec1: entered promiscuous mode [ 573.317247][ T3550] rB: renamed from lo (while UP) [ 573.883298][ T3574] netlink: 'syz.0.8274': attribute type 11 has an invalid length. [ 573.893615][ T3574] netlink: 'syz.0.8274': attribute type 11 has an invalid length. [ 574.408469][ T3626] veth0_macvtap: Caught tx_queue_len zero misconfig [ 574.420551][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.429866][ C0] bridge0: topology change detected, propagating [ 574.564218][ T3639] netlink: 'syz.4.8292': attribute type 11 has an invalid length. [ 574.890657][ T3641] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 574.905531][ T3641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.991290][ T3641] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.031182][ T3641] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.053714][ T3641] netdevsim netdevsim4 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.054716][ T3651] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 575.068815][ T3641] 8021q: adding VLAN 0 to HW filter on device eth0 [ 575.089672][ T3641] netdevsim netdevsim4 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.109580][ T3641] 8021q: adding VLAN 0 to HW filter on device eth1 [ 575.123266][ T3641] netdevsim netdevsim4 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.136775][ T3641] 8021q: adding VLAN 0 to HW filter on device eth2 [ 575.157491][ T3641] netdevsim netdevsim4 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.172014][ T3641] 8021q: adding VLAN 0 to HW filter on device eth3 [ 575.187295][ T3641] veth0_to_team: entered promiscuous mode [ 575.217533][ T3641] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.231919][ T3641] 8021q: adding VLAN 0 to HW filter on device bond11 [ 575.334360][ T3640] gretap3: entered promiscuous mode [ 575.379707][ T573] netdevsim netdevsim4 eth0: set [1, 3] type 2 family 0 port 20000 - 0 [ 575.432893][ T7478] bond11: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 575.443001][ T7478] bond11: (slave veth5): making interface the new active one [ 575.483530][ T7478] veth5: entered allmulticast mode [ 575.508155][ T7478] bond11: active interface up! [ 575.532125][ T3650] tipc: Enabling of bearer rejected, failed to enable media [ 575.671177][ T573] netdevsim netdevsim4 eth1: set [1, 3] type 2 family 0 port 20000 - 0 [ 575.751821][ T573] netdevsim netdevsim4 eth2: set [1, 3] type 2 family 0 port 20000 - 0 [ 575.787124][ T571] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 575.824420][ T7478] netdevsim netdevsim4 eth3: set [1, 3] type 2 family 0 port 20000 - 0 [ 576.084564][ T3715] syzkaller1: entered promiscuous mode [ 576.110415][ T3715] syzkaller1: entered allmulticast mode [ 576.154503][ T3715] __nla_validate_parse: 11 callbacks suppressed [ 576.154524][ T3715] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8306'. [ 576.192252][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8306'. [ 576.376474][ T3729] netlink: 'syz.7.8310': attribute type 1 has an invalid length. [ 576.428945][ T3729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.449454][ T3729] bond2: (slave ip6erspan0): making interface the new active one [ 576.462419][ T3729] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 576.631510][ T3750] netlink: 'syz.0.8316': attribute type 1 has an invalid length. [ 576.657601][ T3750] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8316'. [ 576.731022][ T3747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.821931][ T3757] netlink: 'syz.4.8318': attribute type 32 has an invalid length. [ 576.885312][ T3764] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 576.906549][ T3763] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 576.936982][ T3766] netlink: 'syz.0.8320': attribute type 3 has an invalid length. [ 576.948663][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8318'. [ 577.101891][ T3774] can: request_module (can-proto-0) failed. [ 577.116047][ T3776] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.8323'. [ 577.154490][ T3774] batman_adv: batadv0: Adding interface: dummy0 [ 577.173227][ T3774] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.205510][ T3774] batman_adv: batadv0: Interface activated: dummy0 [ 577.244942][ T3774] batadv0: mtu less than device minimum [ 577.268163][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.280462][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.292978][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.306429][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.321945][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.337246][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.353163][ T3774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 577.411004][ T3793] netlink: 'syz.3.8328': attribute type 4 has an invalid length. [ 577.474777][ T3793] netlink: 'syz.3.8328': attribute type 4 has an invalid length. [ 577.747132][ T3816] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 577.815368][ T3826] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.8337'. [ 577.821785][ T3816] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 577.883233][ T3816] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 577.907977][ T3816] netdevsim netdevsim4 eth3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 578.011663][ T3829] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8339'. [ 578.045169][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8342'. [ 578.076110][ T3816] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 578.090567][ T3816] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 578.092169][ T3846] netlink: 'syz.6.8342': attribute type 32 has an invalid length. [ 578.104243][ T3816] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 578.126788][ T3816] netdevsim netdevsim4 eth2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 578.231165][ T3816] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 578.243512][ T3816] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 578.258446][ T3816] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 578.272545][ T3816] netdevsim netdevsim4 eth1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 578.292990][ T3852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.404230][ T3857] nbd: must specify at least one socket [ 578.404831][ T3816] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 578.455717][ T3816] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 39490 - 0 [ 578.468493][ T3816] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 578.479490][ T3816] netdevsim netdevsim4 eth0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 578.532773][ T3862] xt_l2tp: missing protocol rule (udp|l2tpip) [ 578.547763][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8348'. [ 578.577285][ T7478] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 578.586408][ T7478] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 578.595667][ T7478] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 39490 - 0 [ 578.605771][ T7478] netdevsim netdevsim4 eth0: set [1, 3] type 2 family 0 port 6081 - 0 [ 578.621949][ T571] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 578.631800][ T571] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 578.640568][ T571] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 39490 - 0 [ 578.649809][ T571] netdevsim netdevsim4 eth1: set [1, 3] type 2 family 0 port 6081 - 0 [ 578.669719][ T573] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 578.681825][ T573] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 578.691610][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802765b800: rx timeout, send abort [ 578.701465][ T573] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 39490 - 0 [ 578.711362][ T573] netdevsim netdevsim4 eth2: set [1, 3] type 2 family 0 port 6081 - 0 [ 578.728391][ T571] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 578.740586][ T571] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 578.749813][ T571] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 39490 - 0 [ 578.758626][ T571] netdevsim netdevsim4 eth3: set [1, 3] type 2 family 0 port 6081 - 0 [ 579.185599][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802765b400: rx timeout, send abort [ 579.198405][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802765b800: abort rx timeout. Force session deactivation [ 579.429806][ T3894] netlink: 276 bytes leftover after parsing attributes in process `syz.6.8359'. [ 579.517193][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.531419][ T3894] bond0 (unregistering): Released all slaves [ 579.546619][ T3898] tipc: Enabling of bearer rejected, media not registered [ 579.568621][ T3902] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 579.579404][ T3902] syzkaller1: linktype set to 823 [ 579.589646][ T3902] syzkaller1: tun_chr_ioctl cmd 35108 [ 579.698027][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802765b400: abort rx timeout. Force session deactivation [ 579.898472][ T3908] bond0: entered promiscuous mode [ 579.909916][ T3908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.932639][ T3917] bridge3: entered promiscuous mode [ 579.942480][ T3917] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 579.979263][ T3924] syzkaller0: entered promiscuous mode [ 579.995755][ T3924] syzkaller0: entered allmulticast mode [ 580.074954][ T3937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 580.181017][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 580.626851][ T3979] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 581.113807][ T4000] netlink: 'syz.3.8393': attribute type 33 has an invalid length. [ 581.226391][ T4000] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 581.250897][ T4000] bond8 (unregistering): Released all slaves [ 581.359794][ T4011] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 581.472661][ T4009] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 581.543751][ T4029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.636634][ T4035] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode [ 581.666973][ T4035] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode [ 581.695146][ T4040] __nla_validate_parse: 15 callbacks suppressed [ 581.695167][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8406'. [ 581.965970][ T4063] SET target dimension over the limit! [ 582.006904][ T4065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.088973][ T4067] net_ratelimit: 13 callbacks suppressed [ 582.089001][ T4067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.110970][ T4067] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8416'. [ 582.126132][ T4068] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8416'. [ 582.172995][ T4074] netlink: 'syz.6.8418': attribute type 21 has an invalid length. [ 582.194502][ T4074] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8418'. [ 582.309247][ T4085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8420'. [ 582.371741][ T4092] netlink: 276 bytes leftover after parsing attributes in process `syz.3.8422'. [ 582.527361][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8423'. [ 582.557286][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8423'. [ 582.737635][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8428'. [ 582.763863][ T4114] bond3: entered promiscuous mode [ 582.771224][ T4114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.817639][ T4113] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 582.838334][ T4113] bond12 (unregistering): Released all slaves [ 582.992202][ T4126] netlink: 'syz.3.8431': attribute type 9 has an invalid length. [ 583.120949][ T4149] openvswitch: netlink: Invalid VLAN frame [ 583.258507][ T4156] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.8438'. [ 583.694548][ T4168] netlink: 'syz.0.8445': attribute type 24 has an invalid length. [ 583.717304][ T4169] : entered promiscuous mode [ 583.833530][ T4172] tcf_pedit_act: 22 callbacks suppressed [ 583.833656][ T4172] tc action pedit 'at' offset 9 out of bounds [ 584.052488][ T4185] netlink: 'syz.7.8451': attribute type 1 has an invalid length. [ 584.087560][ T4185] unsupported nla_type 7424 [ 584.197197][ T4197] netlink: 'syz.6.8456': attribute type 21 has an invalid length. [ 584.499707][ T4215] sch_fq: defrate 0 ignored. [ 584.941481][ T4242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.466513][ T4264] netlink: 'syz.7.8476': attribute type 1 has an invalid length. [ 585.495870][ T4265] netlink: 'syz.0.8478': attribute type 1 has an invalid length. [ 585.525012][ T4264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.609540][ T4270] bond4: (slave geneve3): making interface the new active one [ 585.627541][ T4270] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 585.961249][ T4297] erspan0: entered promiscuous mode [ 586.048786][ T4292] netlink: 'syz.0.8486': attribute type 29 has an invalid length. [ 586.386510][ T4329] vlan3: entered promiscuous mode [ 586.394159][ T4329] geneve1: entered promiscuous mode [ 586.401750][ T4329] vlan3: entered allmulticast mode [ 586.407987][ T4329] geneve1: entered allmulticast mode [ 586.474569][ T4340] syzkaller1: entered promiscuous mode [ 586.485810][ T4340] syzkaller1: entered allmulticast mode [ 587.247455][ T4358] __nla_validate_parse: 50 callbacks suppressed [ 587.247607][ T4358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8507'. [ 587.315681][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 587.344083][ T4363] batadv0: entered promiscuous mode [ 587.351907][ T4363] macsec2: entered promiscuous mode [ 587.362120][ T4363] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 587.375971][ T4363] batadv0: left promiscuous mode [ 587.494905][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8511'. [ 587.611866][ T573] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.632702][ T573] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.652261][ T573] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.671010][ T573] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.716884][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8517'. [ 587.728982][ T4388] netlink: 'syz.4.8517': attribute type 29 has an invalid length. [ 587.747209][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8517'. [ 587.763774][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8517'. [ 587.786538][ T4388] netlink: 'syz.4.8517': attribute type 29 has an invalid length. [ 587.795389][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8517'. [ 587.802532][ T4393] netlink: 'syz.7.8518': attribute type 1 has an invalid length. [ 587.806287][ T4388] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8517'. [ 587.902385][ T4399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.087030][ T4416] batadv_slave_0: Caught tx_queue_len zero misconfig [ 588.437015][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8531'. [ 588.462465][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8531'. [ 588.586681][ T4451] netlink: 'syz.3.8534': attribute type 1 has an invalid length. [ 588.899412][ T4470] : entered promiscuous mode [ 589.130448][ T4485] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8545'. [ 589.140531][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 589.799236][ T4545] validate_nla: 1 callbacks suppressed [ 589.799282][ T4545] netlink: 'syz.0.8562': attribute type 1 has an invalid length. [ 589.863163][ T4547] netlink: 'syz.0.8562': attribute type 1 has an invalid length. [ 589.906804][ T4547] bond12: entered promiscuous mode [ 589.939150][ T4547] 8021q: adding VLAN 0 to HW filter on device bond12 [ 590.016866][ T4547] 8021q: adding VLAN 0 to HW filter on device bond12 [ 590.024428][ T4547] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 590.046042][ T4547] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 590.074901][ T4571] netlink: 'syz.6.8569': attribute type 17 has an invalid length. [ 590.086485][ T4547] bond12: (slave ip6gre2): making interface the new active one [ 590.086514][ T4547] ip6gre2: entered promiscuous mode [ 590.097675][ T4547] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 590.098154][ T4567] bridge0: Caught tx_queue_len zero misconfig [ 590.125564][ T4564] tipc: Enabling of bearer rejected, failed to enable media [ 590.125931][ T4573] netlink: 'syz.6.8569': attribute type 62 has an invalid length. [ 590.139041][ T4565] tipc: Enabling of bearer rejected, failed to enable media [ 590.246457][ T4583] netlink: 'syz.4.8571': attribute type 1 has an invalid length. [ 590.810897][ T4632] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 590.823786][ T4631] xt_hl: Unknown Hop Limit match mode: 206 [ 591.004961][ T4648] tipc: Enabling of bearer rejected, failed to enable media [ 591.027067][ T4648] netlink: 'syz.0.8589': attribute type 1 has an invalid length. [ 591.034835][ T4656] netlink: 'syz.3.8591': attribute type 17 has an invalid length. [ 591.093952][ T4648] 8021q: adding VLAN 0 to HW filter on device bond13 [ 591.105831][ T4656] gretap0: entered promiscuous mode [ 591.117855][ T4656] gretap0: left promiscuous mode [ 591.139637][ T4669] netlink: 'syz.7.8593': attribute type 2 has an invalid length. [ 591.183981][ T4669] netlink: 'syz.7.8593': attribute type 8 has an invalid length. [ 591.193863][ T4659] bond13: (slave geneve3): making interface the new active one [ 591.206892][ T4659] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 591.427576][ T4691] openvswitch: netlink: Multiple metadata blocks provided [ 592.044138][ T4723] veth0: entered promiscuous mode [ 592.173807][ T4721] veth0: left promiscuous mode [ 592.312974][ T4744] __nla_validate_parse: 16 callbacks suppressed [ 592.312994][ T4744] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8612'. [ 592.336830][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8613'. [ 593.017169][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.033081][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.046521][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.066240][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.100655][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.100676][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.137326][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.150914][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8624'. [ 593.364194][ T4806] syzkaller0: entered promiscuous mode [ 593.371249][ T4806] syzkaller0: entered allmulticast mode [ 593.440638][ T4808] xt_hashlimit: size too large, truncated to 1048576 [ 603.868171][ T7477] vlan2: left allmulticast mode [ 603.875392][ T7477] bridge_slave_0: left allmulticast mode [ 603.884078][ T7477] vlan2: left promiscuous mode [ 603.889707][ T7477] bridge_slave_0: left promiscuous mode [ 603.897406][ T7477] bridge0: port 3(vlan2) entered disabled state [ 603.927592][ T7477] pimreg: left allmulticast mode [ 603.964306][ T7477] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 604.072554][ T7477] bond5 (unregistering): (slave geneve3): Releasing active interface [ 604.106162][ T7477] bond0 (unregistering): (slave bridge5): Releasing backup interface [ 604.132649][ T7477] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 604.143572][ T7477] bridge10 (unregistering): left promiscuous mode [ 604.153732][ T7477] bond8 (unregistering): (slave bridge11): Releasing active interface [ 604.164752][ T7477] bridge11 (unregistering): left promiscuous mode [ 604.183090][ T7477] bridge11 (unregistering): left allmulticast mode [ 604.204042][ T7477] .` (unregistering): Released all slaves [ 604.214804][ T7477] bond1 (unregistering): Released all slaves [ 604.233487][ T7477] bond2 (unregistering): Released all slaves [ 604.252109][ T7477] bond3 (unregistering): Released all slaves [ 604.267543][ T7477] bond4 (unregistering): Released all slaves [ 604.282729][ T7477] bond0 (unregistering): Released all slaves [ 604.296314][ T7477] bond5 (unregistering): Released all slaves [ 604.315565][ T7477] bond6 (unregistering): Released all slaves [ 604.329248][ T7477] bond7 (unregistering): Released all slaves [ 604.348750][ T7477] bond8 (unregistering): Released all slaves [ 604.415013][ T7477] : left promiscuous mode [ 604.462112][ T7477] tipc: Left network mode [ 605.094346][ T7467] smbdirect: ib_dev[syz2] removed [ 605.357909][ T7477] IPVS: stop unused estimator thread 0... [ 605.780273][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.780497][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.343214][ T1327] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 639.703375][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.860844][ T30] INFO: task syz.2.7382:32555 blocked for more than 143 seconds. [ 667.869129][ T30] Not tainted syzkaller #0 [ 667.874312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.883362][ T30] task:syz.2.7382 state:D stack:24848 pid:32555 tgid:32552 ppid:27613 task_flags:0x400140 flags:0x00080002 [ 667.895491][ T30] Call Trace: [ 667.898801][ T30] [ 667.902144][ T30] __schedule+0x17d9/0x56c0 [ 667.906901][ T30] ? trace_irq_enable+0x3b/0x140 [ 667.912329][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 667.919361][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 667.924923][ T30] ? genl_rcv+0x28/0x40 [ 667.929130][ T30] ? __pfx___schedule+0x10/0x10 [ 667.934392][ T30] ? rcu_is_watching+0x15/0xb0 [ 667.939459][ T30] ? rcu_is_watching+0x15/0xb0 [ 667.944694][ T30] ? lock_release+0x4b/0x3c0 [ 667.949323][ T30] ? rcu_is_watching+0x15/0xb0 [ 667.955285][ T30] schedule+0x164/0x360 [ 667.959703][ T30] schedule_preempt_disabled+0x13/0x30 [ 667.965663][ T30] __mutex_lock+0x7bf/0x1550 [ 667.971535][ T30] ? __mutex_lock+0x5d4/0x1550 [ 667.976350][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 667.982224][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 667.987279][ T30] ? __nlmsg_put+0xef/0x1b0 [ 667.991949][ T30] ? genlmsg_put+0x137/0x2e0 [ 667.996582][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 668.002457][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 668.008650][ T30] ? __nla_parse+0x40/0x60 [ 668.013357][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 668.020215][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 668.026635][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 668.032624][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 668.038748][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 668.044087][ T30] genl_rcv_msg+0x614/0x7a0 [ 668.048605][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 668.054057][ T30] ? ref_tracker_free+0x689/0x830 [ 668.059188][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 668.065702][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 668.071258][ T30] netlink_rcv_skb+0x226/0x4a0 [ 668.076593][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 668.081721][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.087030][ T30] ? down_read+0x2be/0x330 [ 668.091858][ T30] genl_rcv+0x28/0x40 [ 668.095966][ T30] netlink_unicast+0x7bb/0x940 [ 668.101362][ T30] netlink_sendmsg+0x813/0xb40 [ 668.106211][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.111727][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 668.116710][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 668.122777][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.128108][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 668.133101][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.138430][ T30] ? lock_release+0x4b/0x3c0 [ 668.143112][ T30] ? import_iovec+0x73/0xa0 [ 668.147659][ T30] ___sys_sendmsg+0x2a5/0x360 [ 668.152776][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.158066][ T30] ? futex_wake+0x51b/0x5f0 [ 668.162750][ T30] ? __fget_files+0x2a/0x420 [ 668.167366][ T30] ? __fget_files+0x3a2/0x420 [ 668.172396][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 668.177383][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.183548][ T30] ? rcu_is_watching+0x15/0xb0 [ 668.188366][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.194619][ T30] do_syscall_64+0x174/0x580 [ 668.199257][ T30] ? trace_irq_disable+0x3b/0x140 [ 668.204474][ T30] ? clear_bhb_loop+0x40/0x90 [ 668.209182][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.215487][ T30] RIP: 0033:0x7f54ec99ce59 [ 668.220406][ T30] RSP: 002b:00007f54ed76e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.228878][ T30] RAX: ffffffffffffffda RBX: 00007f54ecc15fa0 RCX: 00007f54ec99ce59 [ 668.237054][ T30] RDX: 0000000004040090 RSI: 0000200000000000 RDI: 0000000000000008 [ 668.245359][ T30] RBP: 00007f54eca32e6f R08: 0000000000000000 R09: 0000000000000000 [ 668.253630][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.262038][ T30] R13: 00007f54ecc16038 R14: 00007f54ecc15fa0 R15: 00007ffd723f49a8 [ 668.270519][ T30] [ 668.273643][ T30] INFO: lockdep is turned off. [ 668.278494][ T30] NMI backtrace for cpu 0 [ 668.278512][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 668.278531][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.278542][ T30] Call Trace: [ 668.278549][ T30] [ 668.278557][ T30] dump_stack_lvl+0xe8/0x150 [ 668.278584][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 668.278657][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 668.278700][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 668.278719][ T30] sys_info+0x135/0x170 [ 668.278734][ T30] watchdog+0xfd7/0x1030 [ 668.278764][ T30] ? watchdog+0x1c7/0x1030 [ 668.278786][ T30] kthread+0x388/0x470 [ 668.278812][ T30] ? __pfx_watchdog+0x10/0x10 [ 668.278830][ T30] ? __pfx_kthread+0x10/0x10 [ 668.278852][ T30] ret_from_fork+0x514/0xb70 [ 668.278880][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 668.278895][ T30] ? __switch_to+0xc89/0x1420 [ 668.278918][ T30] ? __pfx_kthread+0x10/0x10 [ 668.278933][ T30] ret_from_fork_asm+0x1a/0x30 [ 668.278958][ T30] [ 668.278964][ T30] Sending NMI from CPU 0 to CPUs 1: [ 668.392384][ C1] NMI backtrace for cpu 1 [ 668.392403][ C1] CPU: 1 UID: 0 PID: 7467 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 668.392422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.392433][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 668.392549][ C1] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 668.392571][ C1] Code: a6 b9 a7 0a e9 81 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 31 05 00 00 48 89 c4 48 89 e7 e8 b6 b8 a7 0a e9 61 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 [ 668.392586][ C1] RSP: 0018:ffffc90003b5f4e8 EFLAGS: 00000002 [ 668.392599][ C1] RAX: 0000000000000000 RBX: ffffffff818e3d9e RCX: 0000000080000002 [ 668.392611][ C1] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 668.392622][ C1] RBP: 1ffff9200076bec0 R08: 0000000000000000 R09: 0000000000000000 [ 668.392633][ C1] R10: ffffc90003b5f618 R11: ffffffff81b10630 R12: dffffc0000000000 [ 668.392645][ C1] R13: ffffffff8176a21f R14: ffffc90003b5f5c8 R15: 1ffff9200076beb9 [ 668.392657][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 668.392671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.392682][ C1] CR2: 00007f6b2d65cc69 CR3: 0000000034572000 CR4: 00000000003526f0 [ 668.392696][ C1] Call Trace: [ 668.392702][ C1] [ 668.392708][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xf/0x40 [ 668.392731][ C1] Code: 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 93 3e 89 04 00 74 1d <83> 3d 6a 70 89 04 00 74 14 65 48 8b 0d 68 65 92 07 31 c0 83 b9 9c [ 668.392745][ C1] RSP: 0018:ffffc90003b5f518 EFLAGS: 00000202 [ 668.392758][ C1] ? unwind_next_frame+0xac/0x2550 [ 668.392777][ C1] unwind_next_frame+0xb5/0x2550 [ 668.392797][ C1] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 668.392812][ C1] ? unwind_next_frame+0x8f/0x2550 [ 668.392830][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.392852][ C1] arch_stack_walk+0x11b/0x150 [ 668.392873][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 668.392895][ C1] stack_trace_save+0xa9/0x100 [ 668.392915][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.392936][ C1] ? stack_trace_save+0xa9/0x100 [ 668.392957][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.392978][ C1] kasan_save_track+0x3e/0x80 [ 668.392998][ C1] ? kasan_save_track+0x3e/0x80 [ 668.393017][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 668.393037][ C1] ? kmem_cache_alloc_node_noprof+0x380/0x680 [ 668.393057][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 668.393109][ C1] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 668.393125][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 668.393161][ C1] __kasan_slab_alloc+0x6c/0x80 [ 668.393183][ C1] kmem_cache_alloc_node_noprof+0x380/0x680 [ 668.393204][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 668.393222][ C1] ? kmem_cache_alloc_node_noprof+0x23a/0x680 [ 668.393244][ C1] __alloc_skb+0x1d7/0x7a0 [ 668.393265][ C1] nsim_dev_trap_report_work+0x25f/0xb40 [ 668.393286][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 668.393305][ C1] process_scheduled_works+0xa8e/0x14e0 [ 668.393340][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.393359][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.393380][ C1] ? assign_work+0x3cf/0x5d0 [ 668.393401][ C1] worker_thread+0xa47/0xfb0 [ 668.393430][ C1] kthread+0x388/0x470 [ 668.393444][ C1] ? __pfx_worker_thread+0x10/0x10 [ 668.393463][ C1] ? __pfx_kthread+0x10/0x10 [ 668.393477][ C1] ret_from_fork+0x514/0xb70 [ 668.393493][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 668.393508][ C1] ? __switch_to+0xc89/0x1420 [ 668.393530][ C1] ? __pfx_kthread+0x10/0x10 [ 668.393545][ C1] ret_from_fork_asm+0x1a/0x30 [ 668.393569][ C1] [ 668.764633][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 668.771497][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 668.780623][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.790667][ T30] Call Trace: [ 668.793957][ T30] [ 668.796872][ T30] vpanic+0x56c/0xa60 [ 668.800865][ T30] ? __pfx___schedule+0x10/0x10 [ 668.805705][ T30] ? __pfx_vpanic+0x10/0x10 [ 668.810198][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 668.816335][ T30] panic+0xc5/0xd0 [ 668.820043][ T30] ? __pfx_panic+0x10/0x10 [ 668.824487][ T30] ? preempt_schedule_common+0x82/0xd0 [ 668.829945][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 668.835321][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 668.841465][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 668.847607][ T30] watchdog+0x1030/0x1030 [ 668.851936][ T30] ? watchdog+0x1c7/0x1030 [ 668.856338][ T30] kthread+0x388/0x470 [ 668.860394][ T30] ? __pfx_watchdog+0x10/0x10 [ 668.865070][ T30] ? __pfx_kthread+0x10/0x10 [ 668.869660][ T30] ret_from_fork+0x514/0xb70 [ 668.874264][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 668.879361][ T30] ? __switch_to+0xc89/0x1420 [ 668.884030][ T30] ? __pfx_kthread+0x10/0x10 [ 668.889119][ T30] ret_from_fork_asm+0x1a/0x30 [ 668.894190][ T30] [ 668.897625][ T30] Kernel Offset: disabled [ 668.901971][ T30] Rebooting in 86400 seconds..