last executing test programs: 2m57.362707568s ago: executing program 2 (id=1085): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$packet(0x11, 0x7, 0x300) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) unshare(0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) 2m57.311478269s ago: executing program 2 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00404000000062cf004ab77f8437"}}}}}, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00404000000062cf004ab77f8437"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fffc6"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180119920e6f82adf0df930000000000000000000000000000007110b1000000000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180119920e6f82adf0df930000000000000000000000000000007110b1000000000095000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0x3d, 0x0, &(0x7f0000000040)="b9ff0307680426f6fec88c980352389ef385e71e460d4b78ff1e1928f2c70b25c6192fc5b625b9986d0000000010bbc8186bbe803b8e94533685dacd96", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x1c7}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0xfff7, 0x0, 0x8008, 0x8001, 0x40000008, 0xbd8b, 0x101, 0x99, r7}, &(0x7f0000000100)=0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)={0x38, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x76, 0x0, 0x1, [@nested={0x18, 0x51, 0x0, 0x1, [@generic='!', @typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @generic="59933479b1b1fff5e5370d"]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x30, 0x0, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000040)="e93013622d171e556823a9ad9ae2", &(0x7f0000000080)=""/90, 0xe6ad6461a800549e}, 0x20) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$PPPIOCGIDLE(r9, 0x8010743f, &(0x7f0000000180)) (async) ioctl$PPPIOCGIDLE(r9, 0x8010743f, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000300)=0x84) 2m57.154060527s ago: executing program 2 (id=1090): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r0, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0x57, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m56.687927719s ago: executing program 2 (id=1095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) shutdown(r1, 0x0) (async) shutdown(r0, 0x1) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r4, 0x0, 0xffffffff004) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r3, 0xf, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) (async) pipe(0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) close(0x3) 2m56.60638001s ago: executing program 2 (id=1097): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000060601080000000000000000010000050900020073797a3000000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x60048100}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000600000914000200000000000000000000210700000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000010000"], 0x4c}, 0x2, 0x34005}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002b000701feffff0000000000037c00000c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) close(0x3) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0) close(0x3) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$netlink(r11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x10, 0x2653, 0x6}, &(0x7f00000001c0)=0x18) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r12, 0x2d322000) 2m56.158047724s ago: executing program 2 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000019000100000000000000000080200000d9de862fe43e4527080001007f00fcff08000400", @ANYRESOCT=r3, @ANYBLOB], 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r7 = socket(0x18, 0x2, 0x2) connect$unix(r7, &(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r8 = getuid() sendmsg$nl_generic(r7, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3f8, 0x32, 0x200, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x10e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x7}, @nested={0x2ba, 0xcf, 0x0, 0x1, [@generic="20fb635c7d6382b532417204efce18ac44e72ad9c5b047035b5c0284b371521a0c66156c78b58e4e91ea5c2dbd0a336acce65983d8266b87cf9a5aef18083622c27b1629c0cd6014e7a657816c4c57251a123bbb7baa589411debf4b763dccacbadf7656161eed1e2e5637fcba697466c7c950edca9f12245b26617f9091989c1ac69ef367f795f6cf5ae3a327457ed7950c46ac3e07d855c5de89e6643630e1cfa2dca9076d3edb37a5f1de0caf4cc9cd7d18d87a0e20ac5fae9aae7c1efe0df20532b8fef9f08b451c59de0da305230c48483a01e56540ee63f841473bc8a60cff7ddcf10d3be5b42eed9d61368ebbade532d122a2acf7ac", @nested={0x4, 0x135}, @generic="9b2bfca5e77cc0a8b7021f53df48eaa27554b73cde1300ada556085032ffe6707d0e606c26c519fc505395b3420b04a9fca95a932d9929178fcda3b11f5d043498d24edde03a0a6ca0b5c7e963fee597a42d77b812117aad4ddd7088bd0f784a5dc6692051dc97aa55738f1b3d953baa70744b411b9370cbdf65ef9baf54b82ee091088d144aa827c1ca77e31b413fd1676c795cc45541da8019496977e2a64c64bd44c0aab00ee50768277d5cbb07e349fbaf3479b0663d424e143a43c851", @generic="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"]}, @typed={0x8, 0x10c, 0x0, 0x0, @uid}, @nested={0xfb, 0xff, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x10}, @generic="1351350e5d1b715232f8b6460c6fc0fc226ad1b19297b692793786df7046f3f5049ba98def2a5fcbd21f6432a41bddf648bc956a553cc630c35c3ebe31807553f6d966ab5d9332376c2e236823c074da63a85527a8cf73e44da5f4dbb1cc7d716fd705eaf9dc0f851490733083d7bd05144dfdbeaf85ea62e2f89a49f33ccead254930be009d3d5a161cb08c5f477253958b4199f02d71d95d6ca623bc14f6048d0c9d8799f394106da98df373b3cd5d0724e258deef766f24e9949d3deac54a96eddfa3cb444e21dd84320f1d4a694cba6d79a0fff94093a5c6b9e13c48f50069341ef40fa44f9880d277"]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x3, 0xfffff000}, {0x6, 0x59, 0xff, 0x400004}]}) ioctl$sock_ifreq(r2, 0x8916, &(0x7f0000000300)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000140)="c85fa018289d1455e927bc6fc41ccbf1202870175d4caaa392a1c7a66b957958"}) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @struct={0x0, 0x3, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x3, 0x8000}, {0xc, 0x0, 0xfffffff8}, {0xb, 0x4, 0x10001}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000002500)=""/4096, 0x5c, 0x1000, 0x1, 0x8, 0x10000, @value=r2}, 0x28) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000540)={'hsr0\x00', @random="67f22e877316"}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES16=r4, @ANYRES64=r6, @ANYRES16=r9, @ANYRES16=r5], 0xfdef) 2m55.903852768s ago: executing program 32 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000019000100000000000000000080200000d9de862fe43e4527080001007f00fcff08000400", @ANYRESOCT=r3, @ANYBLOB], 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r7 = socket(0x18, 0x2, 0x2) connect$unix(r7, &(0x7f0000002740)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r8 = getuid() sendmsg$nl_generic(r7, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3f8, 0x32, 0x200, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x10e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x7}, @nested={0x2ba, 0xcf, 0x0, 0x1, [@generic="20fb635c7d6382b532417204efce18ac44e72ad9c5b047035b5c0284b371521a0c66156c78b58e4e91ea5c2dbd0a336acce65983d8266b87cf9a5aef18083622c27b1629c0cd6014e7a657816c4c57251a123bbb7baa589411debf4b763dccacbadf7656161eed1e2e5637fcba697466c7c950edca9f12245b26617f9091989c1ac69ef367f795f6cf5ae3a327457ed7950c46ac3e07d855c5de89e6643630e1cfa2dca9076d3edb37a5f1de0caf4cc9cd7d18d87a0e20ac5fae9aae7c1efe0df20532b8fef9f08b451c59de0da305230c48483a01e56540ee63f841473bc8a60cff7ddcf10d3be5b42eed9d61368ebbade532d122a2acf7ac", @nested={0x4, 0x135}, @generic="9b2bfca5e77cc0a8b7021f53df48eaa27554b73cde1300ada556085032ffe6707d0e606c26c519fc505395b3420b04a9fca95a932d9929178fcda3b11f5d043498d24edde03a0a6ca0b5c7e963fee597a42d77b812117aad4ddd7088bd0f784a5dc6692051dc97aa55738f1b3d953baa70744b411b9370cbdf65ef9baf54b82ee091088d144aa827c1ca77e31b413fd1676c795cc45541da8019496977e2a64c64bd44c0aab00ee50768277d5cbb07e349fbaf3479b0663d424e143a43c851", @generic="72cc5751ec8381f097f734409cf328b5f9130426d89f5edd5cb959235babdd44fd5a9e170301771f545d376b47efb46e605602aecea784b4e0ddcbfe4f139c73d022347399a8a07405cde1765568afe742ca7f4c243bbf89d72931beb69c07e4c4532319741f24c4df62cc23458f9ec7ebc8492704768986fb514680147c2d6caa324acfff24cb8b4bcaeef2315174c9f0892a50250c66c0b02a45e062684dd76feabd01df935a91c59b6283bfbf4db9226ba5044deac462daa588b64ac9f8025ea86fd99ea336ac4c481e887b23b6af2c627c2c52df4983468e0ddb0fa0e64e12d1dd31a299ff9b2c8525f28cfee1759b030b20eeda91c2479d"]}, @typed={0x8, 0x10c, 0x0, 0x0, @uid}, @nested={0xfb, 0xff, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x10}, @generic="1351350e5d1b715232f8b6460c6fc0fc226ad1b19297b692793786df7046f3f5049ba98def2a5fcbd21f6432a41bddf648bc956a553cc630c35c3ebe31807553f6d966ab5d9332376c2e236823c074da63a85527a8cf73e44da5f4dbb1cc7d716fd705eaf9dc0f851490733083d7bd05144dfdbeaf85ea62e2f89a49f33ccead254930be009d3d5a161cb08c5f477253958b4199f02d71d95d6ca623bc14f6048d0c9d8799f394106da98df373b3cd5d0724e258deef766f24e9949d3deac54a96eddfa3cb444e21dd84320f1d4a694cba6d79a0fff94093a5c6b9e13c48f50069341ef40fa44f9880d277"]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x3, 0xfffff000}, {0x6, 0x59, 0xff, 0x400004}]}) ioctl$sock_ifreq(r2, 0x8916, &(0x7f0000000300)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000140)="c85fa018289d1455e927bc6fc41ccbf1202870175d4caaa392a1c7a66b957958"}) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @struct={0x0, 0x3, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x3, 0x8000}, {0xc, 0x0, 0xfffffff8}, {0xb, 0x4, 0x10001}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000002500)=""/4096, 0x5c, 0x1000, 0x1, 0x8, 0x10000, @value=r2}, 0x28) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000540)={'hsr0\x00', @random="67f22e877316"}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES16=r4, @ANYRES64=r6, @ANYRES16=r9, @ANYRES16=r5], 0xfdef) 2m30.632166609s ago: executing program 4 (id=1333): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x401, 0x5, 0x3, 0xfffffffffffffff2, 0x6, 0x6, 0x6, 0x10001}, &(0x7f00000000c0)={0x5, 0xfffffffffffffffa, 0x0, 0xb870, 0x9, 0x39, 0x4, 0x80}, &(0x7f0000000100)={0x8, 0x3, 0x8000000000000000, 0xda, 0x2c6, 0xa6b7, 0x10000, 0xa}, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7fff]}, 0x8}) ppoll(&(0x7f0000000240)=[{r0, 0x80}, {r0, 0x1100}, {r0, 0x10}], 0x3, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0xc]}, 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000340)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x6, 0x100}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000440)={0x2, 0x2, 0x10202, 0xfffffffb, 0x6, 0x8, 0x1, 0x358f, r6}, 0x20) r7 = accept$inet(r5, 0x0, &(0x7f0000000480)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ppoll(&(0x7f00000004c0)=[{r7, 0x3054}, {r3, 0x1000}, {r8, 0x8002}, {r5, 0x9005}], 0x4, &(0x7f0000000540)={r9, r10+10000000}, &(0x7f0000000580)={[0x8]}, 0x8) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r11, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000000) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000840)={0x1, 0x1, 0x8, r12, 0x7f}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r13, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x844) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r14, 0x588, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7fff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffffc}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001440)={0xa58, r15, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r16}, {0x4}}, {{0x8, 0x1, r17}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2400, 0x9c, 0x2, 0x833}, {0x81, 0xff, 0x1, 0x7}, {0xe, 0x8, 0x7, 0xea7}, {0x4, 0x1, 0x5, 0xfffffffd}, {0xb, 0x1, 0x6, 0xc174}, {0x7, 0x40, 0xd9, 0x1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4bcc}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2c854356}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x50}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa0000}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x4, 0x7, 0x2}, {0x8001, 0x2, 0xf2, 0xca}, {0x8, 0xf8, 0x8}, {0x6, 0x5, 0x7, 0xca}, {0xc0, 0x35, 0x2, 0x9}, {0x6, 0x12, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62ced260}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0xa58}, 0x1, 0x0, 0x0, 0xc040}, 0x1) 2m29.140976083s ago: executing program 4 (id=1343): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) 2m28.737648183s ago: executing program 4 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) splice(r1, 0x0, r4, 0x0, 0x2, 0xe) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25OPTRT(r7, 0x89e7, &(0x7f0000000c00)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, 0x44}) sendmmsg$inet6(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x78}}], 0x2, 0x4040005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r9, &(0x7f0000000280), 0x0}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x24060400) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000300)={0x7812002bfa741f54}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2m28.569873732s ago: executing program 4 (id=1350): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x92b001, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0x4a, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r9, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m28.169094917s ago: executing program 4 (id=1351): unshare(0x22020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getpeername$ax25(r1, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @netrom, @bcast, @null, @netrom, @netrom, @rose, @rose]}, &(0x7f00000000c0)=0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 2m27.647591652s ago: executing program 4 (id=1355): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x80, 0x3eeb}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x60}}, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x80, 0x3eeb}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x60}}, 0x0) (async) 2m27.356164096s ago: executing program 33 (id=1355): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x80, 0x3eeb}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x60}}, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x80, 0x3eeb}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x60}}, 0x0) (async) 12.075503039s ago: executing program 0 (id=2908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) close(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40000) (async) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x20000000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) (async) setsockopt(r6, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be", 0x40) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) (async) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 10.422835053s ago: executing program 0 (id=2912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200640, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0xcc}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req={0x7ff, 0x3, 0x2, 0xffff8001}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x30, 0x7, 0x0, 0xfffff02c}, {0x6}]}, 0x10) (async) r10 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0xb, 0xfff4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) 10.086243193s ago: executing program 0 (id=2915): unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7504759593ab83b030393c5aa275954a32804caf725a4fa8"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r0, &(0x7f0000000000)=""/112, 0x70, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) 9.638134281s ago: executing program 0 (id=2917): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0x3) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x7f, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 9.450252999s ago: executing program 0 (id=2918): r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) (async, rerun: 32) r2 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) (async, rerun: 64) listen(r2, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) (async, rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 64) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xa0028000}, 0x38) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) (async) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2, 0x24}, {0x1, 0x2, 0x9, 0xfffffff6}, {0x4, 0x10, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@delchain={0x181c, 0x65, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x10}, {0x9, 0xfff2}, {0xb, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xdb}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x99, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @filter_kind_options=@f_matchall={{0xd}, {0x17c8, 0x2, [@TCA_MATCHALL_ACT={0x17c4, 0x2, [@m_xt={0x10b8, 0x11, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x4e, 0x6, {0x2, 'mangle\x00', 0x3e, 0x8, "e1da7918e43ba1f25b52e02f55a10a38db21372fa0a5a051b54941f4456aa5baea30cca2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_INDEX={0x8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0xe8, 0x11, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x7, 0x9, 0xc0}, @local, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0xffffffffffffffff, 0x5a, 0x4}, @empty, @multicast2, 0xffffffff, 0x1}}]}, {0x6d, 0x6, "98d764973437588b40b151ce043477e67d336d19c1d75195ad14a32783dc1d75845a2b24330b29a9226ce099f33f537be60fd3d8e90410efc371c892b23cac8655284fbdfedf38743aa21c13ec4c0d9d558975f5997fc16974053d6f18fb95cd73cd232f4205e1c6d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x94, 0xd, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x18aa8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x1a, 0x6, "5ee57aada1720e0cbccf9d7929daa10440c5ac76f57c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x170, 0x10, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x17, 0x1, {{0x9, 0x7, 0x10000000, 0xfffffff8, 0x7900}, @multicast1, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x4, 0xbee, 0x10001}, @empty, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x8, 0x3, 0x8, 0x3571}, @broadcast, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x1ff, 0x5, 0x80, 0xfffffffe}, @loopback, @local, 0xffffff00, 0x1}}]}, {0xa8, 0x6, "1df5c8c8eb1ce2e8104575195bac69b93ce701950ffedbaac71cfff86d6c1d221f95b1a91f0eef3d76064e671327d0af8e64327ff505575d5d9425249354df2ec4c6598038e8ebb8ba79d18e955cbca22df1d819418dd1208d850be6fd1a377c36c5c8e288ada0bd50e48e8d309814becb04a47f4cdafef830426437b962e6bfada93d0c9b520e6c7cfc4b436524534772cb23e85834cf92f8240ec8ebcf6574e53a2e88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xf8, 0x3, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x20000000, 0x9000, 0x1}, 0x7}}]}, {0xac, 0x6, "0387b4ec9145abad2ee5c71f0a2ec0205315c1c696a48d0eab168a87fa900f4bb815af4fa7d60dad282dd86b9f2ed62f17d73a8e2c8b2fe9c4321ca471415243e626dc59c6248cfb0df6f036653270881472942ed6902f740f0a5d153bfd94e9de06fafa2f894baca9912cf930a19b1d017805b77f891fcc78a124fde034c708560bbb9b4c7eeef1ab836df036798d20ef745306b206684fb68340ea142632860ba892c68e8c7beb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x134, 0x6, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xf6, 0x6, "4d53ce5ca8f90375891390988202bef39bbb7405bd78e5822255252a8e90bae7d0d5aca796194f7e18febea44a00d0cee561c771f98cc87d24814383fbb113e6fe2d1e8c6afc82daa4f0ebdbdec8474517d10c92c489cd17f927f7b8c9ccb0c2aadac1a90c3fee0b06e79c479c2730892f6029cd5fb3694fc1711143d0da47344ab7b1760ca72ecdd7409bc50b58b032c32d67bf572b3617d27589962241146c298cd7056fa0f18706128039c63d40ca07e85184d182c95641fb67a852f25544accc3edd8bc33d07c200f77caf4e85f365e2d882b181a6d208d2ddddec9264c40174e69390c56e4637f940af1f9cb9ec1135"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x98, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xb}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7f, 0x5, 0x1, 0x1, 0xad3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x33, 0x6, "744e6c1f39c110ad67ba3fc6e8a0d6055e06b5aad0696eeb30571746c5522565a11e2133284f3a440ec5a9d87d7558"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x98, 0xe, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0x2f, 0x6, "0e06643739171789f7e6612fb1891e77b42c4de99cadd52b218544f54dc0835d1415a952c339959640140a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xc0, 0x4, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}]}, {0x8b, 0x6, "b20392f39d9dbcb831b1b8d168d04da70fda8547a9c36b7b7af549e2937317af85bc3deadbcf92691f8d98d7ebffd811e51ed06eb6186b815f58ad6d7b200b746980279c505bf9dcdf88e673bced72f52d436fb0fad581ada130a8f05b06af23fcc78156c00e615b1ba9e81be1e2cf011d9be95eb36b24bc4404161271fb64ae080b4340d8702a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x181c}}, 0x0) 9.243908567s ago: executing program 0 (id=2920): readv(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 8.887351622s ago: executing program 5 (id=2922): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x5}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) recvmsg$unix(r3, &(0x7f00000007c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000140)=""/238, 0xee}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000540)=""/2, 0x2}], 0x8}, 0x2080) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9fd}, 0x94) 8.411220894s ago: executing program 1 (id=2924): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0), 0x0, 0x9200000000000000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078ef00000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000020010000000000000000000000000002000000006c0000000200000064010101000000000000000000000000000000000400000000000000020000000800ddde841cf1d2819c0000ff01000000000000000000000000000100000000330000000000000000000000000000000000ffff0a"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3e}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004891}, 0xc0) 7.663765141s ago: executing program 5 (id=2926): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x84) r2 = accept4(r0, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, &(0x7f0000000280)=0x80, 0x80000) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f00000002c0)=0xc) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000400)={@null, @bcast, @null, 0x63, 0x7b1, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r5, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffff00000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040801) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb8, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "8e9b4048253d2c3d8248a924c505fd1cd0c7edd38f1cf31606dcfed5"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x183fba95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x41}, 0x1) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@default, @bcast, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_80211_join_ibss(&(0x7f0000000880)='wlan0\x00', &(0x7f00000008c0)=@random="496e24fd07d2aeeb6b64706b1016967e19bf29277fc9fa1386", 0x19, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r6, 0x8, 0x8000, 0x8, 0x5, {{0x14, 0x4, 0x1, 0x9, 0x50, 0x64, 0x0, 0x5, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x32, 0x3, 0x2, [{@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x100}, {@multicast2, 0x7}, {@multicast2}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x2}]}, @generic={0x82, 0x8, "7848df466a0a"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', r8, 0x2f, 0x8, 0x5, 0xed8, 0x59, @local, @mcast1, 0x7, 0x80, 0x8, 0x4}}) write$6lowpan_enable(r0, &(0x7f0000000a80)='0', 0x1) r9 = socket(0x1a, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@ipv6_deladdrlabel={0x58, 0x49, 0x0, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x1f, 0x0, r8, 0xfffffff7}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x4008011) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r9, 0x53bd3000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000c80)={0x9, 0x80}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x54, r10, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004001) 7.442443628s ago: executing program 5 (id=2927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x54}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000000600)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="2fefc98e1500c4c12d549443dfff59a932a59dd7465ab16141504ff53dc2c428f068c310", 0x24}, {&(0x7f0000000340)="10b780fb65b004d2b2818828a8a88218d8ce8be958f974ca6ef4ebbf41db72e115feac8e9633e391af41e4fa80b5b61849303f69d0e6d8f313980ec3938689e9693a9d76e84fbc3e119ada22d524cc2bd83382de56d2262b6f8a41b5248ae50e16b7daee61d096a87f61b64e1ae77fe1b69909197013764c0914a20b0dea9b396af9dce8f141e719f78076a879ca98d4d9d47da2552d85e4ca69f3c80985259c006eb229c66861e5be195c97bfd0e2921d0aea4c00b6dcc31f1e262d9223444ad646d3eb7148fd97bbe7a8e551d147fb009b6b882f", 0xd5}, {&(0x7f0000000500)="6aa248644b3e2cde1c8ad6f713ba0c8ccb47d19423ef0e747036fc72da72955586b25bdd63ce6e5f8b8986aef584d875ffd686fb492292e39d628d93fb2819582fe5d8dec70a6dd671b1823d3ab259489a5dcf8593d9d00ce98a1331efb53706b496ff8f00fcee9dad01", 0x6a}, {&(0x7f0000000580)="035b1d0debabf90ede820dd71e25421841067a054d672017f1e66a665d00e99ffe76687cefd66474215bbfd53f45e53fd72742f2b5190982ba53859d8579f8d2603075dae92a28ed239261116fd36830645e439a53431301c525898fac5d3d0813b34ba4813b828d81bf0378b084552d2eb3be706636414e", 0x78}], 0x4, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x0) 6.117051865s ago: executing program 5 (id=2928): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000cc0)=0x4, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0xe}], 0x1}, 0x4044) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007", @ANYRES64=r0], 0x30}}], 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 5.940138447s ago: executing program 5 (id=2930): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x8e, 0x0, 0x30, @private0, @empty, 0x7800, 0x1, 0x1, 0xffffffff}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000006c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000340), &(0x7f00000003c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@rand_addr=0x64010101, @in=@local, 0x4e21, 0xff, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, r3, r4}, {0x7fffffff, 0x7, 0x2, 0x3, 0xfffffffffffffff8, 0x10000, 0xffffffffffffff91, 0x3}, {0xfffffffffffffffc, 0x1, 0x5, 0x8001}, 0x10000, 0x6e6bb5, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x4, 0x3, 0x0, 0xbdc, 0xffffffff, 0x400}}, 0xe8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000200000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 5.005906457s ago: executing program 5 (id=2933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x3, 0x7f, {{0x30, 0x4, 0x2, 0x3e, 0xc0, 0x65, 0x0, 0x18, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@end, @ssrr={0x89, 0xb, 0xa4, [@empty, @loopback]}, @cipso={0x86, 0x1d, 0x2, [{0x5, 0xf, "795cbc6581c915c951e90823c2"}, {0x0, 0x8, "f902ba134855"}]}, @generic={0x83, 0x11, "2a4d62750fe97ca4287df0c3ddfc5e"}, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x3, [{0x7, 0x4, 'i<'}, {0x1, 0xe, "fba59d17576216ff60ac0854"}, {0x6, 0x4, "ee27"}, {0x6, 0xf, "e44cca510d63b2116560e5a7a4"}, {0x2, 0x6, "79b516b8"}]}, @ssrr={0x89, 0x13, 0x4a, [@local, @broadcast, @broadcast, @local]}, @lsrr={0x83, 0xb, 0x65, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x8, [{@local, 0x1}, {@private=0xa010102, 0x8}, {@multicast1, 0x6}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0xd8, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xc4, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff0000, 0x1, 0x3, 0x2, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x7fff, 0x5, 0x8, 0xd80}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x0, 0x9ec1, 0xffff}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xd8}}, 0x0) unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff04) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000080)="b2", 0x1, 0x24008811, &(0x7f0000000040)={0xa, 0x1, 0x41, @private2, 0xfffffffe}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000010c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-x86\x00'}, 0xfffffffffffffcb3) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x2}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r1], 0xe0}, 0x1, 0x0, 0x0, 0x4011}, 0x40488d5) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 3.127327909s ago: executing program 3 (id=2942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000004c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x2f, 0x9b, 0xb9, 0x7aa, 0x48, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x7, 0xbfe2d92660d54224, 0x9, 0x5}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x1c, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0xc2, &(0x7f0000000680)=""/194, 0x40f00, 0x0, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000840)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x7, 0x1b0, 0xc3b}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000900)=[r4, r4, r4, r10, r4, r4, r4], &(0x7f0000000940)=[{0x2, 0x1, 0xc, 0x2}, {0x5, 0x3, 0x8, 0x1}, {0x1, 0x2, 0x0, 0xc}, {0x0, 0x5, 0xd, 0xc}, {0x0, 0x3, 0xa, 0x3}, {0x3, 0x1, 0x3, 0x1}, {0x0, 0x2, 0x3, 0x8}, {0x3, 0x1, 0x1, 0xa}], 0x10, 0x2}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @multicast, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xab7}, @TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x7, 0x7ff, 0x946, 0x10}, {0x6, 0x2, 0x0, 0x5dc, 0x3, 0xfffdfff8}, 0xffff, 0x3, 0x17cf}}, @TCA_TBF_BURST={0x8, 0x6, 0xffffff01}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r12, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1, 0x5, @l2={'ib', 0x3a, 'pim6reg0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 2.031953758s ago: executing program 1 (id=2943): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6", 0x38, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48010000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000a08000240000000000900010073797a30000000000900020073797a3200000000eb0007"], 0x170}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970007b83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="1e"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2.031219697s ago: executing program 6 (id=2944): syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)=ANY=[@ANYBLOB='.']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a96460014060000000000000000000000000000000000fec0"], 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth0_to_hsr\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) r3 = socket$inet6(0xa, 0x2, 0x35) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 1.911550124s ago: executing program 3 (id=2945): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x29, 0x0, 0x5}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4009, 0x200, 0x1, 0xa}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3e, 0x10001, 0xfffff8c2}}) 1.751181495s ago: executing program 3 (id=2946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff030400007110bd00000000002c27c0fffcffffff95"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.639879929s ago: executing program 6 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @loopback}, &(0x7f0000000100)=0xc) unshare(0x20000400) bpf$PROG_LOAD(0x25, 0x0, 0x0) (async) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8821}, 0x4000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.575544191s ago: executing program 3 (id=2948): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ce090000000000090000000000"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 1.517144316s ago: executing program 6 (id=2949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000020a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a30"], 0x13a8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @remote, 0x4}, @llc={0x1a, 0x30a, 0xff, 0x3, 0x40, 0x6, @broadcast}, @sco, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x2}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800010067"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 1.387954407s ago: executing program 3 (id=2950): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3b2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) getsockopt$inet6_mreq(r1, 0x29, 0xf993cb42bd30d2b0, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000200)=0x14) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r6, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8, '\x00', r5, r6, 0x4, 0x3, 0x4}, 0x50) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.28328833s ago: executing program 1 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="53539e00f46ebd5cdf1231243d589635f8dc2fa49025e5bd44b9ca54c0217b9d5690023c20bb5049de115e66d6713cc71b9ab4662e58753060c690ad82f184db079624ad21eb53ded78fa603344e3bf0d8c9bbf95111e128390e1808fa1e89ae62c8fefa5820d5c0c4c49c659c3f537465a451b48c7f6b43e22c13db7a12c638fde8366d85b2d079a2f11208d7eaae60899420aa9efda8a49e2158babcd9cf117e7bf7741340122078832b783cc4577ae1a302dd660aaefba0d2c11e88a06b3593c512a36aa322d34d223559d30492b1f8bd82f275772a40f807f86c82bbbaa31a06496afafaf50a46c42407d05a55", @ANYBLOB="3b71765a5c2399a5e1f01bf85880ccfedb46204d7d7b19c34994982300bfaf386dbfa164a9731dd6e4ac30e5e88db25bdcf84d150149f26a81732987a2", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r1], &(0x7f00000003c0)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x4c, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e1", 0x12}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(r5, &(0x7f0000003740), 0x0, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @loopback}, 0x1, 0x2, 0x1, 0x2}}, 0x26) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x7daa}, 0x1c) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r11, 0x107, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 1.179779135s ago: executing program 6 (id=2952): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x4000000) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffd2b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xa) 528.624606ms ago: executing program 6 (id=2953): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3}, 0x10) connect$tipc(r5, &(0x7f0000000480)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6667b9fa4a4fda0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x6, 0x100000001, 0x211000, 0xffffffff, 0xa, 0x0, 0x1}, 0x1c) close(r8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f00000001c0)) r9 = gettid() r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f00000003c0)=[{{0x0, 0x9, &(0x7f0000000200)=[{&(0x7f00000002c0)="07b2fde9a43f467d48ee2d60c612bd7a5f6ff64e189c636dcf92569a0737f1a1a42ec83cc568760234e9fc9e9cb796fb47b917726f4ccdd7681476d7676410d45f59606ef130783717c3aebe0a9461680f52fcf8dc558e090743e39a1fee61e6fe5ecba2185b85487cc3059c6b7a2aa27f2075965b7ae8", 0x77}], 0x1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r7, @ANYRES32=r1, @ANYRESHEX=0x0], 0x18}}], 0x1, 0x4000880) syz_open_procfs$namespace(r9, &(0x7f0000000340)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x51c0}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) 455.289084ms ago: executing program 1 (id=2954): poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4) r0 = socket(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x138, 0x0, 0x138, 0x208, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x3, 0x3, 0x1f, 0x14, 0x37], 0x2, 0x8, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x5, 0x6, 0x3, 0x2], 0x1, 0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff00], @ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xff], @ipv4=@empty, [0x0, 0xff000000, 0xff000000, 0xff], 0x40, 0xf, 0x89, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x40}, 0x0, 0x8c}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x7}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) 453.111743ms ago: executing program 3 (id=2955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d0027bd7000ffdbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB="2c002f800c0002000201aaaaaaaaaaaa1c000380080001000200000000000200030000000800040002000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRESDEC, @ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x7f}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 369.702332ms ago: executing program 1 (id=2956): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd25, 0x25dfdbfd}, 0x18}}, 0x24008040) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5) (async) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 75.988845ms ago: executing program 1 (id=2957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24048800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/72, 0x48}], 0x1, &(0x7f0000000340)=""/117, 0x75}, 0x2000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a05000000000000000000000000070900020073797a32000000000c000b408800000000000000080005400000001108000a40000000020900010073797a3000000000080003400000005408000f40000000031400"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 0s ago: executing program 6 (id=2958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x1, 0x5c, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x67, 0x0, 0xe, 0x2f, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x23, 0x42, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x1c, 0x45, 0x1, 0x5, [{@local, 0x6}, {@broadcast, 0x7}, {@multicast2, 0x4}]}]}}}}}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0f00000010000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="74769dd9c413a368180a36", @ANYRES64=0x0], 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) kernel console output (not intermixed with test programs): 7][T11501] ? hashlimit_pernet+0x23/0x240 [ 232.026297][T11501] ? hashlimit_pernet+0x23/0x240 [ 232.026327][T11501] htable_create+0x101/0x7a0 [ 232.026358][T11501] hashlimit_mt_check_common+0x719/0xa10 [ 232.026391][T11501] hashlimit_mt_check_v1+0x221/0x360 [ 232.026420][T11501] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 232.026453][T11501] ? xt_find_match+0x1f7/0x250 [ 232.026481][T11501] xt_check_match+0x3ce/0xab0 [ 232.026511][T11501] ? __pfx_xt_check_match+0x10/0x10 [ 232.026537][T11501] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 232.026573][T11501] ? xt_find_match+0x1f7/0x250 [ 232.026604][T11501] translate_table+0x1553/0x2040 [ 232.026652][T11501] ? __pfx_translate_table+0x10/0x10 [ 232.026679][T11501] ? __might_fault+0xb0/0x130 [ 232.026720][T11501] ? _copy_from_user+0x94/0xb0 [ 232.026744][T11501] do_ip6t_set_ctl+0x970/0xce0 [ 232.026771][T11501] ? rcu_is_watching+0x15/0xb0 [ 232.026791][T11501] ? trace_contention_end+0x39/0x120 [ 232.026813][T11501] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 232.026861][T11501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.026892][T11501] ? evict+0x847/0x9c0 [ 232.026928][T11501] ? __lock_acquire+0xab9/0xd20 [ 232.026951][T11501] nf_setsockopt+0x26f/0x290 [ 232.026983][T11501] rawv6_setsockopt+0x23b/0x5b0 [ 232.027015][T11501] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 232.027044][T11501] ? aa_sock_opt_perm+0xff/0x1b0 [ 232.027072][T11501] ? sock_common_setsockopt+0x36/0xc0 [ 232.027101][T11501] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.027132][T11501] do_sock_setsockopt+0x179/0x1b0 [ 232.027158][T11501] __x64_sys_setsockopt+0x13f/0x1b0 [ 232.027185][T11501] do_syscall_64+0xfa/0xfa0 [ 232.027207][T11501] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.027229][T11501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.027249][T11501] ? clear_bhb_loop+0x60/0xb0 [ 232.027272][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.027290][T11501] RIP: 0033:0x7ff24e38eec9 [ 232.027320][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.027336][T11501] RSP: 002b:00007ff24f2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.027357][T11501] RAX: ffffffffffffffda RBX: 00007ff24e5e5fa0 RCX: 00007ff24e38eec9 [ 232.027371][T11501] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 232.027383][T11501] RBP: 00007ff24e411f91 R08: 0000000000000500 R09: 0000000000000000 [ 232.027396][T11501] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 232.027407][T11501] R13: 00007ff24e5e6038 R14: 00007ff24e5e5fa0 R15: 00007ffcf0f09418 [ 232.027441][T11501] [ 232.027655][T11501] Mem-Info: [ 232.414554][T11501] active_anon:8969 inactive_anon:0 isolated_anon:0 [ 232.414554][T11501] active_file:3337 inactive_file:39966 isolated_file:0 [ 232.414554][T11501] unevictable:768 dirty:80 writeback:0 [ 232.414554][T11501] slab_reclaimable:11716 slab_unreclaimable:145495 [ 232.414554][T11501] mapped:32407 shmem:2480 pagetables:1007 [ 232.414554][T11501] sec_pagetables:0 bounce:0 [ 232.414554][T11501] kernel_misc_reclaimable:0 [ 232.414554][T11501] free:1267337 free_pcp:17133 free_cma:0 [ 232.486695][T11501] Node 0 active_anon:36376kB inactive_anon:0kB active_file:13348kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130028kB dirty:316kB writeback:0kB shmem:8884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12452kB pagetables:4000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.527753][T11501] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.572502][T11501] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.619401][T11501] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 232.629789][T11501] Node 0 DMA32 free:1162812kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37676kB inactive_anon:0kB active_file:13348kB inactive_file:159664kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:51572kB local_pcp:23000kB free_cma:0kB [ 232.669937][T11501] lowmem_reserve[]: 0 0 1 1 1 [ 232.676044][T11501] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.706710][T11501] lowmem_reserve[]: 0 0 0 0 0 [ 232.711499][T11501] Node 1 Normal free:3891176kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16068kB local_pcp:6724kB free_cma:0kB [ 232.757356][T11501] lowmem_reserve[]: 0 0 0 0 0 [ 232.762658][T11501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.783011][T11501] Node 0 DMA32: 2984*4kB (UM) 625*8kB (UM) 156*16kB (UM) 125*32kB (UM) 71*64kB (UME) 94*128kB (UM) 83*256kB (UM) 60*512kB (UME) 30*1024kB (UM) 6*2048kB (U) 253*4096kB (UM) = 1171272kB [ 232.802887][T11501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.815298][T11501] Node 1 Normal: 180*4kB (UME) 41*8kB (UME) 27*16kB (UME) 129*32kB (UME) 44*64kB (UME) 8*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3891176kB [ 232.836808][T11501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.849033][T11501] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.860058][T11501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.875460][T11501] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.885104][T11501] 44680 total pagecache pages [ 232.889845][T11501] 0 pages in swap cache [ 232.894034][T11501] Free swap = 124996kB [ 232.899330][T11501] Total swap = 124996kB [ 232.905588][T11501] 2097051 pages RAM [ 232.910074][T11501] 0 pages HighMem/MovableOnly [ 232.919615][T11501] 424543 pages reserved [ 232.923904][T11501] 0 pages cma reserved [ 233.008378][T11524] tipc: Enabled bearer , priority 0 [ 233.018553][T11524] syzkaller0: entered promiscuous mode [ 233.024054][T11524] syzkaller0: entered allmulticast mode [ 233.051571][T11524] syzkaller0: mtu less than device minimum [ 233.082564][T11523] tipc: Resetting bearer [ 233.145341][T11523] tipc: Disabling bearer [ 233.325989][T11533] ipvlan0: entered promiscuous mode [ 233.331552][T11536] __nla_validate_parse: 3 callbacks suppressed [ 233.331569][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1359'. [ 233.358371][T11533] tun0: tun_chr_ioctl cmd 1074025675 [ 233.374217][T11533] tun0: persist enabled [ 233.382990][T11533] tun0: tun_chr_ioctl cmd 1074025675 [ 233.399913][T11533] tun0: persist disabled [ 233.442219][T11533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1360'. [ 233.517116][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 233.574749][T11548] bridge_slave_1: left allmulticast mode [ 233.596457][T11548] bridge_slave_1: left promiscuous mode [ 233.602298][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.628341][T11552] netlink: 'syz.5.1362': attribute type 21 has an invalid length. [ 233.644258][T11552] netlink: 'syz.5.1362': attribute type 22 has an invalid length. [ 233.658582][T11548] bridge_slave_0: left allmulticast mode [ 233.675280][T11552] netlink: 'syz.5.1362': attribute type 23 has an invalid length. [ 233.683486][T11548] bridge_slave_0: left promiscuous mode [ 233.696183][T11552] netlink: 'syz.5.1362': attribute type 25 has an invalid length. [ 233.706396][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.724320][T11552] netlink: 'syz.5.1362': attribute type 26 has an invalid length. [ 233.745040][T11552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1362'. [ 233.863164][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.876263][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.887546][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.898884][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.908481][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.929872][T11562] tipc: Enabling of bearer rejected, failed to enable media [ 234.420516][T11582] vxcan1: left allmulticast mode [ 234.461888][T11582] team1: left promiscuous mode [ 234.493336][T11582] team1: left allmulticast mode [ 234.501324][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 234.523242][T11582] geneve2: left promiscuous mode [ 234.559942][T11592] netlink: 'syz.5.1367': attribute type 17 has an invalid length. [ 234.578585][ T196] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.588571][ T196] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.632728][T11592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.671582][ T196] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.680876][ T196] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.765855][T11598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 234.958027][T11563] chnl_net:caif_netlink_parms(): no params data found [ 235.222593][T11612] Unsupported ieee802154 address type: 0 [ 235.243657][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 235.287512][T11617] syzkaller1: entered promiscuous mode [ 235.293033][T11617] syzkaller1: entered allmulticast mode [ 235.342290][T11624] netlink: 'syz.0.1372': attribute type 12 has an invalid length. [ 235.662743][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.696236][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.708368][T11563] bridge_slave_0: entered allmulticast mode [ 235.736238][T11563] bridge_slave_0: entered promiscuous mode [ 235.759905][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.778388][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.790655][T11563] bridge_slave_1: entered allmulticast mode [ 235.799686][T11563] bridge_slave_1: entered promiscuous mode [ 235.824787][T11644] netlink: 9040 bytes leftover after parsing attributes in process `syz.1.1380'. [ 235.839300][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 235.852142][T11644] openvswitch: netlink: Key type 5377 is out of range max 32 [ 235.857259][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'. [ 235.873768][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.903457][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.975821][ T5838] Bluetooth: hci1: command tx timeout [ 236.039212][T11657] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 236.052827][T11563] team0: Port device team_slave_0 added [ 236.075779][T11563] team0: Port device team_slave_1 added [ 236.151603][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.161058][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.187556][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.206983][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.214611][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.241221][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.253721][T11670] netlink: 'syz.0.1388': attribute type 26 has an invalid length. [ 236.339203][T11563] hsr_slave_0: entered promiscuous mode [ 236.348404][T11563] hsr_slave_1: entered promiscuous mode [ 236.355331][T11563] debugfs: 'hsr0' already exists in 'hsr' [ 236.361289][T11563] Cannot create hsr debugfs directory [ 236.615448][ T56] block nbd0: Possible stuck request ffff888024fce000: control (read@0,1024B). Runtime 90 seconds [ 236.630811][ T56] block nbd0: Possible stuck request ffff888024fce1c0: control (read@1024,1024B). Runtime 90 seconds [ 236.642228][ T56] block nbd0: Possible stuck request ffff888024fce380: control (read@2048,1024B). Runtime 90 seconds [ 236.654735][ T56] block nbd0: Possible stuck request ffff888024fce540: control (read@3072,1024B). Runtime 90 seconds [ 237.036673][T11700] netlink: 'syz.5.1397': attribute type 1 has an invalid length. [ 237.044478][T11563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.197605][T11563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.237669][T11711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.255761][T11563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.278157][T11563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.005198][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.055576][ T5838] Bluetooth: hci1: command tx timeout [ 238.174952][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.317188][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.324401][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.372928][T11772] netlink: 'syz.5.1412': attribute type 21 has an invalid length. [ 238.428419][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.435617][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.448687][T11772] __nla_validate_parse: 4 callbacks suppressed [ 238.448704][T11772] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1412'. [ 238.525912][T11772] syzkaller1: entered promiscuous mode [ 238.532089][T11772] syzkaller1: entered allmulticast mode [ 238.827366][T11804] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 239.196493][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 239.271105][ T30] audit: type=1800 audit(1760331326.946:8): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1426" name="blkio.bfq.time_recursive" dev="tmpfs" ino=294 res=0 errno=0 [ 239.298677][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1425'. [ 239.308752][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.528260][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 239.697193][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 239.902859][T11563] veth0_vlan: entered promiscuous mode [ 239.922496][T11563] veth1_vlan: entered promiscuous mode [ 239.980835][T11880] syzkaller1: entered promiscuous mode [ 239.989435][T11880] syzkaller1: entered allmulticast mode [ 239.999276][T11563] veth0_macvtap: entered promiscuous mode [ 240.016789][T11563] veth1_macvtap: entered promiscuous mode [ 240.054052][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.089235][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.109210][ T196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.119072][ T196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.140389][ T196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.149624][ T5838] Bluetooth: hci1: command tx timeout [ 240.156063][ T196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.194643][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1435'. [ 240.287267][T11893] bond0: (slave bond_slave_0): Releasing backup interface [ 240.299530][T11893] bond0: (slave bond_slave_1): Releasing backup interface [ 240.314722][T11893] team0: Port device team_slave_0 removed [ 240.325743][T11893] team0: Port device team_slave_1 removed [ 240.332936][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.340924][T11893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.351619][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.359991][T11893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.373494][T11893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.539051][T11901] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1439'. [ 240.576262][T11894] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.581985][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.610402][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.670908][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.679594][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.706528][T11906] vlan1: entered promiscuous mode [ 240.791978][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1443'. [ 240.837572][T11921] netlink: 'syz.3.1445': attribute type 39 has an invalid length. [ 240.870045][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1443'. [ 240.950186][T11930] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1446'. [ 241.337422][T11939] netlink: 'syz.5.1449': attribute type 1 has an invalid length. [ 241.338013][T11907] mpoa:mpoad_close: () going down [ 241.638953][T11963] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 241.865624][T11973] Cannot find del_set index 4 as target [ 241.912304][T11974] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 241.920564][T11974] netlink: 'syz.3.1458': attribute type 2 has an invalid length. [ 241.930588][T11974] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 241.956176][T11974] netlink: 'syz.3.1458': attribute type 2 has an invalid length. [ 242.082122][T11977] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.222551][ T5838] Bluetooth: hci1: command tx timeout [ 242.297734][T11977] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.555776][T11977] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.562377][T12007] netlink: 'syz.0.1468': attribute type 9 has an invalid length. [ 242.716863][T11977] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.854491][T12014] netlink: 'syz.1.1469': attribute type 9 has an invalid length. [ 242.919205][T12012] pimreg: entered allmulticast mode [ 242.925899][T12013] pimreg: left allmulticast mode [ 243.117682][ T4539] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.196485][ T196] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.239367][ T196] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.275983][ T196] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.488230][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 243.729138][T12038] __nla_validate_parse: 3 callbacks suppressed [ 243.729157][T12038] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1475'. [ 243.761041][T12051] dvmrp0: entered allmulticast mode [ 244.016669][T12065] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 244.120056][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 244.274953][T12066] veth1_macvtap: left promiscuous mode [ 244.489185][T12074] tipc: Enabled bearer , priority 0 [ 244.553505][T12074] syzkaller0: entered promiscuous mode [ 244.574699][T12074] syzkaller0: entered allmulticast mode [ 244.673107][T12083] netlink: 'syz.6.1488': attribute type 9 has an invalid length. [ 244.673851][T12074] tipc: Resetting bearer [ 244.707114][T12079] vlan3: entered allmulticast mode [ 244.714500][T12079] bridge_slave_0: entered allmulticast mode [ 244.780835][T12073] tipc: Resetting bearer [ 244.804904][T12073] tipc: Disabling bearer [ 244.859171][T12087] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1489'. [ 244.869341][T12087] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1489'. [ 244.885027][T12088] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1489'. [ 244.898719][T12088] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1489'. [ 245.097847][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1492'. [ 245.147630][T12097] sctp: [Deprecated]: syz.6.1492 (pid 12097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.147630][T12097] Use struct sctp_sack_info instead [ 245.376908][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'. [ 245.609626][T12122] tipc: New replicast peer: 255.255.255.255 [ 245.619564][T12122] tipc: Enabled bearer , priority 10 [ 245.883109][T12131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.927259][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 246.089263][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1504'. [ 246.445823][T12151] x_tables: duplicate underflow at hook 3 [ 246.470266][T12151] x_tables: duplicate underflow at hook 1 [ 246.735292][ T6823] tipc: Node number set to 450501987 [ 246.863805][T12175] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 246.882221][T12175] netlink: 'syz.5.1513': attribute type 2 has an invalid length. [ 246.910280][T12175] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 246.938750][T12175] only policy match revision 0 supported [ 246.938774][T12175] unable to load match [ 246.976831][T12180] tipc: Started in network mode [ 246.981977][T12180] tipc: Node identity 76aeb64cfab7, cluster identity 4711 [ 246.989616][T12180] tipc: Enabled bearer , priority 0 [ 246.999302][T12180] syzkaller0: entered promiscuous mode [ 247.005203][T12180] syzkaller0: entered allmulticast mode [ 247.022843][T12180] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.048825][T12180] tipc: Resetting bearer [ 247.068400][T12179] tipc: Resetting bearer [ 247.090584][T12179] tipc: Disabling bearer [ 247.153054][T12190] ip6t_REJECT: ECHOREPLY is not supported [ 248.209441][T12223] syzkaller1: entered promiscuous mode [ 248.219066][T12223] syzkaller1: entered allmulticast mode [ 248.606512][T12247] netem: change failed [ 248.913842][T12274] __nla_validate_parse: 5 callbacks suppressed [ 248.913860][T12274] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1542'. [ 249.021264][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 249.118330][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1547'. [ 249.264735][T12294] netlink: 'syz.3.1546': attribute type 10 has an invalid length. [ 249.273321][T12294] bond0: (slave wlan1): Opening slave failed [ 249.329072][T12300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.522273][T12314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1552'. [ 249.584069][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1552'. [ 249.797121][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1560'. [ 249.923277][T12327] syzkaller1: entered promiscuous mode [ 249.944300][T12327] syzkaller1: entered allmulticast mode [ 250.282405][T12362] bond3: option lp_interval: invalid value (0) [ 250.315766][T12362] bond3: option lp_interval: allowed values 1 - 2147483647 [ 250.349723][T12362] bond3 (unregistering): Released all slaves [ 250.403648][T12361] @ÿ: renamed from veth0_vlan (while UP) [ 250.746031][T12385] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 250.792450][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 250.949309][T12397] netlink: 'syz.5.1571': attribute type 1 has an invalid length. [ 250.957653][T12397] netlink: 'syz.5.1571': attribute type 1 has an invalid length. [ 251.074526][T12403] ipvlan2: entered promiscuous mode [ 251.682174][T12434] xt_TCPMSS: Only works on TCP SYN packets [ 251.897775][T12439] syzkaller1: entered promiscuous mode [ 251.903747][T12439] syzkaller1: entered allmulticast mode [ 252.246157][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1589'. [ 252.270473][T12460] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1589'. [ 252.740947][T12465] tipc: Enabled bearer , priority 0 [ 252.812245][T12466] syzkaller0: entered promiscuous mode [ 252.819296][T12466] syzkaller0: entered allmulticast mode [ 252.902920][T12466] tipc: Resetting bearer [ 252.931581][T12477] netlink: 'syz.1.1592': attribute type 21 has an invalid length. [ 252.939830][T12477] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1592'. [ 252.954436][T12466] tipc: Disabling bearer [ 253.157806][T12492] netlink: 'syz.3.1596': attribute type 1 has an invalid length. [ 253.670828][T12507] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 253.997930][T12513] tipc: Enabled bearer , priority 0 [ 254.006977][T12504] syzkaller0: entered promiscuous mode [ 254.034474][T12504] syzkaller0: entered allmulticast mode [ 254.080018][T12504] tipc: Resetting bearer [ 254.097766][T12503] tipc: Resetting bearer [ 254.137103][T12503] tipc: Disabling bearer [ 254.215901][T12526] tipc: Enabled bearer , priority 0 [ 254.223785][T12526] syzkaller0: entered promiscuous mode [ 254.231526][T12526] syzkaller0: entered allmulticast mode [ 254.276998][T12526] tipc: Resetting bearer [ 254.299085][T12525] tipc: Resetting bearer [ 254.462545][T12525] tipc: Disabling bearer [ 254.611318][T12540] netlink: 'syz.0.1608': attribute type 10 has an invalid length. [ 254.650634][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1607'. [ 254.813308][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 254.851970][T12550] netlink: 'syz.0.1609': attribute type 30 has an invalid length. [ 254.874187][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 254.909217][T12553] ip6t_REJECT: ECHOREPLY is not supported [ 255.147024][T12563] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1611'. [ 255.245567][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 255.274926][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 255.326032][T12575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1615'. [ 255.818988][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.896452][T12571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.010030][T12571] gretap1: left promiscuous mode [ 256.022888][T12571] veth5: left promiscuous mode [ 256.044649][T12571] vlan0: left allmulticast mode [ 256.049775][T12571] gretap0: left allmulticast mode [ 256.055640][T12571] ip6gre1: left allmulticast mode [ 256.067676][T12571] ipvlan0: left promiscuous mode [ 256.079365][T12571] vlan1: left promiscuous mode [ 256.108076][ T196] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.147860][ T196] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.217119][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.233714][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 256.234256][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.257024][ T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.266498][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.527483][ T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.542701][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.728627][T12630] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'. [ 256.792053][ T5830] IPVS: starting estimator thread 0... [ 256.888018][T12635] IPVS: using max 35 ests per chain, 84000 per kthread [ 256.913378][T12645] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 256.948912][T12645] team0: Port device dummy0 added [ 257.054775][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1632'. [ 257.178014][T12665] team0: Port device dummy0 removed [ 257.307095][T12669] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 258.177773][T12743] netlink: 'syz.1.1655': attribute type 16 has an invalid length. [ 258.207584][T12743] netlink: 'syz.1.1655': attribute type 17 has an invalid length. [ 258.471534][T12760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 258.525645][T12764] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 259.922431][T12833] __nla_validate_parse: 8 callbacks suppressed [ 259.922452][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 259.964228][T12833] netlink: 'syz.0.1678': attribute type 21 has an invalid length. [ 259.990276][T12838] netlink: 'syz.0.1678': attribute type 11 has an invalid length. [ 259.999374][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 260.030846][T12838] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 260.057657][T12838] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1678'. [ 260.072714][ T66] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.081595][ T66] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.103608][ T66] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.131164][T12843] netlink: 'syz.0.1678': attribute type 33 has an invalid length. [ 260.163779][ T66] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.181347][T12843] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1678'. [ 260.191143][T12843] `: renamed from team0 [ 260.241648][T12848] netlink: 4644 bytes leftover after parsing attributes in process `syz.3.1683'. [ 260.278762][T12847] netlink: 4644 bytes leftover after parsing attributes in process `syz.3.1683'. [ 260.321793][T12850] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 260.329832][T12850] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1685'. [ 260.343134][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1684'. [ 260.515978][T12865] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1690'. [ 260.648059][T12858] syzkaller0: entered promiscuous mode [ 260.653657][T12858] syzkaller0: entered allmulticast mode [ 262.448255][T12899] macsec0: entered promiscuous mode [ 262.476435][T12899] ip6gretap0: entered promiscuous mode [ 262.482114][T12899] macsec0: entered allmulticast mode [ 262.508608][T12899] ip6gretap0: entered allmulticast mode [ 262.614327][T12907] bridge: RTM_NEWNEIGH with invalid ether address [ 262.860222][T12927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.058435][T12941] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 263.096586][T12945] netlink: 'syz.3.1714': attribute type 6 has an invalid length. [ 263.132338][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1713'. [ 263.243723][T12951] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.279064][T12951] bond0: option arp_all_targets: invalid value (2) [ 263.313967][T12957] netlink: zone id is out of range [ 263.319257][T12957] netlink: del zone limit has 4 unknown bytes [ 263.426921][T12965] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 263.469085][T12965] bond5 (unregistering): Released all slaves [ 263.528339][T12970] bond1 (unregistering): Released all slaves [ 265.191476][T12997] syzkaller0: entered promiscuous mode [ 265.204400][T12997] syzkaller0: entered allmulticast mode [ 266.707648][ T56] block nbd0: Possible stuck request ffff888024fce000: control (read@0,1024B). Runtime 120 seconds [ 266.718583][ T56] block nbd0: Possible stuck request ffff888024fce1c0: control (read@1024,1024B). Runtime 120 seconds [ 266.729641][ T56] block nbd0: Possible stuck request ffff888024fce380: control (read@2048,1024B). Runtime 120 seconds [ 266.741071][ T56] block nbd0: Possible stuck request ffff888024fce540: control (read@3072,1024B). Runtime 120 seconds [ 266.933311][T13045] __nla_validate_parse: 3 callbacks suppressed [ 266.933328][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 267.030798][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.041371][T13037] "syz.0.1737" (13037) uses obsolete ecb(arc4) skcipher [ 267.056437][T13054] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1741'. [ 267.097340][T13054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1741'. [ 267.106795][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 267.429590][ T24] IPVS: starting estimator thread 0... [ 267.525682][T13078] IPVS: using max 25 ests per chain, 60000 per kthread [ 267.676468][T13092] vcan0: entered promiscuous mode [ 267.683332][T13092] vcan0: entered allmulticast mode [ 267.872666][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 267.922434][T13113] netlink: 'syz.3.1755': attribute type 12 has an invalid length. [ 267.930415][T13113] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1755'. [ 267.955642][T13093] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.963152][T13093] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.078203][T13093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.098099][T13093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.169081][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 268.288069][ T49] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.298629][ T49] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.307723][ T49] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.340630][ T49] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.599198][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 268.625311][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1763'. [ 268.643240][T13143] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 268.654739][T13144] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 268.689328][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1762'. [ 268.726742][T13143] netlink: 'syz.5.1762': attribute type 10 has an invalid length. [ 268.737436][T13143] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 268.753908][T13143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.762619][T13143] bond0: (slave wlan1): Opening slave failed [ 269.271819][T13167] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 269.281264][T13167] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 269.327080][T13167] bond5: entered promiscuous mode [ 269.336182][T13170] netlink: 'syz.5.1774': attribute type 1 has an invalid length. [ 269.340168][T13167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.397684][T13173] vlan2: entered allmulticast mode [ 269.403008][T13173] bridge0: entered allmulticast mode [ 270.024529][T13202] vlan3: entered allmulticast mode [ 270.120379][T13209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.127685][T13209] IPv6: NLM_F_CREATE should be set when creating new route [ 270.513102][T13231] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 270.561739][T13231] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 270.759103][T13244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.738019][T13301] --map-set only usable from mangle table [ 271.746176][T13301] netlink: 'syz.3.1810': attribute type 10 has an invalid length. [ 271.762771][T13301] team0: Port device geneve0 added [ 271.769110][ T196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.781286][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.781697][ T196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.826346][ T196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.836047][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.837740][ T196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.869096][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.881841][T13298] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.901268][T13298] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 271.932575][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.940724][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.948758][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.956974][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.964885][T13298] wg1 speed is unknown, defaulting to 1000 [ 271.973933][T13298] wg1 speed is unknown, defaulting to 1000 [ 272.109315][T13318] __nla_validate_parse: 18 callbacks suppressed [ 272.109334][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 272.139491][T13318] netlink: 'syz.3.1815': attribute type 14 has an invalid length. [ 272.149438][T13319] netlink: 'syz.6.1816': attribute type 1 has an invalid length. [ 272.165882][T13325] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 272.258188][T13330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.268273][T13324] wg1 speed is unknown, defaulting to 1000 [ 272.298131][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 272.319427][T13328] wg1 speed is unknown, defaulting to 1000 [ 272.333272][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'. [ 272.429313][T13345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1823'. [ 272.455798][T13345] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1823'. [ 272.689141][T13362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1828'. [ 272.792680][T13354] macvlan0: entered promiscuous mode [ 272.798615][T13354] macvlan0: entered allmulticast mode [ 272.805130][T13354] bond6: (slave macvlan0): Opening slave failed [ 272.894291][T13372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.953291][T13375] bond2: (slave geneve2): making interface the new active one [ 272.956016][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 272.963340][T13375] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 272.975350][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1832'. [ 273.343847][T13397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1834'. [ 273.414446][T13397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1834'. [ 273.452499][T13392] warn_alloc: 1 callbacks suppressed [ 273.452519][T13392] syz.5.1834: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.518615][T13392] CPU: 0 UID: 0 PID: 13392 Comm: syz.5.1834 Not tainted syzkaller #0 PREEMPT(full) [ 273.518644][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.518657][T13392] Call Trace: [ 273.518664][T13392] [ 273.518671][T13392] dump_stack_lvl+0x189/0x250 [ 273.518699][T13392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.518718][T13392] ? __pfx__printk+0x10/0x10 [ 273.518745][T13392] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 273.518770][T13392] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 273.518797][T13392] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 273.518823][T13392] warn_alloc+0x214/0x310 [ 273.518858][T13392] ? __pfx_warn_alloc+0x10/0x10 [ 273.518897][T13392] ? __get_vm_area_node+0x28f/0x300 [ 273.518925][T13392] ? xskq_create+0xbf/0x170 [ 273.518951][T13392] __vmalloc_node_range_noprof+0x690/0x12d0 [ 273.519013][T13392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.519045][T13392] ? __kasan_kmalloc+0x93/0xb0 [ 273.519079][T13392] vmalloc_user_noprof+0xad/0xf0 [ 273.519107][T13392] ? xskq_create+0xbf/0x170 [ 273.519131][T13392] xskq_create+0xbf/0x170 [ 273.519156][T13392] xsk_init_queue+0xb0/0x110 [ 273.519177][T13392] xsk_setsockopt+0x57b/0x8d0 [ 273.519198][T13392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.519220][T13392] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.519243][T13392] ? aa_sock_opt_perm+0xff/0x1b0 [ 273.519271][T13392] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 273.519287][T13392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.519306][T13392] do_sock_setsockopt+0x179/0x1b0 [ 273.519331][T13392] __x64_sys_setsockopt+0x13f/0x1b0 [ 273.519355][T13392] do_syscall_64+0xfa/0xfa0 [ 273.519379][T13392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.519396][T13392] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.519414][T13392] ? clear_bhb_loop+0x60/0xb0 [ 273.519435][T13392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.519453][T13392] RIP: 0033:0x7fe6ad58eec9 [ 273.519470][T13392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.519485][T13392] RSP: 002b:00007fe6ae390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.519506][T13392] RAX: ffffffffffffffda RBX: 00007fe6ad7e5fa0 RCX: 00007fe6ad58eec9 [ 273.519520][T13392] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 273.519532][T13392] RBP: 00007fe6ad611f91 R08: 0000000000000004 R09: 0000000000000000 [ 273.519544][T13392] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 273.519557][T13392] R13: 00007fe6ad7e6038 R14: 00007fe6ad7e5fa0 R15: 00007ffca087e208 [ 273.519596][T13392] [ 273.519666][T13392] Mem-Info: [ 273.541684][T13402] syzkaller0: entered promiscuous mode [ 273.543200][T13392] active_anon:7906 inactive_anon:0 isolated_anon:0 [ 273.543200][T13392] active_file:3402 inactive_file:39986 isolated_file:0 [ 273.543200][T13392] unevictable:768 dirty:83 writeback:0 [ 273.543200][T13392] slab_reclaimable:12421 slab_unreclaimable:147668 [ 273.543200][T13392] mapped:29223 shmem:1363 pagetables:1066 [ 273.543200][T13392] sec_pagetables:0 bounce:0 [ 273.543200][T13392] kernel_misc_reclaimable:0 [ 273.543200][T13392] free:1271729 free_pcp:12864 free_cma:0 [ 273.580388][T13402] syzkaller0: entered allmulticast mode [ 273.594320][T13392] Node 0 active_anon:31624kB inactive_anon:0kB active_file:13608kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116892kB dirty:332kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13144kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.695610][T13410] wg1 speed is unknown, defaulting to 1000 [ 273.700192][T13415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.738299][T13392] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.923640][T13392] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.929362][T13415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.955204][T13392] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 273.968319][T13392] Node 0 DMA32 free:1178460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31524kB inactive_anon:0kB active_file:13608kB inactive_file:159744kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:36712kB local_pcp:21452kB free_cma:0kB [ 274.001835][T13392] lowmem_reserve[]: 0 0 1 1 1 [ 274.006720][T13392] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.036642][T13392] lowmem_reserve[]: 0 0 0 0 0 [ 274.041383][T13392] Node 1 Normal free:3892540kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14756kB local_pcp:8800kB free_cma:0kB [ 274.075016][T13392] lowmem_reserve[]: 0 0 0 0 0 [ 274.080154][T13392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.094759][T13392] Node 0 DMA32: 321*4kB (UM) 421*8kB (UME) 153*16kB (M) 141*32kB (M) 90*64kB (ME) 61*128kB (ME) 28*256kB (UM) 72*512kB (UME) 41*1024kB (UME) 9*2048kB (UM) 256*4096kB (UM) = 1178204kB [ 274.113790][T13392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 274.125783][T13392] Node 1 Normal: 177*4kB (UME) 41*8kB (UME) 41*16kB (UME) 151*32kB (UME) 51*64kB (UME) 8*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3892540kB [ 274.146077][T13392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.165469][T13392] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.175380][T13392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.185527][T13392] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.195072][T13392] 44748 total pagecache pages [ 274.199971][T13392] 0 pages in swap cache [ 274.204216][T13392] Free swap = 124996kB [ 274.208375][T13392] Total swap = 124996kB [ 274.212679][T13392] 2097051 pages RAM [ 274.217758][T13392] 0 pages HighMem/MovableOnly [ 274.222472][T13392] 424543 pages reserved [ 274.227089][T13392] 0 pages cma reserved [ 275.926089][T13455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.068354][T13467] validate_nla: 9 callbacks suppressed [ 276.068374][T13467] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 276.167519][T13467] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 276.255933][T13481] tipc: Enabled bearer , priority 0 [ 276.290225][T13482] syzkaller0: entered promiscuous mode [ 276.305995][T13482] syzkaller0: entered allmulticast mode [ 276.517396][T13492] wg1 speed is unknown, defaulting to 1000 [ 276.552989][T13482] tipc: Resetting bearer [ 276.623859][T13482] tipc: Disabling bearer [ 277.077757][T13508] wg1 speed is unknown, defaulting to 1000 [ 277.186208][T13525] __nla_validate_parse: 8 callbacks suppressed [ 277.186227][T13525] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1862'. [ 277.591439][T13544] dvmrp8: entered allmulticast mode [ 277.680321][T13551] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 277.695208][T13544] wg1 speed is unknown, defaulting to 1000 [ 277.966038][T13562] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 278.011918][T13563] netlink: 'syz.0.1872': attribute type 13 has an invalid length. [ 278.030444][T13563] netlink: 'syz.0.1872': attribute type 17 has an invalid length. [ 278.238110][T13563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.248085][T13563] 8021q: adding VLAN 0 to HW filter on device ` [ 278.258774][T13563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.275439][T13543] dvmrp8: left allmulticast mode [ 278.283261][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1875'. [ 278.333994][T13572] tipc: Enabled bearer , priority 10 [ 278.379976][T13565] wg1 speed is unknown, defaulting to 1000 [ 278.449897][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 278.677555][T13601] netlink: 'syz.6.1880': attribute type 10 has an invalid length. [ 278.702318][T13585] tipc: Failed to remove unknown binding: 66,1,1/118113073:775577798/775577800 [ 278.713745][T13585] tipc: Failed to remove unknown binding: 66,1,1/118113073:775577798/775577800 [ 278.721737][T13592] gretap1: entered promiscuous mode [ 278.740824][T13601] veth1_vlan: entered allmulticast mode [ 278.748544][T13601] veth1_vlan: left promiscuous mode [ 278.772616][T13601] team0: Device veth1_vlan failed to register rx_handler [ 278.906205][T13612] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1884'. [ 278.931575][T13612] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1884'. [ 278.962677][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1887'. [ 278.986965][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1887'. [ 279.035627][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 279.056966][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1888'. [ 279.074339][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 279.141317][T13625] veth0: entered promiscuous mode [ 279.230141][T13630] netlink: 'syz.3.1892': attribute type 6 has an invalid length. [ 279.463178][T13648] netlink: 'syz.3.1892': attribute type 12 has an invalid length. [ 279.937174][T13678] tipc: Enabled bearer , priority 0 [ 279.944774][T13678] syzkaller0: entered promiscuous mode [ 279.950262][T13678] syzkaller0: entered allmulticast mode [ 280.079561][T13678] tipc: Resetting bearer [ 280.186349][T13701] netlink: 'syz.5.1911': attribute type 1 has an invalid length. [ 280.204695][T13674] tipc: Resetting bearer [ 280.236750][T13674] tipc: Disabling bearer [ 280.265451][T13700] netlink: 'syz.5.1911': attribute type 1 has an invalid length. [ 280.417361][T13714] syzkaller1: entered promiscuous mode [ 280.423028][T13714] syzkaller1: entered allmulticast mode [ 280.689042][T13740] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 280.708812][T13741] tipc: Started in network mode [ 280.713808][T13741] tipc: Node identity 6a10b8fbfa8d, cluster identity 4711 [ 280.722631][T13741] tipc: Enabled bearer , priority 0 [ 280.744567][T13741] syzkaller0: entered promiscuous mode [ 280.755794][T13741] syzkaller0: entered allmulticast mode [ 280.822324][T13747] wg1 speed is unknown, defaulting to 1000 [ 280.892632][T13741] tipc: Resetting bearer [ 280.954776][T13741] tipc: Disabling bearer [ 281.699128][T13796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.877677][T13801] netlink: 'syz.6.1938': attribute type 39 has an invalid length. [ 282.113572][T13815] netlink: 'syz.5.1942': attribute type 21 has an invalid length. [ 282.121679][T13815] netlink: 'syz.5.1942': attribute type 1 has an invalid length. [ 282.132532][T13817] IPVS: length: 181 != 24 [ 282.170146][T13819] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.249373][T13825] __nla_validate_parse: 11 callbacks suppressed [ 282.249395][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1946'. [ 282.271718][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1946'. [ 282.299600][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 282.369034][T13829] netlink: 'syz.1.1947': attribute type 25 has an invalid length. [ 284.245595][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 284.385750][T13870] bridge40: entered allmulticast mode [ 284.536684][T13882] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 284.564823][T13883] netlink: 'syz.5.1958': attribute type 4 has an invalid length. [ 284.759161][T13887] wg1 speed is unknown, defaulting to 1000 [ 284.785882][T13885] wg1 speed is unknown, defaulting to 1000 [ 284.960719][T13897] sctp: [Deprecated]: syz.1.1965 (pid 13897) Use of int in maxseg socket option. [ 284.960719][T13897] Use struct sctp_assoc_value instead [ 284.994617][T13904] netlink: 'syz.5.1967': attribute type 11 has an invalid length. [ 285.058498][T13876] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 285.159433][T13908] netlink: 'syz.5.1969': attribute type 10 has an invalid length. [ 285.219833][T13908] team0: Port device dummy0 added [ 285.454900][T13922] netlink: 'syz.5.1971': attribute type 4 has an invalid length. [ 285.502658][T13922] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 285.569665][T13920] wg1 speed is unknown, defaulting to 1000 [ 285.599372][T13930] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 285.718121][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1977'. [ 285.770689][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 285.797334][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 285.801355][T13942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.932483][T13943] netem: change failed [ 286.074926][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1979'. [ 286.139546][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1979'. [ 286.328533][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 286.745927][T13995] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 287.326675][T14027] wg1 speed is unknown, defaulting to 1000 [ 287.352857][T14033] sctp: [Deprecated]: syz.3.1996 (pid 14033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.352857][T14033] Use struct sctp_sack_info instead [ 287.800515][T14063] __nla_validate_parse: 69 callbacks suppressed [ 287.800534][T14063] netlink: 33 bytes leftover after parsing attributes in process `syz.5.2004'. [ 287.937000][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 287.998740][T14070] xt_CT: No such helper "netbios-ns" [ 288.262154][T14087] team0: Port device team_slave_0 removed [ 288.528036][T14100] wg1 speed is unknown, defaulting to 1000 [ 288.553418][T14112] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2015'. [ 288.569192][T14114] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 288.585781][T14112] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2015'. [ 288.589216][T14114] veth1_vlan: entered allmulticast mode [ 288.601514][T14114] veth1_vlan: left promiscuous mode [ 288.608668][T14114] team0: Device veth1_vlan failed to register rx_handler [ 288.824304][T14121] syzkaller1: entered promiscuous mode [ 288.830438][T14121] syzkaller1: entered allmulticast mode [ 288.886620][T14132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2023'. [ 288.900755][T14132] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2023'. [ 288.910906][T14132] netlink: 'syz.1.2023': attribute type 6 has an invalid length. [ 288.919110][T14132] netlink: 'syz.1.2023': attribute type 4 has an invalid length. [ 289.111945][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 289.137673][T14142] wg1 speed is unknown, defaulting to 1000 [ 290.134646][T14175] wg1 speed is unknown, defaulting to 1000 [ 290.235125][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.315903][T14178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.411377][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2039'. [ 290.471864][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2039'. [ 290.535946][T14197] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2039'. [ 290.742134][T14211] netlink: 'syz.0.2042': attribute type 4 has an invalid length. [ 290.930333][ T30] audit: type=1800 audit(1760331378.606:9): pid=14214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2043" name="memory.events" dev="tmpfs" ino=1003 res=0 errno=0 [ 291.015932][ T30] audit: type=1804 audit(1760331378.606:10): pid=14214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2043" name="memory.events" dev="tmpfs" ino=1003 res=1 errno=0 [ 291.183131][ T30] audit: type=1107 audit(1760331378.856:11): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 291.183610][T14219] syzkaller0: entered promiscuous mode [ 291.214670][T14219] syzkaller0: entered allmulticast mode [ 291.335621][T14230] netlink: 'syz.6.2049': attribute type 1 has an invalid length. [ 291.511401][T14236] netlink: 'syz.6.2049': attribute type 1 has an invalid length. [ 292.723564][T14230] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 292.732404][T14233] geneve2: entered allmulticast mode [ 292.812765][T14238] gretap1: entered promiscuous mode [ 293.054769][T14257] __nla_validate_parse: 4 callbacks suppressed [ 293.054791][T14257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2056'. [ 293.144246][T14263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'. [ 293.193516][T14270] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2061'. [ 293.205094][T14267] geneve3: entered promiscuous mode [ 293.212912][T13727] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.225321][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2059'. [ 293.236870][T13727] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.255558][T14274] vxcan1: entered allmulticast mode [ 293.331536][T13727] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.351236][T13727] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.557855][T14295] syzkaller1: entered promiscuous mode [ 293.563659][T14295] syzkaller1: entered allmulticast mode [ 293.582785][T14293] wg1 speed is unknown, defaulting to 1000 [ 294.283200][T14314] wg1 speed is unknown, defaulting to 1000 [ 294.381276][T14315] wg1 speed is unknown, defaulting to 1000 [ 294.391446][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'. [ 294.416563][T14326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.423894][T14326] IPv6: NLM_F_CREATE should be set when creating new route [ 294.431169][T14326] IPv6: NLM_F_CREATE should be set when creating new route [ 294.463073][T14326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.613113][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2080'. [ 294.669939][T14334] IPv6: sit3: Disabled Multicast RS [ 294.678343][T14334] sit3: entered allmulticast mode [ 294.960030][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 295.563590][T14389] ip6tnl1: entered promiscuous mode [ 295.581403][T14389] ip6tnl1: entered allmulticast mode [ 295.599105][T14389] team0: Device ip6tnl1 is of different type [ 295.903080][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 296.081423][T14408] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 296.100922][T14408] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2097'. [ 296.235408][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 296.776040][ T56] block nbd0: Possible stuck request ffff888024fce000: control (read@0,1024B). Runtime 150 seconds [ 296.786981][ T56] block nbd0: Possible stuck request ffff888024fce1c0: control (read@1024,1024B). Runtime 150 seconds [ 296.798612][ T56] block nbd0: Possible stuck request ffff888024fce380: control (read@2048,1024B). Runtime 150 seconds [ 296.809769][ T56] block nbd0: Possible stuck request ffff888024fce540: control (read@3072,1024B). Runtime 150 seconds [ 296.891041][T14452] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 297.037228][T14456] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 297.127060][T14456] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.156410][T14466] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 297.216489][T14466] bond7: (slave batadv1): making interface the new active one [ 297.253509][T14466] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 297.647115][T14456] bond7 (unregistering): (slave batadv1): Releasing active interface [ 297.666304][T14456] bond7 (unregistering): Released all slaves [ 297.709846][T13727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.743989][T14474] wg1 speed is unknown, defaulting to 1000 [ 298.127162][ T5838] Bluetooth: hci1: link tx timeout [ 298.136760][ T5838] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 298.146127][ T5838] Bluetooth: hci1: link tx timeout [ 298.151284][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.653560][T14529] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 298.663595][T14529] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 298.880782][T14545] __nla_validate_parse: 9 callbacks suppressed [ 298.880802][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 298.926697][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 298.996777][T14550] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2139'. [ 299.200630][T14562] pimreg: tun_chr_ioctl cmd 1074025677 [ 299.206772][T14562] pimreg: linktype set to 780 [ 299.256539][T14562] pimreg: tun_chr_ioctl cmd 35111 [ 299.280151][T14566] xt_hashlimit: overflow, try lower: 3/0 [ 299.933028][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2158'. [ 300.186819][T14621] syzkaller1: entered promiscuous mode [ 300.192472][T14621] syzkaller1: entered allmulticast mode [ 300.224888][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 300.233143][T14619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2160'. [ 300.799803][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2168'. [ 300.821261][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 300.832105][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 300.948468][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'. [ 301.003434][T14664] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2172'. [ 301.611589][T14716] batadv0: mtu less than device minimum [ 301.732786][T14721] netlink: 'syz.6.2185': attribute type 1 has an invalid length. [ 301.734314][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.789366][T14721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.797198][T14715] wg1 speed is unknown, defaulting to 1000 [ 301.930584][T14728] bond7: Invalid ad_actor_system MAC address. [ 301.937208][T14728] bond7: option ad_actor_system: invalid value (7) [ 301.947890][T14728] bond7 (unregistering): Released all slaves [ 302.002183][T14721] bond2: (slave ip6gretap2): making interface the new active one [ 302.015412][T14721] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 302.120314][T14726] veth5: entered promiscuous mode [ 302.151583][T14736] netlink: 'syz.1.2189': attribute type 5 has an invalid length. [ 302.311226][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 302.578120][T14774] tipc: Enabled bearer , priority 0 [ 302.597030][T14776] syzkaller0: entered promiscuous mode [ 302.602555][T14776] syzkaller0: entered allmulticast mode [ 302.681519][T14783] wg1 speed is unknown, defaulting to 1000 [ 302.715956][T14776] tipc: Resetting bearer [ 302.781898][T14776] tipc: Disabling bearer [ 302.882698][T14778] wg1 speed is unknown, defaulting to 1000 [ 303.437864][T14818] gtp0: entered promiscuous mode [ 303.449793][T14818] gtp0: entered allmulticast mode [ 303.485447][T14824] delete_channel: no stack [ 303.493171][T14824] delete_channel: no stack [ 303.832022][T14843] wg1 speed is unknown, defaulting to 1000 [ 304.052163][T14861] nbd: must specify a size in bytes for the device [ 304.101399][T14868] __nla_validate_parse: 12 callbacks suppressed [ 304.101419][T14868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2220'. [ 304.281308][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'. [ 304.320778][T14870] bond4: option arp_validate: invalid value (18446744073491447809) [ 304.333443][T14870] bond4 (unregistering): Released all slaves [ 304.380873][T14876] vlan3: entered promiscuous mode [ 304.389103][T14876] hsr0: entered promiscuous mode [ 304.395657][T14876] vlan3: entered allmulticast mode [ 304.401022][T14876] hsr0: entered allmulticast mode [ 304.407368][T14876] hsr_slave_0: entered allmulticast mode [ 304.413250][T14876] hsr_slave_1: entered allmulticast mode [ 304.575535][T14886] netlink: 'syz.6.2227': attribute type 16 has an invalid length. [ 304.583391][T14886] netlink: 'syz.6.2227': attribute type 3 has an invalid length. [ 304.601037][T14886] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.2227'. [ 304.613530][T14886] xt_ecn: cannot match TCP bits for non-tcp packets [ 304.670431][T14886] sctp: [Deprecated]: syz.6.2227 (pid 14886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.670431][T14886] Use struct sctp_sack_info instead [ 304.712098][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2227'. [ 304.734578][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2227'. [ 305.092594][T14920] netlink: 'syz.6.2237': attribute type 13 has an invalid length. [ 305.211160][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2239'. [ 305.267155][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2239'. [ 305.478853][T14920] netlink: 'syz.6.2237': attribute type 1 has an invalid length. [ 305.516910][T14920] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2237'. [ 306.032539][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 306.292157][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2253'. [ 306.457830][T14999] dvmrp8: entered allmulticast mode [ 306.464299][T15001] tipc: Enabled bearer , priority 0 [ 306.521946][T14999] wg1 speed is unknown, defaulting to 1000 [ 306.702804][T15001] tipc: Disabling bearer [ 306.782681][T15011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.129488][T15019] netlink: 'syz.0.2261': attribute type 6 has an invalid length. [ 307.304272][T15026] netlink: 'syz.0.2261': attribute type 12 has an invalid length. [ 308.320120][T15008] : entered promiscuous mode [ 308.638435][T15046] netlink: 'syz.3.2268': attribute type 58 has an invalid length. [ 308.817014][T15054] netlink: 'syz.6.2270': attribute type 6 has an invalid length. [ 309.123848][T15062] wg1 speed is unknown, defaulting to 1000 [ 309.210669][T15059] wg1 speed is unknown, defaulting to 1000 [ 309.259634][T15065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.557171][T15079] __nla_validate_parse: 6 callbacks suppressed [ 309.557189][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 309.606594][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 309.819081][T15095] netlink: 'syz.5.2277': attribute type 49 has an invalid length. [ 309.895600][T15100] wg1 speed is unknown, defaulting to 1000 [ 310.733378][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 311.027193][T15112] xt_CT: No such helper "syz1" [ 311.217492][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 311.444853][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2295'. [ 311.495028][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 311.673710][T15176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.752902][T15173] ã.: option downdelay: invalid value (18446744073709551615) [ 311.761063][T15173] ã.: option downdelay: allowed values 0 - 2147483647 [ 311.770611][T15173] ã. (unregistering): Released all slaves [ 311.854353][T15175] tipc: Enabled bearer , priority 0 [ 311.865362][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 311.906377][T15181] syzkaller0: entered promiscuous mode [ 311.911890][T15181] syzkaller0: entered allmulticast mode [ 311.924912][T15187] pim6reg: entered allmulticast mode [ 311.952935][T15184] pim6reg: left allmulticast mode [ 312.008909][T15175] tipc: Resetting bearer [ 312.049205][T15174] tipc: Resetting bearer [ 312.121037][T15174] tipc: Disabling bearer [ 312.281903][T15204] netlink: 'syz.1.2307': attribute type 13 has an invalid length. [ 312.412533][T15212] Unsupported ieee802154 address type: 0 [ 312.743126][T15222] lo: entered allmulticast mode [ 312.771252][T15224] netlink: 95 bytes leftover after parsing attributes in process `syz.0.2313'. [ 312.789305][T15224] dvmrp8: entered allmulticast mode [ 312.832588][T15224] wg1 speed is unknown, defaulting to 1000 [ 312.900533][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2314'. [ 312.900887][ T30] audit: type=1107 audit(1760331400.576:12): pid=15230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 312.988042][T15231] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 312.988137][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2314'. [ 313.007317][T15235] bridge: RTM_NEWNEIGH with invalid ether address [ 313.278991][T15249] netlink: 'syz.1.2320': attribute type 23 has an invalid length. [ 313.449127][T15260] syz_tun: entered promiscuous mode [ 313.804875][T15285] team0: Device gtp0 is of different type [ 313.919231][T15297] sctp: [Deprecated]: syz.6.2336 (pid 15297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.919231][T15297] Use struct sctp_sack_info instead [ 313.943050][T15294] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 314.228526][T15309] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 314.355397][T15324] Bluetooth: MGMT ver 1.23 [ 314.682696][T15327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.794060][T15336] tipc: Enabled bearer , priority 0 [ 314.816125][T15336] syzkaller0: entered promiscuous mode [ 314.826225][T15336] syzkaller0: entered allmulticast mode [ 314.839414][T15342] __nla_validate_parse: 3 callbacks suppressed [ 314.839434][T15342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2349'. [ 314.933344][T15336] tipc: Resetting bearer [ 314.975450][T15333] tipc: Resetting bearer [ 315.011569][T15333] tipc: Disabling bearer [ 315.135650][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2350'. [ 315.646761][T15386] netlink: 'syz.6.2362': attribute type 21 has an invalid length. [ 315.707022][T15395] xt_l2tp: missing protocol rule (udp|l2tpip) [ 315.711240][T15396] netlink: 'syz.0.2365': attribute type 16 has an invalid length. [ 315.735347][T15393] netlink: 'syz.5.2364': attribute type 1 has an invalid length. [ 315.737531][T15397] netlink: 'syz.0.2365': attribute type 16 has an invalid length. [ 315.754403][T15393] netlink: 'syz.5.2364': attribute type 3 has an invalid length. [ 315.762171][T15393] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2364'. [ 315.788548][T15396] netlink: 'syz.0.2365': attribute type 17 has an invalid length. [ 315.840104][T15397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.901357][T15396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.936000][T15404] tipc: Enabled bearer , priority 0 [ 315.943900][T15401] syzkaller0: entered promiscuous mode [ 315.953402][T15401] syzkaller0: entered allmulticast mode [ 316.080531][T15404] tipc: Resetting bearer [ 316.102659][T15417] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2371'. [ 316.136498][T15404] tipc: Disabling bearer [ 316.316242][T15433] xt_TCPMSS: Only works on TCP SYN packets [ 316.333863][T15435] xt_bpf: check failed: parse error [ 316.354447][T15436] syzkaller1: entered promiscuous mode [ 316.359971][T15436] syzkaller1: entered allmulticast mode [ 316.548142][T15438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.566673][T15438] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.613870][T15446] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2372'. [ 316.642035][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'. [ 316.680955][T15438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.769196][T15448] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 316.936503][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 317.271209][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509561][T15492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.538692][T15492] bond7: (slave macvlan2): making interface the new active one [ 317.574067][T15492] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 317.844398][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2392'. [ 317.864684][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2392'. [ 317.875830][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'. [ 318.321267][T15529] bond3: Unable to set down delay as MII monitoring is disabled [ 318.331440][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2400'. [ 318.342437][T15529] bond3 (unregistering): Released all slaves [ 318.456900][T15543] wg1 speed is unknown, defaulting to 1000 [ 318.818578][T15561] tipc: Enabled bearer , priority 0 [ 318.973560][T15561] syzkaller0: entered promiscuous mode [ 318.983670][T15561] syzkaller0: entered allmulticast mode [ 318.994490][T15561] tipc: Resetting bearer [ 319.046195][T15560] tipc: Resetting bearer [ 319.130258][T15584] validate_nla: 6 callbacks suppressed [ 319.130278][T15584] netlink: 'syz.5.2412': attribute type 1 has an invalid length. [ 321.053895][T15560] tipc: Disabling bearer [ 321.271777][T15606] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 321.314312][T15606] __nla_validate_parse: 3 callbacks suppressed [ 321.314332][T15606] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2422'. [ 321.386529][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2422'. [ 321.485524][T15618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2422'. [ 321.496459][T15619] xt_CT: No such helper "syz1" [ 321.584485][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 321.815316][T15642] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2430'. [ 321.911592][T15650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 321.928531][T15650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 321.956933][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 321.974483][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 321.985023][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 322.257128][T15671] netlink: 'syz.1.2436': attribute type 13 has an invalid length. [ 322.363765][T15674] wg1 speed is unknown, defaulting to 1000 [ 322.411862][T15673] wg1 speed is unknown, defaulting to 1000 [ 322.885546][T15704] tipc: Enabled bearer , priority 0 [ 322.893696][T15704] syzkaller0: entered promiscuous mode [ 322.899484][T15704] syzkaller0: entered allmulticast mode [ 322.909170][T15704] xt_cluster: node mask cannot exceed total number of nodes [ 322.932118][T15704] tipc: Resetting bearer [ 322.940462][T15703] tipc: Resetting bearer [ 322.959418][T15703] tipc: Disabling bearer [ 323.188446][T15713] can: request_module (can-proto-4) failed. [ 323.290698][T15715] wg1 speed is unknown, defaulting to 1000 [ 323.474889][T15730] wg1 speed is unknown, defaulting to 1000 [ 324.162558][T15765] netlink: 'syz.1.2458': attribute type 30 has an invalid length. [ 324.303264][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.311928][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.333185][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.348626][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.705275][T15785] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 324.712032][T15787] netlink: 'syz.0.2465': attribute type 1 has an invalid length. [ 324.993258][T15796] xt_SECMARK: invalid mode: 0 [ 325.460618][T15833] tipc: Enabled bearer , priority 0 [ 325.583561][T15843] vti0: entered promiscuous mode [ 325.594958][T15832] tipc: Disabling bearer [ 325.752322][T15848] netlink: 'syz.1.2482': attribute type 39 has an invalid length. [ 325.890402][T15851] sctp: [Deprecated]: syz.5.2484 (pid 15851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.890402][T15851] Use struct sctp_sack_info instead [ 325.906910][T15849] mac80211_hwsim hwsim7 ªªªªª<: renamed from wlan0 [ 325.919983][T15849] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 326.267330][T15876] wg1 speed is unknown, defaulting to 1000 [ 326.319694][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.330774][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.345184][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.366918][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.378401][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.385104][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.392313][T15887] tipc: Enabled bearer , priority 0 [ 326.402079][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.408716][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.417092][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.423809][T15887] syzkaller0: entered promiscuous mode [ 326.429574][T15887] syzkaller0: entered allmulticast mode [ 326.435955][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.449869][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.460005][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.467446][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.474025][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.482865][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.490255][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.497011][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.503561][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.510271][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.511805][T15887] tipc: Resetting bearer [ 326.522972][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.529755][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.536413][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.542911][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.549880][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.556863][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.563678][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.574815][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.617012][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.627250][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.633727][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.645375][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.652028][T15886] tipc: Resetting bearer [ 326.676077][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.694531][T15883] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.720630][T15886] tipc: Disabling bearer [ 326.826337][T15901] wg1 speed is unknown, defaulting to 1000 [ 326.829931][T15908] tipc: Enabled bearer , priority 0 [ 326.844319][T15904] wg1 speed is unknown, defaulting to 1000 [ 326.864973][ T56] block nbd0: Possible stuck request ffff888024fce000: control (read@0,1024B). Runtime 180 seconds [ 326.876267][ T56] block nbd0: Possible stuck request ffff888024fce1c0: control (read@1024,1024B). Runtime 180 seconds [ 326.887767][ T56] block nbd0: Possible stuck request ffff888024fce380: control (read@2048,1024B). Runtime 180 seconds [ 326.895387][T15908] syzkaller0: entered promiscuous mode [ 326.899123][ T56] block nbd0: Possible stuck request ffff888024fce540: control (read@3072,1024B). Runtime 180 seconds [ 326.915989][T15908] syzkaller0: entered allmulticast mode [ 327.005809][T15906] tipc: Resetting bearer [ 327.049963][T15906] tipc: Disabling bearer [ 327.368211][T15935] __nla_validate_parse: 11 callbacks suppressed [ 327.368231][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'. [ 328.390169][T15977] netlink: 'syz.1.2514': attribute type 5 has an invalid length. [ 328.666436][T15983] wg1 speed is unknown, defaulting to 1000 [ 328.816895][T15989] wg1 speed is unknown, defaulting to 1000 [ 328.860163][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'. [ 328.963419][T16007] Cannot find add_set index 2 as target [ 328.976777][T15995] wg1 speed is unknown, defaulting to 1000 [ 329.035906][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.096974][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.108760][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.144854][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.380146][T16024] netlink: 'syz.5.2524': attribute type 11 has an invalid length. [ 329.390835][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2524'. [ 329.695774][T16040] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2528'. [ 329.733954][T16042] IPVS: set_ctl: invalid protocol: 60 172.20.20.29:20001 [ 330.041059][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2534'. [ 330.085942][T16060] bond0: entered promiscuous mode [ 330.125342][T16063] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 330.139152][T16060] bond_slave_0: entered promiscuous mode [ 330.155067][T16060] bond_slave_1: entered promiscuous mode [ 330.186232][T16060] bond0: left promiscuous mode [ 330.198346][T16060] bond_slave_0: left promiscuous mode [ 330.214656][T16060] bond_slave_1: left promiscuous mode [ 330.805722][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2541'. [ 331.080051][T16114] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2548'. [ 331.133234][T16114] bond0: entered promiscuous mode [ 331.229302][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2549'. [ 331.425035][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 331.560523][T16138] bond7: Unable to set down delay as MII monitoring is disabled [ 331.573406][T16138] bond7 (unregistering): Released all slaves [ 331.651373][T16127] netlink: 'syz.0.2552': attribute type 12 has an invalid length. [ 331.712597][T16127] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2552'. [ 331.714990][T16138] bond7: Unable to set down delay as MII monitoring is disabled [ 331.739900][T16138] bond7 (unregistering): Released all slaves [ 331.846998][T16138] bond7: Unable to set down delay as MII monitoring is disabled [ 331.867936][T16138] bond7 (unregistering): Released all slaves [ 332.002602][T16138] bond7: Unable to set down delay as MII monitoring is disabled [ 332.023021][T16138] bond7 (unregistering): Released all slaves [ 332.096660][T16168] netlink: 'syz.5.2560': attribute type 1 has an invalid length. [ 332.181924][T16138] bond7: Unable to set down delay as MII monitoring is disabled [ 332.193493][T16138] bond7 (unregistering): Released all slaves [ 332.199016][T16166] netlink: 'syz.6.2559': attribute type 1 has an invalid length. [ 332.349895][T16182] gretap1: entered allmulticast mode [ 332.390456][T16182] bond1: (slave gretap1): making interface the new active one [ 332.400216][T16182] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 332.430977][T16184] syzkaller1: entered promiscuous mode [ 332.436730][T16184] syzkaller1: entered allmulticast mode [ 332.450117][T16177] wg1 speed is unknown, defaulting to 1000 [ 332.467904][T16191] dvmrp8: entered allmulticast mode [ 332.562568][T16191] wg1 speed is unknown, defaulting to 1000 [ 332.682507][T16190] dvmrp8: left allmulticast mode [ 332.969401][T16216] __nla_validate_parse: 3 callbacks suppressed [ 332.969422][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'. [ 333.031095][T16216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2566'. [ 333.047465][T16215] netlink: 1264 bytes leftover after parsing attributes in process `syz.5.2568'. [ 333.216162][T16222] xt_policy: output policy not valid in PREROUTING and INPUT [ 333.360045][T16224] netlink: 20824 bytes leftover after parsing attributes in process `syz.6.2570'. [ 333.768351][T16238] tipc: Enabled bearer , priority 0 [ 333.782864][T16238] syzkaller0: entered promiscuous mode [ 333.799409][T16238] syzkaller0: entered allmulticast mode [ 333.814721][T16240] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 333.822495][T16240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2576'. [ 333.896970][T16238] tipc: Resetting bearer [ 333.916359][T16237] tipc: Resetting bearer [ 333.983894][T16237] tipc: Disabling bearer [ 334.806760][T16249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2578'. [ 334.816392][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2578'. [ 334.909530][T16255] bond7 (unregistering): Released all slaves [ 335.043801][T16249] bond5: option primary_reselect: invalid value (255) [ 335.071357][T16249] bond5 (unregistering): Released all slaves [ 335.152566][T16265] wg1 speed is unknown, defaulting to 1000 [ 335.224372][T16285] x_tables: duplicate underflow at hook 3 [ 335.247730][T16287] x_tables: duplicate underflow at hook 3 [ 335.783367][T16306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2591'. [ 335.817612][T16306] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2591'. [ 336.026722][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2593'. [ 336.201182][T16323] netlink: 'syz.6.2596': attribute type 1 has an invalid length. [ 336.240591][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.254435][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.264410][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.324180][T16327] netlink: 'syz.5.2597': attribute type 12 has an invalid length. [ 336.415916][T16334] can: request_module (can-proto-0) failed. [ 336.473415][T16338] wg1 speed is unknown, defaulting to 1000 [ 336.817749][T16359] tipc: Enabled bearer , priority 0 [ 336.879844][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.941042][T16359] syzkaller0: entered promiscuous mode [ 336.950164][T16359] syzkaller0: entered allmulticast mode [ 336.960490][T16367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 337.108241][T16358] tipc: Resetting bearer [ 337.171596][T16358] tipc: Disabling bearer [ 337.183220][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.197885][T16363] tipc: Enabling of bearer rejected, failed to enable media [ 337.280707][T16379] tipc: Can't bind to reserved service type 2 [ 337.635257][T16407] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 338.528271][ T8390] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 338.540799][T16459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.550933][T16454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.673565][T16469] __nla_validate_parse: 4 callbacks suppressed [ 338.673584][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 338.902809][T16492] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 338.985473][T16497] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2637'. [ 339.026201][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 339.036063][T16499] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 339.059529][T16501] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 339.084321][T16501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2640'. [ 339.182288][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 339.198028][T16509] IPv6: sit4: Disabled Multicast RS [ 339.221994][T16509] macsec1: entered promiscuous mode [ 339.231336][T16509] macsec1: entered allmulticast mode [ 339.347509][T16519] wg1 speed is unknown, defaulting to 1000 [ 339.373265][T16521] xfrm1: entered allmulticast mode [ 339.496991][T16523] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2646'. [ 339.506781][T16523] 0ªX¹¦D: renamed from gretap0 (while UP) [ 339.516211][T16523] 0ªX¹¦D: entered allmulticast mode [ 339.521118][T16526] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 339.522230][T16523] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 339.565799][T16526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.662331][T16528] bond4: (slave veth9): Enslaving as an active interface with a down link [ 339.674676][T16530] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2648'. [ 339.692989][T16526] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 339.701144][T16526] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 340.062954][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2651'. [ 340.126375][T16535] wg1 speed is unknown, defaulting to 1000 [ 340.132339][T16548] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 340.140535][T16548] netlink: 'syz.0.2654': attribute type 4 has an invalid length. [ 340.151196][T16548] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2654'. [ 340.243379][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 340.324302][T16552] wg1 speed is unknown, defaulting to 1000 [ 340.624356][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.919989][T16584] netlink: 'syz.5.2663': attribute type 4 has an invalid length. [ 341.053193][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 341.157260][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 341.165710][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 341.273389][T16593] chnl_net:caif_netlink_parms(): no params data found [ 341.813268][T16588] infiniband syz2: set down [ 341.841288][T16588] infiniband syz2: added vxcan1 [ 341.846697][T16611] lo: Caught tx_queue_len zero misconfig [ 341.852875][T16611] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 341.927552][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 341.968742][T16588] RDS/IB: syz2: added [ 341.972827][T16588] smc: adding ib device syz2 with port count 1 [ 342.004048][T16588] smc: ib device syz2 port 1 has no pnetid [ 342.010463][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 342.017915][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 342.261061][T16627] wg1 speed is unknown, defaulting to 1000 [ 342.360122][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 342.546938][T16627] vxcan1 speed is unknown, defaulting to 1000 [ 342.888551][T16654] syzkaller0: entered promiscuous mode [ 342.897026][T16654] syzkaller0: entered allmulticast mode [ 342.911754][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 343.339613][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 343.387470][T16661] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 343.435062][T16661] batman_adv: batadv0: Adding interface: gretap0 [ 343.461854][T16661] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.525004][T16661] batman_adv: batadv0: Interface activated: gretap0 [ 343.655160][T16668] netlink: 'syz.5.2684': attribute type 18 has an invalid length. [ 343.773016][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 344.243943][T16588] vxcan1 speed is unknown, defaulting to 1000 [ 344.396007][T16685] netlink: 'syz.5.2690': attribute type 7 has an invalid length. [ 344.433623][ T8390] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.443795][T16685] netlink: 'syz.5.2690': attribute type 7 has an invalid length. [ 344.451901][ T8390] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.463158][ T8390] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.492695][ T8390] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.677255][T16687] __nla_validate_parse: 6 callbacks suppressed [ 344.677275][T16687] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2691'. [ 344.934636][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 345.117784][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 345.387891][T16722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2702'. [ 345.537380][T16733] netlink: 'syz.1.2703': attribute type 1 has an invalid length. [ 345.613311][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 345.970047][T16753] wg1 speed is unknown, defaulting to 1000 [ 346.042099][T16753] vxcan1 speed is unknown, defaulting to 1000 [ 346.282184][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 346.343575][T16768] vlan0: entered promiscuous mode [ 346.354254][T16768] `: entered promiscuous mode [ 346.663503][T16778] syz_tun: left promiscuous mode [ 346.683566][T16779] netlink: 'syz.3.2714': attribute type 1 has an invalid length. [ 346.702036][T16779] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2714'. [ 347.035216][T16799] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 347.049438][T16799] ipvlan2: entered promiscuous mode [ 347.354631][T16814] bond5: entered promiscuous mode [ 347.359885][T16814] bond5: entered allmulticast mode [ 347.366354][T16814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.441624][T16822] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 347.538612][T16814] bond5 (unregistering): Released all slaves [ 347.574150][T16816] geneve2: entered promiscuous mode [ 347.690616][T16824] tipc: Enabled bearer , priority 0 [ 347.822072][T16823] ipvlan2: entered promiscuous mode [ 347.978932][T16825] syzkaller0: entered promiscuous mode [ 347.985394][T16825] syzkaller0: entered allmulticast mode [ 348.000017][T16824] tipc: Resetting bearer [ 348.048452][T16819] tipc: Resetting bearer [ 348.130490][T16819] tipc: Disabling bearer [ 348.240579][T16842] wg1 speed is unknown, defaulting to 1000 [ 348.266241][T16842] vxcan1 speed is unknown, defaulting to 1000 [ 348.400446][T16861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2731'. [ 348.971478][ T7959] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc9 [ 349.052466][T16886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.199109][T16898] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2742'. [ 349.626718][T16912] syzkaller0: entered promiscuous mode [ 349.632351][T16912] syzkaller0: entered allmulticast mode [ 349.664428][T16912] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 349.894569][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 350.254647][T16924] macvtap1: entered promiscuous mode [ 350.259986][T16924] batadv0: entered promiscuous mode [ 350.333427][T16924] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 350.389679][T16924] batadv0: left promiscuous mode [ 350.616663][T16924] macvtap1: entered promiscuous mode [ 350.622978][T16924] batadv0: entered promiscuous mode [ 350.644973][T16924] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 350.677806][T16924] batadv0: left promiscuous mode [ 350.718894][T16949] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2753'. [ 350.796715][T16924] macvtap1: entered promiscuous mode [ 350.802054][T16924] batadv0: entered promiscuous mode [ 350.869999][T16924] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 350.936528][T16924] batadv0: left promiscuous mode [ 351.048164][T16962] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2758'. [ 351.115877][T16975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2762'. [ 351.143138][T16965] bond8: option lp_interval: invalid value (0) [ 351.151332][T16965] bond8: option lp_interval: allowed values 1 - 2147483647 [ 351.178774][T16965] bond8 (unregistering): Released all slaves [ 351.256382][T16983] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 351.274207][T16972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2760'. [ 351.310146][T16983] bond5 (unregistering): Released all slaves [ 351.487725][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 351.531589][T16997] tipc: Enabling of bearer rejected, failed to enable media [ 351.551501][T16997] syzkaller0: entered promiscuous mode [ 351.564234][T16997] syzkaller0: entered allmulticast mode [ 351.984704][T17031] netlink: 'syz.0.2774': attribute type 9 has an invalid length. [ 352.005436][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2771'. [ 352.018390][T17029] 0ªX¹¦D: left allmulticast mode [ 353.202335][T17029] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 353.333453][T17029] geneve3: left promiscuous mode [ 353.349007][T17029] sit3: left allmulticast mode [ 353.355455][T17029] gtp0: left promiscuous mode [ 353.360348][T17029] gtp0: left allmulticast mode [ 353.372502][T17029] macsec1: left promiscuous mode [ 353.377704][T17029] macsec1: left allmulticast mode [ 353.383057][T17029] xfrm1: left allmulticast mode [ 353.388471][T17029] batman_adv: batadv0: Interface deactivated: gretap0 [ 353.418063][T17039] hsr_slave_0: left promiscuous mode [ 353.425666][T17039] hsr_slave_1: left promiscuous mode [ 353.455260][ T6829] wg1 speed is unknown, defaulting to 1000 [ 353.472018][ T6829] syz0: Port: 1 Link DOWN [ 353.583813][ T7959] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.594500][ T7959] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.603400][ T7959] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.613340][ T7959] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.622469][ T7959] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.631711][ T7959] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.641544][ T7959] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.651053][ T7959] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.660830][ T7959] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.684478][ T7959] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.693703][ T7959] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.702928][ T7959] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.712451][T17047] wg1 speed is unknown, defaulting to 1000 [ 353.753901][T17047] vxcan1 speed is unknown, defaulting to 1000 [ 353.760662][T17052] wg1 speed is unknown, defaulting to 1000 [ 353.885866][T17068] wg1 speed is unknown, defaulting to 1000 [ 353.934195][T17070] tipc: Enabled bearer , priority 0 [ 353.942121][T17070] syzkaller0: entered promiscuous mode [ 353.948058][T17070] syzkaller0: entered allmulticast mode [ 353.981617][T17070] tipc: Resetting bearer [ 353.987894][T17052] vxcan1 speed is unknown, defaulting to 1000 [ 353.999581][T17069] tipc: Resetting bearer [ 354.025587][T17069] tipc: Disabling bearer [ 354.236456][T17074] netlink: 'syz.0.2784': attribute type 12 has an invalid length. [ 354.269786][T17068] vxcan1 speed is unknown, defaulting to 1000 [ 355.194693][T17088] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2788'. [ 355.217826][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 355.253961][T17085] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 355.263540][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2787'. [ 355.484500][T17096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2791'. [ 355.929338][T17131] wg1 speed is unknown, defaulting to 1000 [ 355.938662][T17131] vxcan1 speed is unknown, defaulting to 1000 [ 356.016711][T17141] netlink: 'syz.3.2800': attribute type 30 has an invalid length. [ 356.092549][T17141] bond7: option arp_missed_max: invalid value (0) [ 356.099246][T17141] bond7: option arp_missed_max: allowed values 1 - 255 [ 356.110195][T17141] bond7 (unregistering): Released all slaves [ 356.464044][T17157] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 356.492909][T17157] bridge5: entered allmulticast mode [ 356.586292][T17166] netlink: 'syz.6.2807': attribute type 13 has an invalid length. [ 356.787366][T17165] netlink: 'syz.5.2808': attribute type 30 has an invalid length. [ 356.852089][T17165] bond5: option arp_missed_max: invalid value (0) [ 356.871139][T17165] bond5: option arp_missed_max: allowed values 1 - 255 [ 356.880286][T17165] bond5 (unregistering): Released all slaves [ 356.915722][T17175] __nla_validate_parse: 1 callbacks suppressed [ 356.915741][T17175] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2809'. [ 356.933207][T17175] sch_fq: defrate 0 ignored. [ 356.937968][ T56] block nbd0: Possible stuck request ffff888024fce000: control (read@0,1024B). Runtime 210 seconds [ 356.949309][ T56] block nbd0: Possible stuck request ffff888024fce1c0: control (read@1024,1024B). Runtime 210 seconds [ 356.960411][ T56] block nbd0: Possible stuck request ffff888024fce380: control (read@2048,1024B). Runtime 210 seconds [ 356.971902][ T56] block nbd0: Possible stuck request ffff888024fce540: control (read@3072,1024B). Runtime 210 seconds [ 357.151329][T17190] netlink: 1260 bytes leftover after parsing attributes in process `syz.6.2812'. [ 357.166094][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2812'. [ 358.036354][T17222] netlink: 'syz.5.2822': attribute type 1 has an invalid length. [ 358.371220][T17249] wg1 speed is unknown, defaulting to 1000 [ 358.393931][T17250] wg1 speed is unknown, defaulting to 1000 [ 358.402941][T17249] vxcan1 speed is unknown, defaulting to 1000 [ 358.797382][T17250] vxcan1 speed is unknown, defaulting to 1000 [ 359.037633][T17279] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 359.045731][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 359.181275][T17289] netlink: 'syz.0.2839': attribute type 1 has an invalid length. [ 360.345936][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2847'. [ 360.350908][T17324] netlink: 'syz.6.2848': attribute type 10 has an invalid length. [ 360.369963][T17327] netlink: 'syz.0.2846': attribute type 82 has an invalid length. [ 360.414420][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2848'. [ 360.467872][T17324] team0: Port device geneve0 added [ 360.495117][T13726] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.509963][T13726] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.550841][T17322] wg1 speed is unknown, defaulting to 1000 [ 360.614795][T13726] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.623116][T13726] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.648564][T17322] vxcan1 speed is unknown, defaulting to 1000 [ 360.850836][T17343] tipc: Enabled bearer , priority 0 [ 360.884336][T17343] syzkaller0: entered promiscuous mode [ 360.900134][T17343] syzkaller0: entered allmulticast mode [ 360.954679][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2852'. [ 360.969752][T17343] tipc: Resetting bearer [ 360.978412][T17340] tipc: Resetting bearer [ 361.008978][T17340] tipc: Disabling bearer [ 361.020509][T17345] bridge_slave_1: left allmulticast mode [ 361.027170][T17345] bridge_slave_1: left promiscuous mode [ 361.033253][T17345] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.044727][T17345] bridge_slave_0: left allmulticast mode [ 361.050600][T17345] bridge_slave_0: left promiscuous mode [ 361.056907][T17345] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.349538][T17360] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2856'. [ 361.418799][T17368] wg1 speed is unknown, defaulting to 1000 [ 361.434813][T17368] vxcan1 speed is unknown, defaulting to 1000 [ 361.964866][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 362.739470][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2864'. [ 362.806959][T17412] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2866'. [ 362.849106][T17410] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2866'. [ 362.937945][T17415] bridge42: entered promiscuous mode [ 362.943283][T17415] bridge42: entered allmulticast mode [ 362.969116][T17417] hsr0: entered allmulticast mode [ 362.983345][T17417] hsr_slave_0: entered allmulticast mode [ 362.990685][T17417] hsr_slave_1: entered allmulticast mode [ 363.000527][T17415] hsr_slave_0: left promiscuous mode [ 363.033401][T17415] hsr_slave_1: left promiscuous mode [ 363.120192][T17415] hsr0 (unregistering): left allmulticast mode [ 363.465570][T17431] dvmrp8: entered allmulticast mode [ 363.488542][T17435] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 363.570477][T17432] wg1 speed is unknown, defaulting to 1000 [ 363.641124][T17432] vxcan1 speed is unknown, defaulting to 1000 [ 363.919959][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.933497][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.942098][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.950998][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.960347][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.095444][T17443] wg1 speed is unknown, defaulting to 1000 [ 364.188024][T17443] vxcan1 speed is unknown, defaulting to 1000 [ 364.211635][T17452] vlan0: entered promiscuous mode [ 364.220329][T17452] geneve1: entered promiscuous mode [ 364.244952][T17452] vlan0: entered allmulticast mode [ 364.250113][T17452] geneve1: entered allmulticast mode [ 364.615768][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 364.694482][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2879'. [ 364.733690][T17470] veth0: entered promiscuous mode [ 364.835573][T17472] veth0 (unregistering): left promiscuous mode [ 364.918003][T17479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.959051][T17461] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 364.962901][T17479] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 365.277486][T17492] netlink: 'syz.5.2884': attribute type 1 has an invalid length. [ 365.336507][T17492] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2884'. [ 365.806002][T17495] bond0: left promiscuous mode [ 365.892705][T17495] vti0: left promiscuous mode [ 365.917547][T17495] vlan0: left promiscuous mode [ 365.923182][T17495] geneve1: left promiscuous mode [ 365.928923][T17495] vlan0: left allmulticast mode [ 365.936702][T17495] geneve1: left allmulticast mode [ 365.981623][T13730] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.023136][T13730] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.060782][ T5829] Bluetooth: hci5: command tx timeout [ 366.068340][T17443] chnl_net:caif_netlink_parms(): no params data found [ 366.102843][T13729] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.151813][T17514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2889'. [ 366.155496][T13729] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.281393][T17524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2893'. [ 366.313417][T17524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2893'. [ 366.363716][T17532] netlink: 'syz.5.2893': attribute type 21 has an invalid length. [ 366.512105][T17443] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.519671][T17443] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.527411][T17443] bridge_slave_0: entered allmulticast mode [ 366.538100][T17443] bridge_slave_0: entered promiscuous mode [ 366.547530][T17443] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.584892][T17443] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.592189][T17443] bridge_slave_1: entered allmulticast mode [ 366.616751][T17443] bridge_slave_1: entered promiscuous mode [ 366.838181][T17443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.878308][T17550] wg1 speed is unknown, defaulting to 1000 [ 366.905654][T17443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.996423][T17550] vxcan1 speed is unknown, defaulting to 1000 [ 367.032752][T17443] team0: Port device team_slave_0 added [ 367.053278][T17443] team0: Port device team_slave_1 added [ 367.168417][T17565] __nla_validate_parse: 2 callbacks suppressed [ 367.168436][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2900'. [ 367.174958][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.200173][T17443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.287661][T17443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.341604][T17443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.384479][T17443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.391456][T17443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.420867][T17443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.698041][T17443] hsr_slave_0: entered promiscuous mode [ 367.705537][T17443] hsr_slave_1: entered promiscuous mode [ 367.712136][T17443] debugfs: 'hsr0' already exists in 'hsr' [ 367.718358][T17443] Cannot create hsr debugfs directory [ 367.784479][T17571] ipvlan1: entered promiscuous mode [ 367.791279][T17571] ipvlan1: left promiscuous mode [ 367.968819][T17573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2903'. [ 368.134549][ T5829] Bluetooth: hci5: command tx timeout [ 368.507715][T17443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.610730][T17593] wg1 speed is unknown, defaulting to 1000 [ 368.638284][T17443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.657741][T17588] wg1 speed is unknown, defaulting to 1000 [ 368.663728][T17593] vxcan1 speed is unknown, defaulting to 1000 [ 368.731107][T17443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.868100][T17443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.955016][T17600] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 368.968337][T17600] bond4: (slave macvlan3): making interface the new active one [ 368.980247][T17600] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 368.989658][T17588] vxcan1 speed is unknown, defaulting to 1000 [ 369.198642][T17443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.213421][T17443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.229141][T17443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.246541][T17443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.671369][T17443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.731413][T17443] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.778599][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.785880][T13726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.828605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.835835][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.001278][T17614] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 370.170073][T17600] infiniband syz1: set down [ 370.180218][T17600] infiniband syz1: added syz_tun [ 370.191886][T17600] syz1: rxe_create_cq: returned err = -12 [ 370.206431][T17600] infiniband syz1: Couldn't create ib_mad CQ [ 370.224677][ T5829] Bluetooth: hci5: command tx timeout [ 370.226839][T17600] infiniband syz1: Couldn't open port 1 [ 370.356712][T17600] RDS/IB: syz1: added [ 370.360777][T17600] smc: adding ib device syz1 with port count 1 [ 370.378174][T17600] smc: ib device syz1 port 1 has no pnetid [ 370.580776][T17443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.738645][T17443] veth0_vlan: entered promiscuous mode [ 370.772397][T17443] veth1_vlan: entered promiscuous mode [ 370.828514][T17443] veth0_macvtap: entered promiscuous mode [ 370.859953][T17443] veth1_macvtap: entered promiscuous mode [ 370.940652][T17443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.968887][T17443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.022050][ T4539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.034704][ T4539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.107886][ T4539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.118220][ T4539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.300586][T13730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.315803][T13730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.360791][T17652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2920'. [ 371.433964][T13730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.442592][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 371.458160][T13730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.068166][T17669] netlink: 'syz.3.2923': attribute type 2 has an invalid length. [ 372.296467][ T5829] Bluetooth: hci5: command tx timeout [ 372.473405][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.494528][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.502837][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.515227][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.525381][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.559643][T17677] wg1 speed is unknown, defaulting to 1000 [ 372.584366][T17677] vxcan1 speed is unknown, defaulting to 1000 [ 372.823475][T17678] wg1 speed is unknown, defaulting to 1000 [ 372.912996][ T4539] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 372.965733][ T4539] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 372.976465][T13729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.984276][T17678] vxcan1 speed is unknown, defaulting to 1000 [ 372.998928][T13729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.035624][T13726] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 373.132247][ T36] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 373.648447][T13730] dvmrp8 (unregistering): left allmulticast mode [ 374.103012][T13730] bond0 (unregistering): Released all slaves [ 374.196986][T13730] bond1 (unregistering): Released all slaves [ 374.292448][T13730] bond2 (unregistering): Released all slaves [ 374.305484][T13730] bond3 (unregistering): Released all slaves [ 374.401158][T13730] bond4 (unregistering): (slave veth9): Releasing active interface [ 374.409884][T13730] bond4 (unregistering): Released all slaves [ 374.604655][T13730] tipc: Left network mode [ 374.620352][ T5829] Bluetooth: hci0: command tx timeout [ 374.706114][T17697] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2929'. [ 374.807922][T17699] netlink: 'syz.5.2930': attribute type 10 has an invalid length. [ 374.825438][T17699] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.912596][ T877] IPVS: starting estimator thread 0... [ 375.014694][T17707] IPVS: using max 33 ests per chain, 79200 per kthread [ 375.544498][T17678] chnl_net:caif_netlink_parms(): no params data found [ 375.702919][T17678] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.724302][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.731605][T17678] bridge_slave_0: entered allmulticast mode [ 375.749796][T17678] bridge_slave_0: entered promiscuous mode [ 375.861216][T17678] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.876026][T17678] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.883384][T17678] bridge_slave_1: entered allmulticast mode [ 375.905791][T17678] bridge_slave_1: entered promiscuous mode [ 375.953861][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.967836][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.028745][T17678] team0: Port device team_slave_0 added [ 376.038465][T17678] team0: Port device team_slave_1 added [ 376.086957][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.094279][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.125536][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.144645][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.151749][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.178174][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.247357][T17678] hsr_slave_0: entered promiscuous mode [ 376.254575][T17678] hsr_slave_1: entered promiscuous mode [ 376.287611][T17678] debugfs: 'hsr0' already exists in 'hsr' [ 376.293374][T17678] Cannot create hsr debugfs directory [ 376.513051][T17716] wg1 speed is unknown, defaulting to 1000 [ 376.663952][T17716] vxcan1 speed is unknown, defaulting to 1000 [ 376.697562][ T5829] Bluetooth: hci0: command tx timeout [ 377.069885][T17743] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.177012][T17753] xt_hashlimit: max too large, truncated to 1048576 [ 377.933592][ T12] smc: removing ib device syz2 [ 378.246078][T13730] lo (unregistering): left allmulticast mode [ 378.784145][ T5829] Bluetooth: hci0: command tx timeout [ 378.893266][T17678] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 379.152326][T17786] netlink: 'syz.6.2949': attribute type 2 has an invalid length. [ 379.160986][T17786] netlink: 4856 bytes leftover after parsing attributes in process `syz.6.2949'. [ 379.193453][T17678] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 379.244051][T17786] tipc: New replicast peer: 255.255.255.255 [ 379.251345][T17786] tipc: Enabled bearer , priority 10 [ 379.340161][T17678] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 379.449936][T17678] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 379.987940][T17678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.040371][T17678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.079035][T17678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.102857][T17678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.149201][T17805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 380.374346][ T9] tipc: Node number set to 2350495308 [ 380.466023][T13730] IPVS: stop unused estimator thread 0... [ 380.570205][T13730] ------------[ cut here ]------------ [ 380.575945][T13730] WARNING: CPU: 1 PID: 13730 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 380.585736][T13730] Modules linked in: [ 380.589970][T13730] CPU: 1 UID: 0 PID: 13730 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 380.599954][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.610244][T13730] Workqueue: netns cleanup_net [ 380.615865][T13730] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 380.621536][T13730] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 69 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 59 14 f8 e8 14 cb ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 cb ce f7 90 0f 0b 90 e9 60 fe ff ff [ 380.641342][T13730] RSP: 0018:ffffc90012727878 EFLAGS: 00010293 [ 380.647977][T13730] RAX: ffffffff89f0c8ec RBX: ffff888031f92480 RCX: ffff888029628000 [ 380.656330][T13730] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffff888029628000 [ 380.664827][T13730] RBP: ffffc90012727990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 380.672831][T13730] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da640 [ 380.680965][T13730] R13: 1ffff920024e4f3c R14: ffff888031f93940 R15: dffffc0000000000 [ 380.681354][T17678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.688992][T13730] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 380.704642][T13730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.711248][T13730] CR2: 0000001b30824000 CR3: 0000000076532000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.719287][T13730] Call Trace: [ 380.722581][T13730] [ 380.725628][T13730] xfrm_net_exit+0x2d/0x70 [ 380.730080][T13730] ops_undo_list+0x49a/0x990 [ 380.734719][T13730] ? __pfx_ops_undo_list+0x10/0x10 [ 380.739852][T13730] ? do_raw_spin_unlock+0x122/0x240 [ 380.745169][T13730] cleanup_net+0x4d8/0x820 [ 380.749612][T13730] ? __pfx_cleanup_net+0x10/0x10 [ 380.754633][T13730] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.759863][T13730] ? process_scheduled_works+0x9ef/0x17b0 [ 380.765976][T13730] ? process_scheduled_works+0x9ef/0x17b0 [ 380.771723][T13730] process_scheduled_works+0xae1/0x17b0 [ 380.777518][T13730] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.779951][T17678] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.783524][T13730] worker_thread+0x8a0/0xda0 [ 380.794805][T13730] kthread+0x711/0x8a0 [ 380.798907][T13730] ? __pfx_worker_thread+0x10/0x10 [ 380.804031][T13730] ? __pfx_kthread+0x10/0x10 [ 380.808733][T13730] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.813952][T13730] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.819246][T13730] ? __pfx_kthread+0x10/0x10 [ 380.823878][T13730] ret_from_fork+0x4bc/0x870 [ 380.828546][T13730] ? __pfx_ret_from_fork+0x10/0x10 [ 380.833694][T13730] ? __switch_to_asm+0x39/0x70 [ 380.838567][T13730] ? __switch_to_asm+0x33/0x70 [ 380.843349][T13730] ? __pfx_kthread+0x10/0x10 [ 380.848020][T13730] ret_from_fork_asm+0x1a/0x30 [ 380.852829][T13730] [ 380.854398][ T5829] Bluetooth: hci0: command tx timeout [ 380.856142][T13730] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 380.856158][T13730] CPU: 1 UID: 0 PID: 13730 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 380.856180][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.856194][T13730] Workqueue: netns cleanup_net [ 380.856216][T13730] Call Trace: [ 380.856223][T13730] [ 380.856232][T13730] dump_stack_lvl+0x99/0x250 [ 380.856255][T13730] ? __asan_memcpy+0x40/0x70 [ 380.856281][T13730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.856302][T13730] ? __pfx__printk+0x10/0x10 [ 380.856336][T13730] vpanic+0x237/0x6d0 [ 380.856363][T13730] ? __pfx_vpanic+0x10/0x10 [ 380.856401][T13730] panic+0xb9/0xc0 [ 380.856425][T13730] ? __pfx_panic+0x10/0x10 [ 380.856470][T13730] __warn+0x31b/0x4b0 [ 380.856494][T13730] ? xfrm_state_fini+0x26d/0x2f0 [ 380.856522][T13730] ? xfrm_state_fini+0x26d/0x2f0 [ 380.856546][T13730] report_bug+0x2be/0x4f0 [ 380.856568][T13730] ? xfrm_state_fini+0x26d/0x2f0 [ 380.856593][T13730] ? xfrm_state_fini+0x26d/0x2f0 [ 380.856616][T13730] ? xfrm_state_fini+0x26f/0x2f0 [ 380.856640][T13730] handle_bug+0x84/0x160 [ 380.856668][T13730] exc_invalid_op+0x1a/0x50 [ 380.856701][T13730] asm_exc_invalid_op+0x1a/0x20 [ 380.856719][T13730] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 380.856743][T13730] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 69 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 59 14 f8 e8 14 cb ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 cb ce f7 90 0f 0b 90 e9 60 fe ff ff [ 380.856761][T13730] RSP: 0018:ffffc90012727878 EFLAGS: 00010293 [ 380.856778][T13730] RAX: ffffffff89f0c8ec RBX: ffff888031f92480 RCX: ffff888029628000 [ 380.856794][T13730] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffff888029628000 [ 380.856808][T13730] RBP: ffffc90012727990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 380.856822][T13730] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da640 [ 380.856838][T13730] R13: 1ffff920024e4f3c R14: ffff888031f93940 R15: dffffc0000000000 [ 380.856861][T13730] ? xfrm_state_fini+0x26c/0x2f0 [ 380.856892][T13730] ? xfrm_state_fini+0x26c/0x2f0 [ 380.856920][T13730] xfrm_net_exit+0x2d/0x70 [ 380.856946][T13730] ops_undo_list+0x49a/0x990 [ 380.856973][T13730] ? __pfx_ops_undo_list+0x10/0x10 [ 380.856997][T13730] ? do_raw_spin_unlock+0x122/0x240 [ 380.857029][T13730] cleanup_net+0x4d8/0x820 [ 380.857051][T13730] ? __pfx_cleanup_net+0x10/0x10 [ 380.857074][T13730] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.857094][T13730] ? process_scheduled_works+0x9ef/0x17b0 [ 380.857115][T13730] ? process_scheduled_works+0x9ef/0x17b0 [ 380.857138][T13730] process_scheduled_works+0xae1/0x17b0 [ 380.857190][T13730] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.857229][T13730] worker_thread+0x8a0/0xda0 [ 380.857279][T13730] kthread+0x711/0x8a0 [ 380.857308][T13730] ? __pfx_worker_thread+0x10/0x10 [ 380.857329][T13730] ? __pfx_kthread+0x10/0x10 [ 380.857356][T13730] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.857377][T13730] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.857399][T13730] ? __pfx_kthread+0x10/0x10 [ 380.857424][T13730] ret_from_fork+0x4bc/0x870 [ 380.857448][T13730] ? __pfx_ret_from_fork+0x10/0x10 [ 380.857477][T13730] ? __switch_to_asm+0x39/0x70 [ 380.857498][T13730] ? __switch_to_asm+0x33/0x70 [ 380.857519][T13730] ? __pfx_kthread+0x10/0x10 [ 380.857546][T13730] ret_from_fork_asm+0x1a/0x30 [ 380.857587][T13730] [ 380.861518][T13730] Kernel Offset: disabled