last executing test programs: 4m16.464225753s ago: executing program 3 (id=940): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4}, {0x6, 0x2, 0x9, 0x1, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffb, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (rerun: 32) 4m16.250538655s ago: executing program 3 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[], 0xa) (async) socketpair(0x26, 0x6, 0xd, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)=""/120, &(0x7f0000000300)=0x78) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1f, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r4, 0x0, 0x0, 0x880, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYRES16=r8], 0x44}}, 0x0) r10 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000100)=0x4, 0x4) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m16.039072679s ago: executing program 3 (id=946): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x86, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab502617b472091a730e36aabb2f2426a24a29edbed9463081eef61aa7fab052ffcc89b4bac5bae255a31da7c7b87aca6e0a240ce57daf09b305e2cd418404d54cdca435ab392d48aa01019845", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac02}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async, rerun: 32) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000005c0)=""/64, 0x40}], 0x2) (rerun: 32) 4m15.961965065s ago: executing program 3 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006800d3dda6a0df21c74a0100030000000000008000000000000000000c000200010000000600000014000600fe80000000000000"], 0x38}}, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x3c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r5, 0x0, 0x48844) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008800) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) clock_gettime(0x5, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe56, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x40000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@TCA_CHAIN={0x0, 0xb, 0x98}]}, 0x40}}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m15.659707833s ago: executing program 3 (id=954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe1}, {0x10, 0x9}, {0x4, 0x6}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) 4m15.587729547s ago: executing program 3 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) 4m0.530622085s ago: executing program 32 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) 2m33.461295598s ago: executing program 0 (id=2000): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2m33.296897299s ago: executing program 0 (id=2002): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000003580)) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) write$cgroup_subtree(r5, &(0x7f0000000640)={[{0x2b, 'pids'}, {0x2d, 'perf_event'}, {0x2b, 'perf_event'}, {0x2d, 'blkio'}, {0x2d, 'cpuacct'}]}, 0x2e) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x48) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4, 0x4000010, r8, 0xef47a000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000440)={@local, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x3, 0x4, 0x16, 0x68, 0x57, 0x9, 0x8, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}}, "ad31"}}}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGEOMETRY_V1(r10, 0x80705864, &(0x7f0000000700)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, [0x0, 0x1, 0x2, 0x18, 0x7ff, 0x2, 0x4, 0x7, 0x10, 0x10000, 0x3f9, 0x2, 0x2a03, 0x7, 0x3]}, &(0x7f0000000200)=0x100) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="07000000178000"/20], 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) 2m32.855851191s ago: executing program 0 (id=2007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c8002800800149bb1b937ff"], 0x3c}}, 0x0) 2m32.35422682s ago: executing program 0 (id=2010): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) shutdown(r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 2m32.075063623s ago: executing program 0 (id=2014): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf250000000000000000000000000000000120010000000000000000000000000001000000004e220002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r2, @ANYBLOB="0c000200"], 0x28}}, 0x48000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 2m31.697933506s ago: executing program 0 (id=2020): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m30.900605757s ago: executing program 4 (id=2032): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300}, 0x0) (async) r0 = socket(0x10, 0x6, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async) r1 = socket$inet(0x2, 0xa, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000040000000060a010400000000000000000100000008000b40000000000900010073797a300000000018000480140001800b0001007470726f7879000004000280140000001100010000000000000000100000000a"], 0xb4}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dvmrp0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0xeffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0xffff, 0xffff}, {0x9, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x2e, 0x2, "cf4d7628d8422dcc8dae3397ae35fa1b5777c1382b6cf7b0ebc05a19b8d6e64de53b30736e27f5a2841e"}]}}}]}, 0x7c}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {0x5, 0x6}, {0xffff, 0xa}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8815}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000006c0)=ANY=[@ANYRES64=r4, @ANYRES16=0xffffffffffffffff, @ANYBLOB="050427bd7000fedbdf250100000000000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000599d788156d04376b29f84d218afc486478733245757c3b14b73522afd9fda36ffecb4e9b2f293d373e0efc2303e24da47263638fece7e44e8ee67b44a562376251c2cb169c488e368180d43978c55a65d54ee5b1e1087c50ba1e59631a380358d8d1e7355c4c74f0baba1350a28d6218547c63c1ba1e1728d57b241e7ce0dda274557f040891c01996"], 0x60}, 0x1, 0x0, 0x0, 0x24004450}, 0x20008080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r6], 0x5b) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000019000000801800009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000002e0038f4f40900000000000055090100000000009500000000000000bf91000000000000c4e1b7000000be36f2e3f45d3233000000003de37685cc593f18e7d6b831a0708851e6f28f5a240d2601ba35e90bb32bd17ac0dcb046bff07c3d"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) (async) recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m30.699396202s ago: executing program 4 (id=2034): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x2e, 0x0, 0x0]}}, 0x0, 0x1d}, 0x28) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0x900, 0x0, 0xfffffffc, {0x0, 0x0, 0x12}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x21, 0x6, 0x8, 0x2, 0xc74, 0x2, 0x3}}, {0xa, 0x2, [0x3, 0x3, 0x6]}}, {{0x1c, 0x1, {0x6, 0x6, 0x2, 0x9, 0x2, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x6, 0x2, 0x7, 0x101, 0x4, 0x8, 0x5]}}, {{0xffffff35, 0x1, {0x4, 0x3, 0x400, 0x2, 0x0, 0x5, 0xb44, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0xa4}}, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 2m30.518097232s ago: executing program 4 (id=2036): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100), 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fcb60300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000000c0)=0xa, 0x0) (async) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) read$alg(r4, &(0x7f0000002200)=""/4138, 0x102a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x7, 0x700, 0x3, 0x6fe, {{0xc, 0x4, 0x3, 0x19, 0x30, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x13, 0xf8, [@loopback, @empty, @loopback, @local]}, @timestamp={0x44, 0x8, 0xd, 0x0, 0x9, [0x5]}]}}}}}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x90, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r9, &(0x7f0000000180)="9910d6c6ff15d1d1b8e2a38328f20727faf05ae34711a032d6945edc88da965bbc99df4e78012f8df9cec1d9ec7c4cd8", &(0x7f0000001080)=""/4096}, 0x20) 2m30.321005628s ago: executing program 4 (id=2038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) close(0x3) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="001f2bbd7000fedbdf2512000000080058ea171d3c4166a9150001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x88c4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m30.186432113s ago: executing program 4 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000007691b711000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x4, @val=@iter={0x0}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x20, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r8, 0x11e, 0x60, 0x0, &(0x7f0000007cc0)) (async) getsockopt$ARPT_SO_GET_INFO(r8, 0x11e, 0x60, 0x0, &(0x7f0000007cc0)) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002d40)=@newtfilter={0x1474, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {0x0, 0xffe5}, {0x7, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1444, 0x2, [@TCA_CGROUP_ACT={0x1440, 0x1, [@m_mirred={0x84, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x0, 0xffffffff, 0xfff}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0xb, 0x1, 0x5, 0x40}, 0x2, r1}}]}, {0x15, 0x6, "b7a9c70f51bc383ad7bfafaf0854c27743"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf0, 0xc, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x11, 0x0, 0x7, 0x905}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x87, 0x6, "433606b0fe934c6aa1039011f579bf8ccea73e285091c05a498d3fe86739fd25d7dbdcd09bdc4e1f8302fe8c456570e5cc5a209bbc447b501734b43a2349069c8f89f2b0ab15399a8f7029803a1ed940005bb6e72864f890be7d2f22811053437d4bcf617acfa9838a959caf00fb736cee1feccebc877f7f1a7b284d7041b8f32080d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x1144, 0x4, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x2, 0x7ff, 0x2cd8}, @loopback, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x79, 0x0, 0x3, 0x4}, @local, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xaf1, 0x3, 0x1, 0xfffffff2}, @multicast1, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x6, 0x0, 0xa}, @remote, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x7, 0xd3fc0151, 0x80000001}, @remote, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd757, 0x0, 0xffffffffffffffff, 0xa9, 0x7fff}, @multicast1, @local, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xa4, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x71, 0x6, "b347ec4bb0e625a54a2342fd88bc0b8b9ec0c466dc13f394feb6cd9fd2cd6b5223fca9c059b524bd2b4cd2e5eb1b39a336a37b6180175dfd5f6865248470efd342a4b4e7707ca13bb089a2347256f454b9b43ca2f55870aa0d16b4202d73f05c665e51e51ebc0dd21913cc76f4"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xe0, 0x1a, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="3fe114201053"}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x10}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x6ada, 0x3, 0xc, 0xfffffffa}}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x8, 0x8, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8001, 0xb, 0x5, 0x8315, 0x7}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x1b, 0x6, "2212916f8e45da5a92637ac7a7e943f086c03743746fb1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1474}, 0x1, 0x0, 0x0, 0x48001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$kcm(0x11, 0x3, 0x0) (async) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="250522fac031b3f7885bb5b273f3d6cd8e444decd66059c94e50c9850e17a66f2f2a16268d201914648d882cec76847359d8dbf591647fd255d0b2876b64a487cf062561d76b9fdd6089d2a32e5e5790ebfd70c9e9b38275c2c2dab93f97ec6d25919c01b2be296d2375414276e07f20343fcc354f27791bc10935f2e9f59911179229db", @ANYRES16=0x0, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="250522fac031b3f7885bb5b273f3d6cd8e444decd66059c94e50c9850e17a66f2f2a16268d201914648d882cec76847359d8dbf591647fd255d0b2876b64a487cf062561d76b9fdd6089d2a32e5e5790ebfd70c9e9b38275c2c2dab93f97ec6d25919c01b2be296d2375414276e07f20343fcc354f27791bc10935f2e9f59911179229db", @ANYRES16=0x0, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000940)=ANY=[@ANYRES8=r7], &(0x7f0000000480)='GPL\x00'}, 0x94) 2m29.944273914s ago: executing program 4 (id=2044): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x10003, @remote, 0xf}}, 0x0, 0x0, 0x6, 0x0, "30fa9375120054c1b5a34f91c57d8c79f12c8b320f1c000000000000370ca14e54017a80a3d3e78f7a7bac5800008d01b9c347583f91776f8976917a816cc3b500"}, 0xd8) syz_emit_ethernet(0x86, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaad1cfae71bc886dd60ab000100500600fe8000000000000000000000000000bbfe8000000000000000000000000000aafffe4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d400a388907800001e0c120500020000050000001312"], 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000003180)) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2600330066f409b6a2e0662d3b8f57e094b600080211000000080211000000505050505050436a58018dc004040100ad0b00000000065b1045b83c8ab8dd1939ae43ea3307ef75430c6f3283fb44ea44200b09ad51ec04223c95123ec90a32e30f14e1fa5893652e06412833f6bea88d0c58298f71814394d7bdb4628d95abad3d9bb4a2bdc8602fd259e70894f34843c00562c3"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m16.633832695s ago: executing program 33 (id=2020): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m14.680952388s ago: executing program 34 (id=2044): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x10003, @remote, 0xf}}, 0x0, 0x0, 0x6, 0x0, "30fa9375120054c1b5a34f91c57d8c79f12c8b320f1c000000000000370ca14e54017a80a3d3e78f7a7bac5800008d01b9c347583f91776f8976917a816cc3b500"}, 0xd8) syz_emit_ethernet(0x86, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaad1cfae71bc886dd60ab000100500600fe8000000000000000000000000000bbfe8000000000000000000000000000aafffe4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d400a388907800001e0c120500020000050000001312"], 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000003180)) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2600330066f409b6a2e0662d3b8f57e094b600080211000000080211000000505050505050436a58018dc004040100ad0b00000000065b1045b83c8ab8dd1939ae43ea3307ef75430c6f3283fb44ea44200b09ad51ec04223c95123ec90a32e30f14e1fa5893652e06412833f6bea88d0c58298f71814394d7bdb4628d95abad3d9bb4a2bdc8602fd259e70894f34843c00562c3"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.077332227s ago: executing program 2 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="d42297de66f7f372160007005e00250e00000000000000000c000080080000000600000004000080"], 0x20}], 0x1}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000300)=@ax25={{0x3, @default}, [@bcast, @remote, @rose, @bcast, @default, @default, @bcast]}, 0x80, &(0x7f0000000380)}, 0x2041) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x286, 0x4) close(0x3) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 4.24624874s ago: executing program 5 (id=3292): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="adcd1a9a3fc36e961ed00fe41b0cd6959ab77f070f532c9b7038515e5670281cda3304fda0448a35496d0d55032934764954960d0139bba555d1698f8e81abb5bcbfd691fd2233551e91935a91c36251cc0400", 0x8b02464c4ed2db90) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001c06fcfe800000000000000000000000000094fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06e2d4c3d90000"], 0x0) 4.021658603s ago: executing program 2 (id=3295): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x148, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x84) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.018413663s ago: executing program 5 (id=3297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, @const={0x9, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {0xd}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$xdp(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000007c0)="8cd702f780d4990473b0a32f844a0022a01512f43c3a7a65c34e0679f730791f43162562f3d3e2524b38c954d4fe5192e31499a7d24cd480dc1769ff77a6739e1efbd665ebe7712768f2838c7b522b9473a6e5131f7eb7537c251495d35d29c45dacbad8c9ec94bf05aec45b5fe9b575e113005d05e9fcd895da55b70fc78f61d56f73ae287e1a8e9c1a7bda7bf071ece34c6db21808a355e5d280f16fb276bfbe4dad98559d933834e1da074e9dbc48307f83e338ca26355d1eb9cd855931cb04af64ffd5ec7bd21b69827071a93d8216", 0xd1}, {&(0x7f00000008c0)="22ac93a0e3b5c17b8002bf12c1668cd483906a5e8d10a4145ba79ca843aa1178c4a05332d885af65cfd648e6cee8dde1f9bddcae4be9c176f54a096eefb855206097e67097b37a53780e32832e390db8ffdcbe233585d344e66b96ddd3264db9de6b897f7075d9fcaacad8ab65ad88e3", 0x70}, {&(0x7f0000000940)="307dfa2674fd54aa02dfbc4087d1f216fa8d21e568633082daceaf79557af731b2bcc570550a8f1416397aa06abf13039e578a2c214c3ea17b900ec22076ea1248b32948967a95b1b30fd4243c864f4d691c6cc3021fa677574a9f7dc1f9db162e17774393b7711db8cf72598e12f15581bb22bb396b97b4708cd3bf1f5300370915302e31027b40925a9991b2a8812bdbf3bd20fa", 0x95}, {&(0x7f0000000a00)="711babd47055729b12596a46fecb1a82141bf2d7e42ac821af3c5e9b44dcf4b884a8eea8ece12bcc87e008", 0x2b}, {&(0x7f0000000a40)="752a4de479bf1f769bba1d8e3349ea7ee4556bfcce14f7faaff4d21e332b64c6510af8dfe6410043a4f10a240c7276826e6a8cb1e087df767af365e7878bbe554761e3b81447e6820c7233d2fa10ed46d62637d9e2b4c05c6af789ab305169b3635222efe0a3b68ff55df500c33f678683af572d5fdc933ea2664ed720de01209dd084902ab6956d4a6aee5f1d29c03cee33d0afe5390f23f776b65ba0f93f544a3bebfe2fb29c40b12e92542c0d16f0e1357b65894b237ba6b15a2f807d1a23210d96838c31c5084fd9cce36ae73ef992dc1502cd48b931c30fc8f66e979beba91c0fbe885eec78f9c780e5d9", 0xed}, {&(0x7f0000001840)="41d94062c88a2c82be0155901766eae2993de9032cd2e1b707612aa59ad52ac71e412efc4878940bf16ed68610a4ba93bb676c2a4d3e37a48e50d787e0aeab678664cc5f6cbbc591ae027e1bc920ce1d1e17ae37c3594c7fcaaccbea96ed5a949d2e2fcc95f640a35ebabd1c94700538504515f02f03145842db8e3c2583c977e5e7815bfd98a3924e19927bd40726d31c61827e7b18bbfec722d7c3b11c89cbf9493631180d4100027ae7e986912614e7f0138df06d0a0239f204d741095c70d624099a78852d947263eb58c48117a605f86ff505f40a377e4508e55ca2c959c49c9da446ada7af1b988cf62c0162d3ab46ebe92609ce087e2c2c34b971b642630067af3b4a57c78e28dff8286c1327cefaa8b3bc579d1ed73fbd774c50d1829709c9bcc34b25e1ee10775ad4ccd8a608b19cc88efb211536cc6293a60bdcebbf2d8218febe94a93fa0a942cede7ac6e99a7fbe3650e58eb25d3fddb60efdc2d6a2bf9cdfb03a784b518dd39005dad0bfea12a98bb56cdc5e7b49f1657eefe98ebb41e40427fec44c15fac1678a4a1b82dec6689dfedc4784593d9fed4a89943da91263055a8f35f22d095e4f6f72d12ddd024b79fe8f4e72364ce1fa73d8fd3a1fcaf541b0c975f9c29e3429aabdc0c3f914ea3e2e1523f16764ae972c089b555c26ced29833ad9dcd1c29c45ec2672a482cc75bdb1bf21a0af7a920ec3d50077cf5d123362dc67f3588cd2ef8c5017d4eff9762d78a08f6217c0b063f5df55d495f31fedfd343cf326e3df56673f38f2d8c56ed885475babbf4e14112c56b821eb36910482ce425fec2d12a42f68607ceeb0b76ea368e71c085839e848fbc9f2afc484962d2a39008ee5643a1f096ffbfa6ec6fc06741d975f727a9bbcdf911ede75b2120c05e4a34025a952012ab50fae68f233bcb8c15239cda7013f1d07f4f3d3324638f8a4a027406bfbc68a8acece0d6bc52d959e2bd18a04ca9040f005da99742baa1ee093052e152ffac28424f0ffaf856080c5187ffc3b8f222a2a744551282e1c0633c84e238b6bdff25fcd7daa1e78d97fbcf7490cd464e2abbb1607a45d59cdb1e6d01f47d3b470025411a09e53e2d3866b9830dc9d68a699c2687e9771c8f6bfc6ce17a408d1ee562eecd3f642609165288d818cbdfbfc0388f2dd1d30495386f0d47b121e3a3e571b16d08da73de50ab1151337c42e18459876e7d2655cdb2c5b650b9aeefb2ac5db648ddb99fe781aae34d803aa61523879fc97b693794a2555251d0cbf38161d5abadb576564236f72aacc7a865720bd1d8d312e44db7e50b2dbe666bb9ead9da6bfe0e738309f242e889e02a15bc7e3e4a6b89bf86f7ca25ab7091a8a52679c3fa1306354daf9600695221b75f41e93ae484331421f61a55214b49664d030ea5816eadf2105f2944bc7a23d08340523dce0f3be0fc76c38928d8d3df3db8205798b3acf34365eb4d54bae3eef114443a450b0f4b9608a3312857b83674934a2c953a7127a631b35d64d190126d95b93abf149b12fd59b6b41fa501dc29a227ea80bcf42dae1f88527905f1d20d20f3eceda63e2b10a0a5d0e0991e617507e201a88605dffee0d6a8e7325cbfee4da70aa7157adc98732a50dd528a75a11a08b3b42c1f69f28b0a5d10473311deb9ede3f45e17c5be83275bf6ed7df2ea5cf8139fc4de88cf844657cbb34204f048a67904684658d656ad824ad6e023cc05527efdf158f880ee38a49ba2973b6472208bb1e16e27560d0de0346bacb6d871ec3935ca135650ec832f79be26ba793fd38df4bea1d156a0e974473081e28cebe8fe29aee5f833d6cfa64741781f8942c720b4424beeade553f47da69b36ed9e3d878a540508a19f14f5b9271a70299636f271ea4cf4096694f0e1470a47cf6dbab6129ab682a094548629b073482b545dd84bfb01caca893df5546e832d190e463407f68c7d5948065e54ed62f5ecdea4088891fe226f6add438a6173e9ddd3af96d7e779a0e5afc5b329f51d6a35615398e086ff23ff2bfb18a4c26816b4c32a9e51fc388ba40e2e38ad2a69bfd36eb67f821deb34568249fca8846132b69da65cc1e221e63f570090cfca118639f08cf247785a8f8c22438bf56b6d8bbdc548cb386757c56a8c05388dfc141229e343c50d48af610e35f7b0eedf29dfa453193f8b023225db49e2d2fe275b969f0a29336ab26e6ceffefb7a16d9e91e460206c133ba78989d44e5bd479f5efa77d6d9210cbe6826ffbcf53540038e6873373bb7601edd5d5332ab516a04178d8722ab89c54e7bb2f8641e7d5efd90b0004bacf68bf7ef442fb5d691af385c75415e498c4016422385fc7a2fb50c24d688360a3943fab9a45322c742141a73e17f970e6faa73f976fa9c64e5592ad2470c5c4cd454d5b3ad43877d751e96947537a8b017459027482b49df0ed1cb8bdec7b5705e0688fce9152d2a312f04434f7f5ea74e723bbeba596aa8dde25a40b3a142a3411e66e24d1b977f54d2287c4b45aaa93c29502d154891e7fb250aeeff6f21f6e38aebd17ee5548dc36331e41a274bcc1ea7d25b097b89cc2ca8de4b279bf2882624c2aaee5a28a3961dae144e91668eb8a3a2e2cea6aa251a28f456366c64100feb1f14b91382eb6ef367bd08a747c4307602f034fd3da6f381ece7a3786f21d437ab46ae88c80a66bed71d19f3c76c6038d6e59d2a83a954384a6e4a137ee6d3e0451fe3c399f13457d07d4d6dbf287c2490eec20ae813a8891e61434e394d210961f59a0b4e228e95cc72fd9b693497cf559f7e37817dd2e3a1c3ad847dddb70ed20d809132a733fc34c078bc6bbef9f004aa6c53f270b492a3ee21232ff47f35ecdba4691f1dd1d300c47515f5da83c71e8ae27816af24163a3e310f6f48fb3862dbd22476ca94258fcac26d25a17800752028002f513547c4639bb7cea88d00c8b89a617c1a9cf7ba65851728e4d09f7f5237119eb498028a3ad114d932c61ffb674c5aabe3b2163d067f1aaf2a1e579a8023ef0b32da4e1d46625bc1865033a927cc7ddf0fa41bdd8286aea1a38c87a61736ac8443213fa8f6641cf989a01bb06f82e10f40f1f39745e621ed9ff292496c1e9fb8cf3238e638f184a976899a01ed42f5b6397eada0abe966f9c3136f8413eefe29cc818c257d7349475fc08ebf9acf330e132c0a3f17040ccd091dce50f5927c0c625d40200b49aec7a501f3a9a8fe8f1b3584cf06856db8329e9ff22f63d541ce0577fca548d0d161c92e597bcccd6af68bcdbbabb075dabf878d8b5fab061c04859c60b16e9278de84a701fd5e35552b60813a8b14e3f95f1c1ac8bf8212040959fdf6376d06c7bb6a033681cc6dcf91f286c17ed67f7bbd165c164d10b0de42a608bd053c75a01092b409291966787cce950b32386eae28df2e228eb3a255490cb88266041e7937c7c74f3295725f4f1a60d054f687caaab12c42fe7f152d062969e549cdb14a32fc8b12a70280a08b26c399f5eee03949d9ed8b8b35eb7f9ba9bb6a9444235987cefbbfb6339cb7098f8b59a93f703bb5a89897735cc452dd624b7778892b82f2a1ea63ed34b82c6e40ba2dbe6e7808d743c991e26cb3e7a2c4bea3314ad3a70653a801e8c96e24635d9a436fa2e43a06f89984f9f9034fe7c86e6f7e5934f3b777965f99e03c39c33882d021292bfe36d774abab69b228c5e0f32528ad3812eedf5107a463ec3222db2cfdbaad82fba13f3222c16445837fb509c100b0e6efc4b94ebef1203527a9d7cc9887c7aa9b4189932929511995cab1165a6fcdef3c56b6e0f7da28141e6fe50472e7eb1c475e076746a16aa61013e81deb0a250a61fd71d127aa4ad9c010b940a6ebc8e7617550542593caf18bd26674e1e0584aa1c0990c96b257b3cb8f40c498ed1bf2c5fc1456a1d7ede020fb2acf334f0d5b69c455c44906f63ed492ce56e2bc5eab1822e53334d00cd370fba178a066aff3227f60deca7e25616a2120715e4f1ab0cd6a19c32d15d7c798f1e5e9c0c1e2eb2c9ac687581fc82d116214d2ae87826502fdd545e7552c5d499b2178a2dc6ad8f2a337cb1e54aaf8cd5d4aaffaaa95666ab18ed2806a7aa4bb3799d8d2458b7ee4c5d098adee8fce3b0f4d70b471768aa6765245ae69f83c39ac45377d061a3f891fe98a90885fa644f64beba26f52c74f58717f9f7aec2c1e786cdc3be0eeb3d7b2613de8130f3a38029aaa9bc289a1c87759881f385a291b67197645e36169f8f429597d3ff9436e5a6871a7194e077381eebb9a4a55adfcd747c32b9d0c94298cc3638937494d303b5cfa232ad7d8061bf197c2c81b2345fefcb3a0b06ea9dd15adf7da3650ac5f97bf3b6e8e46e93cfb6cec6a0069a5fd13dc8b05a37273389c65d97a60b18fd0287c3f93ff321da1d4325dfbb4e41b0a74ad8c4b38b20557a3e839331b0e59cb89554e37115572b0366cc8ae8a07919b911cede0447d3d6cbd598fbb49d89f0818d2dd477529c584dd5e5591a7f1deb5047ebcef0da66a421d0db2de8ea63200722e1558a731187560939436fa3b876c24ea711450a764b62ea9792302671f4ffaa56a97e863ea5416e484ff4d5892b9ee0c5bab4ca8786582c617793f6e82d2f233b1fe0c8efdab82875383cf598f0d1f71c3e174098a5e2961e596c35e741ce2dcb9ab17b954f331f30a04f3de596118584704483538d577ec18420da2dc33fe3fa29f6998cf1f2d69d38aa528dc7fc50ca01bc7d9e8a9d508039ec1b334343ed875782195376f4cf207b06840d18afbf7b08ea05b9be2f6997c63f1f3b9aed9ca9048aae3cb283cd71c0a3fef7e556d02f6b5e70477f210143747d3ec71b2bb037b3cfbf44ba7868186a492117190ee02929e2a61555f4b64b6745ad50240cad72d447272a8681762f4070becefce21ead1f2c38024bbad2cb2e9e0f209e5b6d4e41baab6111644012ae39da72256e8d277af226747af25ae92728e1b94a2065fc0cd22d64eefb7c77481727ba82e172ab1b8184c171c950d17dce3769d85590b1432333b58e3d0a8006083f07cec89bf179999ca9106556fdc1d132e165cfbc3f40a8eeafeaf2fff0b519d36bd434c75848601d390c34886e71284e89637e837b3b969ce4c699891a34df46fb00c7b01041384b6bfc433af7c3ef9b5700de6f51ada667962b7d38d5b457f1438b8aa8d6a41b753c0e0d534b1535beb4e1614a87184fbd040735efd7e38b178ea858f46091eaf6e2de70d5ffbe75621e1990c2d9592d048022a92a85f6b5875e076ee562265f678ca4c5051960f1564b879247022e24736305a2875da3cf0728d9b01a4b52899e723cf6fd4bc74bc3cb03b28c51aedd9e7ec240e7b4039636cd09820c34ece738d186bfc69a50328a47c1a5d2d8258ea31c277af294412176ae2c26fca2064d998f1878d49cc03c7a23f7692f35600fc841fa7ead96e2975a6e70469576f40b2064f807546794bbf1f09b077fd739114fe7e134b9c0ab76b13f6b6a8ab1828c3f42d75cb7d2767ab688c93e835ac1bccd9a9f0b83db4701c531689652efa63109e4fdaa3ecd068e75b4837f74d2dd4d98772ed4aa8be577c376b1422b4c4395de379167c629c40ebe5ac285e05bf2ab3e7de79da140f632828acdc90bcbc36ee6c2bf8c30f0c515e1223b9417e9fcc48c1a007246c5bd5ff94b9257c1a2509e6be28416f60bdae296224499e7ce1b01de48faa50f6794e852dcd9e3ebb64454e2f473789c4ef9a0e66ac9a6f4d07c0411cf530cef071", 0x1000}, {&(0x7f0000002840)="729d052e2045d90eec6fa3611224042150999754e6ca1a", 0x17}, {&(0x7f0000002880)="88b72c69aaeaf828490aa37868443445567c4bfc450949ed632924911701f50747eac8ecc7674d21da29b68cdd2b1a13206379ed2d09", 0x36}, {&(0x7f00000028c0)="bcdd4c641bd7fd1dcbdeaa572855155200cf46e65edffe5f955ac89e32b0124d5a38884d0e4e7edaaf3d6d9fa59f94ac7bd32fa7694bbb7431bb423f126e534cd66e2e08a94d11a71faf90b09bf22829621843e073ac112956520919993592d2ab9722af5023fe861e548b6697cacd47acbf562009a2753cd6c0b6c14eaacdceed9e21d92632873eee986e2613e7b48fa79a911f4acc9c094cdecf7067c6d9cbd34e358e5059dae0e92f480feedc9af191b3fd380b69468265008615a891960e2710", 0xc2}], 0x9, 0x0, 0x0, 0x4000010}, 0x44000) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000540)="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", 0x118) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0xc}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r10, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 3.585938001s ago: executing program 2 (id=3300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0700000006000000000b000000000000000000000004000000000000"], 0x48) r1 = accept4(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x80800) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@empty, 0x0}, &(0x7f00000001c0)=0x14) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0xffffffd0}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000380)=0x3, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1300000042000106"], 0x1c}], 0x1}, 0x0) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @loopback}, r2}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000030000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000af000000000000008510000001000000950000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$unix(0x1, 0x2, 0x0) 3.304398669s ago: executing program 2 (id=3304): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000080), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100003600010000000000000000000201"], 0x114}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000c000000001802007a00", @ANYRES32=r1, @ANYBLOB="0000000000000000b7cd312af547f2f110611c39e4396f5c03000000000000850000000d000000b70000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r4], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="827e39d71fd63ecdff3054f742cd4087c6d9d793dfd4a3e0dc5601", 0x1b}], 0x1}}], 0x1, 0x4400c800) 3.255400456s ago: executing program 5 (id=3305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @multicast1}, &(0x7f0000000140)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r1}, 0x3, 0x200, 0x29}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f00000001c0)={0x1, 0x10000, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f0000000240)={&(0x7f00000000c0)=0x2, 0x4000005, &(0x7f0000000500)=[{}, {}], &(0x7f0000000680)}) 2.707324792s ago: executing program 5 (id=3308): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x6, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d0007c9cf0d38ac983b6f0007000000", @ANYRES32=r5, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r5], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206050000000000a443d3aaf51d4f750004129f00070400000000000002007379020000000000000007800800060000000100080017400000000005000500a98d000005000100060000000d0003006c6973743a736574c900"/104], 0x5c}}, 0x0) 2.595658981s ago: executing program 6 (id=3309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x24084084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 2.515292709s ago: executing program 7 (id=3311): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10141, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800c0bf88d5f6a47e3d2363eff4879300001b1401000000"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000020000800200480012800e0001006970366772657461700000003400028014000700ff02000000000000000114000600fe80000000000000000000000000001508002100", @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) socket$kcm(0x29, 0x2, 0x0) 2.104859438s ago: executing program 1 (id=3312): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg(r1, &(0x7f0000002640)={&(0x7f0000000140)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000002580)=[{&(0x7f00000003c0)="ac2a0a63a0179e8d72cbc362ee27f24e3f8b1aca30cc", 0x16}, {&(0x7f0000000400)="3a1ecde8cbc49a0bb000ce2fc82b4de4eee113b8ee92b1bf2ad5e2047eb0d0a4a375dedfab40b9a3fff4d646bb6d9edb4222225f9d45c927cbd7f3c2fb7a6c86d0816526da5b736df4a0757587b8c4212afb9443f7b93ff2fecc38f526e062f3d408cb07cdf3691d5e12e556db3862ee9e36b03f228eabbc7e2aeb5b990f2328576a7ccebe6a16a8a5d46eed177e5ef6cf75e530a1fad6f9ac649db9a5946d1cef50124edbcea76d6a816881403e51f463eb50639a6543f18f352f64011ab5", 0xbf}, {&(0x7f00000004c0)="a377a4cbc87d5fe3c921d9f0dc72065fcea9c3ba7dce525ee63de8074982", 0x1e}, {&(0x7f0000000500)="69316e6b58999e43da25ddee1aab9e94a518043588550cb573a34c009412adffc3fa8620261b04e6db71e00e360f4e29e52c0d5bdc159cacacd2264e1f2dd1af8ba6701a3a58a0cf644d8c63db0ba13384bdeaea87fe040c0b98b754c5c61a3f831bae727c989197db08e34d017723f05f1258ad6b3fbd659250c5627b97", 0x7e}, {&(0x7f0000000580)="729f10baa110ccc5e7e3602ff05d840428a16e6516338ed03921165b4c23644e4542921f81", 0x25}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="6077ef0b2949d1d110ea81cad59d637b03a42c67ca83928b45a02e85fb5487edd232b74449acbada26d24c08c2849c796f86da87f28962f0f64340ba99f7cac23b3a9998fc00c007e5136a337cbde21f652f9c6a029931e9c2a8aeb062b76953e00750a9aa127a4a8ca697da9fc256f99cf1a23040d757f328a5a6b4c3faeecb041bfdfc7c4b0d474f6af3d9c905dc9c", 0x90}, {&(0x7f0000002440)="0adb50ae226ba002e5b342d6fc6726b01077008fc7d4316b835ac9afc2f5ac85d6ccc71dba9f9cb9033066fc7232d44f721c1d91cae286cd6642367056c102f79f77280421a2f1533f37186f5e51013f1ff0d3cb79e05a76c73a81faa5fe9ab7812a6cbe014796565d85a124fc56461e6ccf4080480e24cb03f5672d11dc3209760eb17df2c71cd271a28528ca627e93308f7f3bb65dd01a4febd46ab7cf1f4ba627b7dbc557b5d2c5fee57c32700ceb09e9122d116b631c50b106f8919e5c934c0dd718d2b16da26f6d4064f8f444b75fc4ffd32a04b439d2478daf", 0xdc}, {&(0x7f0000002540)="fd928673d6625b648f79af508b7d2adb6fe365841a64cf7745d13dc90021", 0x1e}], 0x9}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x4e21, @empty}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000875deda4e3974ab42400048020000180070001006374000014000280080001400000000c08ff07400000000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) 1.934430425s ago: executing program 6 (id=3313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1494, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x1464, 0x2, [@TCA_BASIC_POLICE={0xa4, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2e7, 0x7, 0x0, 0x4, 0x5, {0x3, 0x1, 0x69d, 0x655, 0x0, 0x8000}, {0x0, 0x1, 0x8, 0x6e04, 0x3, 0x1}, 0xf, 0x0, 0x42e9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x527fdae9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xfffffffffffffffd, 0xb8, 0x3, 0x6, {0x5, 0x1, 0x6, 0x0, 0x9e06, 0x7}, {0x6, 0x0, 0xff, 0xfbaf, 0xe2d3, 0x8}, 0x7a, 0xfffffffd, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_ACT={0x1274, 0x3, [@m_bpf={0xf4, 0xd, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0x5, 0x2, 0x9, 0x2}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x6, 0xfffffff7, 0x3}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x9, 0x10000000, 0x9, 0x24c61776}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x10000000, 0x2, 0xf}}]}, {0x5b, 0x6, "8269a06b611c690129740e7a265b7a64a9957d2b5b62ecc33ec2317084cb10b275d7e599f73aac7eac364004b1c15a00a2e145efcc1b5fd745c1c6ecf30a3bbe3801723f386c9dfb4671340acdb79dd107d2bfde18f044"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x134, 0x19, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, {0xdc, 0x6, "fe0907e82dc15075f4251cf3bd3e61863ada0e8dc4dc3df1139cead29a5bd78e41b2b842fdd83cb062a196be36cc2202f6c91360f4da44b1284890034e5d36d092dc9906c51006e97a928bb640028470bdc441091314d3ac7852b410a61fb0d2a2e4f59f6ed498bb53c6effbc7abd6fb8cf7f711fe5339814e6223038038a44f858cef48a77a1749228338d6acccfd2be91d8ce1026a6fc91b30f4789a0ebf729a9193132c09ca0aa2dabb341cf419d3f4e6e427c5f11a99a8a917299858ba33a6d27dd080fb323b6d7b5af8585c8ebeab45a1ad2da5e6b9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x1048, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="85b6f45aa527"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_BASIC_EMATCHES={0x138, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x3}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd02e, 0x3, 0x100}, {0x9, 0x7f, 0x8, 0x80000000}}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x200}, "53796a82d93348fd28946e4d983129361e494aaef26df54d0b94efc61a16d694d6a31f481c11b024d2eb43511817353efa85b55e5486d957c8e529d951b5fc"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x9}, {0x225, 0x2, 0x2, "e648"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x10}, {0x3, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x3ff, 0x2, 0xb}, {0x8, 0xa, 0x0, "418b5a4d71c964dc8168"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4df, 0x1, 0x59}, {0x700, 0x5, 0x3, 0x5, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x2, 0x8, 0x2, "5f95a722b68b6b6d"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0xfffe}, {0x6, 0x8, 0x1, 0xffffffff}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x800}, {0x5, 0x4, 0x8, 0x2, 0x1, 0x1}}}]}]}]}}]}, 0x1494}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) 1.802327973s ago: executing program 7 (id=3314): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000040)='synproxy\x00', 0x2001, &(0x7f0000000180)={@_ha_fsid={[0x9, 0xfffffff6]}, {0x8, 0x5, 0x1, 0x20000000000}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2}, 0x1, &(0x7f0000000340)=[{0x2, 0x7fff, &(0x7f0000000240)='#\x00', &(0x7f0000000280)="20a0cc96ae5651f2bed91e2b9fdb6c0b930d3b67fddc236d16f2d3199d688dbb3c8c0b569f3eae5a22569f9a986f3953e7c1712c0c026213a2ef95ebb13c1c9674ee0f869a8f75364a72b1f57c488e46537df97b0c26e4644c970e20b75feda9ed8e716d1d7a6f1a6295410e1e9532420a3628ba6b2670da7fcca79a99842ed88171c2111ea8d2626141f4e71e533edd", 0x90, 0x22}]}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000000701040000000000000000000000010c00024000000000000000070c00024000000000000000010c00034000000000000000091c0007800800024000008006080001400000000708000140000300000c00024000000000000000060c00078008000140000000880800054000000002"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffcb7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008851}, 0x24044010) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.659367333s ago: executing program 1 (id=3315): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) (async) unshare(0x26020480) (async) ppoll(&(0x7f00000004c0)=[{r0, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001440)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400009c}, 0x40010) 1.411508038s ago: executing program 1 (id=3316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x20000080) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x3, 0x0, 0x0, 0xc, 0xa7d, 0x3}, &(0x7f0000000080)=0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x6, 0x0, 0xd1, 0x200000000}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000ac0)={r9, @in6={{0xa, 0x4e22, 0x0, @private0, 0xd}}}, 0x84) r10 = socket(0x10, 0x3, 0x2) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @loopback, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r11, 0x20, 0x1, 0x2, 0x9, {{0x3f, 0x4, 0x1, 0x22, 0xfc, 0x67, 0x0, 0x0, 0x5ace5d273a596c25, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x3}, {@multicast1, 0x79b4}, {@local, 0x4}, {@private=0xa010101, 0x80}]}, @timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x1, [{@multicast2, 0x7}]}, @end, @ssrr={0x89, 0x2b, 0x58, [@private=0xa010101, @multicast2, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @dev={0xac, 0x14, 0x14, 0x13}]}, @generic={0x89, 0xb, "87033c503be3bbb5b0"}, @timestamp_addr={0x44, 0x1c, 0x38, 0x1, 0xa, [{@broadcast, 0xc}, {@remote, 0xe}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x92, 0x3, 0x5, [{@rand_addr=0x64010100, 0x42df}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x1}, {@local, 0x800}, {@multicast1, 0xffffff7a}]}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "c9ca20ee3a54"}, @ssrr={0x89, 0x2b, 0xb9, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @rand_addr=0x64010102]}]}}}}}) bind$netlink(r10, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) close(0x3) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x8000, 0x0, 0x0, 0xd7, "b25832", 0x5, [0x40, 0x6, 0x5]}}) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000370401ff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280060006000000000005000700000000000800040000000000"], 0x4c}}, 0x0) 1.407069901s ago: executing program 7 (id=3317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYRES16=r1, @ANYRES8=r4], 0x7c}}, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x63, 0x9}) 1.279268487s ago: executing program 6 (id=3318): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @local}}, 0x24) (async) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @local}}, 0x24) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0xe, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x170bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1.094904777s ago: executing program 2 (id=3319): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "261fb8015d98811f95d67e56c19071109e19ce3d8127268ae6c1f29c4e997824", "05c416cda3ad0f1ddbfbdf7f5c850c416dde223a04eb0a60dddeb169c69d40e7", "0c56532d2059ab029020049fe949e33e2e4bcfc8e729e1c4946326266333db29", "b940e41498e58c1e7e8b9b027bdce31b1b05c1e67d7f3d640b351a7b1ef4d685", "dbbe5f08bd16ef9bd85cb76fd4cb6114c358f303384988d679edde213943742b", "9e454a3da848a57a3bf37c85", 0x0, 0x0, 0x23a7235a, 0x5, 0xd2}}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket(0x26, 0x800, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0x1}, 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0xa, 0x3, 0x87) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet6_opts(r8, 0x29, 0x37, 0x0, &(0x7f0000000040)) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000340)=0x400, 0x4) close(0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r11, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r12, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r12) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@loopback, 0x40, r10}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x18, &(0x7f00000000c0)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5b}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.041797413s ago: executing program 7 (id=3320): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000440)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x400, @empty, 0x6}}, 0x7d, 0x0, 0x40, 0x5, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x9c) (async, rerun: 32) r2 = socket$inet6(0xa, 0x5, 0x2) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0xef}, &(0x7f0000000200)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6) (rerun: 64) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r9, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 987.318391ms ago: executing program 5 (id=3321): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) (async, rerun: 32) r1 = socket(0x11, 0x5, 0xc545) (rerun: 32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 984.957034ms ago: executing program 6 (id=3322): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa3"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090ddb82a"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r7}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0xff}, 0x28) 800.643958ms ago: executing program 1 (id=3323): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x50b766eb, 0x1, 0x2, 0x8, 0x85d6, 0xffff}, 0x20) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r1) (async) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (async) getpeername$tipc(r0, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1c000000}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000000000000000}, {0xc, 0x90, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000834}, 0x4080) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x60010}, 0x4000004) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f00000006c0)={&(0x7f0000000640)=[{0x2719a45, 0x2, 0x8001, 0xd, 0x3}, {0x401, 0x3, 0xffffffffffffd231, 0x4, 0x8}, {0x1, 0x0, 0x7, 0x1000, 0x5}], 0x3, 0x28, 0x400, 0x8}) (async, rerun: 64) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x3c}}, 0x11) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000880)=""/21, &(0x7f00000008c0)=0x15) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000940)) (async) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000009c0)={0xffffffffffffffff, r8}) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r10, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r11, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000e00)={r6, &(0x7f0000000d00)='\xcf/{)\x00', 0x563400, &(0x7f0000000d40)={@_ha_fsid={[0x2, 0x348]}, {0x6, 0x6, 0x8d, 0xffff}}, 0xa, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)=0x1}) sendmsg$NL80211_CMD_SET_WIPHY(r13, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}]}, 0x20}}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x1) (rerun: 32) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f0000000f40), 0x4) 553.678116ms ago: executing program 7 (id=3324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x2, 0x2, 0x2, 0x4, 0x8, 0x2, 0x22, 0xf], 0x0, [0x0, 0x6, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0xe, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x60001d0}, 0x8840) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x2}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delchain={0x48, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa}, {0xfff3, 0x9}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7a, 0x6}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x2, 0x2, 0x2, 0x4, 0x8, 0x2, 0x22, 0xf], 0x0, [0x0, 0x6, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0xe, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x60001d0}, 0x8840) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x2}, 0x8) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delchain={0x48, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa}, {0xfff3, 0x9}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7a, 0x6}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r5, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) (async) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 250.858889ms ago: executing program 1 (id=3325): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1ff, 0x8, 0x3}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@dev, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x144}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r0}, 0x94) (async) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000002ec0)={&(0x7f0000000080)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000100)="96b42f55e586f2e8beea41e67bd34121dc581883c500e375a262a0ada27cfc3b066daca8c16a4941922bf219eb7b4b151e5a7e0e072a955d7b6108a308d28415ed294bd722818a7cf83acc6ba3db75c90b3725d0a96e6f3691c886200a7f83b5f6", 0x61}, {&(0x7f0000001c00)="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", 0x1000}], 0x2, &(0x7f0000002c40)=[{0xc0, 0x80, 0x9, "a632ebcc0a318f900940f9a9d97cd3e950ef8d0a4c7ad72399a8fe40c0b128e3dc2a6c96aa2045bfa18eefb4929bd91e4674a69bd651cf0fdc64ba26e3991c3ef8890f766868c660450b176b8b768c28b8af2cc4863fc9ebd6a4f9d279a289e3440f998324f8ce278e7fd829bb421d4a28f07130e644c1dc403d8e5a8cdce2ca343c8f8f792635abe10ad0b82fea0ca332c071ceb3852c6083be2f1870bf6addd0703944e5e6aece5b93ad"}, {0x38, 0x10e, 0x1, "4925ebe1cd93f8698eff9d495c7ea6803a234ffb79cad536b0d165681b2d2b10f52a3c8fd12b"}, {0x40, 0x116, 0x2, "a6a2b67ea0ba0a0b258a4454b3ef2a44edf83f70c089e78f29dc3a647dd05a9c8e5be0633b7c72393cd4c2"}, {0x20, 0x111, 0x7fff, "017894cf59d7523f0d3939fdada19b"}, {0xa0, 0x1, 0x800, "fddcab78be270b5698d165595cd1ce2c4d9c9c407c30fb4e7ec285f6fbe59131d3274cad4d420faa6a72781ecdd8309c7d2216790def51b07e6eb294677a1adcb0397a2945fe6daaced373d2577965de1ccaf4ef76c9edd1635095511bee01fee745f7d5bdeb77eedfbb41b29bbc503bda82c6b2dfc3c86ea4140903fb15e993982e29215dcaf75312a87dbae9a2c1"}, {0x80, 0x117, 0x1, "9318ef84662a6109a71beb8beb3ecdea895387bcb431df8769500aceed867eb5a5c6da4495c4de39f84356bb427dc94809b64ce1d03342b6bd9f3285aef7e5e1949a5f327fe7dd625269be18d90f5f093e8b2b6c1a4c39095d3e325643244350e51374aad1a9b0014588"}], 0x278}, 0x0) 249.825618ms ago: executing program 5 (id=3326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x620b}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000240)=0x8) r3 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x4, 0x5, 0x1, 0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x5a, 0x4, [0x32, 0x3d, 0x1e, 0x36, 0x17, 0x36, 0x20, 0x32, 0x1e, 0xb, 0x13, 0x6, 0x31, 0x9, 0x38, 0x6], 0x2, 0x3, 0x2f}}}, {{@ip={@empty, @multicast2, 0xffffff00, 0xff, 'veth0_macvtap\x00', 'pim6reg\x00', {0xff}, {}, 0x5c, 0x2, 0x20}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x9], 0x1}}, @common=@addrtype={{0x30}, {0x400, 0x556, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xf3b, 0x6, [0x16, 0x33, 0x8, 0x3d, 0x33, 0xc, 0x21, 0xb, 0xe, 0x2f, 0x13, 0x22, 0xf, 0x1d, 0x23, 0x32], 0x1, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) 248.682005ms ago: executing program 6 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000206050000000000000000000000000005000100070000000900020073797a31000000001c000780080006000000000005000300d7000000080006400000000610000300686173683a69702c6d6163000500050002000000050004000000000022362522bc5baa1f6ac160c3b91bcba7b477551de65d21ec51fd2a7edee56413d5c31ced6976131d130e52d5be2aa636ef20499fba3fe2d8ff764cdf79b1b0af121cd6d9f2c7bfdaff75fa147fa80a7ba5354d437a316fd63343b4f9e556db151a49125d8597f8504e097ff483697a2eed7cd56cb53b07872b4ed395c25a3146dec616c2ba8cc2e04eb30a91d9f62b88a9c4e1942154279bbdd39291456960d15c34f790e9b3f21f5d5945d8b2e3ac"], 0x64}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x0, 0x498, 0x1b0, 0x1b0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0xc, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0xb10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000305fcffffff0000220000000000", @ANYRES32=0x0, @ANYBLOB="91090600000001001c0012800b0001006d616373656300000c000280050003040c00000008000500", @ANYRES16=r2, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0xc045) 247.975245ms ago: executing program 2 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8a3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbac}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x80a0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 90.631911ms ago: executing program 7 (id=3329): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x204, 0x8, {}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x0, 0x0, "a9c4eaa89d9376ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 89.563211ms ago: executing program 1 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) (async) r1 = socket(0x11, 0x80a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {0x0}], 0x2}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x160, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf03}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xaa2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x525}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x18}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6ac2}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4080}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080003000000f58fa2b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080003000000f58fa2b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x898}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xcf00}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}}, 0x10) 0s ago: executing program 6 (id=3331): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x2404c041}, 0x24048085) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x100}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r6 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000440)=0x5, 0x4) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r4, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x2061, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r10 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) kernel console output (not intermixed with test programs): netlink: 'syz.2.1623': attribute type 6 has an invalid length. [ 231.946646][T11917] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1623'. [ 232.139898][T11933] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1627'. [ 232.190046][T11936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.221435][T11937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.264036][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.507880][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'. [ 232.519827][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 232.538665][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1634'. [ 232.583328][T11961] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.884240][T11966] netem: change failed [ 233.798852][ T147] wlan0: Trigger new scan to find an IBSS to join [ 234.701996][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.801548][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 236.039342][T11978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.554471][T12051] netlink: 'syz.4.1660': attribute type 83 has an invalid length. [ 236.576333][T12051] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 236.596649][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.715584][T12063] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 236.740379][T12063] netlink: 'syz.5.1663': attribute type 1 has an invalid length. [ 236.816981][T12063] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 237.087933][T12074] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 237.146943][T12074] 8021q: adding VLAN 0 to HW filter on device bond9 [ 237.261137][T12074] vlan4: entered allmulticast mode [ 237.271075][T12074] bond9: entered allmulticast mode [ 237.306162][T12084] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 237.408235][T12082] bond9: (slave geneve3): making interface the new active one [ 237.442104][T12082] geneve3: entered allmulticast mode [ 237.468525][T12087] __nla_validate_parse: 2 callbacks suppressed [ 237.468542][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 237.499589][T12082] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 237.518567][T12084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.529522][T12084] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 237.539979][ T7981] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0 [ 237.550879][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.589279][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.620441][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.659296][T12088] syzkaller0: entered promiscuous mode [ 237.694836][T12088] syzkaller0: entered allmulticast mode [ 237.935528][T12106] netlink: 'syz.4.1674': attribute type 2 has an invalid length. [ 238.020132][T12109] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 238.227291][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'. [ 238.353153][T12109] ip6gretap2: entered promiscuous mode [ 238.369837][T12109] ip6gretap2: entered allmulticast mode [ 238.438612][T12109] bond10: (slave ip6gretap2): making interface the new active one [ 238.449910][T12109] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 238.459350][T12109] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 238.467414][T12109] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 238.929326][T12150] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1685'. [ 239.170048][T12159] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1687'. [ 239.298211][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1687'. [ 239.348643][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 239.753567][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 239.940186][T12184] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1694'. [ 239.984408][T12184] netlink: 'syz.5.1694': attribute type 2 has an invalid length. [ 240.267303][T12192] syzkaller0: entered promiscuous mode [ 240.287636][T12192] syzkaller0: entered allmulticast mode [ 240.353572][T12198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1700'. [ 240.373467][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1699'. [ 240.744921][T12211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.792134][T12215] netlink: 'syz.4.1706': attribute type 10 has an invalid length. [ 240.809201][T12215] ipvlan0: entered allmulticast mode [ 240.816137][T12215] veth0_vlan: entered allmulticast mode [ 240.840719][T12215] team0: Device ipvlan0 failed to register rx_handler [ 240.891108][T12220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.967315][T12226] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 240.996760][T12226] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 241.021629][T12229] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 243.729262][T12213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.910224][T12240] netlink: 'syz.5.1709': attribute type 10 has an invalid length. [ 244.607784][T12273] __nla_validate_parse: 4 callbacks suppressed [ 244.607804][T12273] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1716'. [ 244.979507][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 245.008665][T12288] openvswitch: netlink: Flow actions attr not present in new flow. [ 245.030882][T12290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1723'. [ 245.137222][T12299] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.1725'. [ 245.638497][T12318] block nbd0: server does not support multiple connections per device. [ 245.668208][T12318] block nbd0: shutting down sockets [ 245.721131][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 245.731384][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 245.758946][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 245.770873][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 246.049441][T12337] xt_hashlimit: size too large, truncated to 1048576 [ 246.393323][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 246.441268][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1740'. [ 246.457411][T12357] syzkaller1: entered promiscuous mode [ 246.490572][T12357] syzkaller1: entered allmulticast mode [ 246.867664][T12371] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 246.885252][T12371] netlink: 'syz.2.1746': attribute type 3 has an invalid length. [ 247.506708][T12395] netlink: 'syz.5.1754': attribute type 1 has an invalid length. [ 247.575627][T12395] tipc: Started in network mode [ 247.585101][T12395] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 247.594803][T12395] tipc: Enabled bearer , priority 10 [ 247.613733][T12398] syzkaller0: entered promiscuous mode [ 247.627987][T12398] syzkaller0: entered allmulticast mode [ 248.109415][T12422] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 248.371881][T12435] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 248.394521][T12435] netlink: 'syz.4.1760': attribute type 2 has an invalid length. [ 248.412559][T12422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.484183][T12439] hsr0: entered allmulticast mode [ 248.503440][T12439] hsr_slave_0: entered allmulticast mode [ 248.530860][T12439] hsr_slave_1: entered allmulticast mode [ 248.604544][ T5743] tipc: Node number set to 10136234 [ 248.815236][T12454] xt_TCPMSS: Only works on TCP SYN packets [ 249.473146][T12485] netlink: 'syz.4.1779': attribute type 2 has an invalid length. [ 249.499563][T12485] openvswitch: netlink: EtherType 50a is less than min 600 [ 249.555143][T12485] netlink: 'syz.4.1779': attribute type 2 has an invalid length. [ 249.688762][T12494] openvswitch: netlink: Key type 8198 is out of range max 32 [ 249.944558][T12494] bond6: Removing last arp target with arp_interval on [ 249.955756][T12507] __nla_validate_parse: 8 callbacks suppressed [ 249.955773][T12507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1783'. [ 250.055633][T12509] smc: net device team0 applied user defined pnetid SYZ2 [ 250.180602][T12513] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 250.354305][T12516] bond7: (slave bridge6): making interface the new active one [ 250.371668][T12516] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 250.390338][T12521] netlink: 'syz.5.1788': attribute type 10 has an invalid length. [ 250.442738][T12513] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 250.453824][T12521] ipvlan0: entered allmulticast mode [ 250.460155][T12521] veth0_vlan: entered allmulticast mode [ 250.478586][T12521] team0: Device ipvlan0 failed to register rx_handler [ 250.487699][T12521] tipc: Resetting bearer [ 250.554949][T12516] macvlan3: entered promiscuous mode [ 250.562532][T12516] macvlan3: entered allmulticast mode [ 250.568909][T12516] bond7: entered promiscuous mode [ 250.575159][T12516] bridge6: entered promiscuous mode [ 250.597186][T12516] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 250.606257][T12516] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 250.624494][T12516] bond7: left promiscuous mode [ 250.629309][T12516] bridge6: left promiscuous mode [ 250.667245][T12534] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 250.675704][T12533] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 250.918284][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'. [ 251.400894][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1799'. [ 251.527353][T12573] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 251.548141][T12573] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1799'. [ 251.574159][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 251.601403][T12568] ipvlan2: entered allmulticast mode [ 251.618694][T12568] batadv_slave_1: entered allmulticast mode [ 251.649933][T12567] smbdirect: ib_dev[syz2] removed [ 251.664511][T12568] batman_adv: batadv0: Adding interface: ipvlan2 [ 251.676398][T12568] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.708886][T12577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1803'. [ 251.731946][T12577] openvswitch: netlink: Flow key attr not present in new flow. [ 251.757206][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.782447][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.827600][T12568] batman_adv: batadv0: Interface activated: ipvlan2 [ 252.009271][T12583] lo: entered promiscuous mode [ 252.047543][T12586] netlink: 'syz.4.1805': attribute type 5 has an invalid length. [ 252.081968][T12591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1804'. [ 252.190518][T12591] : renamed from virt_wifi0 [ 252.878645][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1810'. [ 252.940452][T12621] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 252.958443][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 253.135623][T12626] netlink: 'syz.4.1815': attribute type 24 has an invalid length. [ 253.632179][T12629] sch_tbf: peakrate 8 is lower than or equals to rate 323273620813896539 ! [ 253.644560][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 254.000370][T12644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.078041][T12646] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 254.118128][T12646] bond8 (unregistering): Released all slaves [ 254.140996][T12649] netlink: 'syz.0.1823': attribute type 3 has an invalid length. [ 254.815289][T12658] syzkaller0: entered promiscuous mode [ 254.833992][T12658] syzkaller0: entered allmulticast mode [ 255.035586][T12667] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 255.569911][T12680] syzkaller0: entered promiscuous mode [ 255.588462][T12680] syzkaller0: entered allmulticast mode [ 255.647572][T12680] netlink: 'syz.5.1833': attribute type 1 has an invalid length. [ 255.996252][T12701] __nla_validate_parse: 2 callbacks suppressed [ 255.996302][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 256.364649][T12712] netlink: 'syz.4.1841': attribute type 10 has an invalid length. [ 256.400628][T12712] veth1_macvtap: left promiscuous mode [ 256.524117][T12712] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 257.235759][T12745] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1851'. [ 257.737505][T12760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1856'. [ 257.802983][T12762] openvswitch: netlink: IPv4 tun info is not correct [ 258.107529][T12777] netlink: 'syz.5.1859': attribute type 3 has an invalid length. [ 258.153819][T12777] netlink: 'syz.5.1859': attribute type 3 has an invalid length. [ 258.992817][T12583] Set syz1 is full, maxelem 65536 reached [ 259.250066][T12812] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1867'. [ 259.426677][T12817] netlink: 'syz.2.1868': attribute type 12 has an invalid length. [ 260.985506][T12769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.236311][T12826] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1871'. [ 261.319928][T12829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.510110][T12829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.652358][T12836] erspan0: entered promiscuous mode [ 261.751711][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 261.812697][T12844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1873'. [ 262.203674][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 262.230329][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1881'. [ 262.300606][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1882'. [ 262.418077][T12874] bond1: entered promiscuous mode [ 262.428173][T12874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.504009][T12874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.518085][T12874] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 262.550224][T12874] bond1: (slave sit1): Error -95 calling set_mac_address [ 262.702376][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 262.799050][T12890] netlink: 'syz.4.1886': attribute type 3 has an invalid length. [ 262.838510][T12891] xt_NFQUEUE: number of total queues is 0 [ 263.588170][T12926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1894'. [ 264.263252][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.289570][T12939] netlink: 212312 bytes leftover after parsing attributes in process `syz.1.1897'. [ 264.356184][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.260098][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1890'. [ 265.386393][ T147] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.424891][ T147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.451007][ T147] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.589628][T12951] netlink: 'syz.1.1898': attribute type 29 has an invalid length. [ 265.720404][T12954] syzkaller0: entered promiscuous mode [ 265.750425][T12954] syzkaller0: entered allmulticast mode [ 265.940539][T12963] syzkaller0: entered promiscuous mode [ 265.946441][T12963] syzkaller0: entered allmulticast mode [ 266.409900][T13004] __nla_validate_parse: 2 callbacks suppressed [ 266.409922][T13004] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1911'. [ 266.724155][T12965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.181736][T13017] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1914'. [ 268.848523][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 269.141909][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 269.487979][T13056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.630725][T13064] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1928'. [ 269.707444][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1929'. [ 269.914979][T13072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.136490][T13093] veth0: entered promiscuous mode [ 270.151893][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 270.203817][T13093] veth0 (unregistering): left promiscuous mode [ 270.670045][T13117] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 270.696786][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1943'. [ 270.806187][T13122] bond8: (slave geneve2): making interface the new active one [ 270.820604][T13122] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 270.840887][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.841417][T13128] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 270.882913][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.917677][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 271.561932][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1950'. [ 271.697389][ T34] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 271.860617][T13158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1953'. [ 272.135907][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 272.520463][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 272.995231][T13208] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1966'. [ 273.373153][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1972'. [ 273.399063][T13222] block nbd0: Unsupported socket: should be TCP or UNIX. [ 273.416789][T13220] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1971'. [ 273.596861][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 273.646340][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 273.719544][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 273.730650][T13241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.017460][ T34] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 276.779441][T13246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.022926][T13294] netlink: 'syz.5.1985': attribute type 23 has an invalid length. [ 277.130002][T13295] netlink: 'syz.5.1985': attribute type 23 has an invalid length. [ 277.147038][T13307] __nla_validate_parse: 1 callbacks suppressed [ 277.147054][T13307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 277.539828][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 277.608090][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 277.982552][T13336] lo speed is unknown, defaulting to 1000 [ 278.606279][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 278.646729][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 278.849787][T13363] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 278.863343][T13363] bond2 (unregistering): Released all slaves [ 278.951475][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2003'. [ 279.338869][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2007'. [ 280.370147][T13431] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2018'. [ 280.392294][T13435] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2019'. [ 280.410317][T13431] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 280.752021][T13450] netlink: 'syz.2.2025': attribute type 3 has an invalid length. [ 280.796765][T13452] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 280.807037][T13450] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2025'. [ 281.347762][T13464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.405447][ T7711] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.444638][ T7711] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.489496][ T7711] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.585630][T13488] pim6reg: entered allmulticast mode [ 282.013470][T13508] syzkaller0: entered promiscuous mode [ 282.020650][T13508] syzkaller0: entered allmulticast mode [ 282.241352][T13519] __nla_validate_parse: 3 callbacks suppressed [ 282.241371][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 282.351767][ T5644] Bluetooth: hci5: command 0x0405 tx timeout [ 282.490372][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 282.734293][T13533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.905637][T13542] tipc: Trying to set illegal importance in message [ 283.181670][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059dc5800: rx timeout, send abort [ 283.300892][T13561] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2054'. [ 283.314282][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 283.537620][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2057'. [ 283.549255][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 283.562144][T13570] xt_l2tp: v2 sid > 0xffff: 1114112 [ 283.681812][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059dc5400: rx timeout, send abort [ 283.690182][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059dc5800: abort rx timeout. Force session deactivation [ 283.807842][T13576] netlink: 'syz.2.2059': attribute type 5 has an invalid length. [ 283.925015][T13580] veth0: entered promiscuous mode [ 283.937211][T13578] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2060'. [ 284.068358][T13579] veth0: left promiscuous mode [ 284.084369][T13587] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 284.104791][T13588] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 284.135656][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 284.190147][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059dc5400: abort rx timeout. Force session deactivation [ 284.206071][T13593] digital: digital_start_poll: Unknown protocol [ 284.298214][T13596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2066'. [ 284.319945][T13596] batman_adv: batadv0: Removing interface: dummy0 [ 284.633962][T12943] IPVS: starting estimator thread 0... [ 284.751711][T13613] IPVS: using max 39 ests per chain, 93600 per kthread [ 285.550496][T13640] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 285.558872][T13640] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2079'. [ 285.652631][T13644] netlink: 'syz.5.2080': attribute type 10 has an invalid length. [ 286.122691][T13661] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 286.130546][T13661] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 286.450599][T13682] netlink: 'syz.2.2090': attribute type 8 has an invalid length. [ 286.495673][T13682] openvswitch: netlink: Flow key attr not present in new flow. [ 287.346813][T13717] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 287.355552][T13717] __nla_validate_parse: 8 callbacks suppressed [ 287.355569][T13717] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2101'. [ 287.800918][T13733] syzkaller0: entered promiscuous mode [ 287.807125][T13733] syzkaller0: entered allmulticast mode [ 287.844057][T13622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.596620][T13765] : renamed from lo [ 288.797966][T13782] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2125'. [ 288.879189][T13784] syzkaller0: entered promiscuous mode [ 288.901806][T13784] syzkaller0: entered allmulticast mode [ 289.052985][T13794] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2127'. [ 289.063651][T13794] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2127'. [ 289.776832][T13788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.335689][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2136'. [ 290.361834][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2136'. [ 290.620182][T13829] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 290.808229][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2142'. [ 291.486990][T13857] xt_l2tp: wrong L2TP version: 0 [ 291.639264][T13864] IPv6: Can't replace route, no match found [ 291.646121][T13864] IPv6: Can't replace route, no match found [ 291.657223][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 292.083381][T13884] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 292.093971][T13884] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 292.259506][T13892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2159'. [ 292.326400][T13893] lo: entered allmulticast mode [ 292.363978][T13893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2158'. [ 292.398081][T13897] openvswitch: netlink: Flow key attr not present in new flow. [ 292.771591][T13911] syz_tun: left allmulticast mode [ 292.780010][T13914] openvswitch: netlink: IPv6 tunnel dst address is zero [ 293.055079][T13929] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.466357][T13952] openvswitch: netlink: IP tunnel dst address not specified [ 294.037944][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 294.047234][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 294.510717][T13982] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 295.552779][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.565899][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.576315][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.586892][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.596691][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.079991][T14014] lo speed is unknown, defaulting to 1000 [ 296.567486][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'. [ 296.594604][T14047] syzkaller0: entered promiscuous mode [ 296.604112][T14047] syzkaller0: entered allmulticast mode [ 296.619169][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'. [ 296.657897][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'. [ 296.829748][T14055] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.2202'. [ 297.025066][T14059] syzkaller0: entered promiscuous mode [ 297.030891][T14059] syzkaller0: entered allmulticast mode [ 297.077252][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.089169][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.097862][T14014] bridge_slave_0: entered allmulticast mode [ 297.107992][T14014] bridge_slave_0: entered promiscuous mode [ 297.153595][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.162748][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.171089][T14014] bridge_slave_1: entered allmulticast mode [ 297.179679][T14014] bridge_slave_1: entered promiscuous mode [ 297.282778][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.323643][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.433298][T14014] team0: Port device team_slave_0 added [ 297.443000][T14014] team0: Port device team_slave_1 added [ 297.514317][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.531647][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.611125][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.632980][ T5644] Bluetooth: hci6: command tx timeout [ 297.657396][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2206'. [ 297.678781][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2206'. [ 297.691798][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.713875][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.759430][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.800694][T14085] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.812315][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.823674][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.834953][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.851667][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.866128][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.033435][T14014] hsr_slave_0: entered promiscuous mode [ 298.042615][T14014] hsr_slave_1: entered promiscuous mode [ 298.050552][T14014] debugfs: 'hsr0' already exists in 'hsr' [ 298.057882][T14014] Cannot create hsr debugfs directory [ 298.388081][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2211'. [ 298.854771][T14081] lo speed is unknown, defaulting to 1000 [ 298.988139][T14121] tipc: Trying to set illegal importance in message [ 299.126760][T14014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 299.156583][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.179345][T14014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 299.223118][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.244718][T14014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 299.288098][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.319766][T14014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 299.357940][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.712822][ T50] Bluetooth: hci6: command tx timeout [ 299.785781][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.819827][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.842882][T14142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.863170][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.870376][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.896184][T14151] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 299.933389][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.940628][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.949903][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2221'. [ 299.959142][ T50] Bluetooth: hci7: command tx timeout [ 300.162504][T14157] netlink: 'syz.5.2223': attribute type 1 has an invalid length. [ 300.227075][T14155] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 300.343505][T14155] 8021q: adding VLAN 0 to HW filter on device bond10 [ 300.381954][T14160] bond10: (slave geneve3): making interface the new active one [ 300.393490][T14160] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 300.577131][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.585964][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.601288][T14081] bridge_slave_0: entered allmulticast mode [ 300.621079][T14081] bridge_slave_0: entered promiscuous mode [ 300.630141][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.641583][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.649756][T14081] bridge_slave_1: entered allmulticast mode [ 300.659160][T14081] bridge_slave_1: entered promiscuous mode [ 300.792656][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.811390][T14174] geneve1: left promiscuous mode [ 300.843096][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.943689][T14081] team0: Port device team_slave_0 added [ 300.981044][T14081] team0: Port device team_slave_1 added [ 301.076526][T14188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2227'. [ 301.087036][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2227'. [ 301.098328][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.107430][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.139124][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.161931][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.170675][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.200178][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.308476][T14081] hsr_slave_0: entered promiscuous mode [ 301.324413][T14081] hsr_slave_1: entered promiscuous mode [ 301.330571][T14081] debugfs: 'hsr0' already exists in 'hsr' [ 301.340124][T14081] Cannot create hsr debugfs directory [ 301.682443][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.792502][ T50] Bluetooth: hci6: command tx timeout [ 302.009140][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 302.039257][T14081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.047253][ T50] Bluetooth: hci7: command tx timeout [ 302.067796][T14081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.147411][T14210] bond11: entered promiscuous mode [ 302.171638][T14210] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.197390][T14081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.230313][T14081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.246692][T14081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.262986][T14081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.324144][T14206] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.364966][T14206] bond11: (slave sit4): The slave device specified does not support setting the MAC address [ 302.399481][T14206] bond11: (slave sit4): Error -95 calling set_mac_address [ 302.450559][T14081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.470849][T14081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.504338][T14220] syzkaller0: entered promiscuous mode [ 302.516720][T14220] syzkaller0: entered allmulticast mode [ 302.955173][T14014] veth0_vlan: entered promiscuous mode [ 303.004828][T14014] veth1_vlan: entered promiscuous mode [ 303.072888][T14242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2236'. [ 303.104470][T14081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.191580][T14081] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.235754][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.243022][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.280305][T14014] veth0_macvtap: entered promiscuous mode [ 303.397796][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.405048][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.428074][T14014] veth1_macvtap: entered promiscuous mode [ 303.577739][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.603806][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.643592][ T7981] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.668608][ T7981] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.699150][ T7981] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.726126][ T7981] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.788577][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 303.872644][ T50] Bluetooth: hci6: command tx timeout [ 304.111009][ T7981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.127195][ T50] Bluetooth: hci7: command tx timeout [ 304.136606][ T7981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.417361][ T7711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.439943][ T7711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.840901][T14298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2192'. [ 304.864184][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 304.884341][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 304.905355][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2245'. [ 304.927945][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2245'. [ 304.939289][T14295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2245'. [ 305.172654][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2247'. [ 305.247213][T14305] ipvlan3: entered allmulticast mode [ 305.270900][T14305] syz_tun: entered allmulticast mode [ 305.386039][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.520455][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 305.576156][T14321] bridge0: port 3(ipvlan2) entered blocking state [ 305.594618][T14321] bridge0: port 3(ipvlan2) entered disabled state [ 305.608161][T14321] ipvlan2: entered allmulticast mode [ 305.614836][T14321] bridge0: entered allmulticast mode [ 305.624328][T14321] ipvlan2: left allmulticast mode [ 305.629588][T14321] bridge0: left allmulticast mode [ 305.868282][T14330] tipc: Enabled bearer , priority 0 [ 306.084522][T14350] netem: change failed [ 306.129843][T14353] x_tables: duplicate underflow at hook 3 [ 306.191675][ T50] Bluetooth: hci7: command tx timeout [ 306.429935][T14369] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 306.455501][T14371] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 306.497345][T14081] veth0_vlan: entered promiscuous mode [ 306.519076][T14081] veth1_vlan: entered promiscuous mode [ 306.577603][T14081] veth0_macvtap: entered promiscuous mode [ 306.596406][T14081] veth1_macvtap: entered promiscuous mode [ 306.702417][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.742493][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.795240][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.865181][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.914372][ T47] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.972542][ T47] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.038101][T14385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.285510][ T7981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.322060][ T7981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.408441][ T7981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.443894][ T7981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.817923][T14420] netlink: 'syz.7.2207': attribute type 1 has an invalid length. [ 307.865981][T14420] 8021q: VLANs not supported on gre0 [ 308.040354][T14429] syzkaller0: entered promiscuous mode [ 308.073469][T14429] syzkaller0: entered allmulticast mode [ 309.030355][T14461] sctp: [Deprecated]: syz.5.2283 (pid 14461) Use of int in maxseg socket option. [ 309.030355][T14461] Use struct sctp_assoc_value instead [ 309.174701][T14467] __nla_validate_parse: 4 callbacks suppressed [ 309.174792][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 309.347488][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2285'. [ 309.409195][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2285'. [ 309.431717][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2285'. [ 309.476507][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2285'. [ 309.486385][T14477] bridge_slave_0: left allmulticast mode [ 309.495759][T14477] bridge_slave_0: left promiscuous mode [ 309.520714][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.587775][T14477] bridge_slave_1: left allmulticast mode [ 309.614032][T14477] bridge_slave_1: left promiscuous mode [ 309.633988][T14477] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.699934][T14477] bond0: (slave bond_slave_0): Releasing backup interface [ 309.739206][T14477] bond0: (slave bond_slave_1): Releasing backup interface [ 309.812115][T14477] team0: Port device team_slave_0 removed [ 309.847573][T14477] team0: Port device team_slave_1 removed [ 309.857710][T14477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.868810][T14477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.882660][T14477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.890284][T14477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.904377][T14477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.929591][T14487] vlan0: entered promiscuous mode [ 310.000081][T14487] team0: Port device vlan0 added [ 310.552018][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 310.937482][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2303'. [ 310.962346][T14540] syzkaller0: entered promiscuous mode [ 310.993414][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 311.025777][T14546] netlink: 212328 bytes leftover after parsing attributes in process `syz.7.2305'. [ 311.037575][T14540] syzkaller0: entered allmulticast mode [ 311.055490][T14546] netlink: Unknown conntrack attr (type=2304, max=9) [ 311.298696][T14551] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 311.449303][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2309'. [ 311.741825][T14579] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 312.470063][T14612] syzkaller0: entered promiscuous mode [ 312.489241][T14612] syzkaller0: entered allmulticast mode [ 312.697487][T14618] : renamed from virt_wifi0 [ 312.855860][T14622] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 313.013909][T14622] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.089680][T14622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.408686][T14645] netlink: 'syz.6.2331': attribute type 10 has an invalid length. [ 313.510811][T14645] team0: entered allmulticast mode [ 313.530323][T14645] vlan0: entered allmulticast mode [ 313.562494][T14645] veth0_vlan: entered allmulticast mode [ 313.572880][T14645] bridge0: port 1(team0) entered blocking state [ 313.591526][T14645] bridge0: port 1(team0) entered disabled state [ 313.672930][T14645] team0: entered promiscuous mode [ 313.697155][T14645] bridge0: port 1(team0) entered blocking state [ 313.703584][T14645] bridge0: port 1(team0) entered forwarding state [ 313.965640][T14638] syzkaller0: entered promiscuous mode [ 313.986523][T14638] syzkaller0: entered allmulticast mode [ 315.435740][T14701] __nla_validate_parse: 5 callbacks suppressed [ 315.435776][T14701] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2344'. [ 316.789305][T14689] syzkaller0: entered promiscuous mode [ 316.795317][T14689] syzkaller0: entered allmulticast mode [ 317.225211][T14721] netlink: 'syz.7.2350': attribute type 1 has an invalid length. [ 317.259731][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2348'. [ 317.274923][T14721] netlink: 'syz.7.2350': attribute type 2 has an invalid length. [ 317.299179][T14722] netlink: 'syz.7.2350': attribute type 1 has an invalid length. [ 317.310098][T14722] netlink: 'syz.7.2350': attribute type 2 has an invalid length. [ 317.345445][T14724] netlink: 'syz.6.2348': attribute type 1 has an invalid length. [ 317.372155][T14724] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2348'. [ 317.406367][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2348'. [ 317.455023][T14724] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2348'. [ 317.490423][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2348'. [ 317.519286][T14727] netlink: 'syz.7.2351': attribute type 10 has an invalid length. [ 317.552176][T14727] ipvlan0: entered allmulticast mode [ 317.571319][T14727] veth0_vlan: entered allmulticast mode [ 317.625458][T14727] team0: Device ipvlan0 failed to register rx_handler [ 317.800036][T14710] netlink: 'syz.1.2345': attribute type 2 has an invalid length. [ 317.808365][T14710] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2345'. [ 317.820032][T14736] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2353'. [ 317.832432][T14710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.851279][T14736] nbd: illegal input index -8454144 [ 318.043490][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2355'. [ 318.071115][T14741] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2355'. [ 318.106879][T14744] netlink: 'syz.2.2356': attribute type 21 has an invalid length. [ 318.883358][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.891081][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.992384][T14783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.007048][T14783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.070565][T14783] ipvlan0: left allmulticast mode [ 319.077830][T14783] veth0_vlan: left allmulticast mode [ 319.169653][ T34] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.179352][ T34] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.188885][ T34] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.202483][ T34] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.346789][T14794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.707720][T14777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.841004][T14808] tipc: Enabling of bearer rejected, failed to enable media [ 321.885043][T14808] __nla_validate_parse: 10 callbacks suppressed [ 321.885064][T14808] netlink: 324 bytes leftover after parsing attributes in process `syz.5.2375'. [ 322.099474][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 322.122376][T14815] nbd: must specify a size in bytes for the device [ 322.313055][T14824] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 322.338155][T14824] bond3 (unregistering): Released all slaves [ 322.935711][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2391'. [ 323.478908][T14879] netlink: 63 bytes leftover after parsing attributes in process `syz.7.2400'. [ 323.688110][T14887] netlink: 'syz.7.2403': attribute type 1 has an invalid length. [ 323.708345][T14887] nbd: error processing sock list [ 323.825772][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 323.866441][T14889] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.913359][T14895] tipc: Failed to remove unknown binding: 66,1,1/10136234:3171843637/3171843639 [ 324.073782][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2409'. [ 324.097755][T14901] ipvlan2: entered allmulticast mode [ 324.103417][T14901] syz_tun: entered allmulticast mode [ 324.438644][T14914] bond1 (unregistering): Released all slaves [ 324.673944][T14921] veth7: entered allmulticast mode [ 324.716618][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2418'. [ 324.749288][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2418'. [ 325.015098][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 325.057363][T14941] macvlan5: entered allmulticast mode [ 325.074903][T14941] dummy0: entered allmulticast mode [ 325.090892][T14941] dummy0: entered promiscuous mode [ 325.172972][T14953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 325.278542][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 326.335795][T15006] openvswitch: netlink: Message has 8 unknown bytes. [ 326.372089][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.378928][T15011] xt_limit: Overflow, try lower: 271964/0 [ 326.674588][ T13] tipc: Subscription rejected, illegal request [ 326.963310][T15045] syzkaller0: entered promiscuous mode [ 326.969452][T15045] syzkaller0: entered allmulticast mode [ 326.975763][T15038] __nla_validate_parse: 8 callbacks suppressed [ 326.975779][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2445'. [ 327.196397][T15052] batadv1: entered allmulticast mode [ 327.272054][T15055] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 327.279898][T15055] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 327.323864][T15059] syz.5.2449: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 327.344751][T15059] CPU: 0 UID: 0 PID: 15059 Comm: syz.5.2449 Not tainted syzkaller #0 PREEMPT(full) [ 327.344777][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.344799][T15059] Call Trace: [ 327.344807][T15059] [ 327.344820][T15059] dump_stack_lvl+0xe8/0x150 [ 327.344866][T15059] warn_alloc+0x249/0x340 [ 327.344902][T15059] ? stack_trace_save+0xa9/0x100 [ 327.344947][T15059] ? __pfx_warn_alloc+0x10/0x10 [ 327.344989][T15059] ? kasan_save_track+0x4f/0x80 [ 327.345018][T15059] ? kasan_save_track+0x3e/0x80 [ 327.345043][T15059] ? __kasan_kmalloc+0x93/0xb0 [ 327.345071][T15059] ? __kmalloc_cache_noprof+0x31c/0x660 [ 327.345102][T15059] ? xskq_create+0x56/0x170 [ 327.345129][T15059] ? xsk_setsockopt+0x54c/0x990 [ 327.345155][T15059] ? do_sock_setsockopt+0x17c/0x1b0 [ 327.345184][T15059] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 327.345214][T15059] ? do_syscall_64+0x174/0x580 [ 327.345238][T15059] __vmalloc_node_range_noprof+0x132/0x1750 [ 327.345303][T15059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 327.345340][T15059] ? __kasan_kmalloc+0x93/0xb0 [ 327.345378][T15059] vmalloc_user_noprof+0xad/0xe0 [ 327.345408][T15059] ? xskq_create+0xbf/0x170 [ 327.345440][T15059] xskq_create+0xbf/0x170 [ 327.345473][T15059] xsk_init_queue+0x8a/0xe0 [ 327.345505][T15059] xsk_setsockopt+0x54c/0x990 [ 327.345535][T15059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.345562][T15059] ? __pfx_aa_sk_perm+0x10/0x10 [ 327.345595][T15059] ? aa_sock_opt_perm+0xff/0x1a0 [ 327.345632][T15059] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 327.345662][T15059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.345694][T15059] do_sock_setsockopt+0x17c/0x1b0 [ 327.345732][T15059] __x64_sys_setsockopt+0x13d/0x1b0 [ 327.345769][T15059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.345794][T15059] do_syscall_64+0x174/0x580 [ 327.345819][T15059] ? clear_bhb_loop+0x40/0x90 [ 327.345847][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.345868][T15059] RIP: 0033:0x7fd45939ce59 [ 327.345902][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.345922][T15059] RSP: 002b:00007fd45a22a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.345954][T15059] RAX: ffffffffffffffda RBX: 00007fd459616090 RCX: 00007fd45939ce59 [ 327.345971][T15059] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 327.345985][T15059] RBP: 00007fd459432d6f R08: 0000000000000004 R09: 0000000000000000 [ 327.345999][T15059] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.346013][T15059] R13: 00007fd459616128 R14: 00007fd459616090 R15: 00007ffe58378cd8 [ 327.346059][T15059] [ 327.346676][T15059] Mem-Info: [ 327.415296][T15058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.549663][T15059] active_anon:7149 inactive_anon:0 isolated_anon:0 [ 327.549663][T15059] active_file:2566 inactive_file:40053 isolated_file:0 [ 327.549663][T15059] unevictable:768 dirty:39 writeback:0 [ 327.549663][T15059] slab_reclaimable:11573 slab_unreclaimable:117289 [ 327.549663][T15059] mapped:44641 shmem:1293 pagetables:3674 [ 327.549663][T15059] sec_pagetables:0 bounce:0 [ 327.549663][T15059] kernel_misc_reclaimable:0 [ 327.549663][T15059] free:1264417 free_pcp:10736 free_cma:0 [ 327.731488][T15059] Node 0 active_anon:28496kB inactive_anon:0kB active_file:10264kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178564kB dirty:156kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15612kB pagetables:14524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 327.773682][T15059] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 327.864553][T15059] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.919282][T15059] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 327.929836][T15059] Node 0 DMA32 free:1109156kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28348kB inactive_anon:0kB active_file:10264kB inactive_file:160008kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:42128kB local_pcp:21556kB free_cma:0kB [ 327.969602][T15059] lowmem_reserve[]: 0 0 0 0 0 [ 327.976301][T15059] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 328.013410][T15059] lowmem_reserve[]: 0 0 0 0 0 [ 328.050190][T15059] Node 1 Normal free:3935032kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.098952][T15059] lowmem_reserve[]: 0 0 0 0 0 [ 328.105035][T15059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.128999][T15067] netlink: 'syz.7.2454': attribute type 21 has an invalid length. [ 328.150657][T15067] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2454'. [ 328.157847][T15059] Node 0 DMA32: 5859*4kB (UME) 4421*8kB (UM) 1809*16kB (UM) 139*32kB (UME) 123*64kB (UM) 793*128kB (UME) 586*256kB (UME) 283*512kB (UME) 120*1024kB (U) 17*2048kB (UM) 111*4096kB (M) = 1108836kB [ 328.176706][T15067] netdevsim netdevsim7 : renamed from netdevsim0 [ 328.183459][T15059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.198834][T15059] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 11*16kB (UM) 1*32kB (M) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3935032kB [ 328.217995][T15059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.227945][T15059] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.257895][T15059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.281114][T15059] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.330818][T15059] 43906 total pagecache pages [ 328.372260][T15059] 0 pages in swap cache [ 328.388565][T15059] Free swap = 124996kB [ 328.407678][T15059] Total swap = 124996kB [ 328.425862][T15059] 2097051 pages RAM [ 328.435512][T15059] 0 pages HighMem/MovableOnly [ 328.443928][T15078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.460388][T15059] 427069 pages reserved [ 328.467684][T15059] 0 pages cma reserved [ 328.667467][T15084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.726372][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2460'. [ 328.756381][T15090] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2460'. [ 328.786805][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2460'. [ 328.836550][T15090] syzkaller0: entered promiscuous mode [ 328.870238][T15090] syzkaller0: entered allmulticast mode [ 329.139598][T15108] netlink: 'syz.6.2465': attribute type 8 has an invalid length. [ 329.447384][T15120] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2469'. [ 329.460719][T15117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'. [ 329.668168][T15123] netlink: 'syz.5.2470': attribute type 27 has an invalid length. [ 329.780028][T15127] netlink: 'syz.7.2471': attribute type 3 has an invalid length. [ 329.799341][T15127] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2471'. [ 329.904871][T15129] netlink: 'syz.2.2473': attribute type 10 has an invalid length. [ 329.940025][T15134] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 329.942390][T15129] syz_tun: entered promiscuous mode [ 330.013328][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2476'. [ 331.299630][T15170] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 331.321722][T15173] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 331.334315][T15169] netlink: 'syz.6.2484': attribute type 5 has an invalid length. [ 331.404059][T15180] geneve2: entered promiscuous mode [ 331.424773][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 35962 - 0 [ 331.458858][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 35962 - 0 [ 331.505386][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 35962 - 0 [ 331.539821][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 35962 - 0 [ 332.254072][T15218] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 332.269204][T15223] netlink: 'syz.5.2496': attribute type 7 has an invalid length. [ 332.307478][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2496'. [ 332.386324][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2496'. [ 332.584011][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2501'. [ 333.386466][T15255] netlink: 'syz.5.2508': attribute type 58 has an invalid length. [ 333.426744][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2508'. [ 333.655344][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2513'. [ 333.687859][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2513'. [ 333.722560][T15269] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2513'. [ 333.758271][T15272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.249820][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2520'. [ 334.370098][T15290] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2521'. [ 334.633471][T15304] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2526'. [ 335.632826][ T5644] Bluetooth: hci7: command 0x0405 tx timeout [ 336.025665][T15362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.256109][T15377] wireguard: wg0: Could not create IPv4 socket [ 336.314958][T15379] syzkaller1: entered promiscuous mode [ 336.328516][T15379] syzkaller1: entered allmulticast mode [ 336.363480][T15379] ipt_REJECT: TCP_RESET invalid for non-tcp [ 336.388442][T15379] x_tables: duplicate underflow at hook 1 [ 336.456447][T15381] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 337.077469][T15423] netlink: 'syz.7.2563': attribute type 32 has an invalid length. [ 337.135289][T15425] netlink: 'syz.7.2563': attribute type 32 has an invalid length. [ 337.373914][T15435] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 337.395101][T15434] __nla_validate_parse: 8 callbacks suppressed [ 337.395117][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'. [ 337.444694][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'. [ 337.589558][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2569'. [ 337.674539][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2571'. [ 337.711665][ T50] Bluetooth: hci7: command 0x0405 tx timeout [ 337.928595][T15453] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.993287][T15451] syzkaller0: entered promiscuous mode [ 338.008358][T15451] syzkaller0: entered allmulticast mode [ 338.372188][T15479] netlink: 'syz.7.2580': attribute type 1 has an invalid length. [ 338.417105][T15479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.457945][T15482] bond1: (slave veth3): Enslaving as an active interface with a down link [ 338.492031][T15479] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 338.507177][T15479] bond1: (slave batadv1): making interface the new active one [ 338.520362][T15479] batadv1: entered promiscuous mode [ 338.529618][T15479] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 338.777880][T15492] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 338.792626][T15492] bond2 (unregistering): Released all slaves [ 338.890532][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2585'. [ 339.028767][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2586'. [ 339.155243][T15507] : entered promiscuous mode [ 339.218284][T15509] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2588'. [ 339.295420][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 339.325711][T15511] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.2589'. [ 339.585760][T15531] IPVS: set_ctl: invalid protocol: 137 172.20.20.57:20000 [ 340.963266][T15463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.978480][T15524] netlink: 'syz.2.2593': attribute type 1 has an invalid length. [ 340.998717][T15524] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2593'. [ 341.607441][T15556] xt_nat: multiple ranges no longer supported [ 341.740214][T15559] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 341.864424][T15559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.980177][T15572] dvmrp0: entered allmulticast mode [ 342.243919][T15583] bridge6: entered allmulticast mode [ 342.629734][T15601] __nla_validate_parse: 9 callbacks suppressed [ 342.629753][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 343.180777][T15625] SET target dimension over the limit! [ 343.549143][T15644] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2629'. [ 343.610885][T15649] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2629'. [ 343.885790][T15657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2632'. [ 343.908638][T15657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2632'. [ 344.019665][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2633'. [ 344.206123][T15670] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2636'. [ 344.289950][T15674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2637'. [ 344.305358][T15673] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 344.317900][T15670] netlink: 'syz.7.2636': attribute type 1 has an invalid length. [ 344.328118][T15674] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2637'. [ 344.339727][T15674] netlink: 'syz.1.2637': attribute type 5 has an invalid length. [ 344.349847][T15677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2639'. [ 344.356281][T15674] netlink: 'syz.1.2637': attribute type 6 has an invalid length. [ 344.990741][T15705] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 345.025451][T15705] 8021q: adding VLAN 0 to HW filter on device bond13 [ 345.070410][T15705] bond13: (slave geneve4): making interface the new active one [ 345.085572][T15705] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 345.172042][ T34] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.189645][ T34] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.220501][ T34] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.249465][ T34] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.524668][T15719] netlink: 'syz.7.2651': attribute type 1 has an invalid length. [ 345.567815][T15719] netlink: 'syz.7.2651': attribute type 2 has an invalid length. [ 345.917799][T15689] netlink: 'syz.6.2641': attribute type 41 has an invalid length. [ 346.003894][T15740] syzkaller1: entered promiscuous mode [ 346.030973][T15740] syzkaller1: entered allmulticast mode [ 346.167517][T15748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.580950][T15772] netlink: 'syz.2.2667': attribute type 21 has an invalid length. [ 347.861118][T15821] __nla_validate_parse: 10 callbacks suppressed [ 347.870415][T15821] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.2680'. [ 349.396744][T15761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.660582][T15840] openvswitch: netlink: IPv6 tunnel dst address is zero [ 349.691356][ T34] batadv1: left promiscuous mode [ 349.738407][T15851] lo: left promiscuous mode [ 349.748114][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2684'. [ 349.965697][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2688'. [ 350.302954][T15851] syz_tun: left promiscuous mode [ 350.501619][T15851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 351.065809][T15895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.202960][T15905] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2699'. [ 351.526857][T15921] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 351.630105][ T30] audit: type=1804 audit(1780823665.122:7): pid=15924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2705" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1695 res=1 errno=0 [ 351.736725][ T30] audit: type=1800 audit(1780823665.122:8): pid=15924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2705" name="cgroup.controllers" dev="tmpfs" ino=1695 res=0 errno=0 [ 351.837396][T15927] netlink: 81 bytes leftover after parsing attributes in process `syz.1.2706'. [ 351.951747][T15935] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 352.121626][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2712'. [ 352.537250][T15963] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 352.780064][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2716'. [ 352.950716][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2716'. [ 352.961548][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'. [ 352.973654][T15984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2718'. [ 353.025451][ T7981] netdevsim netdevsim7 : set [0, 0] type 1 family 0 port 8472 - 0 [ 353.041774][ T7981] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.139370][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 353.174874][ T7981] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.191601][T15986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2720'. [ 353.255983][ T7981] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.390333][T16000] netlink: 'syz.7.2723': attribute type 1 has an invalid length. [ 353.428712][T15992] bond1: Unable to set up delay as MII monitoring is disabled [ 353.450213][T15992] bond1 (unregistering): Released all slaves [ 353.474532][T16004] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 353.484193][T16004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2722'. [ 353.698809][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 354.000088][T16019] netlink: 'syz.1.2728': attribute type 1 has an invalid length. [ 354.017699][T16018] netlink: 'syz.1.2728': attribute type 1 has an invalid length. [ 354.572587][T16019] pim6reg1: entered promiscuous mode [ 354.596471][T16035] nbd7: detected capacity change from 0 to 63 [ 354.612517][T16019] pim6reg1: entered allmulticast mode [ 354.650975][T16041] block nbd7: NBD_DISCONNECT [ 354.719215][T16041] block nbd7: Disconnected due to user request. [ 354.741675][ T5658] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.751175][T16041] block nbd7: shutting down sockets [ 354.773039][ T5658] Buffer I/O error on dev nbd7, logical block 1, async page read [ 354.796771][ C0] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.805918][ C0] Buffer I/O error on dev nbd7, logical block 0, async page read [ 354.821794][ T1959] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 354.833948][ T1959] Buffer I/O error on dev nbd7, logical block 2, async page read [ 354.843407][ T1959] Buffer I/O error on dev nbd7, logical block 3, async page read [ 354.853334][ T5658] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.878887][ T5658] Buffer I/O error on dev nbd7, logical block 0, async page read [ 354.888292][ T5658] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.898636][ T5658] Buffer I/O error on dev nbd7, logical block 1, async page read [ 354.908838][ T5658] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.919900][ T5658] Buffer I/O error on dev nbd7, logical block 2, async page read [ 354.929536][ T5658] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.940691][ T5658] Buffer I/O error on dev nbd7, logical block 3, async page read [ 354.950182][ T5658] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.962900][ T5658] Buffer I/O error on dev nbd7, logical block 0, async page read [ 354.972608][ T5658] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.982922][ T5658] Buffer I/O error on dev nbd7, logical block 1, async page read [ 354.992077][ T5658] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.024675][ T5658] ldm_validate_partition_table(): Disk read failed. [ 355.066486][ T5658] Dev nbd7: unable to read RDB block 0 [ 355.106065][ T5658] nbd7: unable to read partition table [ 355.201107][ T5658] ldm_validate_partition_table(): Disk read failed. [ 355.255532][ T5658] Dev nbd7: unable to read RDB block 0 [ 355.297642][ T5658] nbd7: unable to read partition table [ 355.537371][T16070] netlink: 'syz.6.2740': attribute type 15 has an invalid length. [ 355.583227][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2742'. [ 355.606977][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 355.774820][T16081] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2744'. [ 356.103403][T16098] netlink: 'syz.1.2750': attribute type 21 has an invalid length. [ 356.156417][T16103] netlink: 'syz.1.2750': attribute type 21 has an invalid length. [ 356.218103][T16098] netlink: 'syz.1.2750': attribute type 4 has an invalid length. [ 356.231973][T16098] netlink: 'syz.1.2750': attribute type 5 has an invalid length. [ 356.267495][T16103] netlink: 'syz.1.2750': attribute type 4 has an invalid length. [ 356.297287][T16110] 8021q: VLANs not supported on ip_vti0 [ 356.447787][T16092] syzkaller0: entered promiscuous mode [ 356.453923][T16092] syzkaller0: entered allmulticast mode [ 356.670699][T16123] openvswitch: netlink: Unknown key attributes 2 [ 356.719183][T16127] openvswitch: netlink: Multiple metadata blocks provided [ 356.916187][T16135] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 359.390155][T16152] syzkaller0: entered promiscuous mode [ 359.410246][T16152] syzkaller0: entered allmulticast mode [ 359.625014][T16152] bond3: option lp_interval: invalid value (0) [ 359.650945][T16152] bond3: option lp_interval: allowed values 1 - 2147483647 [ 359.676410][T16152] bond3 (unregistering): Released all slaves [ 359.713113][ T5644] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 359.725699][ T5644] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 359.741477][ T5644] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 359.755969][ T5644] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 359.765223][ T5644] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 359.971761][T16161] netem: change failed [ 360.058508][T16171] validate_nla: 1 callbacks suppressed [ 360.058610][T16171] netlink: 'syz.7.2768': attribute type 3 has an invalid length. [ 360.072976][T16171] __nla_validate_parse: 7 callbacks suppressed [ 360.073044][T16171] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2768'. [ 360.825389][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 35962 - 0 [ 361.040913][T16203] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2775'. [ 361.113521][T16203] syzkaller1: entered promiscuous mode [ 361.145948][T16203] syzkaller1: entered allmulticast mode [ 361.229184][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 35962 - 0 [ 361.571070][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 361.609534][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 35962 - 0 [ 361.649332][T16164] lo speed is unknown, defaulting to 1000 [ 361.783767][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 35962 - 0 [ 361.874577][ T5644] Bluetooth: hci8: command tx timeout [ 362.226101][T16244] tipc: Failed to remove unknown binding: 66,1,1/10136234:236981837/236981839 [ 362.483939][T16247] ipvlan2: entered allmulticast mode [ 362.489728][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2786'. [ 362.512694][T16247] batadv_slave_1: entered allmulticast mode [ 362.523875][T16247] batman_adv: batadv0: Adding interface: ipvlan2 [ 362.530399][T16247] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.563708][T16247] batman_adv: batadv0: Interface activated: ipvlan2 [ 362.572402][T16252] xt_ecn: cannot match TCP bits for non-tcp packets [ 362.648133][ T13] gretap0: left allmulticast mode [ 362.667360][ T13] gretap0: left promiscuous mode [ 362.695268][ T13] bridge0: port 1(gretap0) entered disabled state [ 362.788372][ T13] bridge_slave_1: left promiscuous mode [ 362.809122][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.895875][ T13] dvmrp0: left allmulticast mode [ 363.107351][ T13] tipc: Disabling bearer [ 363.646548][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.668300][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.678163][ T13] bond0 (unregistering): Released all slaves [ 363.694108][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 363.703464][ T13] bond1 (unregistering): Released all slaves [ 363.729221][ T13] bond2 (unregistering): Released all slaves [ 363.749294][ T13] bond3 (unregistering): Released all slaves [ 363.771087][ T13] bond4 (unregistering): Released all slaves [ 363.799577][ T13] bond5 (unregistering): Released all slaves [ 363.820408][ T13] bond6 (unregistering): Released all slaves [ 363.846885][ T13] bond7 (unregistering): Released all slaves [ 363.952071][ T5644] Bluetooth: hci8: command tx timeout [ 364.034401][T16266] netlink: 'syz.7.2791': attribute type 9 has an invalid length. [ 364.389130][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2794'. [ 364.686884][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 364.740930][ T13] tipc: Disabling bearer [ 364.750309][ T13] tipc: Disabling bearer [ 364.771940][ T13] tipc: Left network mode [ 365.041037][T16307] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2801'. [ 365.316045][T16313] netlink: 'syz.5.2802': attribute type 39 has an invalid length. [ 365.428849][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2803'. [ 365.627588][T16318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 365.659903][T16318] batadv1: entered promiscuous mode [ 365.683363][T16318] batadv1: entered allmulticast mode [ 365.692665][T16318] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 365.718208][T16318] team0: Failed to send options change via netlink (err -105) [ 365.734389][T16318] team0: Port device batadv1 added [ 365.817034][T16327] syzkaller1: entered promiscuous mode [ 365.835952][T16327] syzkaller1: entered allmulticast mode [ 366.038852][ T5644] Bluetooth: hci8: command tx timeout [ 366.100110][ T3307] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 366.109736][ T3307] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 366.744194][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2814'. [ 366.986437][T16374] bond3: entered promiscuous mode [ 366.993609][T16374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.033372][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 367.065452][T16387] veth0: entered promiscuous mode [ 367.076389][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2814'. [ 367.094270][T16386] tipc: Started in network mode [ 367.100002][T16386] tipc: Node identity ac14140f, cluster identity 4711 [ 367.109695][T16386] tipc: New replicast peer: 255.255.255.255 [ 367.117211][T16386] tipc: Enabled bearer , priority 10 [ 367.125149][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.133092][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.140647][T16164] bridge_slave_0: entered allmulticast mode [ 367.156256][T16164] bridge_slave_0: entered promiscuous mode [ 367.175864][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.202125][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.237825][T16164] bridge_slave_1: entered allmulticast mode [ 367.280991][T16164] bridge_slave_1: entered promiscuous mode [ 367.469058][T16398] wg1 speed is unknown, defaulting to 1000 [ 367.481020][T16401] netlink: 'syz.7.2822': attribute type 1 has an invalid length. [ 367.502651][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.537531][T16398] wg1 speed is unknown, defaulting to 1000 [ 367.575427][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.688937][T16398] wg1 speed is unknown, defaulting to 1000 [ 367.738966][T16398] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 367.760279][T16398] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 367.781444][T16398] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 367.834781][T16164] team0: Port device team_slave_0 added [ 367.884993][T16164] team0: Port device team_slave_1 added [ 368.001675][T16398] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 368.068640][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.104490][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.132990][ T5644] Bluetooth: hci8: command tx timeout [ 368.162778][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.207391][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.224122][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.277919][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.315068][T16398] wg1 speed is unknown, defaulting to 1000 [ 368.321008][T12947] tipc: Node number set to 2886997007 [ 368.413104][T16398] wg1 speed is unknown, defaulting to 1000 [ 368.609308][T16398] wg1 speed is unknown, defaulting to 1000 [ 368.662762][T16432] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2827'. [ 368.676818][ T13] hsr_slave_0: left promiscuous mode [ 368.696640][ T13] hsr_slave_1: left promiscuous mode [ 368.715592][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.974244][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2830'. [ 368.988483][T16450] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 369.438372][T16164] hsr_slave_0: entered promiscuous mode [ 369.459086][T16164] hsr_slave_1: entered promiscuous mode [ 369.488548][T16164] debugfs: 'hsr0' already exists in 'hsr' [ 369.496953][T16164] Cannot create hsr debugfs directory [ 369.509554][T16398] wg1 speed is unknown, defaulting to 1000 [ 369.521356][T16443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.563941][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 369.572551][T16398] wg1 speed is unknown, defaulting to 1000 [ 369.746111][T16398] wg1 speed is unknown, defaulting to 1000 [ 369.802476][T16398] wg1 speed is unknown, defaulting to 1000 [ 369.839731][T16398] wg1 speed is unknown, defaulting to 1000 [ 370.124932][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'. [ 370.160547][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'. [ 370.204573][ T13] IPVS: stop unused estimator thread 0... [ 370.419963][T16479] SET target dimension over the limit! [ 370.434391][T16482] IPVS: length: 197 != 24 [ 371.243855][T16508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2843'. [ 371.324911][T16519] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:0 [ 371.388989][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2845'. [ 371.724773][T16532] sctp: [Deprecated]: syz.7.2849 (pid 16532) Use of int in max_burst socket option. [ 371.724773][T16532] Use struct sctp_assoc_value instead [ 371.883454][T16517] bond14: option min_links: invalid value (18446744073709551614) [ 371.891810][T16517] bond14: option min_links: allowed values 0 - 2147483647 [ 371.905483][T16517] bond14 (unregistering): Released all slaves [ 371.966690][T16527] netlink: 'syz.5.2847': attribute type 2 has an invalid length. [ 372.196271][T16548] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 372.246608][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2851'. [ 372.297159][T16548] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2851'. [ 372.564126][T16564] xt_TCPMSS: Only works on TCP SYN packets [ 372.710675][T16568] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.746624][T16568] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.792795][T16568] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 372.938769][T16576] bond2: option resend_igmp: invalid value (32767) [ 372.945879][T16576] bond2: option resend_igmp: allowed values 0 - 255 [ 372.959069][T16576] bond2 (unregistering): Released all slaves [ 373.063116][T16568] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.086864][T16568] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.099796][T16568] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.254786][T16568] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.272342][T16568] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.298322][T16568] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.402411][T16568] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.423409][T16568] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.463819][T16568] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.525594][T16164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.598251][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.628730][T16164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.657376][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.677216][T16164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.713088][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.740609][T16164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.780555][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.878439][T16610] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2859'. [ 373.908929][ T7711] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.930874][ T7711] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 373.967203][ T7711] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.066971][ T3307] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.076844][ T3307] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 374.088009][ T3307] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.126300][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2862'. [ 374.218214][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.233850][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 374.265500][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.331046][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.363193][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 374.393905][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.676329][T16164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.769980][T16164] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.813949][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.822744][ T7711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.898241][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.905483][ T7711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.125723][T16617] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 375.133104][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2863'. [ 375.166920][T16617] bond1 (unregistering): Released all slaves [ 376.649476][T16668] team1: left promiscuous mode [ 376.656200][T16668] team1: left allmulticast mode [ 377.032223][T16668] vlan2: left allmulticast mode [ 377.052301][T16668] bond5: left allmulticast mode [ 377.068737][T16668] geneve2: left allmulticast mode [ 377.656931][T16668] dummy0: left allmulticast mode [ 377.669963][T16668] macvlan5: left allmulticast mode [ 377.680345][T16668] bridge6: left allmulticast mode [ 377.719384][ T3307] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.775247][ T3307] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 377.820320][ T3307] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.890617][ T3307] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.946309][ T3307] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 377.989604][ T3307] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.030334][ T3307] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.069694][ T3307] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.109734][ T3307] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.160419][ T3307] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.218462][ T3307] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.261678][ T3307] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.629180][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 378.937878][T16749] netlink: 'syz.7.2883': attribute type 7 has an invalid length. [ 379.267230][T16757] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 379.415937][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2887'. [ 379.783026][T16164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.866358][T16777] syzkaller0: entered promiscuous mode [ 379.895368][T16777] syzkaller0: entered allmulticast mode [ 379.947220][T16780] netlink: 'syz.5.2891': attribute type 1 has an invalid length. [ 380.222442][T16760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.293622][T16780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.576906][T16164] veth0_vlan: entered promiscuous mode [ 380.627298][T16164] veth1_vlan: entered promiscuous mode [ 380.747605][T16799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.787922][T16164] veth0_macvtap: entered promiscuous mode [ 380.814493][T16164] veth1_macvtap: entered promiscuous mode [ 380.859274][T16164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.886718][T16164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.968817][ T201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.000621][ T201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.029565][ T201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.069758][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 381.148185][ T201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.455187][T16824] Bluetooth: MGMT ver 1.23 [ 381.652746][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.675230][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.838683][ T7711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.863846][ T7711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.321539][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2911'. [ 382.386434][T16860] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2912'. [ 382.399693][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2912'. [ 382.414431][T16860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2912'. [ 382.426901][T16861] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2911'. [ 382.439804][T16858] xfrm1: entered promiscuous mode [ 382.448137][T16858] xfrm1: entered allmulticast mode [ 382.670488][T16864] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2914'. [ 382.957964][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 383.071576][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.087793][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.105726][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.121725][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.133935][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.238568][T16884] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 384.346305][T16909] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 384.382214][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2921'. [ 384.405908][T16903] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 384.420326][T16910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2921'. [ 384.435588][T16903] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 385.219067][T16931] netlink: 'syz.6.2928': attribute type 1 has an invalid length. [ 385.237245][T16926] team0: Port device dummy0 removed [ 385.249743][ T50] Bluetooth: hci1: command tx timeout [ 385.278055][T16926] bridge_slave_0: left allmulticast mode [ 385.305327][T16933] netlink: 'syz.6.2928': attribute type 1 has an invalid length. [ 385.315101][T16926] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.366639][T16926] bridge_slave_1: left promiscuous mode [ 385.377177][T16926] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.431902][T16926] bond0: (slave bond_slave_0): Releasing backup interface [ 385.503342][T16926] bond0: (slave bond_slave_1): Releasing backup interface [ 385.645584][T16926] team0: Port device team_slave_0 removed [ 385.728255][T16926] team0: Port device team_slave_1 removed [ 385.753195][T16926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.801429][T16926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.820316][T16926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.848890][ T7981] tipc: Resetting bearer [ 385.927950][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 386.451021][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2935'. [ 386.518561][T16871] lo speed is unknown, defaulting to 1000 [ 387.073323][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.322597][ T50] Bluetooth: hci1: command tx timeout [ 387.594344][T17004] netlink: 'syz.5.2944': attribute type 21 has an invalid length. [ 387.610585][T17004] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.652643][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 387.662768][T16871] wg1 speed is unknown, defaulting to 1000 [ 387.668793][T17004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.676083][T17004] IPv6: NLM_F_CREATE should be set when creating new route [ 387.683394][T17004] IPv6: NLM_F_CREATE should be set when creating new route [ 387.690627][T17004] IPv6: NLM_F_CREATE should be set when creating new route [ 387.759934][T17003] bond1: option xmit_hash_policy: invalid value (64) [ 387.768920][T17003] bond1 (unregistering): Released all slaves [ 387.793914][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2945'. [ 387.816989][T17010] veth0: entered promiscuous mode [ 387.884204][T17007] veth0: left promiscuous mode [ 388.103043][T17017] netlink: 'syz.5.2946': attribute type 1 has an invalid length. [ 388.118951][T17017] netlink: 'syz.5.2946': attribute type 3 has an invalid length. [ 388.160831][T17017] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2946'. [ 388.272538][T17024] openvswitch: netlink: Flow key attr not present in new flow. [ 388.617158][T17037] Bluetooth: MGMT ver 1.23 [ 388.677079][T17037] Bluetooth: hci1: too big key_count value 32778 [ 388.854372][T17045] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 389.392529][ T50] Bluetooth: hci1: command tx timeout [ 389.823839][T16871] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.866390][T16871] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.901475][T16871] bridge_slave_0: entered allmulticast mode [ 389.930948][T16871] bridge_slave_0: entered promiscuous mode [ 389.937747][T17098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2962'. [ 389.982932][T16871] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.026083][T16871] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.061871][T16871] bridge_slave_1: entered allmulticast mode [ 390.086438][T16871] bridge_slave_1: entered promiscuous mode [ 390.233466][T16871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.268998][T16871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.491950][T16871] team0: Port device team_slave_0 added [ 390.525108][T16871] team0: Port device team_slave_1 added [ 390.546620][ T30] audit: type=1800 audit(1780823704.042:9): pid=17114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2966" name="memory.events" dev="tmpfs" ino=737 res=0 errno=0 [ 390.712337][T16871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.735810][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.867405][T16871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.936926][T16871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.958322][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.044365][T16871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.291743][T16871] hsr_slave_0: entered promiscuous mode [ 391.318088][T16871] hsr_slave_1: entered promiscuous mode [ 391.344798][T16871] debugfs: 'hsr0' already exists in 'hsr' [ 391.369443][T16871] Cannot create hsr debugfs directory [ 391.471683][ T50] Bluetooth: hci1: command tx timeout [ 391.719778][T17156] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2974'. [ 391.764664][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2974'. [ 391.802024][T17156] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2974'. [ 391.847486][T17156] netlink: 'syz.5.2974': attribute type 2 has an invalid length. [ 391.886398][T17156] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2974'. [ 391.886607][T17161] Cannot find map_set index 135 as target [ 391.906869][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2976'. [ 391.962225][T17129] netlink: 'syz.1.2971': attribute type 8 has an invalid length. [ 392.294852][T17168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.526913][T17176] netlink: 'syz.6.2981': attribute type 1 has an invalid length. [ 392.539407][T17176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.548112][T17176] IPv6: NLM_F_CREATE should be set when creating new route [ 392.581083][T17176] netlink: 'syz.6.2981': attribute type 1 has an invalid length. [ 392.597667][T17176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.087581][T17193] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2986'. [ 393.104995][T17193] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2986'. [ 393.219231][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 393.460693][T17206] sctp: [Deprecated]: syz.7.2990 (pid 17206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.460693][T17206] Use struct sctp_sack_info instead [ 393.530071][ T5827] IPVS: starting estimator thread 0... [ 393.540421][T17211] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2990'. [ 393.610970][T17213] tipc: Enabled bearer , priority 0 [ 393.641543][T17210] IPVS: using max 30 ests per chain, 72000 per kthread [ 393.655802][T17212] tipc: Disabling bearer [ 393.890916][T16871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.919543][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.939580][T16871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.980564][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.013740][T16871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.062138][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.093956][T16871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.148041][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.619286][T16871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.837573][T17247] bridge1: port 1(bond1) entered blocking state [ 394.844370][T17247] bridge1: port 1(bond1) entered disabled state [ 394.850946][T17247] bond1: entered allmulticast mode [ 394.860663][T17247] bond1: entered promiscuous mode [ 394.869073][T16871] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.884972][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.892991][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.935030][T17254] bond1: left allmulticast mode [ 394.940742][T17254] bond1: left promiscuous mode [ 394.966716][T17254] bridge1: port 1(bond1) entered disabled state [ 395.042792][T17261] __nla_validate_parse: 6 callbacks suppressed [ 395.042812][T17261] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3005'. [ 395.097455][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3007'. [ 395.215730][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.223957][ T7981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.473000][T17275] pim6reg: entered allmulticast mode [ 396.203759][ T30] audit: type=1107 audit(1780823709.692:10): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 396.287039][T17310] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3017'. [ 396.358617][T17313] openvswitch: netlink: Message has 1 unknown bytes. [ 396.381389][T17313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.854424][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3023'. [ 396.885182][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3023'. [ 396.916315][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3023'. [ 397.242670][T17337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3025'. [ 397.259017][T17328] syzkaller0: entered promiscuous mode [ 397.269258][T17328] syzkaller0: entered allmulticast mode [ 398.198894][T17352] x_tables: duplicate entry at hook 2 [ 400.049549][T16871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.334085][T16871] veth0_vlan: entered promiscuous mode [ 400.395735][T16871] veth1_vlan: entered promiscuous mode [ 400.442054][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3035'. [ 400.595011][T17367] netlink: 65011 bytes leftover after parsing attributes in process `syz.5.3035'. [ 400.634837][T17374] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3036'. [ 400.675108][ T34] netdevsim netdevsim7 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.699986][ T34] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.729241][ T34] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.771493][ T34] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.978941][ T30] audit: type=1804 audit(1780823714.472:11): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3040" name="/newroot/406/cgroup.controllers" dev="tmpfs" ino=2098 res=1 errno=0 [ 401.004296][T16871] veth0_macvtap: entered promiscuous mode [ 401.040659][T16871] veth1_macvtap: entered promiscuous mode [ 401.116447][ T30] audit: type=1800 audit(1780823714.512:12): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3040" name="cgroup.controllers" dev="tmpfs" ino=2098 res=0 errno=0 [ 401.180118][T16871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.337804][T16871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.381058][T17395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3041'. [ 401.411931][T17406] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003 [ 401.438913][ T7981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.506189][ T7981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.556003][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.590382][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.018618][ T7711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.066687][T17422] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3046'. [ 402.088906][ T7711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.263078][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.288370][T17425] netlink: 'syz.7.3048': attribute type 20 has an invalid length. [ 402.322902][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.356005][T17425] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.367208][T17429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3050'. [ 402.419837][T17429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3050'. [ 402.746987][T17445] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3055'. [ 402.766665][T17446] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.097163][T17462] openvswitch: netlink: IP tunnel TTL not specified. [ 403.349388][T17470] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3061'. [ 403.373386][T17472] syzkaller0: entered promiscuous mode [ 403.389249][T17470] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3061'. [ 403.403409][T17472] syzkaller0: entered allmulticast mode [ 403.434782][T17472] veth0_to_bond: default FDB implementation only supports local addresses [ 405.137831][T17539] netlink: 'syz.7.3073': attribute type 49 has an invalid length. [ 405.334332][T17552] syz_tun: refused to change device tx_queue_len [ 405.344989][T17552] nbd: illegal input index 2958377 [ 405.558033][T17561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.593545][T17561] bridge0: port 1(bond5) entered blocking state [ 405.612148][T17561] bridge0: port 1(bond5) entered disabled state [ 405.619564][T17561] bond5: entered allmulticast mode [ 405.634403][T17561] bond5: entered promiscuous mode [ 405.640842][T17561] bridge0: port 1(bond5) entered blocking state [ 405.650916][T17561] bridge0: port 1(bond5) entered forwarding state [ 405.667340][ T201] bridge0: port 1(bond5) entered disabled state [ 405.675822][T17570] __nla_validate_parse: 14 callbacks suppressed [ 405.675839][T17570] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3081'. [ 406.109325][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888086396c00: rx timeout, send abort [ 406.609449][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888086396400: rx timeout, send abort [ 406.618376][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888086396c00: abort rx timeout. Force session deactivation [ 406.767503][T17615] netlink: 'syz.7.3087': attribute type 1 has an invalid length. [ 406.829629][T17610] ip_vti0: entered promiscuous mode [ 406.923720][T17619] SET target dimension over the limit! [ 407.117859][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888086396400: abort rx timeout. Force session deactivation [ 407.242171][T17626] geneve2: entered promiscuous mode [ 407.259514][T17626] geneve2: entered allmulticast mode [ 407.270413][T17628] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3095'. [ 407.835787][T17654] : left promiscuous mode [ 407.867874][T17649] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.902830][T17649] netlink: 'syz.2.3102': attribute type 1 has an invalid length. [ 407.967223][T17660] netlink: 'syz.6.3105': attribute type 11 has an invalid length. [ 407.989315][T17660] netlink: 'syz.6.3105': attribute type 11 has an invalid length. [ 408.003043][T17660] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3105'. [ 408.419202][T17676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3112'. [ 408.637866][T17688] netlink: 'syz.7.3115': attribute type 1 has an invalid length. [ 408.657187][T17690] netlink: 'syz.7.3115': attribute type 1 has an invalid length. [ 408.752154][T17694] can: request_module (can-proto-0) failed. [ 408.863456][T17688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.907109][T17701] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3116'. [ 409.180202][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3120'. [ 409.203212][T17710] block nbd0: not configured, cannot reconfigure [ 409.444615][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3125'. [ 409.496463][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 409.534091][T17726] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 409.586572][T17725] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3125'. [ 409.626491][T17726] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3125'. [ 409.793624][T17732] bond1: entered promiscuous mode [ 409.798918][T17732] bond1: entered allmulticast mode [ 409.809077][T17732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.186370][T17756] netlink: 'syz.2.3135': attribute type 1 has an invalid length. [ 410.471952][T17760] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 410.955106][T17779] __nla_validate_parse: 7 callbacks suppressed [ 410.955164][T17779] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3142'. [ 410.990931][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa30000: rx timeout, send abort [ 411.023197][T17783] netlink: 'syz.6.3143': attribute type 1 has an invalid length. [ 411.032673][T17783] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3143'. [ 411.179428][T17785] netlink: 'syz.2.3144': attribute type 1 has an invalid length. [ 411.340489][T17785] ip6gretap1: entered promiscuous mode [ 411.349922][T17785] ip6gretap1: entered allmulticast mode [ 411.357681][T17796] IPVS: Unknown mcast interface: rose0 [ 411.499231][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa30000: abort rx timeout. Force session deactivation [ 411.549199][T17800] SET target dimension over the limit! [ 411.593800][T17799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3148'. [ 411.789960][T17809] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3152'. [ 411.806423][T17809] netlink: 'syz.7.3152': attribute type 2 has an invalid length. [ 412.039140][T17817] syzkaller0: entered promiscuous mode [ 412.067317][T17817] syzkaller0: entered allmulticast mode [ 412.419455][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3161'. [ 412.616588][T17845] veth0_to_bond: entered allmulticast mode [ 415.290772][T17830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.646665][T17884] xt_cgroup: invalid path, errno=-2 [ 415.680000][T17894] netlink: 'syz.5.3178': attribute type 1 has an invalid length. [ 415.696961][T17890] syzkaller0: entered promiscuous mode [ 415.706974][T17894] netlink: 'syz.5.3178': attribute type 4 has an invalid length. [ 415.719789][T17890] syzkaller0: entered allmulticast mode [ 415.745337][T17894] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3178'. [ 416.022793][T17901] netlink: 'syz.5.3182': attribute type 1 has an invalid length. [ 416.051396][T17901] netlink: 'syz.5.3182': attribute type 2 has an invalid length. [ 416.065370][T17901] netlink: 'syz.5.3182': attribute type 1 has an invalid length. [ 416.074802][T17901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3182'. [ 416.108003][T17903] tipc: Enabling of bearer rejected, failed to enable media [ 416.348373][T17914] netlink: 'syz.1.3183': attribute type 39 has an invalid length. [ 416.429021][T17914] hsr_slave_0: left promiscuous mode [ 416.483398][T17914] hsr_slave_1: left promiscuous mode [ 416.803278][T17922] netlink: 'syz.6.3186': attribute type 1 has an invalid length. [ 416.860610][T17922] netlink: 'syz.6.3186': attribute type 3 has an invalid length. [ 416.879218][T17932] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3186'. [ 416.885140][T17922] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3186'. [ 417.020754][T17916] syzkaller0: entered promiscuous mode [ 417.038690][T17916] syzkaller0: entered allmulticast mode [ 417.498611][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 417.635789][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3201'. [ 419.713719][T17973] sctp: [Deprecated]: syz.2.3202 (pid 17973) Use of int in max_burst socket option deprecated. [ 419.713719][T17973] Use struct sctp_assoc_value instead [ 419.901715][T17979] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3205'. [ 419.939980][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3206'. [ 420.020422][T17984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.320596][T17999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3212'. [ 420.891314][T18020] syzkaller1: entered allmulticast mode [ 421.558176][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 422.023170][T18073] netlink: 'syz.7.3229': attribute type 1 has an invalid length. [ 422.116100][T18076] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 422.189069][T18073] bond4: entered promiscuous mode [ 422.195434][T18073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.203681][T18082] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3232'. [ 422.215218][T18076] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 422.224626][T18085] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3232'. [ 422.301467][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3232'. [ 422.641825][T18102] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3238'. [ 422.666418][T18104] x_tables: unsorted underflow at hook 2 [ 422.690397][T18105] pim6reg: entered allmulticast mode [ 422.849532][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3241'. [ 422.888658][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3241'. [ 423.192014][T18131] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 423.430703][T18136] netlink: 'syz.2.3247': attribute type 9 has an invalid length. [ 423.658645][T18138] vet: renamed from veth0_vlan [ 423.676236][T18148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3250'. [ 423.718408][T18148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3250'. [ 424.045666][T18156] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.097889][T18142] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.105674][T18142] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.349625][T18142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.376783][T18142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.570497][T18154] netem: change failed [ 424.579148][T18167] netlink: 'syz.6.3256': attribute type 1 has an invalid length. [ 424.587734][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.606186][T18167] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3256'. [ 424.616264][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.639641][T18167] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3256'. [ 424.659002][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.690394][T18167] netlink: 'syz.6.3256': attribute type 1 has an invalid length. [ 424.710340][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.538622][T18202] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 426.407378][T18253] openvswitch: netlink: Duplicate or invalid key (type 0). [ 426.433919][T18249] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.436718][T18253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.983196][T12947] IPVS: starting estimator thread 0... [ 426.988910][T18275] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 427.007424][T18280] IPv6: NLM_F_REPLACE set, but no existing node found! [ 427.091969][T18279] IPVS: using max 30 ests per chain, 72000 per kthread [ 428.885826][T18354] __nla_validate_parse: 41 callbacks suppressed [ 428.885846][T18354] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3304'. [ 428.978488][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 429.024112][T18358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3303'. [ 429.642605][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3311'. [ 429.793606][T16683] wg1 speed is unknown, defaulting to 1000 [ 430.306037][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3314'. [ 430.533694][T18390] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3308'. [ 430.728865][T18409] x_tables: duplicate underflow at hook 4 [ 430.747810][T18410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.775717][T18409] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3317'. [ 430.827853][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3318'. [ 431.253646][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.306836][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.364826][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.410715][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.467149][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.501585][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.509877][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.519780][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.528289][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.537277][T18433] xt_hashlimit: size too large, truncated to 1048576 [ 431.857840][T18459] Cannot find del_set index 4 as target [ 432.015605][T18464] bond0: entered promiscuous mode [ 432.028888][T18468] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3330'. [ 432.057778][T18464] bond_slave_0: entered promiscuous mode [ 432.068110][T18469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3330'. [ 432.089814][T18464] bond_slave_1: entered promiscuous mode [ 432.169048][T18468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.229062][T18468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.259667][T18468] bond0 (unregistering): Released all slaves [ 432.386783][T18474] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 432.570741][T18487] netlink: 'syz.7.3332': attribute type 13 has an invalid length. [ 433.585373][T18500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.912049][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 440.592426][ T31] INFO: task syz.0.2020:13437 blocked for more than 143 seconds. [ 440.613767][ T31] Not tainted syzkaller #0 [ 440.619359][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.629936][ T31] task:syz.0.2020 state:D stack:26568 pid:13437 tgid:13434 ppid:5636 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 440.645706][ T31] Call Trace: [ 440.657308][ T31] [ 440.661074][ T31] __schedule+0x1821/0x5740 [ 440.666938][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 440.674733][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 440.686695][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 440.712122][ T31] ? __pfx___schedule+0x10/0x10 [ 440.717696][ T31] ? schedule+0x90/0x360 [ 440.723209][ T31] schedule+0x164/0x360 [ 440.793657][ T31] schedule_preempt_disabled+0x13/0x30 [ 440.849568][ T31] __mutex_lock+0x7f7/0x1550 [ 440.876166][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 440.915358][ T31] ? __mutex_lock+0x608/0x1550 [ 440.955567][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 440.974496][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 441.008060][ T31] ? __asan_memset+0x22/0x50 [ 441.044108][ T31] ? __nla_validate_parse+0x2480/0x2dc0 [ 441.073607][ T31] nfsd_nl_listener_set_doit+0x141/0x1670 [ 441.100176][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 441.128222][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 441.159264][ T31] ? __nla_parse+0x40/0x60 [ 441.191567][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 441.212096][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 441.237771][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 441.272248][ T31] ? __asan_memcpy+0x40/0x70 [ 441.281953][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.311377][ T31] ? bpf_lsm_capable+0x9/0x20 [ 441.333960][ T31] ? security_capable+0x7e/0x2c0 [ 441.354819][ T31] genl_rcv_msg+0x61c/0x7a0 [ 441.363510][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.381597][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 441.395229][ T31] netlink_rcv_skb+0x232/0x4b0 [ 441.412072][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.424352][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.435208][ T31] ? down_read+0x270/0x2e0 [ 441.446517][ T31] ? genl_rcv+0xd/0x40 [ 441.467002][ T31] genl_rcv+0x28/0x40 [ 441.479084][ T31] netlink_unicast+0x75c/0x8e0 [ 441.493468][ T31] netlink_sendmsg+0x813/0xb40 [ 441.504860][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.527386][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.535581][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.556559][ T31] ____sys_sendmsg+0x972/0x9f0 [ 441.577721][ T31] ? __might_fault+0xaf/0x130 [ 441.593880][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.611835][ T31] ? import_iovec+0x73/0xa0 [ 441.617012][ T31] ___sys_sendmsg+0x2a5/0x360 [ 441.630193][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 441.651215][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.664002][ T31] ? __fget_files+0x2a/0x420 [ 441.685963][ T31] ? __fget_files+0x3a0/0x420 [ 441.698243][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.717676][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.735116][ T31] ? sched_clock_cpu+0x74/0x440 [ 441.752838][ T31] ? rcu_is_watching+0x15/0xb0 [ 441.760147][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.782399][ T31] do_syscall_64+0x174/0x580 [ 441.799603][ T31] ? clear_bhb_loop+0x40/0x90 [ 441.821331][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.833647][ T31] RIP: 0033:0x7f43e219ce59 [ 441.850059][ T31] RSP: 002b:00007f43e30b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.859821][ T31] RAX: ffffffffffffffda RBX: 00007f43e2415fa0 RCX: 00007f43e219ce59 [ 441.891252][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 441.916190][ T31] RBP: 00007f43e2232d6f R08: 0000000000000000 R09: 0000000000000000 [ 441.925536][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.934956][ T31] R13: 00007f43e2416038 R14: 00007f43e2415fa0 R15: 00007fff03b50a78 [ 441.943508][ T31] [ 441.946762][ T31] INFO: task syz.4.2044:13518 blocked for more than 144 seconds. [ 441.967664][ T31] Not tainted syzkaller #0 [ 441.978874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.987790][ T31] task:syz.4.2044 state:D stack:27224 pid:13518 tgid:13517 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 441.999976][ T31] Call Trace: [ 442.004271][ T31] [ 442.007524][ T31] __schedule+0x1821/0x5740 [ 442.012276][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 442.017381][ T31] ? __pfx___schedule+0x10/0x10 [ 442.024378][ T31] ? schedule+0x90/0x360 [ 442.028702][ T31] schedule+0x164/0x360 [ 442.035342][ T31] schedule_preempt_disabled+0x13/0x30 [ 442.041536][ T31] __mutex_lock+0x7f7/0x1550 [ 442.046202][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 442.051923][ T31] ? __mutex_lock+0x608/0x1550 [ 442.056746][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 442.063851][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 442.069382][ T31] ? __asan_memset+0x22/0x50 [ 442.074141][ T31] ? __nla_validate_parse+0x2480/0x2dc0 [ 442.079846][ T31] nfsd_nl_listener_set_doit+0x141/0x1670 [ 442.085799][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 442.092044][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 442.098259][ T31] ? __nla_parse+0x40/0x60 [ 442.102872][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 442.109374][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 442.116618][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 442.122634][ T31] ? __asan_memcpy+0x40/0x70 [ 442.127290][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 442.134237][ T31] ? bpf_lsm_capable+0x9/0x20 [ 442.139436][ T31] ? security_capable+0x7e/0x2c0 [ 442.144527][ T31] genl_rcv_msg+0x61c/0x7a0 [ 442.149762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.156288][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 442.162919][ T31] netlink_rcv_skb+0x232/0x4b0 [ 442.167760][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.173898][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.179297][ T31] ? down_read+0x270/0x2e0 [ 442.183811][ T31] ? genl_rcv+0xd/0x40 [ 442.188734][ T31] genl_rcv+0x28/0x40 [ 442.194527][ T31] netlink_unicast+0x75c/0x8e0 [ 442.200167][ T31] netlink_sendmsg+0x813/0xb40 [ 442.206947][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.213993][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.219534][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.226613][ T31] ____sys_sendmsg+0x972/0x9f0 [ 442.233097][ T31] ? __might_fault+0xaf/0x130 [ 442.238444][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.245083][ T31] ? import_iovec+0x73/0xa0 [ 442.250218][ T31] ___sys_sendmsg+0x2a5/0x360 [ 442.256337][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 442.264104][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.270039][ T31] ? futex_wait+0x2a2/0x390 [ 442.276590][ T31] ? __fget_files+0x2a/0x420 [ 442.282322][ T31] ? __fget_files+0x3a0/0x420 [ 442.287634][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 442.294407][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.300604][ T31] ? rcu_is_watching+0x15/0xb0 [ 442.307230][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.314822][ T31] do_syscall_64+0x174/0x580 [ 442.320134][ T31] ? trace_irq_disable+0x3b/0x140 [ 442.327049][ T31] ? clear_bhb_loop+0x40/0x90 [ 442.333673][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.340487][ T31] RIP: 0033:0x7f1ca459ce59 [ 442.347177][ T31] RSP: 002b:00007f1ca5538028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.358043][ T31] RAX: ffffffffffffffda RBX: 00007f1ca4815fa0 RCX: 00007f1ca459ce59 [ 442.368407][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 442.378153][ T31] RBP: 00007f1ca4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 442.388619][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.398613][ T31] R13: 00007f1ca4816038 R14: 00007f1ca4815fa0 R15: 00007ffc98690e18 [ 442.407885][ T31] [ 442.411112][ T31] [ 442.411112][ T31] Showing all locks held in the system: [ 442.461004][ T31] 1 lock held by khungtaskd/31: [ 442.474080][ T31] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 442.519376][ T31] 2 locks held by getty/5388: [ 442.532478][ T31] #0: ffff8880362af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 442.562036][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 442.582377][ T31] 2 locks held by syz.3.955/9504: [ 442.587961][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.598086][ T31] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 442.609953][ T31] 1 lock held by syz-executor/10289: [ 442.617814][ T31] #0: ffff88802a22cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 442.630066][ T31] 2 locks held by syz.0.2020/13437: [ 442.636617][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.646583][ T31] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 442.658759][ T31] 2 locks held by syz.4.2044/13518: [ 442.665592][ T31] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.675977][ T31] #1: ffffffff8ec8b280 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 442.687935][ T31] 1 lock held by syz-executor/14081: [ 442.694588][ T31] #0: ffff88804c0ccea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 442.706279][ T31] 1 lock held by syz-executor/16164: [ 442.712969][ T31] #0: ffff88808d9c0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 442.725918][ T31] 3 locks held by kworker/0:18/16683: [ 442.741745][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 442.762298][ T31] #1: ffffc9000d94fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 442.774427][ T31] #2: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 442.798534][ T31] 2 locks held by syz-executor/16871: [ 442.805257][ T31] #0: ffff8880271a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 442.817180][ T31] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 442.829638][ T31] 1 lock held by dhcpcd/18543: [ 442.836341][ T31] #0: ffff88805ad76400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 442.849058][ T31] 2 locks held by sed/18552: [ 442.855383][ T31] [ 442.860783][ T31] ============================================= [ 442.860783][ T31] [ 442.921978][ T31] NMI backtrace for cpu 1 [ 442.922001][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 442.922025][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.922037][ T31] Call Trace: [ 442.922046][ T31] [ 442.922054][ T31] dump_stack_lvl+0xe8/0x150 [ 442.922107][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 442.922193][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 442.922230][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 442.922262][ T31] sys_info+0x135/0x170 [ 442.922312][ T31] watchdog+0xfd3/0x1030 [ 442.922368][ T31] ? watchdog+0x1c9/0x1030 [ 442.922397][ T31] kthread+0x389/0x470 [ 442.922418][ T31] ? __pfx_watchdog+0x10/0x10 [ 442.922440][ T31] ? __pfx_kthread+0x10/0x10 [ 442.922462][ T31] ret_from_fork+0x514/0xb70 [ 442.922494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 442.922510][ T31] ? __switch_to+0xc79/0x1410 [ 442.922536][ T31] ? __pfx_kthread+0x10/0x10 [ 442.922558][ T31] ret_from_fork_asm+0x1a/0x30 [ 442.922591][ T31] [ 442.922666][ T31] Sending NMI from CPU 1 to CPUs 0: [ 443.055169][ C0] NMI backtrace for cpu 0 [ 443.055189][ C0] CPU: 0 UID: 0 PID: 14014 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 443.055212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.055224][ C0] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 443.055250][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 443.055384][ C0] RSP: 0000:ffffc90003b1f720 EFLAGS: 00000246 [ 443.055406][ C0] RAX: 1ffff92000763f01 RBX: ffffffffffffffff RCX: ffffffff8176f0e3 [ 443.055422][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003b1f898 [ 443.055436][ C0] RBP: 0000000000000000 R08: ffffc90003b1f8a7 R09: 1ffff92000763f14 [ 443.055449][ C0] R10: dffffc0000000000 R11: fffff52000763f14 R12: 0000000000000002 [ 443.055464][ C0] R13: 1ffff92000763f0b R14: fffff52000763f15 R15: 1ffff92000763f13 [ 443.055478][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 443.055495][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.055507][ C0] CR2: 00007fee29fd2e9c CR3: 000000000e74a000 CR4: 00000000003526f0 [ 443.055526][ C0] Call Trace: [ 443.055535][ C0] [ 443.055545][ C0] __asan_memset+0x22/0x50 [ 443.055575][ C0] unwind_next_frame+0xf33/0x2550 [ 443.055606][ C0] ? unwind_next_frame+0xa6/0x2550 [ 443.055631][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 443.055680][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 443.055710][ C0] arch_stack_walk+0x11b/0x150 [ 443.055738][ C0] ? x64_sys_call+0x221a/0x2240 [ 443.055766][ C0] stack_trace_save+0xa9/0x100 [ 443.055794][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 443.055830][ C0] save_stack+0x122/0x230 [ 443.055857][ C0] ? __pfx_save_stack+0x10/0x10 [ 443.055884][ C0] ? __free_frozen_pages+0xc1c/0xd30 [ 443.055911][ C0] ? vfree+0x1d1/0x2f0 [ 443.055933][ C0] ? kcov_close+0x28/0x50 [ 443.055972][ C0] ? __fput+0x44f/0xa60 [ 443.056001][ C0] ? task_work_run+0x1d9/0x270 [ 443.056027][ C0] ? do_exit+0x70f/0x22c0 [ 443.056049][ C0] ? do_group_exit+0x21b/0x2d0 [ 443.056072][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 443.056113][ C0] ? page_ext_put+0x97/0xc0 [ 443.056139][ C0] __reset_page_owner+0x71/0x1f0 [ 443.056164][ C0] __free_frozen_pages+0xc1c/0xd30 [ 443.056210][ C0] ? ___free_pages+0x9a/0x1b0 [ 443.056229][ C0] vfree+0x1d1/0x2f0 [ 443.056253][ C0] ? __pfx_kcov_close+0x10/0x10 [ 443.056278][ C0] kcov_close+0x28/0x50 [ 443.056301][ C0] __fput+0x44f/0xa60 [ 443.056328][ C0] task_work_run+0x1d9/0x270 [ 443.056362][ C0] ? __pfx_task_work_run+0x10/0x10 [ 443.056387][ C0] ? do_exit+0x70a/0x22c0 [ 443.056407][ C0] ? kmem_cache_free+0x182/0x650 [ 443.056433][ C0] ? put_net+0x191/0x260 [ 443.056453][ C0] do_exit+0x70f/0x22c0 [ 443.056478][ C0] ? __pfx_do_exit+0x10/0x10 [ 443.056499][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.056531][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.056559][ C0] do_group_exit+0x21b/0x2d0 [ 443.056584][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.056602][ C0] __x64_sys_exit_group+0x3f/0x40 [ 443.056625][ C0] x64_sys_call+0x221a/0x2240 [ 443.056646][ C0] do_syscall_64+0x174/0x580 [ 443.056662][ C0] ? trace_irq_disable+0x3b/0x140 [ 443.056689][ C0] ? clear_bhb_loop+0x40/0x90 [ 443.056710][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.056726][ C0] RIP: 0033:0x7fd886f9ce59 [ 443.056742][ C0] Code: Unable to access opcode bytes at 0x7fd886f9ce2f. [ 443.056792][ C0] RSP: 002b:00007fff57f22ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 443.056811][ C0] RAX: ffffffffffffffda RBX: 00007fd887033cb7 RCX: 00007fd886f9ce59 [ 443.056823][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 443.056833][ C0] RBP: 00007fd887033cc9 R08: 0000000000000000 R09: 00000000000927c0 [ 443.056856][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 443.056866][ C0] R13: 00000000000927c0 R14: 0000000000069a9c R15: 00007fff57f231a0 [ 443.056886][ C0] [ 443.524499][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 443.531440][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.540575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.550652][ T31] Call Trace: [ 443.553954][ T31] [ 443.556927][ T31] vpanic+0x56c/0xa60 [ 443.560955][ T31] ? __pfx___schedule+0x10/0x10 [ 443.565875][ T31] ? __pfx_vpanic+0x10/0x10 [ 443.570411][ T31] ? irqentry_exit+0x218/0x8b0 [ 443.575211][ T31] panic+0xc5/0xd0 [ 443.579070][ T31] ? __pfx_panic+0x10/0x10 [ 443.583523][ T31] ? __pfx_panic+0x10/0x10 [ 443.587951][ T31] watchdog+0x102c/0x1030 [ 443.592302][ T31] ? watchdog+0x1c9/0x1030 [ 443.596741][ T31] kthread+0x389/0x470 [ 443.600854][ T31] ? __pfx_watchdog+0x10/0x10 [ 443.605551][ T31] ? __pfx_kthread+0x10/0x10 [ 443.610164][ T31] ret_from_fork+0x514/0xb70 [ 443.614771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 443.619905][ T31] ? __switch_to+0xc79/0x1410 [ 443.624606][ T31] ? __pfx_kthread+0x10/0x10 [ 443.629229][ T31] ret_from_fork_asm+0x1a/0x30 [ 443.634025][ T31] [ 443.637668][ T31] Kernel Offset: disabled [ 443.642002][ T31] Rebooting in 86400 seconds..