last executing test programs: 3m34.906365645s ago: executing program 0 (id=1555): socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0xf7fffffd, 0x4) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x15, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) 3m34.534557207s ago: executing program 0 (id=1560): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) listen(r0, 0xff) (async) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r1}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xb86, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000800)="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"/1438, 0x3f6, 0x0, &(0x7f0000000080)={0xa, 0x5e1f, 0x9, @mcast2}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1) 3m34.020744928s ago: executing program 0 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa88}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x24000880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$bt_hci(r6, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0x24, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0xe, 0x1, '!}]/\x84-)#*\\'}, {0xb, 0x1, 'TIPCv2\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x50, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0xb, 0x1, '/-()\xa6\\+'}, {0xb, 0x1, '@\'\\[-$-'}, {0x7, 0x1, '#-]'}, {0xb, 0x1, 'TIPCv2\x00'}, {0xd, 0x1, 'udp:syz2\x00'}, {0xb, 0x1, 'TIPCv2\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x98}, 0x1, 0x0, 0x0, 0x24008804}, 0x4) 3m33.428013895s ago: executing program 0 (id=1573): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x200, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6ade}, {0x6, 0x11, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0xffffffffffffffd4, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xd97}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000fff}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x83}}]}, 0x200}, 0x1, 0x0, 0x0, 0x40880}, 0xc840) 3m33.161981698s ago: executing program 0 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m33.097529977s ago: executing program 0 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', @multicast}) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'pimreg0\x00', @remote}) shutdown(r1, 0x7ffffffe) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfb, {0x6}}, 0x14}}, 0x4000080) 3m17.977989601s ago: executing program 32 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', @multicast}) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'pimreg0\x00', @remote}) shutdown(r1, 0x7ffffffe) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfb, {0x6}}, 0x14}}, 0x4000080) 2m44.284686083s ago: executing program 3 (id=1957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/132, 0x84}], 0x2}, 0x20) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "21937adbcdae99e1d79e8f9dd37f94ae6c567c2826f02ed6a499a66b02aab061c6cbc89eb3c5a62c0618f6ac508c51a16618225fb028de0374c39d2dc983dfe7909cff3b5b0cc70c3675c3dbdd907e8c69f6b8fc05b08d681cdf3929e3e11e35524129387a9c3563f77db993b734da4efd1d6eb859"}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.687025488s ago: executing program 3 (id=1962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000100)) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="9e36646de84927215c5db17b1c7b18fcedf32b511eceebd97be53b4c7601ca24084b6c89e538be", 0x27}], 0x1, &(0x7f00000001c0)=[{0x78, 0x3a, 0x7, "bf81a71aa5f1bb8761cf9e654324407a6af7afd99baed74abeba6457502767333441108ba0d1f02ff306f398edb85d76ebbb57c31ebadc79dbcf386ac514021c9810e734b2a48f664a14a30f7a994d8b0b4a53a62bbae7097837a7845d05e529ef"}, {0xc8, 0x113, 0x8, "1afbff17971502cf9baee0c3ea74b4760df0a4fe9822a8e25310b895756c356414d3e6994478eb00e9eb7b7b7c3ecc83ab71063dd5415c03f8a365ce7ebbeae3c26f1f02c519b6cf1e2e8d9b45c3f020f9682cedb53965d00b25d7c7a860212dc1eafca35401f2db76ca0c79541bf8b4923cea97a65f5e43464aa02fb1b19e58a4c8dbd03a409f7b8b9a889d534665584d210b040543ab334929eab4d0557696cebc59dce132419873e1b56d203fa0e4cd444dee5f"}], 0x140}, 0x4004080) 2m43.541580417s ago: executing program 3 (id=1965): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_ethernet(0x86, &(0x7f0000000400)=ANY=[], 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x4000400) socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x11c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x80, 0x14, 0xd, 0x0, 0x2, 0xff, 0x5, 0x200}, [@RTA_FLOW={0x8, 0xb, 0xfffffff6}, @RTA_FLOW={0x8, 0xb, 0x6}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_IIF={0x8, 0x3, r4}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_METRICS={0xd0, 0x8, 0x0, 0x1, "863895ebfa18d243c002b2dd62569444051c4b678d9ea1a837d25b29c5a1ebcc0edc9eebcd1cb47bafdf534676d3722c971246f4001dbfd8db6a1b96e0362562c46b47b3baa96bcfcb8f0152ad57eb0ad2a51465018065724927ab6f5dce077eb0da22cb92b78ae29d77af8f97a2c3f8497fe5e8b767df189ee45d67bec504a93673818386571dc6ba5fb06616d363802ad352babad1d04b37dbcfe634ee49daf86e1b6367a74fdfb75ee77571c06128fbf3be0b2a03cd1e31d99edd5ddbf9297c64b346058f9e93e89fdef9"}]}, 0x11c}}, 0x80) 2m41.43398565s ago: executing program 3 (id=1969): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = socket(0x11, 0x800000003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x12, r3, {0x0, 0x300}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x7a00}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x12, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x3e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0xf1, &(0x7f0000000280)=""/241, 0x41100, 0x40, '\x00', r3, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x6, 0xfffffffb}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000440)=[r6, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x5, 0x5, 0x10, 0xc}, {0x2, 0x2, 0x5, 0x4}, {0x4, 0x3, 0x10, 0xb}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x4}, 0x94) 2m37.832862433s ago: executing program 3 (id=1973): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x200440b0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000004c0), &(0x7f00000005c0)=0xffffffffffffffe3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}}, 0x14}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r5, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24000044) 2m37.364008595s ago: executing program 3 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) 2m22.303840385s ago: executing program 33 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) 9.780435602s ago: executing program 1 (id=2896): listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, r4, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x44}}, 0x400c040) 9.6743128s ago: executing program 1 (id=2898): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000000)="e89eb5c7f2055c691a3151de5d1a855cb0d409863202c2af931c107d", 0x1c, 0x8000, 0x0, 0x0) 9.474757031s ago: executing program 1 (id=2901): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 9.165146026s ago: executing program 1 (id=2903): r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="1b", 0x1}, {&(0x7f0000000240)="397bb44340a7858843dadfb825c49656fc43aa1f6f03cbeab3c73ea8081fbdc964d0de525ab1fd19fb1c9396e19c759bee49e71e896ee1e6140f2932698db7abb9f56dd7e03c5660e69dca4733637f0b3edb3dd9", 0x54}, {&(0x7f00000002c0)="47215b9fc7dc58e4d7b2e68313df1dc3ed76f2717e17e43ce6e37a9e10e14ce4573571c5511f961d64042161c816697d14c0540be6878a01d1d798f4c34ef9163236bb1f9a47299e673d48e5f74fe735a810266131d5f29ff748b05d1760db4bf58e388e7ece05231da32c7ab92fd80737b56392af10af50f5a19a3a0f73a6eeb040eaa44d5170e30d71a93ed0bb2cc6056ebd46f4604c139f5da9f30e98cd15d04f5c30a518f23609224a8f39bcd4956fc4b6d0d15877891d579716e673a598e65251789acc98833defd5865501746f6e6a32a234396b07d5e8d0a8", 0xdc}], 0x3}}], 0x1, 0x24008094) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r0, r6}) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000500)={r4, &(0x7f0000000200)='syz1\x00', 0x0, &(0x7f0000000400)={@align=0xffffffff, {0xff, 0x1, 0x2, 0x3}}, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x10001}) ppoll(&(0x7f0000000540)=[{r4, 0x50}, {r0, 0x400}, {r3, 0x44de}, {r7, 0xa440}], 0x4, &(0x7f0000000580), &(0x7f00000005c0)={[0x6e7]}, 0x8) 9.158960749s ago: executing program 1 (id=2906): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) 9.12838893s ago: executing program 1 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r0, 0x80}, {r0, 0x4010}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0xe1]}, 0x8) (rerun: 32) 2.276585223s ago: executing program 5 (id=2958): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0xe4ee7000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x2, 0x30}, &(0x7f0000000240)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x3, 0x80, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, 0x7, 0x7800, 0x3ac192e1, 0x3}}) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x8, 0xfd, 0x6, @vifc_lcl_ifindex=r11, @multicast2}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x28, r12, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x6, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) r14 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r14, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x28, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x6, @val=0xb, @void, @val="778e12f9768ddbb2c3d0040610c4d7be"}}, @ibss={0x6, 0x2, 0x9}, @mesh_chsw={0x76, 0x6, {0x82, 0x9, 0x15, 0x4822}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008800) 2.127448666s ago: executing program 6 (id=2963): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0xbb02a3e1a2a38514, &(0x7f0000000040)=0x81, 0x4) close(r1) 2.052038264s ago: executing program 4 (id=2964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r2 = socket(0x10, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x34, 0x9, 0x3, 0xfffffffd, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @pid}]}, 0x1c}}, 0x4000010) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async, rerun: 32) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.963986639s ago: executing program 4 (id=2965): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x11, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="7000000010000104000000000300000000000000ba68fc8dd8b73a84054e30c005a6980189b94a558052a98591c477d1f7527e0f03bd895bcec5d03b9c8a95f8833249ec159fcc48184d9dfe455c7843d4272dcfc3049de79c0e8164ece771542bfbd84f8a1b6d51626c51d7edf8caad4a1b60cbe38129a6352d104465d57c737ebcfc6ef1e80efd5aed9be8db8cb84f1809ea6385a1049bd651cebf3278351e7890510feba4d1a8c6c3359bc046c9340ab5520af2df00100000b4a35f03c06d939ba7007d1ff58cd89a24bc1bfc1cc8de485e9b9a8512785e060ef054e9e0c71088db8a5797c4ebba36d6f843", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a3c001280110001006272696467655f736c61766500000000240005800500190003000000050007000000000006000200010000000500010003000000140003006272696467655f736c6176655f300000"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0xa4, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x4}, {0xfff2, 0xd}, {0x9}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf75}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xa4}}, 0x4000000) recvmmsg$unix(r4, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000180)=""/51, 0x33}], 0x2}}], 0x1, 0x2040, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x11, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="7000000010000104000000000300000000000000ba68fc8dd8b73a84054e30c005a6980189b94a558052a98591c477d1f7527e0f03bd895bcec5d03b9c8a95f8833249ec159fcc48184d9dfe455c7843d4272dcfc3049de79c0e8164ece771542bfbd84f8a1b6d51626c51d7edf8caad4a1b60cbe38129a6352d104465d57c737ebcfc6ef1e80efd5aed9be8db8cb84f1809ea6385a1049bd651cebf3278351e7890510feba4d1a8c6c3359bc046c9340ab5520af2df00100000b4a35f03c06d939ba7007d1ff58cd89a24bc1bfc1cc8de485e9b9a8512785e060ef054e9e0c71088db8a5797c4ebba36d6f843", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a3c001280110001006272696467655f736c61766500000000240005800500190003000000050007000000000006000200010000000500010003000000140003006272696467655f736c6176655f300000"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0xa4, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x4}, {0xfff2, 0xd}, {0x9}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf75}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xa4}}, 0x4000000) (async) recvmmsg$unix(r4, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000180)=""/51, 0x33}], 0x2}}], 0x1, 0x2040, 0x0) (async) 1.774937581s ago: executing program 6 (id=2966): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8430100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, 0x9, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8ef}}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xef3}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x1, 0x700, 0x9, 0xadab, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x67, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @multicast2, {[@end, @timestamp={0x44, 0x20, 0x52, 0x0, 0x5, [0xaed, 0x4, 0x0, 0x348, 0x4, 0xfffffffc, 0x1]}, @timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x6, [{@remote, 0x3}, {@multicast1, 0x8ad}, {@rand_addr=0x64010100, 0x37f}, {@multicast1, 0xe3be}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x27, 0x89, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @multicast2, @loopback, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x4, [{@broadcast, 0x4565}, {@loopback, 0x1}, {@multicast2, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x1, 0x700, 0x9, 0xadab, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x67, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @multicast2, {[@end, @timestamp={0x44, 0x20, 0x52, 0x0, 0x5, [0xaed, 0x4, 0x0, 0x348, 0x4, 0xfffffffc, 0x1]}, @timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x6, [{@remote, 0x3}, {@multicast1, 0x8ad}, {@rand_addr=0x64010100, 0x37f}, {@multicast1, 0xe3be}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x27, 0x89, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @multicast2, @loopback, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x4, [{@broadcast, 0x4565}, {@loopback, 0x1}, {@multicast2, 0x7}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000680)=""/140, 0x8c, 0x0, &(0x7f0000000740)=""/71, 0x47}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x10, r6, 0x4cbe1000) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000a40)={r0, &(0x7f0000000940)=',\x00', 0x80, &(0x7f0000000980)={@align=0x1, {0x1, 0x7, 0x3, 0x7}}, 0xfff, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x80000000}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000012c0)={{r1, &(0x7f0000000a80)='E$\x00', 0x741240, &(0x7f0000000ac0)={@align=0xfd, {0x5, 0x4, 0x5933}}, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0xfff}, 0x9, &(0x7f0000001180)=[{0x3, 0x9, &(0x7f0000000b80)=',,{]\xcc!]\x00', &(0x7f0000000bc0)="58994b29bf9e73d62885bbf462a81f0283bce6e23374f7c817eaf35248c698faf702e39650035fac3e", 0x29, 0x20}, {0x1, 0x21800000, &(0x7f0000000c00)=' \x01\x00', &(0x7f0000000c40)="1953c5f3e40dc4e0b50632c9b46006", 0xf, 0x20}, {0x1, 0x10, &(0x7f0000000c80)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000cc0)="acab961a7fb7652ad95988e7f52f2255c406165d81fbc2226454cdce3bbdb406ad4c87b0a2231836ac3e667357f19e965bb6264d6cfa0c36e1fbfc4c4e5761385ff4b9bd60e885f8f7000be75d863aeac91be23fd421ace35af61c3d499c911f0b4ffb3776860663cbea6dfa1ad887fd432549ea97eac48628d7ec95095f2b3ce01f0b2f2f7c65d6a012403ae9f9e8bfaefb89c6ebce4f2f41bf0f4a2f05e8639141b4007d69c885d5ccc9095fed935d42c45098744038510fa895e3941e5ae0b648dcf65549906406de93cfd659c9a59fb7de4913d67d24f7fbd9ccc4db08fc447f", 0xe2, 0x3a}, {0x2, 0x2, &(0x7f0000000dc0)='syz1\x00', &(0x7f0000000e00)="152732d4eead42e41d4f14180620e508cb570ba9a1aa31977c31199a4f7d73ab", 0x20, 0x10}, {0x1, 0x10, &(0x7f0000000e40)='.-\x00', &(0x7f0000000e80)="218c18db0648eab4b06b877ebb6355a8e31cf619f7d8f764191a8ba3069404f15dcedd51fcf5e6b75a8a1f5c854a4383c5b1b5db0f3160a341778937384ef0603ceb0fbe301bf7208dcc0ec44a1c23d040d2c49280b4b0cc0092536fe216a851ded125ef0f6b0f7550789454d7cd058c5140c405fa215fcc36cd0fb2", 0x7c, 0x2}, {0x1, 0x7b91, &(0x7f0000000f00)='\'\x00', &(0x7f0000000f40)="fc2444f84eb67256ac34cfa9bbfb0224f571f9", 0x13, 0x28}, {0x2, 0x10000, &(0x7f0000000f80)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000fc0)="78f98735e5afa9509dcfdd6a40bfe61639d00fca211a0c2a156a3eb1a1915c007ac066abb2b2f608ba2a9b5d0db5969248760538445e2c80bfbb76523d020249fd7cd7d79d011637517fbf435d696512dbf969c80b6f98e0766a49f401c98b37548eb21198af3d213e72a3729936b75ab664e53ad3f7b7081bae58ee9743fe4a301238657e334a964f7fdefd8e29ed86bbf3115d2b2a282d0189c85a12a17d5c30358c82f26939a8c3009e3bcd695193", 0xb0, 0x2}, {0x2, 0x40, &(0x7f0000001080)='^&\x00', &(0x7f00000010c0)="0acdd09e892cd3c644eb4349713277fc4b3230d8464526c79e657578d2c45739899f6c3e6ce3cb3382e7d07324b2b91b08f72c954b335b10ddd3", 0x3a}, {0x2, 0x6, &(0x7f0000001100)=' \x01\x00', &(0x7f0000001140)="a925e8fa604564c0fe5f19c6cd81ac061f6aab7130f4fe0e87fb5b019f319f", 0x1f, 0x2}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000012c0)={{r1, &(0x7f0000000a80)='E$\x00', 0x741240, &(0x7f0000000ac0)={@align=0xfd, {0x5, 0x4, 0x5933}}, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0xfff}, 0x9, &(0x7f0000001180)=[{0x3, 0x9, &(0x7f0000000b80)=',,{]\xcc!]\x00', &(0x7f0000000bc0)="58994b29bf9e73d62885bbf462a81f0283bce6e23374f7c817eaf35248c698faf702e39650035fac3e", 0x29, 0x20}, {0x1, 0x21800000, &(0x7f0000000c00)=' \x01\x00', &(0x7f0000000c40)="1953c5f3e40dc4e0b50632c9b46006", 0xf, 0x20}, {0x1, 0x10, &(0x7f0000000c80)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000cc0)="acab961a7fb7652ad95988e7f52f2255c406165d81fbc2226454cdce3bbdb406ad4c87b0a2231836ac3e667357f19e965bb6264d6cfa0c36e1fbfc4c4e5761385ff4b9bd60e885f8f7000be75d863aeac91be23fd421ace35af61c3d499c911f0b4ffb3776860663cbea6dfa1ad887fd432549ea97eac48628d7ec95095f2b3ce01f0b2f2f7c65d6a012403ae9f9e8bfaefb89c6ebce4f2f41bf0f4a2f05e8639141b4007d69c885d5ccc9095fed935d42c45098744038510fa895e3941e5ae0b648dcf65549906406de93cfd659c9a59fb7de4913d67d24f7fbd9ccc4db08fc447f", 0xe2, 0x3a}, {0x2, 0x2, &(0x7f0000000dc0)='syz1\x00', &(0x7f0000000e00)="152732d4eead42e41d4f14180620e508cb570ba9a1aa31977c31199a4f7d73ab", 0x20, 0x10}, {0x1, 0x10, &(0x7f0000000e40)='.-\x00', &(0x7f0000000e80)="218c18db0648eab4b06b877ebb6355a8e31cf619f7d8f764191a8ba3069404f15dcedd51fcf5e6b75a8a1f5c854a4383c5b1b5db0f3160a341778937384ef0603ceb0fbe301bf7208dcc0ec44a1c23d040d2c49280b4b0cc0092536fe216a851ded125ef0f6b0f7550789454d7cd058c5140c405fa215fcc36cd0fb2", 0x7c, 0x2}, {0x1, 0x7b91, &(0x7f0000000f00)='\'\x00', &(0x7f0000000f40)="fc2444f84eb67256ac34cfa9bbfb0224f571f9", 0x13, 0x28}, {0x2, 0x10000, &(0x7f0000000f80)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000fc0)="78f98735e5afa9509dcfdd6a40bfe61639d00fca211a0c2a156a3eb1a1915c007ac066abb2b2f608ba2a9b5d0db5969248760538445e2c80bfbb76523d020249fd7cd7d79d011637517fbf435d696512dbf969c80b6f98e0766a49f401c98b37548eb21198af3d213e72a3729936b75ab664e53ad3f7b7081bae58ee9743fe4a301238657e334a964f7fdefd8e29ed86bbf3115d2b2a282d0189c85a12a17d5c30358c82f26939a8c3009e3bcd695193", 0xb0, 0x2}, {0x2, 0x40, &(0x7f0000001080)='^&\x00', &(0x7f00000010c0)="0acdd09e892cd3c644eb4349713277fc4b3230d8464526c79e657578d2c45739899f6c3e6ce3cb3382e7d07324b2b91b08f72c954b335b10ddd3", 0x3a}, {0x2, 0x6, &(0x7f0000001100)=' \x01\x00', &(0x7f0000001140)="a925e8fa604564c0fe5f19c6cd81ac061f6aab7130f4fe0e87fb5b019f319f", 0x1f, 0x2}]}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000001340)) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000001340)={0xffffffffffffffff}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r15, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r15, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r16, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r16, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r13, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r16}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r13, &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x8, 0xd, &(0x7f0000001580)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000118230000fce8dd3acf4506eaf394bdc89fb240e5ec130a8b5f7bb0cd0b3cf945", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x10, &(0x7f00000004c0)=""/16, 0x41000, 0x14, '\x00', r4, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x2, 0x5}, 0x10, r5, r6, 0x4, &(0x7f0000001440)=[0x1, 0xffffffffffffffff, r7, r8, 0xffffffffffffffff, r9, r10, r11, r12, r13], &(0x7f0000001480)=[{0x1, 0x2, 0x0, 0xc}, {0x1, 0x2, 0x7, 0x6}, {0x3, 0x4, 0xa, 0x3}, {0x0, 0x5, 0xd, 0x8}], 0x10, 0xffffff53}, 0x94) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, &(0x7f00000029c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000002000509000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006040100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000002000509000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006040100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.678572174s ago: executing program 5 (id=2968): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @aes128, 0x0, @desc1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='batadv_slave_1\x00', 0xb60bc17702e69156, &(0x7f00000001c0)={@align=0x9, {0x0, 0x7, 0x3, 0x7ff}}, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x5}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000340)={0x1, [0x0]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000380)={0x0, "f19103dfaa7d190789c84dc438e92c6d"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001380)={r2, 0x3, 0x68b, 0x1}) sendmsg$nl_route(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv6_getnetconf={0x24, 0x52, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2343}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x14) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001880)=""/189, &(0x7f0000001940)=0xbd) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001980)={0x0, 0x54, 0x10001}) ioctl$int_in(r0, 0x5452, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001a00)=@int=0x7, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001a80), r1) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x40004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'dvmrp0\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000001c00)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001c40), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001c80)={'team0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000002100)={&(0x7f00000020c0)=[{0x9, 0x9, 0x1, 0x100000001}], 0x1, 0x20, 0x0, 0x5}) sendmsg$kcm(r1, &(0x7f0000004b80)={&(0x7f0000002140)=@can={0x1d, r4}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000021c0)="bda61caa7624cba64c97d8b9363502fd87225dc3d5038caba9888a1ee287a804510416a79c20ea2ebf2b585f1a472ac9012c45c32fc79c3f68b53032e41b62c39c3e03d7941aa10ef4f079dcec120584c67a7436444f38a10ecf5399a6effee3581c62d5af1299be6dfd04d6dcd48cb4013ae6cde946fc1e7d7a67726f2221e8753f39c8d54cab659b903657982e8e65bc5da7f6ef27eac7da113d42e2481a04ecbda53b776cb7946f00be6dbf87398a9f489e5385712efc2bff4c6b71e2ba6fd89dd1128f6eff1a17384c7d9539ebf86d05bd67cb", 0xd5}, {&(0x7f00000022c0)="82de7ec5f82891c332e343d0473a54af1d50ed17396da436ea80f9370a5ad13c0ca0da841d80d6a5d79790d890142245729830bba2c6ddf7ce3663bada696bb6bd8cb4d619f17b63f1d6c18a99b776cf70949a3880db539499c9efc26b6829a521b9742632772fe2ab8f1ba20fd3ce7ebd2862a8c3a7c5b370f2c1aa9cba31e38762575e44f2dca7d9ab2f52cf28baf6aeb04b15bc59fe86add9b068cb92e46de9de28222514eaffde", 0xa9}, {&(0x7f0000002380)="1347315c2eb9197124c75842efd69fd00d3a6f737114422a734ee44eac89b7fe88c2ef2fd2b9e12102e91cb2b771df07ba2e338cbea9616ef04097bbd15f5492a3a5356d6069149021ecd46b214ff2d964d0876353cb77f31a69f269f4e6dbdec8c96a65aeda94591317bf48a5b524ea821f81e3fbe515c9db0fca075931e1c0e2f52af3e19ff22a55c3da71392eea27ddfa7da9d8678852ae06ec1b42027e06f56e977ca980b342896eddf40dac8ada2ed586647a16e27398ee4810cb143572de08465ace3250bdd5da112b18bc4edc18422159739c629d83267c82598c9c38cf68607d7a5f1c8e9447f064c9376e04555cd3637e38", 0xf6}, {&(0x7f0000002480)="655e508bc4814d89b5c1a399423d426950ddeb2c246e6ebdaf8699115fecfd8c878af580f3ad33ebae496364eaf12f3d79d3abc821bffb4ec163feff2553881000cd75cf1a468f1954eca18ac37f3e437df599f6b72d3ed9a0c3b2e8c8db84b343d44aab5a17c8260f3522f489230f22a8cfaec69bdcca06b2904576eb1d77a12d1cab054af19b5639b4f1e4b953d55115996950f785663211f256f32d", 0x9d}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="87bda3b776da0661efc079610dd1531cb3d84805d6d6ebf3d132316b9b9656483e2d9e94917ab27812141055292a09983d4d05f75323d25fc98eb8c42bfd2167dce5243fa85d3efe8758fc4104df022257cd47f8e0922ac90cc8fe9e6b8dfddc996313579bd20d1b09eb0cee58aa868490ef3dff2962df5e3056fb51adfcb834bccc6c793bdb035ec8e3f85a9674085738106dc1dba3baf431fea9de66f920f2299cbd338373", 0xa6}, {&(0x7f0000003600)="4bc2690676bd8614ace17a245160c211aff4cd56cdfe1bb9c683d4dd7a64683d864b7e76e73c2837e27dabc7f6c9c771632f2a7aeb127c4b2822fb8602794d976b914acc0ca40651e66f8c7ca6457974ff67d8e5", 0x54}, {&(0x7f0000003680)="9eeb1ccc32ac20bb577fecd6524991c47377870db93581b4d489084db4fda60f219f569242006422bdf74a84c400e094fd7ef0fb979180d7c12e00f78fc6100f305a66a9b012499f8dee400c3565746b480bb6d4fec75f53683d6a9f09525e1e6f2a2d1e944202ba9243c362cc921bb6126392954282952ed3e92248fb9bcb7b45b5422d4456864b01aa40d21ca63d8c534abe3f0e077c88bf3deab8eb872e6d6fbee1d07d68c9984e61d1ece793c99721854921ae758081af0b658aa7028362", 0xc0}, {&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="1cee6c401ddd5293224d8feb5fa56746bf0b8d640d4ec51d24a0c223a8da955b39b993263130cb6ef0f6682798be2e38908e60bae4a9b438973842f59a195c61803b6af33942d418", 0x48}], 0xa, &(0x7f0000004880)=[{0xb8, 0x88, 0x5, "a18c32a05a3ada9d8e12e8669b9d8c01a59abb46fea0e1058d419f174894d61399b087bac22e674591395664ab96a6a1c7779ec0220f1d5c3d74a41a2169a6f69146914e4f3a8f5f011911034ee9c72ce69227fc384edc85c39edf3ae2dbde7b7306370811d3ace0b77a90e94de92605411fb84602a6d415de407594fe92c39e089efc19f4c6643fd96cebeb5ef1d5d442229f3b61086ba91347fbed1dba85e39cc4b9f1989fe6"}, {0x58, 0x114, 0x1, "b86c129b69f648bc59e20bf55c8ee472f67e5ccf1cd46f4604a14659601370e7b479069e6a2626dff45f024afd9b2f426aaae3eeb845488862c0c1d82c245a66cb51"}, {0xb0, 0x118, 0x8, "3b2a97d3b8f4e1c5679ce8a7ce6e05b5281cfccd02cfdeb1fa6a4248fa244ef67827fe87569a611399008c353f6fede02c0237d8bc115c74a562b669c981913781e4d07c9bcb04a45e97ce74660ac242cc7a57c748093c9fb58977896636c55c888ef7c4a26f59b296453d8bea5e14e20d4097c75330d55ec5a3dc69505b92ad8099c5c158d7ebc00ed8886a38a44e36dad8d82f88fe83b5503f719f19"}, {0xe0, 0x101, 0x2, "76d88e5a96c5bbe8fb481cf6fd5f25782e8dee4b8d8922fcc0a8d6103a49b128693ff67da8dcee272b78462a829228d3fe811d188aae7e89a2a9993ed14bc2ed085db2f1e4ba71111f860fc5f27aa2555332a2f0624af43e3ada2c88f65de072a86a620276fa1568d2dd5907e966da4271b0c74250ee8d7a921a366bc2ea266fa1d5a345d8a434dde11ca957caf64791c93a32bebb6ed0fe4d9b10abec10544a9f69407b13cb4abdfb2bba27a4957c426964a3ed47151836ec12731ce4f9e964777952188971cdd162e98a34"}, {0x40, 0x0, 0x6, "02a6a8b921d9474f0ef303c60a3415bfb407285421603d6018f9fadd6a16fc0f52c6b8dcd16a1ec1d64ebd"}], 0x2e0}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000004bc0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000004c40)={0x0, 0x4, 0x30, 0x8000000000000001, 0x10}, &(0x7f0000004c80)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000004cc0)={r7, 0x3, 0xfff7}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000004d00)={'wg0\x00', @multicast}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000004e40)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x5c, 0x0, 0x100, 0x9, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a9064d4abbb61ace5f080f411eb3d89b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c3498ae7128b2de1fc07f921d212ee18"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040880) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000004e80)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x8, 0xb4fb, 0x2, 0x10001, 0xe, 0xffffffffffffffe7}, {0x4, 0x80000001, 0xffffffffffffff0c, 0xf4, 0x6, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.673861389s ago: executing program 4 (id=2969): syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f05ebbefb, 0x13, 0xffffffffffffffff, 0xc81f8000) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0x1, 0xc041, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x1, @empty, 0xfffffffb}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0x9}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe, 0x8010, 0xffffffffffffffff, 0x2fd15000) recvfrom$rxrpc(r1, &(0x7f0000000440)=""/193, 0xc1, 0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004002}, 0x4004081) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x2000094}, 0x14000) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x20044080) 1.561877732s ago: executing program 6 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x100}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.444779632s ago: executing program 4 (id=2972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x2, 0x9, "d119c8", 0xfa, 0xa}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6762}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x10d1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 1.33932696s ago: executing program 2 (id=2973): r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) (async) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x4011) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6, @ANYRES16=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x47, r6, 0x3}, 0xc) 1.272557324s ago: executing program 5 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000ecef00ed4549e600000020000000000000009c4e579c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001c00)={&(0x7f0000000640)="bc5765c6f07c1b41af445553786acd581e840763b11df05201f3ef648ab1287be7b046d93998c828979df9e40f33af5b204858a18d16ed9c3c819ff10d278a0c358c5cbfacb24a064cf4928ad84d35f55c63f661ff6ad38084b926fd251f9bdce81c4432b2", &(0x7f0000000780)=""/176, &(0x7f0000001c40)="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", &(0x7f0000001b00)="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", 0x2, r1, 0x4}, 0x32) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x4, 0x1, {{0x66, 0x4, 0x3, 0x3b, 0x198, 0x65, 0x0, 0xc, 0x29, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x34, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x4}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@local, 0x38e035e7}, {@multicast2, 0xfffff3b6}]}, @timestamp_addr={0x44, 0xc, 0xef, 0x1, 0xf, [{@multicast2, 0x4}]}, @cipso={0x86, 0x1d, 0x3, [{0x4, 0x2}, {0x6, 0x9, "ad1a1d14534ec8"}, {0x6, 0xc, "3787187d8e925c3cec27"}]}, @generic={0x89, 0x11, "302d5aa74f6a1015ba8231d51185ea"}, @timestamp_addr={0x44, 0x3c, 0xaf, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010101, 0xffff}, {@private=0xa010101, 0x9}, {@broadcast, 0x9}, {@loopback, 0x9b}, {@loopback, 0xc}, {@local, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0x4e, 0x1, 0x0, [{@rand_addr=0x64010101, 0x8}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x5, [0x0, 0x2, 0x9]}, @timestamp_addr={0x44, 0x2c, 0x62, 0x1, 0x9, [{@broadcast, 0x4f}, {@multicast1, 0x664}, {@loopback, 0x7}, {@private=0xa010101, 0xb73}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x54, 0xa, 0x1, 0x6, [{@multicast1, 0x2e}, {@empty, 0x3f80}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xaf7}, {@rand_addr=0x64010101, 0x7}, {@empty, 0x8}, {@remote, 0x9}, {@empty, 0xffffff80}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xdc}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0xa0, 0x3, 0x1, [{@multicast2, 0x2}, {@broadcast, 0xffff}, {@broadcast, 0x1}, {@remote, 0x4}, {@multicast2, 0x1}, {@local, 0x2}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r5, 0xf, 0x1, 0xf4ab, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.193697789s ago: executing program 6 (id=2975): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00\x00d\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.188853279s ago: executing program 5 (id=2976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x9, 0x1, 0xfe, 0xf, 0x11, 0x7, 0x0, 0xa, 0xc, 0x6, 0x3, 0x27, 0x8, 0x4, 0x0, 0x4], 0x3, [0x40b, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x7, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) 1.174746121s ago: executing program 4 (id=2977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r1, 0x0, 0x8000f25, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) r3 = socket$unix(0x1, 0x1, 0x0) shutdown(r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r7, &(0x7f0000000280)="3dfb965512"}, 0x20) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000128bd7000ffdbdf255100000008000300", @ANYRES32=r5, @ANYBLOB="d5300f04000000410000008a0006000802110000000800"/42], 0x40}, 0x1, 0x0, 0x0, 0x48880}, 0x24004825) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000fe1e93a199e6401bed3534e7ca00"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="05"], 0x10) close(r8) r10 = socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500), &(0x7f0000000540)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r11}, 0x20) accept(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000004740)={0x0, 0x0}) recvmmsg(r10, &(0x7f00000045c0)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/38, 0x26}, {&(0x7f0000000200)=""/12, 0xc}], 0x2, &(0x7f0000000440)=""/74, 0x4a}, 0x100}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000780)=""/113, 0x71}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x3, &(0x7f00000021c0)=""/1, 0x1}, 0x6}, {{&(0x7f0000002200)=@sco, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x4}, {{&(0x7f0000002340)=@caif=@dbg, 0x80, &(0x7f0000002800)=[{&(0x7f00000023c0)=""/20, 0x14}, {&(0x7f0000002400)=""/166, 0xa6}, {&(0x7f00000024c0)=""/13, 0xd}, {&(0x7f0000002500)=""/222, 0xde}, {&(0x7f0000002600)=""/55, 0x37}, {&(0x7f0000002640)=""/59, 0x3b}, {&(0x7f0000002680)=""/86, 0x56}, {&(0x7f0000000800)=""/234, 0xea}], 0x8, &(0x7f0000002880)=""/40, 0x28}, 0x101}, {{&(0x7f00000028c0)=@tipc, 0x80, &(0x7f0000003d00), 0x47, &(0x7f0000003d80)=""/145, 0x91}, 0x5}, {{&(0x7f0000003e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003ec0)=""/227, 0xe3}, {&(0x7f0000004000)=""/218, 0xda}, {&(0x7f0000004100)=""/242, 0xf2}, {&(0x7f0000004200)=""/138, 0x8a}, {&(0x7f00000042c0)=""/93, 0x5d}, {&(0x7f0000000d00)=""/196, 0xc4}, {&(0x7f0000004400)=""/239, 0xef}], 0x7, &(0x7f0000004580)=""/8, 0x8}, 0x5}], 0x6, 0x40000000, &(0x7f0000004780)={r12, r13+60000000}) socket$nl_route(0x10, 0x3, 0x0) 1.012395742s ago: executing program 2 (id=2978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000056eb792bb92dfd541b4f5ce822067aac19e977ff207cc6dabb7b139b1068d9dd8dc43338", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800114000000000050015000c0000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x2, 0x56d, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r4, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) 960.332246ms ago: executing program 2 (id=2979): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000070000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0c00018008000100000000001e2420743527a25772da5642aac6323d18ce207207c91b978642f6996f38a6318c8ae81f685f222c7ee38177111b2361f2"], 0x24}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0xd42a, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x1c0000, 0x9, {{0x1d, 0x4, 0x3, 0x19, 0x74, 0x64, 0x0, 0xc4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x5, [{@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xcc, 0x1, 0x4, [{@broadcast, 0x7}, {@rand_addr=0x64010100, 0xfffffff1}, {@rand_addr=0x64010101, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@private=0xa010100, 0x4}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x7, 0xc, "15e4838148701e03712d"}, {0x5, 0x4, "1996"}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x1, [0x4, 0x3]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x1c0000, 0x9, {{0x1d, 0x4, 0x3, 0x19, 0x74, 0x64, 0x0, 0xc4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x5, [{@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xcc, 0x1, 0x4, [{@broadcast, 0x7}, {@rand_addr=0x64010100, 0xfffffff1}, {@rand_addr=0x64010101, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@private=0xa010100, 0x4}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x7, 0xc, "15e4838148701e03712d"}, {0x5, 0x4, "1996"}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x1, [0x4, 0x3]}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x51, 0x51, 0x6, [@datasec={0x3, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x8000}], 'Z'}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x35, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x5}]}, {0x0, [0x30, 0x0, 0x30, 0x5f]}}, &(0x7f0000000b40)=""/113, 0x72, 0x71, 0x0, 0x6}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x8d, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000800)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xb, 0x4, 0x4, 0xffffffffffffffff, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x73, &(0x7f0000000940)=""/115, 0x41000, 0x24, '\x00', r6, 0x1a, r7, 0x8, &(0x7f0000000c00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0xf, 0x4, 0x1}, 0x10, 0xbc54, r2, 0x0, &(0x7f0000000dc0)=[r8, r9, r10, r11], 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000800)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xb, 0x4, 0x4, 0xffffffffffffffff, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x73, &(0x7f0000000940)=""/115, 0x41000, 0x24, '\x00', r6, 0x1a, r7, 0x8, &(0x7f0000000c00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0xf, 0x4, 0x1}, 0x10, 0xbc54, r2, 0x0, &(0x7f0000000dc0)=[r8, r9, r10, r11], 0x0, 0x10, 0x6}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x35, 0x8, 0x7fffffff, 0x2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x11, 0x10, 0x5, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006a0000032cbd7000fddbdf2502000000000000000800010002000000080001000200000008000500", @ANYRES32=r13, @ANYBLOB='\t\r'], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006a0000032cbd7000fddbdf2502000000000000000800010002000000080001000200000008000500", @ANYRES32=r13, @ANYBLOB='\t\r'], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRESHEX=r12], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRESHEX=r12], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 829.842723ms ago: executing program 6 (id=2980): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "2f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c244fba9bf1f098ed541e3501b56b576e78f951702b8be38082aacc094274456d93eff9f781adecbc6401bb5575b1d0d0dbf948cc15c194fb002ddc28f42b06"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x24000091}, 0x4040090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x4000084) r5 = socket$kcm(0x10, 0x2, 0x0) recvfrom$rxrpc(r4, &(0x7f0000000500)=""/217, 0xd9, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r6, 0x50) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r7, 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 705.721639ms ago: executing program 5 (id=2981): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x5, @private0, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x8) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0x49, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2b, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xffe7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e080001400000001508"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r5, 0x9e2}, 0x8) r6 = accept4(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) close(r6) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000140)={0x4, 0x10, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x1, 0x0) accept$inet6(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 705.322339ms ago: executing program 2 (id=2982): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078002000840000000110500010006000000050005000a00000013000300686173683a6e65742c696661636500d7a2faef524570050000007eddc2000900020073797a31000000040500040003000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x2, 0x200, 0x4, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r8, 0x5, 0x30, 0x3, 0x6}, &(0x7f0000000240)=0x18) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000100)={0x77359400}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 510.078143ms ago: executing program 5 (id=2983): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xdc7d) (async) bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r0, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8001}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)=ANY=[@ANYBLOB="68000000140001000000000000000000ff010000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008000800000000ffff"], 0x68}}, 0x0) (async) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x20000084) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x2, 0x3ff, "09650bced381"}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r8}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6c000000b8e266612a964102563979fd61452d3d9469a5535dc502941dcc37688336c15a35022c8cf174b467f3c8fce5a45a28caede9b68ba2b9c19a600cef7d18a0e4c02f90d6e6c3ebbdcf162ddf71f662df903647be53b0506bb810bd325ad45a08ca6c8d98df28141954c4b711", @ANYRES16=r9, @ANYBLOB="000225bd7000fddbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b004cad00000600110005000000080001007063690011000200303030303a30303a31302e300000000008000b00030000000600110006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r11, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r11, 0x400448e6, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 455.514746ms ago: executing program 6 (id=2984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="17eee3bb06d9d70002000000bfe7a5d6b4a8a214010000b2483bb131cee61a8b79"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB="40000000020601010000000000000000000000000c000300686173683a6970000500010007000000050005000a000000090002000780"], 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000008af8ff00000000bfa281000000000007022207000061c4db60961efd25266340da4aef50c99731e725ed49efb6f2f3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcf1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f0000000580)="1c604051e958f80905c63c8fd76f000cf2a050af15234a221ee6b360e694948ab0810e52134333a19c79aff526077ff8e91b697ef1ba7d8cab1fb24a0f5192e8c178bd03eacc63a105e53636515647c24cfc5e8ee088cc206adf41f75e520eef80cac762c6dc9974ef06e081b74e336c03dd40cd4089a47018e6fc62db7a480ca1d29b03ab821d8ff1d0428416aa0b5186874da98948f9d04ab5354d8951f4ec7bcaea80feb72450c30546614cd96b4882b18612d8235c7761fe57e2dfb0", 0xbe) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x4c, r9, 0x1, 0x400, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x4c}}, 0x44890) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) 442.98639ms ago: executing program 2 (id=2985): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x26, 0x301, 0x270bd1d, 0x25dfdbf3, {0x17}, [@typed={0x1f, 0x167, 0x0, 0x0, @binary="95e9d5afd2072e3cfd4877078955008888a0e4e6a785fd75d66569"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 535.198µs ago: executing program 2 (id=2986): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000b80)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000bc0)="2705000059feff000600002fb96dbcf7babe05000700810000f5080613008100accb", 0x22}, {&(0x7f00000001c0)="61bed4280c36aa7d41b62acf0d9a4acef07f161b92fe657f2a656ad5f1a213941642a07db0163abacbeaa543831dc301ebc5bf334cacc046b3d0cdc6d863a934b4427390a2ee30fb7471c5bd8d60a4e275832c0a8181540c821a8154fa", 0x5d}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b927", 0x92}], 0x3}, 0x8884) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 0s ago: executing program 4 (id=2987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000040)={@_ha_fsid={[0x8001, 0xfffffa72]}, {0xd, 0x5, 0x7, 0x80}}, 0xe, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000004c0)=0x1}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x6f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x0, 0xfd}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xffffffff, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.2.1173'. [ 209.136437][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 209.192634][T10448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.449231][T10474] wg2: entered allmulticast mode [ 209.847608][T10493] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1192'. [ 209.885173][T10484] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1192'. [ 209.911679][T10497] syzkaller0: entered promiscuous mode [ 209.946118][T10497] syzkaller0: entered allmulticast mode [ 210.344059][T10516] sctp: [Deprecated]: syz.4.1200 (pid 10516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.344059][T10516] Use struct sctp_sack_info instead [ 210.478972][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 210.992797][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.002044][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.025702][T10543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1207'. [ 211.047405][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1206'. [ 211.461141][T10564] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 211.619230][T10567] macvtap0: entered allmulticast mode [ 211.626148][T10569] 8021q: VLANs not supported on ip6_vti0 [ 211.628033][T10576] netlink: 'syz.4.1216': attribute type 2 has an invalid length. [ 211.670962][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 211.700986][T10564] bond0: (slave bridge4): making interface the new active one [ 211.729675][T10564] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 211.870037][T10581] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.958857][T10590] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 212.082505][T10590] bond8: entered promiscuous mode [ 212.089703][T10590] 8021q: adding VLAN 0 to HW filter on device bond8 [ 212.246409][T10604] __nla_validate_parse: 2 callbacks suppressed [ 212.246428][T10604] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1224'. [ 212.306171][T10610] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.673899][T10610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'. [ 212.693834][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 212.702054][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 212.710275][ T5633] Bluetooth: hci2: command 0x0401 tx timeout [ 213.630256][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 216.220330][T10669] netlink: zone id is out of range [ 216.238427][T10669] netlink: zone id is out of range [ 216.245522][T10669] netlink: zone id is out of range [ 216.251183][T10669] netlink: zone id is out of range [ 216.257983][T10669] netlink: zone id is out of range [ 216.264532][T10669] netlink: zone id is out of range [ 216.270637][T10669] netlink: zone id is out of range [ 216.277556][T10669] netlink: zone id is out of range [ 216.295831][T10669] netlink: zone id is out of range [ 216.308812][T10669] netlink: zone id is out of range [ 217.022469][ T50] block nbd2: Receive control failed (result -32) [ 217.077840][T10686] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 217.464703][T10686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 217.591128][T10688] bond9: (slave veth11): Enslaving as an active interface with a down link [ 217.747782][T10692] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 217.761552][T10692] bond9: (slave batadv1): making interface the new active one [ 217.777665][T10692] batadv1: entered promiscuous mode [ 217.779970][T10713] netlink: 'syz.0.1248': attribute type 11 has an invalid length. [ 217.792155][T10692] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 217.850932][T10703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.859464][T10703] bridge0: port 3(bond5) entered blocking state [ 217.867344][T10703] bridge0: port 3(bond5) entered disabled state [ 217.874425][T10703] bond5: entered allmulticast mode [ 217.932697][T10703] bond5: entered promiscuous mode [ 217.955156][T10703] bridge0: port 3(bond5) entered blocking state [ 217.961707][T10703] bridge0: port 3(bond5) entered forwarding state [ 218.008438][ T62] bridge0: port 3(bond5) entered disabled state [ 218.243834][T10728] netlink: 'syz.1.1252': attribute type 39 has an invalid length. [ 218.356927][T10728] hsr_slave_0: left promiscuous mode [ 218.364883][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 218.424019][T10734] Cannot find add_set index 0 as target [ 218.874261][T10740] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.912294][T10740] bond7 (unregistering): Released all slaves [ 219.313669][T10749] syzkaller0: entered promiscuous mode [ 219.319736][T10749] syzkaller0: entered allmulticast mode [ 219.333250][T10769] syzkaller0: entered promiscuous mode [ 219.339167][T10769] syzkaller0: entered allmulticast mode [ 222.116912][T10794] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 222.712559][T10819] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.941769][T10823] tipc: Enabling of bearer rejected, media not registered [ 222.964555][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1269'. [ 223.042683][T10835] net_ratelimit: 5 callbacks suppressed [ 223.042705][T10835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.079010][T10839] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1275'. [ 223.275168][T10845] netlink: 'syz.4.1278': attribute type 11 has an invalid length. [ 223.292159][T10845] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1278'. [ 223.712347][T10853] bridge4: entered promiscuous mode [ 223.718915][T10853] bridge4: entered allmulticast mode [ 223.774234][T10853] team0: Port device bridge4 added [ 223.829880][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 223.912030][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1285'. [ 224.049222][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1285'. [ 224.086542][T10873] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 224.088990][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 224.100361][T10873] bond7: (slave vti0): Error -95 calling set_mac_address [ 224.499192][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'. [ 224.937474][T10917] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1296'. [ 224.996482][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'. [ 225.387822][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1302'. [ 225.413135][T10938] netlink: 'syz.0.1302': attribute type 7 has an invalid length. [ 225.446816][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 225.735989][T10952] syzkaller0: entered promiscuous mode [ 225.746814][T10952] syzkaller0: entered allmulticast mode [ 226.242106][T10974] netlink: 'syz.0.1314': attribute type 2 has an invalid length. [ 226.276461][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 226.584329][T10984] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check. [ 226.782745][T10999] netlink: zone id is out of range [ 226.820816][T10999] netlink: set zone limit has 4 unknown bytes [ 227.232541][T11011] netlink: 'syz.0.1322': attribute type 2 has an invalid length. [ 227.312302][T11011] : entered promiscuous mode [ 227.507548][T11018] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 227.507548][T11018] Please contact the netfilter-devel mailing list or update your nftables rules. [ 227.557956][T11024] syzkaller0: entered promiscuous mode [ 227.564369][T11024] syzkaller0: entered allmulticast mode [ 227.635449][T11028] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 227.759731][T11028] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.795868][T11031] bond8: (slave geneve3): making interface the new active one [ 227.806963][T11031] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 228.983388][ T36] batadv1: left promiscuous mode [ 252.359045][T11044] __nla_validate_parse: 3 callbacks suppressed [ 252.359084][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1329'. [ 252.387304][T11042] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1328'. [ 252.404498][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1331'. [ 252.443490][T11043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1331'. [ 252.496978][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1331'. [ 252.532149][T11043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1331'. [ 252.574976][T11043] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1331'. [ 252.694935][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1335'. [ 252.715703][T11049] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.752353][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1336'. [ 253.191908][T11078] xt_hashlimit: size too large, truncated to 1048576 [ 253.275824][T11078] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 253.597287][T11092] xt_connbytes: Forcing CT accounting to be enabled [ 253.636528][T11090] tipc: Trying to set illegal importance in message [ 253.654546][T11092] Cannot find set identified by id 65534 to match [ 253.728954][T11098] ip6tnl0: entered promiscuous mode [ 253.763020][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 253.892117][T11107] netlink: 'syz.1.1348': attribute type 1 has an invalid length. [ 254.083866][T11115] netlink: 'syz.3.1350': attribute type 2 has an invalid length. [ 254.131834][T11082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.183708][T11107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.221029][T11108] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 254.291355][T11108] bond6: entered allmulticast mode [ 254.403633][T11115] : entered promiscuous mode [ 254.455195][T11119] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 254.558624][T11127] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 254.751415][T11136] syzkaller1: entered promiscuous mode [ 254.789058][T11136] syzkaller1: entered allmulticast mode [ 254.899600][T11136] netlink: 'syz.0.1355': attribute type 11 has an invalid length. [ 254.980226][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.709883][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.851370][T11162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.957613][T11168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.977353][T11168] batman_adv: batadv0: Adding interface: bond0 [ 255.989607][T11168] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.089865][T11168] batman_adv: batadv0: Interface activated: bond0 [ 256.689283][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.712536][T11193] IPVS: ip_vs_add_dest(): server weight less than zero [ 257.199345][T11212] x_tables: duplicate underflow at hook 1 [ 257.681204][T11231] __nla_validate_parse: 16 callbacks suppressed [ 257.681227][T11231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1383'. [ 257.707029][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'. [ 257.731338][T11234] netlink: 'syz.1.1384': attribute type 21 has an invalid length. [ 257.745343][T11234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1384'. [ 258.335585][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'. [ 258.438260][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1393'. [ 259.938028][T11321] pim6reg: entered allmulticast mode [ 260.009167][T11324] netlink: 'syz.1.1407': attribute type 8 has an invalid length. [ 261.978967][T11297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.420976][T11333] x_tables: unsorted entry at hook 2 [ 262.674029][T11351] syzkaller0: entered promiscuous mode [ 262.680798][T11351] syzkaller0: entered allmulticast mode [ 263.002379][T11370] atomic_op ffff888050fb7998 conn xmit_atomic 0000000000000000 [ 263.209670][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 263.443092][T11388] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 263.561533][T11385] syz.2.1425 (11385) used greatest stack depth: 18208 bytes left [ 263.582758][T11393] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 263.596327][T11393] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1426'. [ 263.607741][T11393] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 263.631657][T11399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1427'. [ 263.796680][T11400] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.821905][T11400] syzkaller1: Refused to change device type [ 264.213163][T11419] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1431'. [ 264.295692][T11419] ipt_REJECT: TCP_RESET invalid for non-tcp [ 264.410827][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.418523][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.424689][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.430815][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.436958][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.443118][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.449242][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.455526][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.461683][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.467842][T11430] tc action pedit 'at' offset 5 out of bounds [ 264.473986][T11430] 0: reclassify loop, rule prio 0, protocol 800 [ 264.545870][T11433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1436'. [ 264.836114][T11439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1439'. [ 264.852644][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 264.913315][T11446] netlink: 'syz.2.1440': attribute type 8 has an invalid length. [ 265.050797][T11450] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 265.545046][T11476] netlink: 'syz.3.1447': attribute type 3 has an invalid length. [ 265.573151][T11476] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1447'. [ 265.969025][T11439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.127396][T11498] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 266.202650][T11439] geneve2: left promiscuous mode [ 266.208167][T11439] geneve2: left allmulticast mode [ 266.266135][T11481] syzkaller0: entered allmulticast mode [ 266.360760][T11498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.375450][ T62] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.393283][ T62] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.405911][ T62] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.417678][ T62] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.427774][ T62] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.443351][ T62] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.500149][T11500] bond4: (slave geneve2): making interface the new active one [ 266.526169][T11500] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 266.556326][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 266.596590][ T62] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.640852][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.676329][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.689332][T11515] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 266.700323][ T62] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.732201][ T62] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.761751][ T62] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 267.498817][T11549] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 267.694701][T11556] netlink: 'syz.2.1467': attribute type 3 has an invalid length. [ 267.731489][T11556] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1467'. [ 268.359090][T11576] bridge_slave_0: left allmulticast mode [ 268.377144][T11576] bridge_slave_0: left promiscuous mode [ 268.412211][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.486891][T11576] bridge_slave_1: left allmulticast mode [ 268.501752][T11576] bridge_slave_1: left promiscuous mode [ 268.514152][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.550425][T11576] bond0: (slave bond_slave_0): Releasing backup interface [ 268.571593][T11576] bond_slave_0: left allmulticast mode [ 268.592825][T11576] bond0: (slave bond_slave_1): Releasing backup interface [ 268.606269][T11576] bond_slave_1: left allmulticast mode [ 268.619342][T11589] __nla_validate_parse: 1 callbacks suppressed [ 268.619363][T11589] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1476'. [ 268.644496][T11576] team0: Port device team_slave_0 removed [ 268.693229][T11576] team0: Port device team_slave_1 removed [ 268.716914][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.727816][T11576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.741690][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.757036][T11576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.798413][T11576] bond1: (slave geneve2): Releasing backup interface [ 268.846393][T11576] bond3: (slave geneve3): Releasing active interface [ 268.883600][T11576] bond5: left allmulticast mode [ 268.892826][T11576] bond5: left promiscuous mode [ 268.900422][T11576] bridge0: port 3(bond5) entered disabled state [ 268.914974][T11576] bond6: (slave ip6gretap0): Releasing active interface [ 268.964426][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.112353][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.138872][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.239577][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.276723][T11604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.355868][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1482'. [ 269.416579][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 269.564758][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 269.880721][T11625] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1489'. [ 270.232405][T11650] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.239935][T11654] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 270.657617][T11679] netlink: 6212 bytes leftover after parsing attributes in process `syz.1.1500'. [ 270.791613][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1503'. [ 270.809162][T11681] macvtap1: entered promiscuous mode [ 270.829515][T11681] macvtap1: entered allmulticast mode [ 270.847530][T11681] veth1_vlan: entered allmulticast mode [ 270.865571][T11692] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 271.074190][T11700] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1505'. [ 271.110599][T11700] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1505'. [ 271.154788][T11701] netlink: 'syz.0.1505': attribute type 3 has an invalid length. [ 271.302631][T11705] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 271.391187][T11716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.471587][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1511'. [ 271.583326][T11716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.776303][T11716] batman_adv: batadv0: Removing interface: wlan0 [ 271.791020][ T8487] IPVS: starting estimator thread 0... [ 271.859294][T11716] batman_adv: batadv0: Removing interface: gretap2 [ 271.883529][T11735] IPVS: using max 27 ests per chain, 64800 per kthread [ 272.384494][T11757] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 272.495833][T11766] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 272.662448][T11766] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.726692][T11770] bond7: (slave gretap2): making interface the new active one [ 272.762345][T11770] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 273.026207][T11779] blkio.reset_stats is deprecated [ 273.082077][T11783] netlink: 'syz.2.1523': attribute type 30 has an invalid length. [ 273.264693][T11772] syzkaller0: entered promiscuous mode [ 273.270701][T11772] syzkaller0: entered allmulticast mode [ 273.419686][T11783] bond9: option arp_missed_max: invalid value (0) [ 273.427052][T11783] bond9: option arp_missed_max: allowed values 1 - 255 [ 273.438996][T11783] bond9 (unregistering): Released all slaves [ 273.550232][T11791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.680274][T11808] __nla_validate_parse: 5 callbacks suppressed [ 273.680295][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 273.911441][T11822] sctp: [Deprecated]: syz.1.1532 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.911441][T11822] Use struct sctp_sack_info instead [ 276.437360][T11808] hsr_slave_1 (unregistering): left promiscuous mode [ 276.464165][T11812] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 276.478350][T11812] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 276.486606][T11812] gretap1: entered promiscuous mode [ 276.491865][T11812] gretap1: entered allmulticast mode [ 276.866877][T11848] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 276.936978][T11855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.998484][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 277.383219][T11877] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.435990][T11877] syzkaller0: entered promiscuous mode [ 277.450703][T11877] syzkaller0: entered allmulticast mode [ 277.509753][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.524754][T11877] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 277.533504][T11881] netlink: 'syz.2.1546': attribute type 33 has an invalid length. [ 277.541582][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.575047][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.612786][T11877] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 277.623286][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.711758][T11881] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 277.719242][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1547'. [ 277.786188][T11881] bond9 (unregistering): Released all slaves [ 277.896243][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 278.011449][T11888] netlink: 'syz.4.1548': attribute type 1 has an invalid length. [ 278.026167][T11893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1548'. [ 278.047461][T11888] netlink: 'syz.4.1548': attribute type 2 has an invalid length. [ 279.371566][T11962] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 279.464811][T11965] tipc: Started in network mode [ 279.505246][T11965] tipc: Node identity ac14140f, cluster identity 4711 [ 279.520381][T11965] tipc: New replicast peer: 255.255.255.255 [ 279.540588][T11965] tipc: Enabled bearer , priority 10 [ 279.553532][T11964] tipc: Enabling of bearer rejected, already enabled [ 279.690135][T11964] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 279.938967][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 279.944995][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 279.996986][T11988] syzkaller0: entered promiscuous mode [ 280.005125][T11988] syzkaller0: entered allmulticast mode [ 280.017861][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.036454][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.177220][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.188121][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.199789][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.211785][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.226406][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.255432][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 280.466255][T12005] ipvlan1: entered promiscuous mode [ 280.480285][T12005] ipvlan1: entered allmulticast mode [ 280.502401][T12005] veth0_vlan: entered allmulticast mode [ 280.644770][ T8481] tipc: Node number set to 2886997007 [ 280.743571][T12023] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 280.757722][T12019] ip6t_srh: unknown srh match flags 5F28 [ 280.938428][T12033] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 280.984075][T12035] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 281.286439][ T30] audit: type=1804 audit(1784614289.731:2): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1589" name="/newroot/308/cgroup.controllers" dev="tmpfs" ino=1600 res=1 errno=0 [ 281.383128][ T30] audit: type=1800 audit(1784614289.741:3): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1589" name="cgroup.controllers" dev="tmpfs" ino=1600 res=0 errno=0 [ 282.744996][T12094] bond10: option xmit_hash_policy: invalid value (64) [ 282.766936][T12094] bond10 (unregistering): Released all slaves [ 283.695574][T12141] syzkaller0: entered promiscuous mode [ 283.716122][T12141] syzkaller0: entered allmulticast mode [ 284.408525][T12171] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 284.528484][T12171] smbdirect: ib_dev[sy2] removed [ 284.600612][T12176] xt_l2tp: invalid flags combination: 8 [ 285.131315][T12189] __nla_validate_parse: 34 callbacks suppressed [ 285.131338][T12189] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1630'. [ 285.342737][T12197] netlink: 'syz.2.1634': attribute type 29 has an invalid length. [ 285.383025][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 285.413227][T12199] netlink: 'syz.2.1634': attribute type 29 has an invalid length. [ 285.435130][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 285.935628][T12206] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 285.961672][T12215] netlink: 'syz.4.1636': attribute type 3 has an invalid length. [ 285.994419][T12213] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 286.019269][T12213] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 286.042460][T12213] veth0_to_bond: left allmulticast mode [ 286.350615][T12214] syzkaller0: entered promiscuous mode [ 286.394409][T12214] syzkaller0: entered allmulticast mode [ 286.747559][T12240] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 286.956946][T12245] x_tables: duplicate entry at hook 3 [ 286.962616][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 286.976335][T12246] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1646'. [ 287.148750][T12254] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 287.374254][T12260] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 287.436410][T12262] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 287.460206][T12260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.590796][T12265] bond5: (slave gretap2): making interface the new active one [ 287.654838][T12267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1654'. [ 287.671716][T12265] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 287.766281][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 287.791797][T12267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1654'. [ 287.806585][T12273] sctp: [Deprecated]: syz.4.1655 (pid 12273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.806585][T12273] Use struct sctp_sack_info instead [ 287.969248][T12267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1654'. [ 288.140037][T12267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1654'. [ 288.336330][T12294] hsr0: entered allmulticast mode [ 288.355518][T12294] hsr_slave_0: entered allmulticast mode [ 288.364780][T12294] hsr_slave_1: entered allmulticast mode [ 289.475221][T12341] syzkaller0: entered promiscuous mode [ 289.480866][T12341] syzkaller0: entered allmulticast mode [ 289.621690][T12351] netlink: 'syz.3.1679': attribute type 2 has an invalid length. [ 289.666616][T12351] netlink: 'syz.3.1679': attribute type 8 has an invalid length. [ 289.777503][T12356] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 292.615733][T12374] __nla_validate_parse: 5 callbacks suppressed [ 292.615756][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.664309][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.719961][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.746066][T12381] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1685'. [ 292.756539][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.771138][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.781919][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.795743][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.808577][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1686'. [ 292.881460][T12382] syzkaller0: entered promiscuous mode [ 292.892149][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1687'. [ 292.902329][T12382] syzkaller0: entered allmulticast mode [ 292.910851][T12377] openvswitch: netlink: Missing key (keys=40, expected=80) [ 293.269785][T12396] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.198824][T12432] bond10: (slave gre0): Device is not bonding slave [ 294.221257][T12432] bond10: option active_slave: invalid value (gre0) [ 294.255548][T12432] bond10 (unregistering): Released all slaves [ 295.274795][T12488] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 295.931006][ T4943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.945613][ T4943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.958990][ T4943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.975988][ T4943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.985926][ T4943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.824611][T12540] netlink: 'syz.1.1729': attribute type 142 has an invalid length. [ 297.069007][T12511] wlan1 speed is unknown, defaulting to 1000 [ 297.204453][T12560] netlink: 'syz.4.1737': attribute type 15 has an invalid length. [ 297.256115][T12559] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 297.284662][T12559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.551685][T12569] netlink: 'syz.2.1738': attribute type 17 has an invalid length. [ 298.043632][ T4943] Bluetooth: hci5: command tx timeout [ 298.338054][T12592] __nla_validate_parse: 64 callbacks suppressed [ 298.338085][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 298.573942][T12592] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.676579][T12595] bond10: (slave batadv0): Opening slave failed [ 298.970020][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.007254][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.057588][T12511] bridge_slave_0: entered allmulticast mode [ 299.129070][T12619] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.132307][T12511] bridge_slave_0: entered promiscuous mode [ 299.228226][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.261409][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.290892][T12511] bridge_slave_1: entered allmulticast mode [ 299.331622][T12511] bridge_slave_1: entered promiscuous mode [ 299.448242][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 299.461569][T12638] xt_hashlimit: size too large, truncated to 1048576 [ 299.465080][T12637] xt_hashlimit: overflow, try lower: 3/0 [ 299.478115][T12635] veth1_to_bond: entered allmulticast mode [ 299.500657][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.511030][T12635] veth1_to_bond: entered promiscuous mode [ 299.539005][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.588248][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 299.658512][T12635] veth1_to_bond (unregistering): left allmulticast mode [ 299.667896][T12635] veth1_to_bond (unregistering): left promiscuous mode [ 299.740293][T12635] bond0: (slave bond_slave_1): Releasing backup interface [ 299.866915][T12511] team0: Port device team_slave_0 added [ 299.891019][T12511] team0: Port device team_slave_1 added [ 299.951492][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.962633][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.030196][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 300.039372][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.064028][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.097697][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.126285][ T4943] Bluetooth: hci5: command tx timeout [ 300.183423][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.404269][T12511] hsr_slave_0: entered promiscuous mode [ 300.420016][T12511] hsr_slave_1: entered promiscuous mode [ 300.435179][T12511] debugfs: 'hsr0' already exists in 'hsr' [ 300.451860][T12511] Cannot create hsr debugfs directory [ 300.747430][T12687] netlink: 'syz.3.1764': attribute type 1 has an invalid length. [ 300.909496][T12687] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.958356][T12694] macvlan2: entered promiscuous mode [ 300.964440][T12694] macvlan2: entered allmulticast mode [ 300.971728][T12694] bond7: entered promiscuous mode [ 300.978655][T12694] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.990111][T12694] bond7: left promiscuous mode [ 301.316221][T12674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.383438][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 301.683261][ T8481] IPVS: starting estimator thread 0... [ 301.731644][T12511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.793732][T12719] IPVS: using max 27 ests per chain, 64800 per kthread [ 301.801955][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.824456][T12511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.867768][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.900378][T12511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.920666][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.943308][T12718] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 301.945433][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 301.960820][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 302.006913][T12726] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.018447][T12511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.031998][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.070125][T12730] bond9: Invalid ad_actor_system MAC address. [ 302.076965][T12730] bond9: option ad_actor_system: invalid value (1) [ 302.089284][T12730] bond9 (unregistering): Released all slaves [ 302.119394][T12729] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 302.203883][ T4943] Bluetooth: hci5: command tx timeout [ 302.274917][T12746] netlink: 'syz.1.1776': attribute type 11 has an invalid length. [ 302.362411][T12748] sctp: [Deprecated]: syz.2.1775 (pid 12748) Use of int in maxseg socket option. [ 302.362411][T12748] Use struct sctp_assoc_value instead [ 302.616068][T12754] syzkaller0: entered promiscuous mode [ 302.628089][T12754] syzkaller0: entered allmulticast mode [ 303.021344][T12770] netlink: 'syz.2.1782': attribute type 23 has an invalid length. [ 303.025584][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.210584][T12511] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.271614][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.281783][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.439236][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.447375][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.528050][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'. [ 303.550293][T12792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1788'. [ 303.561655][T12790] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1785'. [ 303.750596][T12795] bond11: entered promiscuous mode [ 303.757679][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1787'. [ 303.962815][T12804] syzkaller1: entered promiscuous mode [ 304.001282][T12804] syzkaller1: entered allmulticast mode [ 304.041058][T12809] veth0: entered promiscuous mode [ 304.077565][T12812] veth0: left promiscuous mode [ 304.283560][ T4943] Bluetooth: hci5: command tx timeout [ 304.487516][T12828] IPVS: Unknown mcast interface: lo [ 304.509262][T12827] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 304.550708][T12828] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 304.607372][T12827] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 304.616279][T12828] syzkaller0: entered promiscuous mode [ 304.661986][T12828] syzkaller0: entered allmulticast mode [ 304.731098][T12828] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 304.757215][T12828] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1796'. [ 304.772405][T12828] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 304.945376][T12845] xt_NFQUEUE: number of total queues is 0 [ 305.096706][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 305.111191][T12847] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 305.778586][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.833285][T12877] netlink: 'syz.1.1807': attribute type 8 has an invalid length. [ 305.849291][T12875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1808'. [ 306.166912][T12882] netlink: 'syz.2.1809': attribute type 4 has an invalid length. [ 306.217633][T12885] netlink: 'syz.2.1809': attribute type 4 has an invalid length. [ 306.375378][T12894] sctp: [Deprecated]: syz.3.1812 (pid 12894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.375378][T12894] Use struct sctp_sack_info instead [ 306.461316][T12898] sctp: [Deprecated]: syz.4.1813 (pid 12898) Use of int in maxseg socket option. [ 306.461316][T12898] Use struct sctp_assoc_value instead [ 307.179410][T12926] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 310.316783][T12948] bond12: invalid ARP target 0.0.0.0 specified for addition [ 310.325145][T12948] bond12: option arp_ip_target: invalid value (0) [ 310.334719][T12948] bond12 (unregistering): Released all slaves [ 310.478823][T12511] veth0_vlan: entered promiscuous mode [ 310.552570][T12511] veth1_vlan: entered promiscuous mode [ 310.741450][T12968] tipc: MTU too low for tipc bearer [ 310.762425][T12969] tipc: MTU too low for tipc bearer [ 310.784674][T12968] netlink: 'syz.2.1831': attribute type 1 has an invalid length. [ 310.802232][T12511] veth0_macvtap: entered promiscuous mode [ 310.879672][T12969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1831'. [ 310.947059][T12968] bond9: entered promiscuous mode [ 310.958803][T12968] 8021q: adding VLAN 0 to HW filter on device bond9 [ 310.971640][T12511] veth1_macvtap: entered promiscuous mode [ 311.292330][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.317395][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 311.330551][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 311.499405][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.628517][ T157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.672320][ T157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.764526][ T157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.788533][ T157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.939419][T13006] netlink: 'syz.3.1840': attribute type 32 has an invalid length. [ 312.450340][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.482671][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.633864][T13024] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 312.655067][T13026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1846'. [ 312.692541][T13026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1846'. [ 312.702151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.702197][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.871612][T13026] gretap3: entered promiscuous mode [ 312.891548][T13026] gretap3: entered allmulticast mode [ 312.979896][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 313.194449][T13041] xt_policy: output policy not valid in PREROUTING and INPUT [ 313.195907][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 314.398696][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'. [ 315.013089][T13112] sock: sock_timestamping_bind_phc: sock not bind to device [ 315.284425][T13112] tipc: Enabled bearer , priority 0 [ 315.372372][T13132] netlink: 'syz.5.1871': attribute type 58 has an invalid length. [ 315.412551][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1871'. [ 315.533294][T13125] syzkaller0: entered promiscuous mode [ 315.542592][T13125] syzkaller0: entered allmulticast mode [ 315.566463][T13125] tipc: Resetting bearer [ 315.632718][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 315.855705][ T47] tipc: Resetting bearer [ 315.865436][T13111] tipc: Resetting bearer [ 315.931314][ T976] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 316.596117][T13142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.363700][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'. [ 317.418890][T13176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.427830][T13176] IPv6: NLM_F_CREATE should be set when creating new route [ 317.435145][T13176] IPv6: NLM_F_CREATE should be set when creating new route [ 318.134668][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.205851][T13111] tipc: Disabling bearer [ 319.509854][T13190] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 319.699668][T13190] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.916624][T13195] bond10: (slave batadv1): Opening slave failed [ 320.068541][T13212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1886'. [ 320.086599][T13212] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1886'. [ 320.167006][T13212] veth5: entered promiscuous mode [ 320.281888][T13219] netlink: 'syz.2.1888': attribute type 23 has an invalid length. [ 320.356958][T13225] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 320.369622][T13225] netlink: 'syz.4.1889': attribute type 3 has an invalid length. [ 320.379743][T13225] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1889'. [ 320.550635][T13228] gre0: entered promiscuous mode [ 320.600178][T13228] gre0: entered allmulticast mode [ 321.065214][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 321.114756][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 321.158234][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'. [ 321.560333][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 321.597634][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 321.752148][T13275] netlink: 'syz.4.1903': attribute type 5 has an invalid length. [ 321.942052][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 322.108895][T13299] netlink: 'syz.4.1908': attribute type 3 has an invalid length. [ 322.449408][T13315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.462281][T13316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.564751][T13314] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 322.567478][T13320] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1914'. [ 322.865949][T13332] netlink: 'syz.2.1917': attribute type 16 has an invalid length. [ 322.939540][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 322.972292][T13332] veth0_macvtap: entered allmulticast mode [ 323.007495][T13332] netlink: 'syz.2.1917': attribute type 16 has an invalid length. [ 323.037092][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.086353][T13332] netlink: 'syz.2.1917': attribute type 16 has an invalid length. [ 323.095016][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.171107][T13332] netlink: 'syz.2.1917': attribute type 16 has an invalid length. [ 323.193715][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.215241][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.251211][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.284797][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.312400][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 323.348717][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1917'. [ 324.199822][T13386] sock: sock_timestamping_bind_phc: sock not bind to device [ 324.228269][T13386] tipc: Started in network mode [ 324.234715][T13386] tipc: Node identity 027882d44c62, cluster identity 4711 [ 324.250623][T13386] tipc: Enabled bearer , priority 0 [ 324.386029][T13386] syzkaller0: entered promiscuous mode [ 324.409600][T13386] syzkaller0: entered allmulticast mode [ 324.439303][T13386] tipc: Resetting bearer [ 324.575602][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.624168][T13385] tipc: Resetting bearer [ 324.893825][T13412] validate_nla: 29 callbacks suppressed [ 324.893846][T13412] netlink: 'syz.2.1940': attribute type 1 has an invalid length. [ 327.870275][T13385] tipc: Disabling bearer [ 327.895489][T13412] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 327.950467][ T5737] tipc: Node number set to 1310360276 [ 328.286123][T13434] __nla_validate_parse: 27 callbacks suppressed [ 328.286145][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 328.391295][T13434] netlink: 'syz.1.1946': attribute type 3 has an invalid length. [ 328.526175][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 328.579126][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 328.597851][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 329.015567][T13461] netlink: 'syz.1.1955': attribute type 1 has an invalid length. [ 329.074212][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 329.115218][T13464] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 329.229367][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 329.258499][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 329.292323][T13466] netlink: 'syz.3.1957': attribute type 15 has an invalid length. [ 329.358256][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 329.368394][ T47] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8285 - 0 [ 329.389101][ T47] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8285 - 0 [ 329.415980][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 329.435721][ T47] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8285 - 0 [ 329.465752][T13466] netlink: 'syz.3.1957': attribute type 15 has an invalid length. [ 329.487436][T13478] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1960'. [ 329.520547][T13442] infiniband syz2: set active [ 329.531347][T13442] infiniband syz2: added vxcan1 [ 329.557521][T13442] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 329.574208][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1960'. [ 329.605372][T13442] infiniband syz2: Couldn't open port 1 [ 329.618703][ T5619] vxcan1 speed is unknown, defaulting to 1000 [ 329.625816][T13442] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 329.667261][T13442] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 329.724461][T13442] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 329.923713][T13442] RDS/IB: syz2: added [ 329.952338][T13442] smc: adding ib device syz2 with port count 1 [ 329.981166][T13442] smc: ib device syz2 port 1 has no pnetid [ 330.031368][T13499] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 330.921728][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.957101][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.154248][T13494] veth0_vlan: left promiscuous mode [ 331.266122][T13494] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 331.430001][T13494] batman_adv: batadv0: Interface deactivated: bond0 [ 331.449084][T13494] macvtap0: left allmulticast mode [ 331.605833][T13494] gretap3: left promiscuous mode [ 331.611392][T13494] gretap3: left allmulticast mode [ 331.655177][ T5619] vxcan1 speed is unknown, defaulting to 1000 [ 331.671051][T13501] team0: Port device dummy0 removed [ 335.276546][ T47] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8285 - 0 [ 335.286297][ T47] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.296181][ T47] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8285 - 0 [ 335.307921][ T47] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.318568][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 335.482709][T13523] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 335.549740][ T47] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8285 - 0 [ 335.600754][ T47] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.714032][T13542] xt_addrtype: ipv6 does not support BROADCAST matching [ 335.877894][T13549] netlink: 'syz.4.1974': attribute type 4 has an invalid length. [ 336.609588][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 336.615024][T13568] tipc: Started in network mode [ 336.632624][T13568] tipc: Node identity 6af18ed7a962, cluster identity 4711 [ 336.664865][T13568] tipc: Enabled bearer , priority 0 [ 336.681497][T13571] syzkaller0: entered promiscuous mode [ 336.692738][T13571] syzkaller0: entered allmulticast mode [ 337.299819][T13567] tipc: Resetting bearer [ 337.420780][T13567] tipc: Disabling bearer [ 337.531476][T13593] IPVS: Unknown mcast interface: lo [ 337.574327][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 338.000224][T13604] x_tables: duplicate underflow at hook 4 [ 338.594682][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 338.664996][T13631] bridge4: entered promiscuous mode [ 338.681387][T13631] bridge4: entered allmulticast mode [ 338.842608][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1993'. [ 338.870639][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1993'. [ 339.155301][T13636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.377768][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 339.662274][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 340.046389][T13442] vxcan1 speed is unknown, defaulting to 1000 [ 340.193825][T13656] tipc: Failed to remove unknown binding: 66,0,0/0:2047494794/2047494795 [ 340.217439][T13656] tipc: Failed to remove unknown binding: 66,0,0/0:2047494794/2047494795 [ 341.357707][T13692] lo speed is unknown, defaulting to 1000 [ 341.369058][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 341.392162][T13692] lo speed is unknown, defaulting to 1000 [ 341.399691][T13691] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2011'. [ 341.412345][T13694] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2010'. [ 341.412629][T13692] lo speed is unknown, defaulting to 1000 [ 341.458094][T13692] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 341.492063][T13692] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 341.528278][T13692] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 341.558522][T13692] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 341.609432][T13692] lo speed is unknown, defaulting to 1000 [ 341.618733][T13692] lo speed is unknown, defaulting to 1000 [ 341.629830][T13692] lo speed is unknown, defaulting to 1000 [ 341.639098][T13692] lo speed is unknown, defaulting to 1000 [ 341.659529][T13692] lo speed is unknown, defaulting to 1000 [ 341.669381][T13692] lo speed is unknown, defaulting to 1000 [ 342.026054][T13712] xt_cluster: node mask cannot exceed total number of nodes [ 342.052208][T13712] syzkaller1: entered promiscuous mode [ 342.074298][T13712] syzkaller1: entered allmulticast mode [ 342.440487][T13722] Cannot find map_set index 135 as target [ 342.481486][T13722] netlink: 'syz.4.2020': attribute type 34 has an invalid length. [ 342.512518][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 342.554677][T13722] bond12: option lacp_strict: invalid value (6) [ 342.578151][T13722] bond12 (unregistering): Released all slaves [ 343.157674][T13750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.451728][T13763] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2031'. [ 343.704250][T13766] : renamed from bond0 [ 343.794612][T13778] netlink: 'syz.5.2035': attribute type 2 has an invalid length. [ 343.809137][T13778] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2035'. [ 343.828706][T13774] rdma_rxe: rxe_newlink: failed to add wg2 [ 343.957383][T13781] tipc: Enabling of bearer rejected, failed to enable media [ 344.148625][T13785] vcan1: entered promiscuous mode [ 344.159676][T13785] vcan1: entered allmulticast mode [ 344.315053][T13789] netlink: 'syz.5.2039': attribute type 2 has an invalid length. [ 344.335385][T13789] netlink: 'syz.5.2039': attribute type 2 has an invalid length. [ 344.350793][T13789] netlink: 67 bytes leftover after parsing attributes in process `syz.5.2039'. [ 344.968747][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 345.108560][T13827] netlink: 'syz.4.2049': attribute type 11 has an invalid length. [ 345.143842][T13827] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2049'. [ 345.275210][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2051'. [ 345.339668][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2051'. [ 345.381157][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2051'. [ 345.403878][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2051'. [ 345.455822][T13832] syz_tun: entered promiscuous mode [ 345.479704][T13832] syz_tun: left promiscuous mode [ 345.604848][T13840] syzkaller0: entered promiscuous mode [ 345.638038][T13840] syzkaller0: entered allmulticast mode [ 346.457402][T13871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2064'. [ 346.719232][T13866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.757852][T13866] 8021q: adding VLAN 0 to HW filter on device eth0 [ 346.778257][T13866] 8021q: adding VLAN 0 to HW filter on device eth1 [ 346.794726][T13880] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 346.796576][T13866] 8021q: adding VLAN 0 to HW filter on device eth2 [ 346.835381][T13866] 8021q: adding VLAN 0 to HW filter on device eth3 [ 346.894587][T13866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.010075][ T1058] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.045840][ T1058] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.078755][ T1058] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.105523][ T1058] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.286203][T13890] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2068'. [ 347.300681][T13888] netlink: 'syz.4.2069': attribute type 10 has an invalid length. [ 347.308783][T13890] nbd: illegal input index 65508 [ 347.365700][T13888] bond5: (slave veth0_to_bond): Releasing active interface [ 347.873605][T13906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'. [ 348.486236][T13933] netlink: 'syz.4.2080': attribute type 4 has an invalid length. [ 348.804710][T13938] lo: entered allmulticast mode [ 349.468443][T13957] netlink: 'syz.5.2089': attribute type 2 has an invalid length. [ 349.479742][T13957] __nla_validate_parse: 30 callbacks suppressed [ 349.479807][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2089'. [ 351.093691][T13957] bond1: entered promiscuous mode [ 351.119203][T13957] bond1: entered allmulticast mode [ 351.139578][T13957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.168076][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.180795][ T62] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.191355][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.208299][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.213778][ T62] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 351.227857][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.241628][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.288036][ T62] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.319760][ T62] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.348927][ T62] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 351.361943][ T62] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.373672][ T62] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.389487][ T62] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 351.403938][ T62] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.426255][ T62] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.452046][ T62] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 351.473154][ T62] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.809594][T13996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 352.148210][T14018] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2102'. [ 352.371053][T13972] wlan1 speed is unknown, defaulting to 1000 [ 352.395409][T14029] lo: entered promiscuous mode [ 352.415531][T14029] tunl0: entered promiscuous mode [ 352.425296][T14029] gre0: entered promiscuous mode [ 352.431120][T14029] gretap0: entered promiscuous mode [ 352.438910][T14029] erspan0: entered promiscuous mode [ 352.442678][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2106'. [ 352.450751][T14029] ip_vti0: entered promiscuous mode [ 352.453819][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2106'. [ 352.458682][T14029] ip6_vti0: entered promiscuous mode [ 352.474665][T14029] sit0: entered promiscuous mode [ 352.479732][T14029] ip6tnl0: entered promiscuous mode [ 352.485650][T14029] ip6gre0: entered promiscuous mode [ 352.491002][T14029] syz_tun: entered promiscuous mode [ 352.497692][T14029] ip6gretap0: entered promiscuous mode [ 352.504272][T14029] bridge0: entered promiscuous mode [ 352.510628][T14029] bond0: entered promiscuous mode [ 352.515919][T14029] bond_slave_0: entered promiscuous mode [ 352.521888][T14029] team0: entered promiscuous mode [ 352.527264][T14029] team_slave_0: entered promiscuous mode [ 352.533667][T14029] team_slave_1: entered promiscuous mode [ 352.539855][T14029] nlmon0: entered promiscuous mode [ 352.546484][T14029] veth0: entered promiscuous mode [ 352.551893][T14029] veth1: entered promiscuous mode [ 352.557642][T14029] wg0: entered promiscuous mode [ 352.562606][T14029] wg1: entered promiscuous mode [ 352.568211][T14029] wg2: entered promiscuous mode [ 352.574554][T14029] veth0_to_bridge: entered promiscuous mode [ 352.580741][T14029] veth0_to_bond: entered promiscuous mode [ 352.587259][T14029] veth0_to_team: entered promiscuous mode [ 352.594163][T14029] veth1_to_team: entered promiscuous mode [ 352.600088][T14029] veth0_to_batadv: entered promiscuous mode [ 352.608014][T14029] batadv_slave_0: entered promiscuous mode [ 352.614545][T14029] veth1_to_batadv: entered promiscuous mode [ 352.620595][T14029] batadv_slave_1: entered promiscuous mode [ 352.627165][T14029] xfrm0: entered promiscuous mode [ 352.632351][T14029] veth0_to_hsr: entered promiscuous mode [ 352.638913][T14029] veth1_to_hsr: entered promiscuous mode [ 352.645253][T14029] hsr0: entered promiscuous mode [ 352.650383][T14029] veth1_virt_wifi: entered promiscuous mode [ 352.657063][T14029] veth0_virt_wifi: entered promiscuous mode [ 352.663728][T14029] virt_wifi0: entered promiscuous mode [ 352.669694][T14029] vlan0: entered promiscuous mode [ 352.675632][T14029] : entered promiscuous mode [ 352.681139][T14029] macvlan0: entered promiscuous mode [ 352.688320][T14029] macvlan1: entered promiscuous mode [ 352.694788][T14029] ipvlan0: entered promiscuous mode [ 352.702673][T14029] ipvlan1: entered promiscuous mode [ 352.709437][T14029] macvtap0: entered promiscuous mode [ 352.715507][T14029] macsec0: entered promiscuous mode [ 352.720897][T14029] geneve0: entered promiscuous mode [ 352.726832][T14029] geneve1: entered promiscuous mode [ 352.733489][T14029] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 352.741105][T14029] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 352.750295][T14029] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 352.758348][T14029] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 352.766369][T14029] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 352.774216][T14029] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 352.781801][T14029] geneve2: left allmulticast mode [ 352.789136][T14029] erspan1: entered promiscuous mode [ 352.795175][T14029] veth2: entered promiscuous mode [ 352.800458][T14029] veth3: entered promiscuous mode [ 352.807608][T14029] veth4: entered promiscuous mode [ 352.813792][T14029] veth5: entered promiscuous mode [ 352.819326][T14029] veth5: left allmulticast mode [ 352.826184][T14029] pimreg0: entered promiscuous mode [ 352.831676][T14029] bridge1: entered promiscuous mode [ 352.838473][T14029] bond1: entered promiscuous mode [ 352.845488][T14029] bond2: entered promiscuous mode [ 352.851607][T14029] ip6gre1: entered promiscuous mode [ 352.857681][T14029] veth6: entered promiscuous mode [ 352.863431][T14029] veth7: entered promiscuous mode [ 352.868979][T14029] bond3: entered promiscuous mode [ 352.875551][T14029] veth8: entered promiscuous mode [ 352.881293][T14029] veth9: entered promiscuous mode [ 352.887595][T14029] bond4: entered promiscuous mode [ 352.892686][T14029] gretap1: entered promiscuous mode [ 352.901244][T14029] ipip0: entered promiscuous mode [ 352.908690][T14029] ip6gre2: entered promiscuous mode [ 352.915378][T14029] bridge2: entered promiscuous mode [ 352.920902][T14029] bridge3: entered promiscuous mode [ 352.927524][T14029] ip6gre3: entered promiscuous mode [ 352.936174][T14029] bond5: entered promiscuous mode [ 352.941677][T14029] gre1: entered promiscuous mode [ 352.955585][T14029] bond7: entered promiscuous mode [ 352.962413][T14029] vti0: entered promiscuous mode [ 352.968714][T14029] bond9: entered promiscuous mode [ 352.974604][T14029] batadv1: entered promiscuous mode [ 352.983558][T14029] veth10: entered promiscuous mode [ 352.989314][T14029] veth11: entered promiscuous mode [ 352.997135][T14029] bridge4: left allmulticast mode [ 353.003630][T14029] bridge5: entered promiscuous mode [ 353.009052][T14029] veth12: entered promiscuous mode [ 353.015711][T14029] veth13: entered promiscuous mode [ 353.021517][T14029] bridge6: entered promiscuous mode [ 353.028237][T14029] mac80211_hwsim hwsim10 t: entered promiscuous mode [ 353.037749][T14029] bridge7: entered promiscuous mode [ 353.047015][T14029] syztnl2: entered promiscuous mode [ 353.052603][T14029] mac80211_hwsim hwsim19 wlan2: entered promiscuous mode [ 353.060745][T14029] ip6erspan0: entered promiscuous mode [ 353.067225][T14029] ip6tnl1: entered promiscuous mode [ 353.074205][T14029] bond10: entered promiscuous mode [ 353.080841][T14029] rose0: entered promiscuous mode [ 353.087222][T14029] gtp0: entered promiscuous mode [ 353.094471][T14029] bridge8: entered promiscuous mode [ 353.101194][T14029] ip6tnl2: entered promiscuous mode [ 353.111039][T13972] vxcan1 speed is unknown, defaulting to 1000 [ 353.121099][ T47] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.152392][ T47] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.257407][ T47] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.277277][ T47] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.299386][T14050] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check. [ 353.324026][ T50] Bluetooth: hci6: command tx timeout [ 353.368242][T14050] block nbd0: Unsupported socket: should be TCP or UNIX. [ 353.752451][T13972] lo speed is unknown, defaulting to 1000 [ 354.066448][T14081] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 354.185325][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'. [ 354.206751][T14081] 8021q: adding VLAN 0 to HW filter on device bond9 [ 354.252057][T14085] bond9: (slave gretap3): making interface the new active one [ 354.314781][T14085] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 354.379301][T14093] tipc: Enabling of bearer rejected, failed to enable media [ 354.531986][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'. [ 354.579851][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'. [ 355.060329][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.063099][T14131] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2126'. [ 355.071837][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.090757][T13972] bridge_slave_0: entered allmulticast mode [ 355.100871][T13972] bridge_slave_0: entered promiscuous mode [ 355.117318][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2126'. [ 355.149457][T14127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 355.176473][T14127] syzkaller1: Refused to change device type [ 355.195804][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.224273][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.252053][T13972] bridge_slave_1: entered allmulticast mode [ 355.281254][T13972] bridge_slave_1: entered promiscuous mode [ 355.321396][T14148] x_tables: duplicate underflow at hook 3 [ 355.355060][T14148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2129'. [ 355.380188][T14148] xt_hl: Unknown TTL match mode: 255 [ 355.403343][ T50] Bluetooth: hci6: command tx timeout [ 355.488822][T14152] xt_TCPMSS: Only works on TCP SYN packets [ 355.499471][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.580026][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.659995][T14152] netlink: 'syz.5.2131': attribute type 21 has an invalid length. [ 355.678582][T14152] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.743446][T14162] bridge7: entered allmulticast mode [ 355.752008][T14160] syzkaller1: entered allmulticast mode [ 355.787489][T13972] team0: Port device team_slave_0 added [ 355.814089][T13972] team0: Port device team_slave_1 added [ 355.914856][T14170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2137'. [ 355.929806][T14170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2137'. [ 355.956308][T14170] netlink: 'syz.1.2137': attribute type 6 has an invalid length. [ 355.971508][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.976258][T14170] netlink: 'syz.1.2137': attribute type 5 has an invalid length. [ 355.985354][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.993959][T14170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2137'. [ 356.016931][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.037554][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.048844][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.091140][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.150440][T14181] openvswitch: netlink: Multiple metadata blocks provided [ 356.194721][T13972] hsr_slave_0: entered promiscuous mode [ 356.202409][T13972] hsr_slave_1: entered promiscuous mode [ 356.218896][T13972] debugfs: 'hsr0' already exists in 'hsr' [ 356.230197][T13972] Cannot create hsr debugfs directory [ 356.314367][T14187] bridge0: port 3(dummy0) entered blocking state [ 356.336079][T14187] bridge0: port 3(dummy0) entered disabled state [ 356.358357][T14187] dummy0: entered allmulticast mode [ 356.387319][T14187] dummy0: entered promiscuous mode [ 356.397058][T14187] bridge0: port 3(dummy0) entered blocking state [ 356.404664][T14187] bridge0: port 3(dummy0) entered forwarding state [ 356.426615][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2144'. [ 356.439361][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2144'. [ 356.592294][T14196] netlink: 'syz.2.2145': attribute type 10 has an invalid length. [ 356.639451][T14196] bridge0: port 3(dummy0) entered disabled state [ 356.653239][T14196] dummy0: left allmulticast mode [ 356.663798][T14196] dummy0: left promiscuous mode [ 356.669081][T14200] netlink: 'syz.2.2145': attribute type 10 has an invalid length. [ 356.677866][T14196] bridge0: port 3(dummy0) entered disabled state [ 356.705752][T14196] team0: Port device dummy0 added [ 356.796872][T14200] team0: Port device dummy0 removed [ 357.017470][T13972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.068586][T13972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.090821][T13972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.127497][T13972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.180721][T14224] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 357.192148][T13972] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.241752][T13972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.253977][T13972] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.296660][T13972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.484854][ T50] Bluetooth: hci6: command tx timeout [ 357.485409][T14239] netlink: 'syz.4.2155': attribute type 2 has an invalid length. [ 357.611910][T13972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.676998][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.745992][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.753241][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.866787][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.874157][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.617952][T14291] netlink: 'syz.1.2166': attribute type 1 has an invalid length. [ 359.222796][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.511679][T14329] syzkaller0: entered promiscuous mode [ 359.533055][T14329] syzkaller0: entered allmulticast mode [ 359.565671][ T50] Bluetooth: hci6: command tx timeout [ 359.608148][T14334] bridge_slave_1: left allmulticast mode [ 359.614059][T14334] bridge_slave_1: left promiscuous mode [ 359.622868][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.638555][T14334] bridge_slave_0: left allmulticast mode [ 359.645532][T14334] bridge_slave_0: left promiscuous mode [ 359.654075][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.115981][T13972] veth0_vlan: entered promiscuous mode [ 360.118522][T14354] __nla_validate_parse: 6 callbacks suppressed [ 360.118541][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 360.169042][T13972] veth1_vlan: entered promiscuous mode [ 360.291903][T13972] veth0_macvtap: entered promiscuous mode [ 360.296265][T14363] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 360.329700][T13972] veth1_macvtap: entered promiscuous mode [ 360.415133][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.459820][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.499046][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.527351][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.537877][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.588384][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.602400][T14378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2190'. [ 360.623347][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.631085][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.658327][T14381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2190'. [ 360.707813][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 360.928043][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2191'. [ 361.107882][T14389] erspan0: entered promiscuous mode [ 361.141515][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 361.176618][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.202208][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.254975][T14404] team0: Device ipvlan2 failed to register rx_handler [ 361.333225][T14407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2198'. [ 361.378369][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.378629][T14405] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2197'. [ 361.398041][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.555918][T14416] netlink: 'syz.2.2202': attribute type 11 has an invalid length. [ 361.591598][T14416] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2202'. [ 361.768168][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.378712][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2209'. [ 362.539526][T14457] syzkaller0: entered promiscuous mode [ 362.548077][T14457] syzkaller0: entered allmulticast mode [ 362.585454][T14473] netlink: 'syz.4.2214': attribute type 49 has an invalid length. [ 362.701788][T14478] netlink: 'syz.5.2216': attribute type 1 has an invalid length. [ 365.273828][T14478] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 365.295895][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.628496][T14508] team0 (unregistering): Port device team_slave_0 removed [ 365.678421][T14508] team0 (unregistering): Port device team_slave_1 removed [ 365.771747][T14516] veth0: entered promiscuous mode [ 365.782925][T14513] syzkaller0: entered promiscuous mode [ 365.789033][T14513] syzkaller0: entered allmulticast mode [ 365.830695][T14514] veth0: left promiscuous mode [ 365.850049][T14518] syzkaller0: entered promiscuous mode [ 365.863892][T14518] syzkaller0: entered allmulticast mode [ 366.133830][T14536] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2232'. [ 366.201599][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 366.228491][T14543] sctp: [Deprecated]: syz.1.2234 (pid 14543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.228491][T14543] Use struct sctp_sack_info instead [ 366.228792][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 366.268281][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 366.669912][T14565] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2240'. [ 366.778276][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2241'. [ 366.905731][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2242'. [ 367.689014][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2255'. [ 367.892431][T14628] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2258'. [ 367.970514][T14632] atomic_op ffff88807bbd6198 conn xmit_atomic 0000000000000000 [ 368.029600][T14636] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2262'. [ 368.940876][T14677] syzkaller0: entered promiscuous mode [ 368.979307][T14677] syzkaller0: entered allmulticast mode [ 369.228232][T14702] h: entered promiscuous mode [ 369.250814][ T5730] IPVS: starting estimator thread 0... [ 369.271047][ T5288] veth1_vlan: left promiscuous mode [ 369.366216][T14703] IPVS: using max 27 ests per chain, 64800 per kthread [ 370.531977][ T187] IPVS: starting estimator thread 0... [ 370.673983][T14761] IPVS: using max 25 ests per chain, 60000 per kthread [ 370.827177][T14777] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 371.113807][ T808] vxcan1 speed is unknown, defaulting to 1000 [ 371.236367][T14798] __nla_validate_parse: 11 callbacks suppressed [ 371.236387][T14798] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2302'. [ 371.308229][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2302'. [ 371.340084][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2302'. [ 371.420650][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 371.448620][T14814] netlink: 'syz.1.2305': attribute type 33 has an invalid length. [ 371.564359][T14813] sctp: [Deprecated]: syz.2.2307 (pid 14813) Use of int in max_burst socket option deprecated. [ 371.564359][T14813] Use struct sctp_assoc_value instead [ 371.599751][T14821] netlink: 516 bytes leftover after parsing attributes in process `syz.5.2311'. [ 371.698744][T14814] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 371.719115][T14814] bond10 (unregistering): Released all slaves [ 372.087522][T14841] syzkaller0: entered promiscuous mode [ 372.105427][T14841] syzkaller0: entered allmulticast mode [ 372.357301][T14856] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 372.371807][T14853] syzkaller0: entered promiscuous mode [ 372.398031][T14853] syzkaller0: entered allmulticast mode [ 372.519098][T14854] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 372.552157][T14870] IPv6: sit2: Disabled Multicast RS [ 372.631409][T14870] sit2: entered allmulticast mode [ 372.691354][T14858] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 372.768659][T14877] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.2326'. [ 372.813721][T14877] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.2326'. [ 372.841787][T14878] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2326'. [ 373.124326][T14897] netlink: 420 bytes leftover after parsing attributes in process `syz.5.2330'. [ 375.245347][T14881] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 375.256195][T14884] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 375.466929][T14905] netlink: 'syz.4.2335': attribute type 2 has an invalid length. [ 375.485416][T14910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2333'. [ 375.499993][T14910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.796904][T14930] syzkaller0: entered promiscuous mode [ 375.806088][T14930] syzkaller0: entered allmulticast mode [ 376.016167][T14935] can: request_module (can-proto-0) failed. [ 376.330980][T14958] xt_hashlimit: size too large, truncated to 1048576 [ 376.457145][T14959] __nla_validate_parse: 3 callbacks suppressed [ 376.457169][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2346'. [ 376.550919][T14959] veth0_macvtap: left promiscuous mode [ 376.708141][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 376.764427][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 376.896791][T14981] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 376.969352][T14986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2353'. [ 376.977536][T14985] netlink: 'syz.2.2352': attribute type 3 has an invalid length. [ 377.001296][T14985] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 377.014407][T14985] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2352'. [ 377.026195][T14988] nbd: socks must be embedded in a SOCK_ITEM attr [ 377.048961][T14989] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 377.059269][T14989] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2353'. [ 377.069462][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 377.076336][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 377.087356][T14981] bond0: entered promiscuous mode [ 377.098071][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.107518][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 377.130403][T14994] netlink: 'syz.6.2355': attribute type 4 has an invalid length. [ 377.278977][T14981] bond0: (slave bridge5): making interface the new active one [ 377.298342][T14981] bridge5: entered promiscuous mode [ 377.322269][T14981] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 377.539647][T15005] syzkaller1: entered allmulticast mode [ 377.583358][T15006] vcan0: entered promiscuous mode [ 377.596204][T15006] vcan0: entered allmulticast mode [ 377.879638][T15024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2362'. [ 377.935857][T15032] IPVS: Unknown mcast interface: syzkaller0 [ 377.989466][T15032] sctp: [Deprecated]: syz.1.2366 (pid 15032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.989466][T15032] Use struct sctp_sack_info instead [ 378.237006][T15050] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.298407][T15052] syzkaller0: entered promiscuous mode [ 378.318399][T15052] syzkaller0: entered allmulticast mode [ 378.391628][T15059] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.257466][T15102] openvswitch: netlink: Message has 12 unknown bytes. [ 379.292716][T15102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.565212][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.737799][T15109] team0: No ports can be present during mode change [ 379.953340][T15131] netlink: 'syz.1.2388': attribute type 6 has an invalid length. [ 379.972030][T15131] netlink: zone id is out of range [ 379.987107][T15131] netlink: set zone limit has 4 unknown bytes [ 380.045967][T15136] x_tables: duplicate underflow at hook 1 [ 380.191572][T15141] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 380.390807][T15141] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.680076][T15169] netlink: 'syz.5.2398': attribute type 1 has an invalid length. [ 380.939415][T15176] macvtap1: entered allmulticast mode [ 381.321556][T15213] netlink: 'syz.2.2415': attribute type 83 has an invalid length. [ 381.660252][T15239] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 381.689572][T15239] 8021q: adding VLAN 0 to HW filter on device bond12 [ 382.110898][T15265] netlink: 'syz.6.2425': attribute type 2 has an invalid length. [ 382.122891][T15265] netlink: 'syz.6.2425': attribute type 11 has an invalid length. [ 382.135267][T15265] __nla_validate_parse: 7 callbacks suppressed [ 382.135288][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2425'. [ 382.647215][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 382.655787][T15258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 382.664754][T15287] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 382.797036][T15294] netlink: 'syz.6.2430': attribute type 1 has an invalid length. [ 382.840723][T15294] bond1: entered promiscuous mode [ 382.847512][T15294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.860270][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2430'. [ 382.870421][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2430'. [ 382.907924][T15294] bond1: (slave bridge1): making interface the new active one [ 382.917250][T15294] bridge1: entered promiscuous mode [ 382.925879][T15294] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 383.242193][T15294] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.249787][T15294] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.451178][T15294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.520021][T15294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.691231][T15294] h: left promiscuous mode [ 383.705770][T15294] bond1: left promiscuous mode [ 383.710846][T15294] bridge1: left promiscuous mode [ 383.731027][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.751799][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.762673][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.773906][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.841496][T15306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2431'. [ 384.511907][T15225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.823788][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 385.095077][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'. [ 385.127052][T15343] team0 (unregistering): Port device team_slave_0 removed [ 385.152541][T15343] team0 (unregistering): Port device team_slave_1 removed [ 385.587846][T15358] sctp: [Deprecated]: syz.2.2445 (pid 15358) Use of int in maxseg socket option. [ 385.587846][T15358] Use struct sctp_assoc_value instead [ 385.735795][T15329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.001225][T15375] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2451'. [ 386.020766][T15371] vcan1: entered promiscuous mode [ 386.032612][T15371] vcan1: entered allmulticast mode [ 386.065985][T15369] tipc: Started in network mode [ 386.082771][T15369] tipc: Node identity be389af8568, cluster identity 4711 [ 386.103653][T15369] tipc: Enabled bearer , priority 0 [ 386.144807][T15369] syzkaller0: entered promiscuous mode [ 386.160556][T15369] syzkaller0: entered allmulticast mode [ 386.181845][T15377] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 386.258107][T15388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.305182][T15369] tipc: Resetting bearer [ 386.340973][T15384] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2453'. [ 386.377047][T15368] tipc: Resetting bearer [ 386.449392][T15399] netlink: 'syz.1.2457': attribute type 58 has an invalid length. [ 386.474422][T15399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2457'. [ 386.485221][T15368] tipc: Disabling bearer [ 386.948728][T15424] netlink: 'syz.1.2464': attribute type 10 has an invalid length. [ 386.984835][T15424] team0: entered allmulticast mode [ 386.999085][T15424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 387.179654][T15439] __nla_validate_parse: 2 callbacks suppressed [ 387.179675][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2469'. [ 387.529742][T15452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2472'. [ 387.580638][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2472'. [ 388.057179][T15486] bond0: Error: CAN devices cannot be enslaved [ 388.078715][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2479'. [ 388.080940][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'. [ 388.110903][T15486] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2480'. [ 388.208489][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 388.209490][T15495] netlink: 'syz.4.2481': attribute type 9 has an invalid length. [ 388.246532][ T30] audit: type=1107 audit(1784614396.691:4): pid=15491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-b(,AZI:u&ĀzNЂbek] Un;A;+ŮI3cF- rejected, failed to enable media [ 403.237808][T16042] netlink: 'syz.5.2624': attribute type 8 has an invalid length. [ 403.652068][T16059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.948176][T16079] netlink: 'syz.2.2637': attribute type 1 has an invalid length. [ 406.855424][T16079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.221519][T16117] syzkaller0: entered promiscuous mode [ 407.256028][T16117] syzkaller0: entered allmulticast mode [ 407.399996][T16132] __nla_validate_parse: 38 callbacks suppressed [ 407.400016][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2652'. [ 407.458440][T16128] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 407.493483][T16128] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2650'. [ 407.704034][T16146] ip6gre1: entered promiscuous mode [ 407.709865][T16146] ip6gre1: entered allmulticast mode [ 407.721734][T16143] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 407.755445][T16143] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2655'. [ 407.795102][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2659'. [ 407.910259][T16160] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 407.951944][T16160] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 408.176944][T16184] netlink: 'syz.6.2666': attribute type 4 has an invalid length. [ 408.430556][T16199] pim6reg: left allmulticast mode [ 409.210877][T16239] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2679'. [ 409.479982][T16253] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 409.507342][T16255] netlink: 'syz.4.2684': attribute type 1 has an invalid length. [ 409.579952][T16259] veth0_to_bond: left promiscuous mode [ 409.684118][T16261] netlink: 'syz.5.2686': attribute type 58 has an invalid length. [ 409.725169][T16261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2686'. [ 409.914583][T16268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.955812][T16268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.963387][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2692'. [ 410.227080][T16293] ip6gre2: entered allmulticast mode [ 410.519288][T16311] block nbd0: Unsupported socket: should be TCP or UNIX. [ 410.578815][T16313] openvswitch: netlink: Missing valid actions attribute. [ 410.609629][T16313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.681395][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2705'. [ 410.711555][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 410.996055][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2710'. [ 411.330158][T16353] netlink: 'syz.2.2716': attribute type 9 has an invalid length. [ 411.622204][T16365] netlink: 'syz.5.2720': attribute type 15 has an invalid length. [ 411.846810][T16378] netlink: 'syz.1.2724': attribute type 1 has an invalid length. [ 411.899820][T16383] netlink: 'syz.5.2727': attribute type 1 has an invalid length. [ 411.943615][T16378] bond10: entered promiscuous mode [ 411.951418][T16378] 8021q: adding VLAN 0 to HW filter on device bond10 [ 412.012491][T16383] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 412.345613][T16404] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.418930][T16404] bond3: (slave lo): Enslaving as an active interface with an up link [ 412.441828][T16404] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 412.466350][T13967] lo speed is unknown, defaulting to 1000 [ 412.474297][ T8477] lo speed is unknown, defaulting to 1000 [ 412.480072][ T8477] sy2: Port: 1 Link ACTIVE [ 412.836610][T16433] __nla_validate_parse: 2 callbacks suppressed [ 412.836631][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 413.057170][T16450] netlink: 'syz.1.2749': attribute type 1 has an invalid length. [ 413.065885][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 413.249725][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2752'. [ 413.265242][T16460] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2752'. [ 413.581952][T16478] netlink: 'syz.5.2758': attribute type 4 has an invalid length. [ 413.590046][T16481] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2759'. [ 441.005802][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.323160][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 472.501983][T16504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.739422][T16518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2767'. [ 472.836177][T16520] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2768'. [ 473.493748][T16556] netlink: 'syz.6.2779': attribute type 1 has an invalid length. [ 473.539203][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2779'. [ 473.869796][T16575] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2784'. [ 473.931208][T16577] openvswitch: netlink: Message has 4 unknown bytes. [ 473.981559][T16578] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2787'. [ 474.090469][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 474.102728][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 474.114442][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 474.131107][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 474.159479][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 474.271263][T16589] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2789'. [ 474.571040][T16605] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2792'. [ 474.705897][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'. [ 474.940473][T16618] netlink: 'syz.5.2795': attribute type 1 has an invalid length. [ 475.084194][T16629] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2798'. [ 475.094670][T16622] bond4: (slave veth0_to_bond): making interface the new active one [ 475.121157][T16629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2798'. [ 475.135342][T16622] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 475.231260][T16618] macvlan2: entered promiscuous mode [ 475.245975][T16618] macvlan2: entered allmulticast mode [ 475.265249][T16618] bond4: entered promiscuous mode [ 475.278695][T16618] veth0_to_bond: entered promiscuous mode [ 475.297500][T16618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 475.350605][T16618] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 475.459380][T16618] bond4: left promiscuous mode [ 475.485716][T16618] veth0_to_bond: left promiscuous mode [ 475.618836][T16582] wlan1 speed is unknown, defaulting to 1000 [ 475.672161][T16582] vxcan1 speed is unknown, defaulting to 1000 [ 476.283266][ T4943] Bluetooth: hci7: command tx timeout [ 476.314712][T16582] lo speed is unknown, defaulting to 1000 [ 476.762081][T16704] netlink: 'syz.5.2812': attribute type 5 has an invalid length. [ 477.123077][T16720] IPv6: NLM_F_REPLACE set, but no existing node found! [ 477.171727][T16722] xt_hashlimit: size too large, truncated to 1048576 [ 477.193569][T16725] netlink: 'syz.4.2818': attribute type 5 has an invalid length. [ 477.227608][T16723] xt_hashlimit: size too large, truncated to 1048576 [ 477.298980][T16725] geneve3: entered promiscuous mode [ 477.325640][T16725] geneve3: entered allmulticast mode [ 477.467609][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 477.522746][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 477.636247][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 477.676744][T16749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 477.976053][T16582] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.988411][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.998918][T16767] __nla_validate_parse: 6 callbacks suppressed [ 477.998939][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2822'. [ 478.004722][T16582] bridge_slave_0: entered allmulticast mode [ 478.027197][T16582] bridge_slave_0: entered promiscuous mode [ 478.050480][T16582] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.058209][T16582] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.069406][T16582] bridge_slave_1: entered allmulticast mode [ 478.104796][T16582] bridge_slave_1: entered promiscuous mode [ 478.274379][T16582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.288892][T16582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.355345][T16770] tcf_pedit_act: 7 callbacks suppressed [ 478.355430][T16770] tc action pedit 'at' offset -2147483647 out of bounds [ 478.376022][ T4943] Bluetooth: hci7: command tx timeout [ 478.503239][T16582] team0: Port device team_slave_0 added [ 478.521071][T16582] team0: Port device team_slave_1 added [ 478.668464][T16582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.684523][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.712647][T16582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.736079][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 478.739685][T16582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.771868][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.798936][T16582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.024484][T16582] hsr_slave_0: entered promiscuous mode [ 479.045410][T16582] hsr_slave_1: entered promiscuous mode [ 479.059992][T16582] debugfs: 'hsr0' already exists in 'hsr' [ 479.067715][T16582] Cannot create hsr debugfs directory [ 479.091777][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 479.399631][T16827] veth15: entered promiscuous mode [ 479.418122][T16827] veth15: entered allmulticast mode [ 479.519353][T16582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.531595][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2843'. [ 479.532220][T16582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.555102][T16582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 479.585215][T16831] netlink: 'syz.4.2844': attribute type 1 has an invalid length. [ 479.610348][T16831] 8021q: adding VLAN 0 to HW filter on device bond14 [ 479.628797][T16831] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 479.673710][T16831] 8021q: adding VLAN 0 to HW filter on device bond15 [ 479.684241][T16831] bond14: (slave bond15): Enslaving as an active interface with a down link [ 479.758400][T16582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.769976][T16582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.786728][T16582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 479.983943][T16849] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 480.158036][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2850'. [ 480.170609][T16582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.206940][T16582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.217902][T16582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 480.235620][T16862] veth1_to_bond: entered allmulticast mode [ 480.251329][T16862] veth1_to_bond: left allmulticast mode [ 480.262311][T16865] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2852'. [ 480.370724][T16582] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.391466][T16582] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.401745][T16582] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 480.443310][ T4943] Bluetooth: hci7: command tx timeout [ 480.457028][T16865] sctp: [Deprecated]: syz.6.2852 (pid 16865) Use of int in max_burst socket option deprecated. [ 480.457028][T16865] Use struct sctp_assoc_value instead [ 480.942091][T16899] raw_sendmsg: syz.4.2859 forgot to set AF_INET. Fix it! [ 481.130957][T16582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 481.176690][T16582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.197250][T16582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 481.231041][T16582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.265113][T16582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.299635][T16582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.332146][T16582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.377413][T16582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.508902][T16920] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 481.552166][T16920] bond2 (unregistering): Released all slaves [ 481.669758][T16943] nbd: must specify an index to disconnect [ 481.917014][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2870'. [ 481.929711][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2870'. [ 481.957814][T16745] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.957930][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2870'. [ 481.982404][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2870'. [ 481.994737][T16953] veth1_to_bridge: entered allmulticast mode [ 482.017476][T16953] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 482.020128][T16582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.060752][T16745] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.073550][T16745] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.117247][T16745] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.169393][T16582] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.226230][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.233564][T16745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.301638][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.308915][T16745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.523204][ T4943] Bluetooth: hci7: command tx timeout [ 483.280326][T17020] netlink: zone id is out of range [ 483.303271][T17020] netlink: zone id is out of range [ 483.315192][T17020] netlink: zone id is out of range [ 483.321860][T17020] netlink: zone id is out of range [ 483.334331][T17020] netlink: zone id is out of range [ 483.359235][T17020] netlink: zone id is out of range [ 483.373221][T17020] netlink: zone id is out of range [ 483.386086][T17020] netlink: zone id is out of range [ 483.400788][T17020] netlink: zone id is out of range [ 483.528313][T17033] __nla_validate_parse: 4 callbacks suppressed [ 483.528336][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2894'. [ 483.776186][T16582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.923539][T16582] veth0_vlan: entered promiscuous mode [ 483.968018][T16582] veth1_vlan: entered promiscuous mode [ 484.058970][T16582] veth0_macvtap: entered promiscuous mode [ 484.109378][T16582] veth1_macvtap: entered promiscuous mode [ 484.150679][T16582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.184693][T16582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.242656][T16751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.271629][T16751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.379492][T16751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.403874][T16751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.830256][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.859075][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.929529][T17095] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 485.000753][T16745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.023702][T16745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.311639][T17110] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2914'. [ 485.601052][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2917'. [ 485.648421][T17120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2918'. [ 485.663816][T17118] xt_hashlimit: overflow, try lower: 3/0 [ 485.666907][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.684717][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.697510][T17118] netlink: 'syz.4.2917': attribute type 64 has an invalid length. [ 485.699065][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.718250][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.728697][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.777502][T17118] netlink: 'syz.4.2917': attribute type 64 has an invalid length. [ 485.991344][T17120] syzkaller0: entered promiscuous mode [ 486.012347][T17120] syzkaller0: entered allmulticast mode [ 486.074161][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2922'. [ 486.094221][T17133] netlink: 'syz.5.2921': attribute type 83 has an invalid length. [ 486.150998][T17139] SET target dimension over the limit! [ 486.412941][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 486.428172][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 486.438699][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2924'. [ 487.097258][T10623] Bluetooth: hci7: command 0x0405 tx timeout [ 487.815042][T10623] Bluetooth: hci3: command tx timeout [ 489.029206][T17171] netlink: 'syz.5.2929': attribute type 14 has an invalid length. [ 489.044118][T17175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2931'. [ 489.056035][T17175] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2931'. [ 489.164709][T10623] Bluetooth: hci6: command 0x0406 tx timeout [ 489.361517][T17121] wlan1 speed is unknown, defaulting to 1000 [ 489.396277][T17121] vxcan1 speed is unknown, defaulting to 1000 [ 489.503300][T17195] x_tables: duplicate entry at hook 2 [ 489.526671][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'. [ 489.584022][T17199] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 489.679173][T17199] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 489.785307][T17212] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2943'. [ 489.882989][ T5635] Bluetooth: hci3: command tx timeout [ 490.027414][T17121] lo speed is unknown, defaulting to 1000 [ 490.139346][T17224] net_ratelimit: 395 callbacks suppressed [ 490.139522][T17224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.157400][T17223] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2948'. [ 490.269860][T17223] bond1: option all_slaves_active: invalid value (222) [ 490.272835][T17231] netlink: 'syz.6.2950': attribute type 21 has an invalid length. [ 490.294474][T17223] bond1 (unregistering): Released all slaves [ 490.297311][T17231] IPv6: NLM_F_CREATE should be specified when creating new route [ 490.706262][T17248] netlink: 'syz.5.2954': attribute type 1 has an invalid length. [ 490.781066][T17254] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002 [ 490.817927][T17250] bond5 (unregistering): Released all slaves [ 490.827509][T17256] tipc: Failed to remove unknown binding: 66,1,1/0:1312220184/1312220186 [ 490.917513][T17248] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 491.300671][T17271] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 491.340740][T17271] bond5 (unregistering): Released all slaves [ 491.434697][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.444084][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.451582][T17121] bridge_slave_0: entered allmulticast mode [ 491.470653][T17121] bridge_slave_0: entered promiscuous mode [ 491.506561][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.519032][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.532361][T17121] bridge_slave_1: entered allmulticast mode [ 491.544001][T17121] bridge_slave_1: entered promiscuous mode [ 491.694075][T17121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.728617][T17121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.854175][T17121] team0: Port device team_slave_0 added [ 491.891534][T17121] team0: Port device team_slave_1 added [ 491.926679][T17315] netlink: 550 bytes leftover after parsing attributes in process `syz.2.2971'. [ 491.963588][ T5635] Bluetooth: hci3: command tx timeout [ 491.998883][T17318] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2972'. [ 492.035898][T17121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.051001][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.082523][T17121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.114858][T17121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.121978][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.159836][T17121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.172704][T17322] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 492.259970][T17328] netlink: 'syz.6.2975': attribute type 1 has an invalid length. [ 492.454748][T17334] bond2: (slave bridge3): making interface the new active one [ 492.466768][T17334] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 492.484775][T17121] hsr_slave_0: entered promiscuous mode [ 492.492018][T17121] hsr_slave_1: entered promiscuous mode [ 492.499471][T17121] debugfs: 'hsr0' already exists in 'hsr' [ 492.506515][T17121] Cannot create hsr debugfs directory [ 492.618728][T17346] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2980'. [ 492.648465][T17346] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2980'. [ 492.691644][T17351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'. [ 492.740696][T17346] netlink: 'syz.6.2980': attribute type 10 has an invalid length. [ 492.777414][T17346] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 493.447049][T17381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.484363][ T31] INFO: task syz.3.1977:13558 blocked for more than 143 seconds. [ 493.507447][ T31] Not tainted syzkaller #0 [ 493.519373][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.531749][ T31] task:syz.3.1977 state:D stack:26720 pid:13558 tgid:13556 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 493.548704][ T31] Call Trace: [ 493.552200][ T31] [ 493.556167][ T31] __schedule+0x17d9/0x56c0 [ 493.561034][ T31] ? __lock_acquire+0x683/0x2cf0 [ 493.566981][ T31] ? __lock_acquire+0x683/0x2cf0 [ 493.572091][ T31] ? __pfx___schedule+0x10/0x10 [ 493.577292][ T31] ? schedule+0x90/0x2b0 [ 493.581594][ T31] schedule+0x164/0x2b0 [ 493.586145][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.591681][ T31] __mutex_lock+0x7bf/0x1550 [ 493.596472][ T31] ? __mutex_lock+0x5d4/0x1550 [ 493.601339][ T31] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 493.608129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.613819][ T31] ? net_generic+0x1e/0x240 [ 493.618425][ T31] ? net_generic+0x1e/0x240 [ 493.623029][ T31] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 493.629407][ T31] ? __kmalloc_noprof+0x375/0x720 [ 493.634653][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 493.640454][ T31] ? do_syscall_64+0x174/0x580 [ 493.645626][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.651770][ T31] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 493.658869][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 493.664711][ T31] ? rcu_is_watching+0x15/0xb0 [ 493.669567][ T31] ? trace_kmalloc+0x2a/0xf0 [ 493.674515][ T31] ? __kmalloc_noprof+0x396/0x720 [ 493.679597][ T31] ? __nla_parse+0x40/0x60 [ 493.684268][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 493.690857][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 493.697307][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 493.703215][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.709327][ T31] ? bpf_lsm_capable+0x9/0x20 [ 493.714484][ T31] ? security_capable+0x7e/0x2c0 [ 493.719575][ T31] genl_rcv_msg+0x614/0x7a0 [ 493.724907][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.730007][ T31] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 493.737129][ T31] netlink_rcv_skb+0x226/0x4a0 [ 493.741987][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.747120][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.752469][ T31] ? down_read+0x2be/0x330 [ 493.757044][ T31] genl_rcv+0x28/0x40 [ 493.761531][ T31] netlink_unicast+0x7bb/0x940 [ 493.766994][ T31] netlink_sendmsg+0x813/0xb40 [ 493.771822][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.777297][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.782343][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.787729][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 493.793152][ T31] ____sys_sendmsg+0x54e/0x850 [ 493.797975][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.803810][ T31] ? import_iovec+0x73/0xa0 [ 493.808479][ T31] ___sys_sendmsg+0x2a5/0x360 [ 493.813614][ T31] ? __lock_acquire+0x683/0x2cf0 [ 493.818624][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.824123][ T31] ? futex_wake+0x51b/0x5f0 [ 493.828716][ T31] ? __fget_files+0x2a/0x420 [ 493.833586][ T31] ? __fget_files+0x3a2/0x420 [ 493.838343][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 493.843465][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.849090][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.855733][ T31] do_syscall_64+0x174/0x580 [ 493.860575][ T31] ? trace_irq_disable+0x3b/0x140 [ 493.865808][ T31] ? clear_bhb_loop+0x40/0x90 [ 493.870522][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.876699][ T31] RIP: 0033:0x7f6f8439de99 [ 493.881201][ T31] RSP: 002b:00007f6f85219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.890082][ T31] RAX: ffffffffffffffda RBX: 00007f6f84625fa0 RCX: 00007f6f8439de99 [ 493.898140][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 493.906170][ T31] RBP: 00007f6f84433eaf R08: 0000000000000000 R09: 0000000000000000 [ 493.914437][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.922670][ T31] R13: 00007f6f84626038 R14: 00007f6f84625fa0 R15: 00007ffec0e1d388 [ 493.930891][ T31] [ 493.934091][ T31] [ 493.934091][ T31] Showing all locks held in the system: [ 493.941938][ T31] 1 lock held by khungtaskd/31: [ 493.947840][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 493.957963][ T31] 2 locks held by getty/5386: [ 493.962742][ T31] #0: ffff8880365d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.972658][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 493.983915][ T31] 2 locks held by syz.0.1577/12005: [ 493.989197][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.998293][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 494.008753][ T31] 2 locks held by syz.3.1977/13558: [ 494.014157][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.022629][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 494.033581][ T31] 7 locks held by syz-executor/17121: [ 494.038994][ T31] #0: ffff888036030450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 494.048334][ T5635] Bluetooth: hci3: command tx timeout [ 494.053819][ T31] #1: ffff88805602c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 494.063691][ T31] #2: ffff88802a370a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 494.074070][ T31] #3: ffffffff8f8a91c0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 494.084629][ T31] #4: ffff88801274d128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 494.095484][ T31] #5: ffff88801274c258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 494.105875][ T31] #6: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 494.115910][ T31] 2 locks held by syz.5.2983/17355: [ 494.121487][ T31] #0: ffff8880490e7540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 494.132395][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 494.143607][ T31] 2 locks held by syz.2.2986/17382: [ 494.148840][ T31] #0: ffff8880550d0240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 494.159163][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 494.170304][ T31] [ 494.190871][ T31] ============================================= [ 494.190871][ T31] [ 494.210975][ T31] NMI backtrace for cpu 1 [ 494.210996][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 494.211018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.211029][ T31] Call Trace: [ 494.211037][ T31] [ 494.211046][ T31] dump_stack_lvl+0xe8/0x150 [ 494.211119][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 494.211218][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.211261][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 494.211290][ T31] sys_info+0x135/0x170 [ 494.211334][ T31] watchdog+0xfd7/0x1030 [ 494.211366][ T31] ? watchdog+0x1c7/0x1030 [ 494.211397][ T31] kthread+0x388/0x470 [ 494.211442][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.211465][ T31] ? __pfx_kthread+0x10/0x10 [ 494.211496][ T31] ret_from_fork+0x514/0xb70 [ 494.211548][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.211577][ T31] ? __switch_to+0xc89/0x1420 [ 494.211605][ T31] ? __pfx_kthread+0x10/0x10 [ 494.211633][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.211668][ T31] [ 494.211677][ T31] Sending NMI from CPU 1 to CPUs 0: [ 494.323868][ C0] NMI backtrace for cpu 0 [ 494.323897][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 494.323915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.323925][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 494.323966][ C0] Code: ec 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ba 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 494.323980][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 494.323996][ C0] RAX: 00000000001c73f9 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 494.324008][ C0] RDX: 0000000000000001 RSI: ffffffff8e22b741 RDI: ffffffff8c4bda80 [ 494.324019][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 494.324030][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 494.324041][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 494.324052][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 494.324065][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.324077][ C0] CR2: 00007f69aeded2f8 CR3: 000000007bb92000 CR4: 00000000003526f0 [ 494.324092][ C0] Call Trace: [ 494.324100][ C0] [ 494.324106][ C0] default_idle+0x9/0x20 [ 494.324122][ C0] default_idle_call+0x72/0xb0 [ 494.324138][ C0] do_idle+0x2e0/0x540 [ 494.324183][ C0] ? __pfx_do_idle+0x10/0x10 [ 494.324207][ C0] cpu_startup_entry+0x43/0x60 [ 494.324227][ C0] rest_init+0x2de/0x300 [ 494.324246][ C0] start_kernel+0x392/0x3e0 [ 494.324358][ C0] x86_64_start_reservations+0x24/0x30 [ 494.324410][ C0] x86_64_start_kernel+0x137/0x1b0 [ 494.324431][ C0] common_startup_64+0x13e/0x157 [ 494.324457][ C0] [ 494.507950][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 494.514862][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 494.524007][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.534176][ T31] Call Trace: [ 494.537474][ T31] [ 494.540591][ T31] vpanic+0x56c/0xa60 [ 494.544600][ T31] ? __pfx___schedule+0x10/0x10 [ 494.549469][ T31] ? __pfx_vpanic+0x10/0x10 [ 494.554093][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 494.560306][ T31] panic+0xc5/0xd0 [ 494.564073][ T31] ? __pfx_panic+0x10/0x10 [ 494.568527][ T31] ? preempt_schedule_common+0x82/0xd0 [ 494.574016][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 494.579405][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 494.585579][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 494.591749][ T31] watchdog+0x1030/0x1030 [ 494.596096][ T31] ? watchdog+0x1c7/0x1030 [ 494.600535][ T31] kthread+0x388/0x470 [ 494.604621][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.609313][ T31] ? __pfx_kthread+0x10/0x10 [ 494.613935][ T31] ret_from_fork+0x514/0xb70 [ 494.618558][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.623727][ T31] ? __switch_to+0xc89/0x1420 [ 494.628531][ T31] ? __pfx_kthread+0x10/0x10 [ 494.633158][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.637964][ T31] [ 494.641274][ T31] Kernel Offset: disabled [ 494.645619][ T31] Rebooting in 86400 seconds..